Semantic communication method and device

Abstract

The invention discloses a semantic communication method and device, which can provide computing resources and storage resources for two communication parties of semantic communication, ensure normal proceeding of semantic communication, ensure privacy of users and improve system security. The method comprises the following steps: a first terminal device sends a resource configuration request to an access mobility management function network element; the access mobility management function network element sends a response message to the first terminal device, wherein the response message is used for indicating whether the semantic library is available; under the condition that the semantic database is available, the access mobility management function network element sends a resource configuration instruction to a resource controller so as to perform resource reservation and resource instantiation configuration; a first terminal device sends first information to an access mobility management function network element under the condition that a semantic library is available, the first information carries a key required for configuring a computing environment, the access mobility management function network element sends the first information and resource configuration information to an inference plane function network element, and the inference plane function network element sends the first information and the resource configuration information to the access mobility management function network element. And initializing the trusted execution environment by the inference plane function network element.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular to a semantic communication method and device. Background Art

[0002] Semantic communication generally refers to the communication between different intelligent agents for the purpose of "expressing meaning". The "intelligent agent" here can refer to humans, intelligent machines or even other organisms. The fundamental purpose of semantic communication is to exchange information. It does not pursue the fidelity of the original data or signal, but to accurately transmit semantic information between the two communicating parties.

[0003] In object-oriented semantic communication, both parties need to rely on a shared semantic library to compress and restore the communication content consistently to reduce the communication bandwidth overhead. The semantic library is a set of parameters and models that can establish a certain mapping relationship with the communication content. Usually, the sender can first objectify the original data based on the semantic library, that is, extract semantics, and send the objectified semantics to the receiver. The receiver then renders and merges the objectified semantics with the corresponding model based on the semantic library to obtain the restored content.

[0004] The above process requires computing power and storage support. How to provide computing resources and storage resources for both parties of semantic communication is a technical problem that needs to be solved urgently. Summary of the invention

[0005] The present application provides a semantic communication method and device, which can provide computing resources and storage resources for both parties of semantic communication, protect the privacy of users on the basis of ensuring the normal progress of semantic communication, thereby improving system security.

[0006] In a first aspect, a semantic communication method is provided, which is applied to a first terminal device, comprising: sending a resource configuration request to an access mobility management function network element, the resource configuration request being used to request configuration of semantic communication resources between the first terminal device and a second terminal device; receiving a response message from the access mobility management function network element, the response message being used to indicate whether the semantic library is available; and, if the semantic library is available, sending first information to the access mobility management function network element, the first information carrying a key required for configuring a computing environment and a session identifier between the first terminal device and the second terminal device.

[0007] In a possible implementation, the above method can be executed by the first terminal device, or by a circuit or chip inside the first terminal device, which is not limited in the embodiments of the present application.

[0008] In a possible implementation manner, the access mobility management function network element may be referred to as AMF (access and mobility management function).

[0009] The semantic communication method of the present application is that the terminal device performing semantic communication sends a resource configuration request to the access mobile management function network element to request the configuration of semantic communication resources. The access mobile management function network element sends a resource configuration instruction to the resource controller based on the resource configuration request to perform resource reservation and resource instantiation configuration. The terminal device sends a first message to the access mobile management function network element, and the first message carries the key required for configuring the computing environment. The access mobile management function network element sends the above-mentioned first information and resource configuration information to the reasoning surface function network element, and the reasoning surface function network element initializes the trusted execution environment using the key of the terminal device. By introducing the reasoning surface function network element, the required computing resources and storage resources are provided to the communicating parties of the semantic communication in a trusted privacy protection manner, thereby protecting the user's content from being processed in the trusted execution environment (TEE), thereby protecting the user's privacy on the basis of ensuring the normal progress of semantic communication, thereby improving system security and user experience.

[0010] The resource configuration information includes identifiers of configured computing nodes and / or storage nodes.

[0011] In the above implementation, the access mobility management function network element may first query after receiving the resource configuration request from the first terminal device, and then execute the subsequent process if the semantic library is available. If the semantic library is not available, the access mobility management function network element may end the current process after sending a response message to the first terminal device, and no longer perform subsequent resource configuration. In addition, when the first terminal device receives the above response message and determines that the semantic library is unavailable, it will also end the current process and will not send subsequent messages (i.e., the above first information). In this way, while ensuring that the semantic library is available, the subsequent process is carried out, which is conducive to ensuring the normal progress of subsequent semantic communication and avoiding the situation where the network side has configured resources for the terminal device but the semantic library is unavailable, resulting in the inability of subsequent semantic communication to proceed normally, thereby causing a waste of resources.

[0012] In other possible implementations, the access mobility management function network element may not perform a query after receiving a resource configuration request from the first terminal device, and the first terminal device may continue to send the first information after sending the resource configuration status. This can improve the efficiency of resource configuration and thereby improve the efficiency of semantic communication.

[0013] In combination with the first aspect, in some implementations of the first aspect, the method further includes: receiving a data request from a reasoning plane functional network element, the data request being used to request data transmission; and sending an encrypted data stream to the reasoning plane functional network element based on the data request.

[0014] In combination with the first aspect, in some implementations of the first aspect, the data request carries the session identifier and an identifier of the semantic library, and the encrypted data stream carries the session identifier.

[0015] In combination with the first aspect, in some implementations of the first aspect, the method further includes: receiving semantic key information and the session identifier from the reasoning plane functional network element; and sending the semantic key information and the session identifier to the user plane functional network element.

[0016] In a possible implementation manner, the user plane function network element may be referred to as UPF (user plane function) for short.

[0017] In the above implementation, the first terminal device is the sending device of this semantic communication, and the second terminal device is the receiving device of this semantic communication.

[0018] In a possible implementation manner, the reasoning plane functional network element obtains the semantic key information and can directly send the semantic key information and the session identifier to the user plane functional network element.

[0019] In another possible implementation, the reasoning plane functional network element obtains the semantic key information, and can first send the semantic key information and the session identifier to the first terminal device, and then the first terminal device sends the semantic key information and the session identifier to the user plane functional network element. In this case, the reasoning plane functional network element may perform a part of the semantic extraction operation, and after sending the semantic key information to the first terminal device, the first terminal device performs another part of the semantic extraction operation, and the first terminal device can send the summarized semantic key information to the user plane functional network element.

[0020] In combination with the first aspect, in some implementations of the first aspect, the method further includes: receiving semantic restoration information and the session identifier from the reasoning plane functional network element.

[0021] In the above implementation, the second terminal device is the sending device of this semantic communication, and the first terminal device is the receiving device of this semantic communication.

[0022] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending an end notification to the reasoning plane function network element, where the end notification is used to indicate the end of semantic communication between the first terminal device and the second terminal device.

[0023] It should be understood that the end of the semantic processing flow means the end of this semantic session, that is, there will be no more data streams from the first terminal device with the same session identifier as the above. The processing method of the first terminal device sending the end notification can release relevant resources earlier so that the relevant resources can be used for other communications, which is conducive to improving resource utilization.

[0024] In combination with the first aspect, in certain implementations of the first aspect, the resource configuration request carries at least one of the following: the type of semantic communication between the first terminal device and the second terminal device; descriptive information of the computing resources and storage resources required for semantic communication between the first terminal device and the second terminal device; or, the identification of the first terminal device and the identification of the second terminal device.

[0025] The above-mentioned semantic communication type can be, for example, any one of source-channel joint coding (ie, feature stream), object-based semantic extraction, multimedia encoding and decoding, task segmentation, etc.

[0026] The above-mentioned computing resource and storage resource description information may include, for example, computing power type, standard computing power measurement unit, latency requirements, storage capacity, etc.

[0027] The identification of the terminal device may be the identity (ID) or public key ID of the terminal device.

[0028] In a possible implementation manner, the identifier of the first terminal device is the ID of the first terminal device, and the identifier of the second terminal device is the ID of the second terminal device.

[0029] In another possible implementation, the identifier of the first terminal device is a public key ID of the first terminal device, and the identifier of the second terminal device is a public key ID of the second terminal device.

[0030] It should be understood that the above public key ID is an ID derived from a public key. The public key ID of the first terminal device can be, for example, a distributed identity of the first terminal device, a blockchain address, etc., and can be, for example, Hash(PKu 1 ), PKu 1 is the public key of the first terminal device, Hash(PKu 1 ) indicates that PKu 1 The value obtained after the hash operation.

[0031] In combination with the first aspect, in certain implementations of the first aspect, the resource configuration request carries a first public key in a first public-private key pair used for semantic communication; the first information carries multiple first ciphertexts and resource category information corresponding to the second public keys corresponding to the multiple first ciphertexts, and the multiple first ciphertexts are obtained by encrypting the multiple second public keys required for configuring the computing environment using the first private key in the first public-private key pair.

[0032] It should be understood that the resource category information can be a category obtained by dividing according to resource types, such as computing resources, storage resources, etc., or a category obtained by dividing according to computing power, such as central processing unit (CPU), graphics processing unit (GPU), heterogeneous, etc. The embodiments of the present application are not limited to this.

[0033] A public-private key pair may correspond to one resource category or multiple resource categories, which is not limited in the embodiments of the present application.

[0034] Through the above method, different public keys for initializing TEE (i.e., the above second public key) can be configured for different computing instances. In this way, the trusted execution environment can be initialized in a more fine-grained manner, thereby enhancing the security of the system.

[0035] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: generating the first public-private key pair, the first public-private key pair including the first public key and the first private key; generating multiple second public-private key pairs, each second public-private key pair in the multiple second public-private key pairs including the second public key and the second private key.

[0036] It should be understood that, in general, the public key will be sent by the generator to other devices for public disclosure, and the private key will be retained by the generator for subsequent verification or encryption. For example, the first terminal device can use the first private key to encrypt the second public key, and the first terminal device can use the second private key to subsequently access the TEE.

[0037] According to a second aspect, another semantic communication method is provided, which is applied to an access mobile management function network element, and the method includes: receiving a resource configuration request from a first terminal device, the resource configuration request is used to request configuration of semantic communication resources between the first terminal device and the second terminal device; in response to the resource configuration request, sending a resource configuration indication to a resource controller, the resource configuration indication is used to indicate resource reservation and resource instantiation configuration; receiving resource configuration information from the resource controller, the resource configuration information is used to indicate configured resources; receiving first information from the first terminal device, the first information carries a key required for configuring a computing environment and a session identifier between the first terminal device and the second terminal device; sending second information to the reasoning plane function network element, the second information includes the resource configuration information, the key required for configuring the computing environment and the session identifier.

[0038] In a possible implementation, the above method can be executed by an access mobility management function network element, or by a circuit or chip inside the access mobility management function network element, which is not limited in the embodiments of the present application.

[0039] In a possible implementation manner, the access mobility management function network element may be referred to as AMF (access and mobility management function).

[0040] In combination with the second aspect, in some implementations of the second aspect, the resource configuration information includes an identifier of a computing node and / or an identifier of a storage node that has been configured.

[0041] In combination with the second aspect, in some implementations of the second aspect, the method also includes: sending a query request to a semantic library storage device, the query request is used to request a query on the semantic libraries of the first terminal device and the second terminal device; receiving a query response from the semantic library storage device, the query response is used to indicate whether the semantic library is available; sending a response message to the first terminal device, the response message is used to indicate whether the semantic library is available.

[0042] In combination with the second aspect, in certain implementations of the second aspect, sending a resource configuration indication to a resource controller in response to the resource configuration request includes: sending the resource configuration indication to the resource controller based on the resource configuration request when the semantic library is available.

[0043] In combination with the second aspect, in certain implementations of the second aspect, the resource configuration request carries a first public key in a first public-private key pair used for semantic communication; the first information carries multiple first ciphertexts and resource category information corresponding to the second public keys corresponding to the multiple first ciphertexts, and the multiple first ciphertexts are obtained by encrypting multiple second public keys required for configuring the computing environment using the first private key in the first public-private key pair; the second information carries the multiple second public keys and resource category information corresponding to the multiple second public keys; the method also includes: using the first public key to decrypt the multiple first ciphertexts respectively to obtain the multiple second public keys.

[0044] In this way, different public keys for initializing TEE (i.e., the second public key mentioned above) can be configured for different computing instances. In this way, the trusted execution environment can be initialized in a more fine-grained manner, thereby enhancing the security of the system.

[0045] According to a third aspect, another semantic communication method is provided, which is applied to a reasoning plane functional network element, and the method includes: receiving second information from an access mobility management functional network element, the second information including resource configuration information for semantic communication between a first terminal device and a second terminal device, a key required for configuring a computing environment, and a session identifier between the first terminal device and the second terminal device, and the resource configuration information is used to indicate resources that have been configured; based on the second information, initializing the trusted execution environment TEE of the computing node and / or storage node using the key.

[0046] In a possible implementation, the above method can be executed by the reasoning plane function network element, or by a circuit or chip inside the reasoning plane function network element, which is not limited in the embodiments of the present application.

[0047] In combination with the third aspect, in some implementations of the third aspect, the resource configuration information includes identifiers of configured computing nodes and / or identifiers of storage nodes.

[0048] In combination with the third aspect, in certain implementations of the third aspect, the second information carries multiple second public keys and resource category information corresponding to the multiple second public keys; the trusted execution environment TEE of the computing node and / or storage node is initialized using the key based on the second information, including: based on the second information, determining the computing instance corresponding to each second public key in the multiple second public keys, and the computing node and / or storage node corresponding to the computing instance; sending third information to the resource controller, the third information including information for indicating the multiple second public keys and the computing instance information corresponding to each second public key, the computing instance information including the identification of the computing node and / or the identification of the storage node.

[0049] In this way, different public keys for initializing TEE (i.e., the second public key mentioned above) can be configured for different computing instances. In this way, the trusted execution environment can be initialized in a more fine-grained manner, thereby enhancing the security of the system.

[0050] In combination with the third aspect, in certain implementations of the third aspect, the information used to indicate the multiple second public keys is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in the third public-private key pair.

[0051] By introducing the third public-private key pair between the reasoning plane functional network element and the resource controller, the second key can be prevented from being leaked, making the information transmission process between the reasoning plane functional network element and the resource controller more secure, thereby improving the security of the entire resource configuration process.

[0052] In combination with the third aspect, in some implementations of the third aspect, the method further includes: generating the third public-private key pair, the third public-private key pair including a third public key and the third private key; and sending the third public key to the resource controller.

[0053] In combination with the third aspect, in certain implementations of the third aspect, the method further includes: receiving a confirmation message from the resource controller, wherein the confirmation message is used to indicate that TEE initialization has been completed.

[0054] In combination with the third aspect, in certain implementations of the third aspect, the method also includes: sending a data request to the first terminal device, the data request being used to request data transmission; receiving an encrypted data stream from the first terminal device; performing semantic extraction on the data stream using the semantic libraries of the first terminal device and the second terminal device to obtain semantic key information; and sending the semantic key information and the session identifier to a user plane functional network element.

[0055] In combination with the third aspect, in certain implementations of the third aspect, the method also includes: receiving semantic key information and the session identifier from a user plane functional network element; using the semantic libraries of the first terminal device and the second terminal device to semantically restore the semantic key information to obtain semantic restoration information; and sending the semantic restoration information and the session identifier to the first terminal device.

[0056] In the embodiment of the present application, the operation of semantic processing (i.e., semantic extraction or semantic restoration) is performed by the above-mentioned reasoning surface functional network element in the TEE in the above-mentioned resource node, so that the user's content is processed in a trusted environment. In this way, on the one hand, there is no need for the terminal device to store the semantic library, nor is there a need for the terminal device to perform semantic processing operations, which saves the memory of the terminal device and reduces the burden on the terminal device. On the other hand, the user's content is processed in a trusted environment, which ensures the user's privacy while ensuring the normal progress of semantic communication.

[0057] In combination with the third aspect, in certain implementations of the third aspect, the method further includes: receiving an end notification from the first terminal device, the end notification being used to indicate the end of semantic communication between the first terminal device and the second terminal device; and sending a resource release notification to the resource controller.

[0058] In this way, relevant resources can be released earlier so that they can be used for other communications, which is conducive to improving resource utilization.

[0059] In a fourth aspect, another semantic communication method is provided, which is applied to a resource controller, and the method includes: receiving a resource configuration indication from an access mobility management function network element, the resource configuration indication being used to indicate resource reservation and resource instantiation configuration; performing resource reservation and resource instantiation configuration based on the resource configuration indication; and sending resource configuration information to the access mobility management function network element, the resource configuration information being used to indicate resources that have been configured.

[0060] In a possible implementation, the above method may be executed by a resource controller, or may be executed by a circuit or chip inside the resource controller, which is not limited in the embodiments of the present application.

[0061] In combination with the fourth aspect, in certain implementations of the fourth aspect, the method also includes: receiving third information from an inference plane functional network element, the third information including information indicating multiple second public keys required to configure the computing environment and computing instance information corresponding to each second public key in the multiple second public keys, the computing instance information including an identifier of a computing node and / or an identifier of a storage node; based on the third information, initializing the trusted execution environment TEE of the computing node and / or the storage node using the multiple second public keys.

[0062] In this way, different public keys for initializing TEE (i.e., the second public key mentioned above) can be configured for different computing instances. In this way, the trusted execution environment can be initialized in a more fine-grained manner, thereby enhancing the security of the system.

[0063] In combination with the fourth aspect, in certain implementations of the fourth aspect, the information used to indicate the multiple second public keys required to configure the computing environment is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in the third public-private key pair; the method also includes: receiving the third public key from the reasoning plane functional network element; using the third public key to decrypt the multiple third ciphertexts respectively to obtain the multiple second public keys.

[0064] By introducing the third public-private key pair between the reasoning plane functional network element and the resource controller, the second key can be prevented from being leaked, making the information transmission process between the reasoning plane functional network element and the resource controller more secure, thereby improving the security of the entire resource configuration process.

[0065] In combination with the fourth aspect, in some implementations of the fourth aspect, the method further includes: receiving a resource release notification from a reasoning plane functional network element; and releasing resources based on the resource release notification.

[0066] In this way, relevant resources can be released earlier so that they can be used for other communications, which is conducive to improving resource utilization.

[0067] In a fifth aspect, another semantic communication method is provided, which is applied to a system including an access mobility management function network element, a reasoning plane function network element, and a resource controller, the method comprising: the access mobility management function network element receives a resource configuration request from a first terminal device, the resource configuration request is used to request configuration of semantic communication resources between the first terminal device and the second terminal device; the access mobility management function network element responds to the resource configuration request and sends a resource configuration indication to the resource controller, the resource configuration indication is used to instruct resource reservation and resource instantiation configuration; the resource controller receives the resource configuration indication and performs resource reservation and resource instantiation configuration based on the resource configuration indication; the resource controller sends a resource configuration indication to the access mobility management function network element, the resource configuration indication is used to instruct ... The access mobility management function network element sends resource configuration information, wherein the resource configuration information is used to indicate the resources that have been configured; the access mobility management function network element receives the resource configuration information; the access mobility management function network element receives first information from the first terminal device, wherein the first information carries a key required for configuring a computing environment and a session identifier between the first terminal device and the second terminal device; the access mobility management function network element sends second information to the reasoning plane function network element, wherein the second information includes the resource configuration information, the key required for configuring the computing environment and the session identifier; the reasoning plane function network element receives the second information, and based on the second information, uses the key to initialize the trusted execution environment TEE of the computing node and / or storage node.

[0068] In combination with the fifth aspect, in certain implementations of the fifth aspect, the resource configuration information includes identifiers of computing nodes and / or storage nodes that have been configured.

[0069] In combination with the fifth aspect, in some implementations of the fifth aspect, the method also includes: the access mobility management function network element sends a query request to the semantic library storage device, and the query request is used to request a query on the semantic library of the first terminal device and the second terminal device; the access mobility management function network element receives a query response from the semantic library storage device, and the query response is used to indicate whether the semantic library is available; the access mobility management function network element sends a response message to the first terminal device, and the response message is used to indicate whether the semantic library is available.

[0070] In combination with the fifth aspect, in certain implementations of the fifth aspect, the access mobility management function network element sends a resource configuration indication to the resource controller in response to the resource configuration request, including: when the semantic library is available, the access mobility management function network element sends the resource configuration indication to the resource controller based on the resource configuration request.

[0071] In combination with the fifth aspect, in some implementations of the fifth aspect, the resource configuration request carries the first public key of a first public-private key pair used for semantic communication; the first information carries multiple first ciphertexts and resource category information corresponding to the second public keys corresponding to the multiple first ciphertexts, and the multiple first ciphertexts are obtained by encrypting the multiple second public keys required for configuring the computing environment using the first private key of the first public-private key pair; the second information carries the multiple second public keys and resource category information corresponding to the multiple second public keys. The method also includes: the access mobile management function network element uses the first public key to decrypt the multiple first ciphertexts respectively to obtain the multiple second public keys. The reasoning plane functional network element initializes the trusted execution environment TEE of the computing node and / or storage node based on the second information using the key, including: the reasoning plane functional network element determines the computing instance corresponding to each second public key in multiple second public keys and the computing node and / or storage node corresponding to the computing instance based on the second information; the reasoning plane functional network element sends third information to the resource controller, the third information includes information for indicating the multiple second public keys and the computing instance information corresponding to each second public key, and the computing instance information includes the identifier of the computing node and / or the identifier of the storage node. The resource controller receives the third information, and based on the third information, initializes the trusted execution environment TEE of the computing node and / or the storage node using the multiple second public keys.

[0072] In combination with the fifth aspect, in certain implementations of the fifth aspect, the information used to indicate the multiple second public keys is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in the third public-private key pair.

[0073] In combination with the fifth aspect, in certain implementations of the fifth aspect, the method also includes: the reasoning plane functional network element generates the third public-private key pair, and the third public-private key pair includes a third public key and the third private key; the reasoning plane functional network element sends the third public key to the resource controller, and correspondingly, the resource controller receives the third public key, and uses the third public key to decrypt the multiple third ciphertexts respectively to obtain the multiple second public keys.

[0074] In combination with the fifth aspect, in certain implementations of the fifth aspect, the method also includes: the reasoning plane functional network element receives an end notification from the first terminal device, and the end notification is used to indicate the end of semantic communication between the first terminal device and the second terminal device; the reasoning plane functional network element sends a resource release notification to the resource controller; correspondingly, the resource controller receives the resource release notification and releases resources based on the resource release notification.

[0075] In a sixth aspect, a semantic communication device is provided, which is used to execute the method in any possible implementation of the first to fourth aspects. Specifically, the device includes a module for executing the method in any possible implementation of the first to fourth aspects.

[0076] In a seventh aspect, the present application provides another semantic communication device, including a processor, the processor is coupled to a memory, and can be used to execute instructions in the memory to implement the method in any possible implementation of the first to fourth aspects above. Optionally, the semantic communication device also includes a memory. Optionally, the semantic communication device also includes a communication interface, and the processor is coupled to the communication interface.

[0077] In one implementation, the semantic communication device is a terminal device. When the semantic communication device is a terminal device, the communication interface may be a transceiver, or an input / output interface.

[0078] In another implementation, the semantic communication device is a chip configured in a terminal device. When the semantic communication device is a chip configured in a terminal device, the communication interface may be an input / output interface.

[0079] In one implementation, the semantic communication device is a network device (e.g., the access mobility management function network element, the reasoning plane function network element, the resource controller and other network side devices). When the semantic communication device is a network device, the communication interface can be a transceiver, or an input / output interface.

[0080] In another implementation, the semantic communication device is a chip configured in a network device. When the semantic communication device is a chip configured in a network device, the communication interface may be an input / output interface.

[0081] In an eighth aspect, a processor is provided, comprising: an input circuit, an output circuit, and a processing circuit. The processing circuit is used to receive a signal through the input circuit and transmit a signal through the output circuit, so that the processor executes the method in any possible implementation of the first to fourth aspects above.

[0082] In the specific implementation process, the processor can be a chip, the input circuit can be an input pin, the output circuit can be an output pin, and the processing circuit can be a transistor, a gate circuit, a trigger, and various logic circuits. The input signal received by the input circuit can be, for example, but not limited to, received and input by a receiver, and the signal output by the output circuit can be, for example, but not limited to, output to a transmitter and transmitted by the transmitter, and the input circuit and the output circuit can be the same circuit, which is used as an input circuit and an output circuit at different times. The embodiments of the present application do not limit the specific implementation methods of the processor and various circuits.

[0083] In a ninth aspect, a processing device is provided, comprising a processor and a memory. The processor is used to read instructions stored in the memory, and can receive signals through a receiver and transmit signals through a transmitter to execute the method in any possible implementation of the first to fourth aspects above.

[0084] Optionally, the number of the processors is one or more, and the number of the memories is one or more.

[0085] Optionally, the memory may be integrated with the processor, or the memory may be provided separately from the processor.

[0086] In the specific implementation process, the memory can be a non-transitory memory, such as a read-only memory (ROM), which can be integrated with the processor on the same chip or can be set on different chips respectively. The embodiments of the present application do not limit the type of memory and the setting method of the memory and the processor.

[0087] It should be understood that the relevant data interaction process, such as sending indication information, can be a process of outputting indication information from a processor, and receiving capability information can be a process of receiving input capability information from a processor. Specifically, the processed output data can be output to a transmitter, and the input data received by the processor can come from a receiver. Among them, the transmitter and the receiver can be collectively referred to as a transceiver.

[0088] The processing device in the above-mentioned ninth aspect can be a chip. The processor can be implemented by hardware or by software. When implemented by hardware, the processor can be a logic circuit, an integrated circuit, etc.; when implemented by software, the processor can be a general-purpose processor, which is implemented by reading the software code stored in the memory. The memory can be integrated in the processor or can be located outside the processor and exist independently.

[0089] In the tenth aspect, a semantic communication system is provided, comprising an access mobility management function network element, a reasoning plane function network element, and a resource controller, wherein the access mobility management function network element, the reasoning plane function network element, and the resource controller are respectively used to implement the method in any possible implementation manner of the second to fourth aspects above.

[0090] In combination with the tenth aspect, in certain implementations of the tenth aspect, the above-mentioned system also includes a first terminal device or other devices (such as a user plane functional network element), etc.

[0091] In the eleventh aspect, a computer program product is provided, which includes: a computer program (also referred to as code, or instruction), which, when executed, enables a computer to execute a method in any possible implementation of the first to fourth aspects above.

[0092] In the twelfth aspect, a computer-readable storage medium is provided, which stores a computer program (also referred to as code, or instruction) which, when executed on a computer, enables the computer to execute a method in any possible implementation of the first to fourth aspects above. BRIEF DESCRIPTION OF THE DRAWINGS

[0093] Figure 1 is a schematic diagram of a communication system applicable to an embodiment of the present application;

[0094] Figure 2 A schematic flow chart of a semantic communication method according to an embodiment of the present application;

[0095] Figure 3 A schematic diagram of a semantic communication process according to an embodiment of the present application;

[0096] Figure 4A schematic flow chart of a semantic communication method according to an embodiment of the present application;

[0097] Figure 5 A schematic flow chart of another semantic communication method according to an embodiment of the present application;

[0098] Figure 6 A schematic block diagram of a semantic communication device according to an embodiment of the present application;

[0099] Figure 7 A schematic block diagram of another semantic communication device according to an embodiment of the present application;

[0100] Figure 8 This is a schematic block diagram of another semantic communication device according to an embodiment of the present application. DETAILED DESCRIPTION

[0101] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0102] In order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish the same or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference.

[0103] It should be noted that, in this application, words such as "exemplarily" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplarily" or "for example" in this application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplarily" or "for example" is intended to present related concepts in a specific way.

[0104] In addition, "at least one" means one or more, and "plurality" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b and c can mean: a, or b, or c, or a and b, or a and c, or b and c, or a, b and c, where a, b, c can be single or multiple.

[0105] The technical solutions of the embodiments of the present application can be applied to various communication systems, such as: long term evolution (LTE) system, LTE frequency division duplex (FDD) system, LTE time division duplex (TDD), universal mobile telecommunication system (UMTS), worldwide interoperability for microwave access (WiMAX) communication system, fifth generation (5G) system or new radio (NR), future evolved communication systems, such as sixth generation (6G) system, etc.

[0106] It should also be understood that the technical solutions of the embodiments of the present application can also be applied to various communication systems based on non-orthogonal multiple access technology, such as sparse code multiple access (SCMA) system. Of course, SCMA may also be called other names in the communication field; further, the technical solutions of the embodiments of the present application can be applied to multi-carrier transmission systems using non-orthogonal multiple access technology, such as orthogonal frequency division multiplexing (OFDM), filter bank multi-carrier (FBMC), generalized frequency division multiplexing (GFDM), filtered orthogonal frequency division multiplexing (F-OFDM) system, etc.

[0107] To facilitate understanding of the embodiments of the present application, first Figure 1 A communication system applicable to an embodiment of the present application is introduced.

[0108] Figure 1 FIG. 1 is a schematic diagram of a communication system 100 applicable to an embodiment of the present application. Figure 1 As shown, the communication system 100 may include a terminal device 110 , an access mobility management function network element 120 , a semantic library storage device 130 , a resource controller 140 , a reasoning plane function network element 150 , and a user plane function network element 160 .

[0109] The access mobility management function network element 120 , the reasoning plane function network element 150 , and the user plane function network element 160 are all network-side devices corresponding to the terminal device 110 , and provide services for the terminal device 110 .

[0110] Among them, the access mobility management function network element 120 is mainly used for mobility management and access management. Specifically, the access mobility management function network element 120 can be used to implement other functions of the mobility management entity (MME) except session management, such as lawful interception, or access authorization (or authentication). In a possible implementation, the access mobility management function network element can be referred to as AMF (access and mobility management function), but this embodiment of the present application does not limit this.

[0111] The reasoning plane function network element 150 is used to perform semantic extraction or semantic restoration operations, which can be referred to as RPF (reasoning plane function), and can also be called computing plane function network element, semantic plane function network element, etc., which is not limited in the embodiments of the present application. The reasoning plane function network element 150 of the present application can be a network element on the access network side or a network element on the core network side, which is not limited in the embodiments of the present application.

[0112] The user plane function network element 160 is used for packet routing and forwarding, or quality of service (QoS) processing of user plane data, etc. In a possible implementation, the user plane function network element may be referred to as UPF (user plane function) for short.

[0113] The semantic library storage device 130 is a device for storing a semantic library. The semantic library storage device 130 may be a single device or may include multiple distributed devices (e.g., blockchain devices). The present application embodiment does not limit this. The semantic library storage device 130 may communicate with a network device (e.g., an access mobility management function network element 120).

[0114] The resource controller 140 is used to control and manage network resources (including computing resources and storage resources). The access mobility management function network element 120 and the reasoning plane function network element 150 can communicate with the resource controller 140 to configure the resources required for semantic communication in the embodiment of the present application.

[0115] Optionally, the communication system 100 may further include other network elements such as a session management function (SMF), a policy control function (PCF), and a unified data management (UDM), which is not limited in the embodiments of the present application.

[0116] The terminal device in the embodiment of the present application can communicate with one or more core networks via a radio access network (RAN), and the terminal device can be called an access terminal, user equipment (UE), user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user device. The access terminal can be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a handheld device with wireless communication function, a computing device or other processing device connected to a wireless modem, a vehicle-mounted device, a wearable device, a terminal device in a future 5G network, or a terminal device in a future evolved public land mobile network (PLMN), etc.

[0117] The terminal device in the embodiment of the present application is connected to the access network device ( Figure 1 The access network device may be an evolved NodeB (eNB or eNodeB) in an LTE system, or a wireless controller in a cloud radio access network (CRAN) scenario, or the network device may be a relay station, an access point, a vehicle-mounted device, a wearable device, a network device in a 5G network, or a network device in a future evolved network, etc., and the embodiments of the present application are not limited to this. For example, a gNB in ​​an NR system, or a transmission point (transmit / receive point, TRP or TP), one or a group of antenna panels (including multiple antenna panels) of a base station in a 5G system, or a network node constituting a gNB or a transmission point, such as a baseband unit (BBU), or a distributed unit (DU), etc.

[0118] It should be understood that the above-mentioned devices other than the terminal devices (for example, the access mobility management function network element 120, the semantic library storage device 130, the resource controller 140, the reasoning plane function network element 150, the user plane function network element 160, etc.) can be collectively referred to as network devices.

[0119] In an embodiment of the present application, a terminal device or a network device includes a hardware layer, an operating system layer running on the hardware layer, and an application layer running on the operating system layer. The hardware layer includes hardware such as a central processing unit (CPU), a memory management unit (MMU), and a memory (also called main memory). The operating system can be any one or more computer operating systems that implement business processing through a process, such as a Linux operating system, a Unix operating system, an Android operating system, an iOS operating system, or a windows operating system. The application layer includes applications such as a browser, an address book, a word processing software, and an instant messaging software. In addition, the embodiment of the present application does not specifically limit the specific structure of the execution subject of the method provided in the embodiment of the present application, as long as it can communicate according to the method provided in the embodiment of the present application by running a program that records the code of the method provided in the embodiment of the present application, for example, the execution subject of the method provided in the embodiment of the present application can be a terminal device or a network device, or a functional module in a terminal device or a network device that can call a program and execute a program.

[0120] In addition, various aspects or features of the present application can be implemented as methods, devices or products using standard programming and / or engineering techniques. The term "product" used in this application covers computer programs that can be accessed from any computer-readable device, carrier or medium. For example, computer-readable media may include, but are not limited to: magnetic storage devices (e.g., hard disks, floppy disks or tapes, etc.), optical disks (e.g., compact discs (CDs), digital versatile discs (DVDs), etc.), smart cards and flash memory devices (e.g., erasable programmable read-only memory (EPROM), cards, sticks or key drives, etc.). In addition, the various storage media described herein may represent one or more devices and / or other machine-readable media for storing information. The term "machine-readable medium" may include, but is not limited to, wireless channels and various other media capable of storing, containing and / or carrying instructions and / or data.

[0121] To facilitate understanding, the semantic communication involved in the embodiments of the present application is first introduced below.

[0122] Semantic communication generally refers to the communication between different intelligent agents for the purpose of "expressing meaning". The "intelligent agent" here can refer to humans, intelligent machines and even other organisms. The fundamental purpose of semantic communication is to exchange information. It does not pursue the fidelity of original data or signals, but to accurately transmit semantic information between the two communicating parties. The transmission of information is mainly based on the principle of signal waveform or data bit fidelity, and the task of extracting and understanding the information in the signal is handed over to humans themselves. It takes a cost to go from signal transmission to information understanding. For the transmission of a large number of signals, the transmission efficiency and the communication method of directly understanding information need to be reconstructed and transformed.

[0123] In object-oriented semantic communication, both parties need to rely on a shared semantic library to compress and restore the communication content consistently to reduce the communication bandwidth overhead. The semantic library is a set of parameters and models that can establish a certain mapping relationship with the communication content. Usually, the sender can first objectify the original data based on the semantic library, that is, extract semantics, and send the objectified semantics to the receiver. The receiver then renders and merges the objectified semantics with the corresponding model based on the semantic library to obtain the restored content.

[0124] The above process requires computing power and storage support. In current technologies, the computing resources and storage resources required for semantic communication need to be obtained by accessing the corresponding application servers, and the network cannot actively provide computing resources and storage resources for both parties in communication. Therefore, how to provide computing resources and storage resources for both parties in semantic communication through the network is a technical problem that needs to be solved urgently.

[0125] In view of this, the present application proposes a semantic communication method and device, in which a terminal device performing semantic communication sends a resource configuration request to an access mobile management function network element to request configuration of semantic communication resources. The access mobile management function network element sends a resource configuration instruction to a resource controller based on the resource configuration request to perform resource reservation and resource instantiation configuration. The terminal device sends a first message to the access mobile management function network element, and the first message carries a key required for configuring a computing environment. The access mobile management function network element sends the above-mentioned first information and resource configuration information to the reasoning surface function network element, and the reasoning surface function network element initializes a trusted execution environment using the key of the terminal device. By introducing the reasoning surface function network element, the required computing resources and storage resources are provided to both parties of semantic communication in a trusted privacy protection manner, thereby protecting the user's content from being processed in the trusted execution environment TEE, thereby protecting the user's privacy on the basis of ensuring the normal progress of semantic communication, thereby improving system security and user experience.

[0126] The semantic communication method and semantic communication device provided by the present application will be described in detail below with reference to the accompanying drawings.

[0127] It should be understood that the technical solution of the present application can be applied to wireless communication systems, for example, Figure 1 The communication system 100 shown in FIG. Figure 1 In the communication system 100 shown in FIG. 1 , the first terminal device is equivalent to Figure 1 The terminal device 110 in.

[0128] For another example, the technical solution of the present application can be applied to an open radio access network (O-RAN) network, and the first terminal device can be equivalent to a node in the O-RAN network, such as a RAN intelligent controller (RIC) node, an open cloud (O-Cloud) node, a service management orchestration (SMO) node, an open base station (open eNB, O-eNB), an open radio unit (open radio unit, O-RU), an open DU (open DU, O-DU), an open CU (open CU, O-CU), etc., and the embodiments of the present application are not limited to this. Exemplarily, the technical solution of the present application can be applied to a scenario in which a RIC node interacts with an application.

[0129] For the sake of ease of description, the access mobility management function network element will be referred to as AMF, and the user plane network element will be referred to as UPF. However, it should be understood that the access mobility management function network element and the user plane network element may also have other names, and the embodiments of the present application are not limited to this.

[0130] Figure 2 A schematic flow chart of a semantic communication method 200 provided in an embodiment of the present application is shown. The method 200 includes:

[0131] S201, a first terminal device sends a resource configuration request to an AMF, where the resource configuration request is used to request configuration of semantic communication resources between the first terminal device and a second terminal device; correspondingly, the AMF receives the resource configuration request.

[0132] S202, AMF sends a query request to a semantic database storage device, where the query request is used to request a query on a semantic database between a first terminal device and a second terminal device; correspondingly, the semantic database storage device receives the query request.

[0133] It should be understood that the semantic library here can be a private semantic library between the first terminal device and the second terminal device (i.e., a semantic library created by the terminal device itself), or it can be a public semantic library designated between the first terminal device and the second terminal device, and the embodiments of the present application do not limit this. Different communicating parties can establish different semantic libraries. When performing semantic communication, the semantic extraction on the sending side (e.g., including the sending device and the network device corresponding to the sending device) and the semantic restoration on the receiving side (e.g., including the receiving device and the network device corresponding to the receiving device) both rely on the semantic libraries on both ends of the sending and receiving ends (e.g., the semantic library between the first terminal device and the second terminal device).

[0134] S203, the semantic repository storage device sends a query response to the AMF, where the query response is used to indicate whether the semantic repository is available; correspondingly, the AMF receives the query response.

[0135] The information of the semantic library is stored in the semantic library storage device. Through the above-mentioned query request and query response, AMF can determine whether the semantic library between the first terminal device and the second terminal device is available. The semantic library here is available, on the one hand, it means that the semantic library already exists (for example, it has been pre-created and stored in the semantic library storage device), and on the other hand, it means that the semantic library storage device can provide the semantic library for this semantic communication (for example, the load of the semantic library storage device meets the requirements). If the semantic library is unavailable, it may be that the semantic library itself does not exist, or it may be that the load of the semantic library storage device is heavy and the semantic library cannot be provided for this semantic communication in the short term, resulting in the semantic library being unavailable in the short term. There may also be other possible situations that cause the semantic library to be unavailable, and the embodiments of the present application are not limited to this.

[0136] S204, AMF sends a response message to the first terminal device based on the query response, where the response message is used to indicate whether the semantic library is available; correspondingly, the first terminal device receives the response message.

[0137] The above S202 to S204 are optional steps. In a possible implementation, after receiving the resource configuration request from the first terminal device, AMF may first query, and then execute the subsequent process if the semantic library is available. If the semantic library is not available, AMF may end the current process after sending a response message to the first terminal device, and no longer perform subsequent resource configuration. In addition, when the first terminal device receives the above response message and determines that the semantic library is unavailable, it will also end the current process and will not send subsequent messages (i.e., the above first information). In this way, while ensuring that the semantic library is available, the subsequent process is carried out, which is conducive to ensuring the normal progress of subsequent semantic communication and avoiding the situation where the network side has configured resources for the terminal device but the semantic library is unavailable, resulting in the inability of subsequent semantic communication to proceed normally, thereby causing a waste of resources.

[0138] In another possible implementation, after receiving the resource configuration request from the first terminal device, the AMF may directly execute S205 without querying. After sending the resource configuration information, the first terminal device may continue to send the following first information, that is, execute S208 after executing S201. This can improve the efficiency of resource configuration and further improve the efficiency of semantic communication. It should be understood that in this implementation, S201 and S208 can be as follows: Figure 2 As shown, it is divided into two steps, and it can also be combined into one step, which is not limited in the embodiment of the present application. Figure 2 As shown, it is divided into two steps, and the embodiment of the present application does not limit the execution order of S201 and S208.

[0139] S205, AMF sends a resource configuration indication to the resource controller, where the resource configuration indication is used to instruct resource reservation and resource instantiation configuration; correspondingly, the resource controller receives the resource configuration indication.

[0140] The resources of the embodiment of the present application include computing resources and / or storage resources, and the resource controller is able to control and manage these resources. Therefore, the AMF sends a resource configuration indication to the resource controller, instructing the resource controller to perform resource reservation and resource instantiation configuration.

[0141] Optionally, if the above S202 to S204 are executed, the AMF sends the above resource configuration indication to the resource controller when the semantic library is available, and does not send the above resource configuration indication if the semantic library is not available.

[0142] S206: The resource controller performs resource reservation and resource instantiation configuration based on the resource configuration indication.

[0143] S207, the resource controller sends resource configuration information to the AMF, where the resource configuration information is used to indicate the configured resources; correspondingly, the AMF receives the resource configuration information.

[0144] Exemplarily, the resource configuration information includes identifiers of computing nodes and / or storage nodes that have been configured.

[0145] Exemplarily, the identifier of the computing node may be an Internet Protocol (IP) address of the computing node or a uniform resource identifier (URI) of the computing node, and the identifier of the storage node may be an IP address of the storage node or a URI of the storage node.

[0146] It should be understood that the above-mentioned computing nodes and storage nodes may correspond to the same physical device or to different physical devices, and the embodiments of the present application are not limited to this.

[0147] S208, the first terminal device sends a first message to the AMF, where the first message carries a key required for configuring a computing environment and a session identifier between the first terminal device and the second terminal device; correspondingly, the AMF receives the first message.

[0148] It should be understood that the key required for configuring the computing environment may be generated by the first terminal device itself, or may be obtained by the first terminal device through other means, and this embodiment of the present application does not limit this.

[0149] It should also be understood that the above-mentioned session identifier between the first terminal device and the second terminal device is used to uniquely identify the current semantic communication session between the first terminal device and the second terminal device, because there may be sessions between other devices at the same time (for example, the session between the first terminal device and the other device, the session between the second terminal device and the other device, the session between two other devices, etc.) that require resource configuration, and different sessions may use different keys to configure the computing environment. Therefore, carrying the session identifier between the first terminal device and the second terminal device in the first information can enable the AMF to clearly determine that the key in the first information is used to configure the resources required for semantic communication between the first terminal device and the second terminal device, rather than for configuring the resources required for semantic communication between other devices.

[0150] S209, AMF sends second information to the reasoning plane functional network element, where the second information includes the resource configuration information, the key required for configuring the computing environment, and the session identifier; correspondingly, the reasoning plane functional network element receives the second information.

[0151] Optionally, the resource configuration information, key, and session identifier included in the above-mentioned second information can be sent through one message or multiple messages, which is not limited in the embodiment of the present application.

[0152] S210: The reasoning plane functional network element initializes the TEE of the computing node and the storage node using the key of the first terminal device based on the second information.

[0153] In an embodiment of the present application, a TEE is provided in a computing node and a storage node for processing semantic extraction or semantic restoration in a semantic communication process. It should be understood that the memory of the device can be divided into a TEE and a rich execution environment (REE). REE refers to an environment in which an operating system is running, and general operating systems such as Android and IOS can be run. REE is an open environment that is vulnerable to attacks. TEE is a secure area on the central processing unit that ensures that sensitive data is processed in an isolated and trusted environment, thereby protecting it from software attacks in REE. Compared with other secure execution environments, TEE can protect the integrity and confidentiality of trusted applications (TA) end-to-end, and can provide stronger processing power and larger memory space. TEE provides an interface for software in REE, so that software in REE can call data in TEE for processing, but will not leak sensitive data.

[0154] The AMF sends the resource configuration information indicating the configured resources, the key required for configuring the computing environment, and the session identifier between the first terminal device and the second terminal device to the reasoning plane function network element. The reasoning plane function network element can determine the corresponding resource node based on this information, and use the above-mentioned key to initialize the TEE in the node to complete the resource configuration.

[0155] Furthermore, the subsequent first terminal device and the second terminal device can perform semantic communication based on the configured resources and in the configured environment, wherein the operation of semantic processing (i.e., semantic extraction or semantic restoration) is respectively performed by the above-mentioned reasoning surface functional network element in the TEE in the above-mentioned resource node, so that the user's content is processed in a trusted environment. In this way, on the one hand, there is no need for the terminal device to store the semantic library, nor is there a need for the terminal device to perform semantic processing operations, which saves the memory of the terminal device and reduces the burden on the terminal device. On the other hand, the user's content is processed in a trusted environment, which ensures the user's privacy while ensuring the normal progress of semantic communication.

[0156] Therefore, the semantic communication method of the present application is that the terminal device performing semantic communication sends a resource configuration request to AMF to request the configuration of semantic communication resources. AMF sends a resource configuration instruction to the resource controller based on the resource configuration request to perform resource reservation and resource instantiation configuration. The terminal device sends a first message to AMF, and the first message carries the key required for configuring the computing environment. AMF sends the above first information and resource configuration information to the reasoning surface functional network element, and the reasoning surface functional network element initializes the trusted execution environment using the key of the terminal device. By introducing the reasoning surface functional network element, the required computing resources and storage resources are provided to the communicating parties of the semantic communication in a trusted privacy protection manner, thereby protecting the user's content from being processed in the trusted execution environment TEE, thereby ensuring the user's privacy on the basis of ensuring the normal progress of semantic communication, thereby improving system security and user experience.

[0157] In addition, the embodiment of the present application provides resource docking by the network, and there is no need for the communication party to configure resources in advance. The newly introduced reasoning plane functional network element is flexibly deployed on the access network side or the core network side according to the privacy policy to ensure compliance. Therefore, by adopting the semantic communication method of the embodiment of the present application, users can directly conduct semantic communication without worrying about the resources and configuration requirements required for semantic communication, nor do they need to worry about compliance and privacy issues caused by using the resources provided by the network, which improves the user experience.

[0158] The above method describes the semantic communication resource configuration process before the formal semantic communication. The configuration of semantic communication resources must be carried out by the initiating device and the receiving device of the semantic communication. Therefore, the above-mentioned first terminal device can be the initiating device of this semantic communication, or it can be the receiving device of this semantic communication. The embodiment of the present application does not limit this. Exemplarily, if the first terminal device is the initiating device of this semantic communication, the second terminal device is the receiving device of this semantic communication; if the first terminal device is the receiving device of this semantic communication, the second terminal device is the initiating device of this semantic communication. When both the initiating device and the receiving device have configured the resources required for semantic communication, this semantic communication can proceed normally.

[0159] Below, the embodiments of the present application are described according to different roles of the first terminal device and the second terminal device.

[0160] Case 1: the first terminal device is the sending device of this semantic communication, and the second terminal device is the receiving device of this semantic communication.

[0161] As an optional embodiment, the above method also includes: the reasoning plane function network element sends a data request to the first terminal device, and the data request is used to request data transmission; correspondingly, the first terminal device receives the data request. Based on the data request, the first terminal device sends an encrypted data stream to the reasoning plane function network element; correspondingly, the reasoning plane function network element receives the encrypted data stream. The reasoning plane function network element decrypts it, and uses the semantic library of the first terminal device and the second terminal device to perform semantic extraction on the data stream to obtain semantic key information. The reasoning plane function network element sends the semantic key information and the session identifier between the first terminal device and the second terminal device to the user plane function network element UPF; correspondingly, UPF receives the semantic key information and the session identifier.

[0162] Optionally, the data request carries a session identifier between the first terminal device and the second terminal device and an identifier of a semantic library between the first terminal device and the second terminal device, and the encrypted data stream carries the session identifier.

[0163] It should be understood that the UPF can subsequently send the received semantic key information and session identifier to the reasoning surface functional network element corresponding to the second terminal device through the network. The reasoning surface functional network element corresponding to the second terminal device uses the configured resources and performs semantic restoration operations in the configured environment to obtain semantic restoration information, and then sends the semantic restoration information and the session identifier to the second terminal device together.

[0164] In a possible implementation manner, the reasoning plane functional network element obtains the semantic key information and can directly send the semantic key information and the session identifier to the UPF.

[0165] In another possible implementation, the reasoning plane functional network element obtains the semantic key information, and can first send the semantic key information and the session identifier to the first terminal device, and then the first terminal device sends the semantic key information and the session identifier to the UPF. In this case, the reasoning plane functional network element may perform a part of the semantic extraction operation, and after sending the semantic key information to the first terminal device, the first terminal device performs another part of the semantic extraction operation, and the first terminal device can send the summarized semantic key information to the UPF.

[0166] Case 2: the second terminal device is the sending device of this semantic communication, and the first terminal device is the receiving device of this semantic communication.

[0167] As an optional embodiment, the above method also includes: the reasoning surface function network element corresponding to the second terminal device sends a data request to the second terminal device, and correspondingly, the second terminal device receives the data request. Based on the data request, the second terminal device sends an encrypted data stream to the reasoning surface function network element corresponding to the second terminal device, and the reasoning surface function network element corresponding to the second terminal device performs a semantic extraction operation, and sends the semantic key information and the session identifier to the reasoning surface function network element corresponding to the first terminal device through the UPF, and the reasoning surface function network element corresponding to the first terminal device performs a semantic restoration operation. The reasoning surface function network element corresponding to the first terminal device receives the semantic key information and the session identifier, and uses the semantic libraries of the first terminal device and the second terminal device to semantically restore the semantic key information to obtain semantic restoration information. The reasoning surface function network element corresponding to the first terminal device sends the semantic restoration information and the session identifier to the first terminal device; correspondingly, the first terminal device receives the semantic restoration information and the session identifier.

[0168] It should be understood that Case 2 and Case 1 are merely the swapping of the sending side and the receiving side. The specific steps and details of Case 2 are similar to those of Case 1. Please refer to the above description and will not be repeated here.

[0169] It should also be understood that in the embodiment of the present application, the reasoning plane functional network element has already obtained the semantic libraries of the first terminal device and the second terminal device from the semantic library storage device in advance, so it is possible to perform semantic extraction and / or semantic restoration operations. The acquisition of the semantic library can use the index of the semantic library (such as the hash value of the semantic library), or the identification of the first terminal device (such as the public key ID) and the identification of the second terminal device (such as the public key ID), which will not be repeated here.

[0170] As an optional embodiment, the method further includes: the first terminal device sends an end notification to the reasoning plane function network element, the end notification is used to indicate the end of the semantic communication between the first terminal device and the second terminal device; correspondingly, the reasoning plane function network element receives the end notification. The reasoning plane function network element sends a resource release notification to the resource controller; correspondingly, the resource controller receives the resource release notification and releases resources based on the resource release notification.

[0171] It should be understood that the end of the semantic processing flow means the end of this semantic session, that is, there will be no more data streams from the first terminal device with the same session identifier as the above. The processing method of the first terminal device sending the end notification can release relevant resources earlier so that the relevant resources can be used for other communications, which is conducive to improving resource utilization.

[0172] As an optional embodiment, the resource configuration request carries at least one of the following: the type of semantic communication between the first terminal device and the second terminal device; descriptive information of the computing resources and storage resources required for semantic communication between the first terminal device and the second terminal device; or, the identification of the first terminal device and the identification of the second terminal device.

[0173] The above-mentioned semantic communication type can be, for example, any one of source-channel joint coding (ie, feature stream), object-based semantic extraction, multimedia encoding and decoding, task segmentation, etc.

[0174] The above-mentioned computing resource and storage resource description information may include, for example, computing power type, standard computing power measurement unit, latency requirements, storage capacity, etc.

[0175] As an optional embodiment, the resource configuration request carries the first public key of a first public-private key pair used for semantic communication; the first information carries multiple first ciphertexts and resource category information corresponding to the second public keys corresponding to the multiple first ciphertexts, and the multiple first ciphertexts are obtained by encrypting the multiple second public keys required for configuring the computing environment using the first private key of the first public-private key pair.

[0176] In this case, the method further includes: AMF uses the first public key to decrypt the multiple first ciphertexts respectively to obtain the multiple second public keys. AMF carries the multiple second public keys in the second information and sends it to the reasoning plane function network element, that is, the second information carries the multiple second public keys and the resource category information corresponding to the multiple second public keys.

[0177] In the above S210, the reasoning plane function network element uses the key of the first terminal device to initialize the TEE of the computing node and the storage node, including: the reasoning plane function network element determines the computing instance corresponding to each second public key in the multiple second public keys based on the second information, and the computing node and / or storage node corresponding to the computing instance; the reasoning plane function network element sends third information to the resource controller, the third information includes information for indicating the multiple second public keys and the computing instance information corresponding to each second public key, the computing instance information includes the identifier of the computing node and / or the identifier of the storage node; correspondingly, the resource controller receives the third information. Based on the third information, the resource controller initializes the trusted execution environment TEE of the computing node and / or the storage node using the multiple second public keys.

[0178] It should be understood that the resource category information can be a category obtained by dividing according to resource types, such as computing resources, storage resources, etc., or a category obtained by dividing according to computing power, such as central processing unit (CPU), graphics processing unit (GPU), heterogeneous, etc. The embodiments of the present application are not limited to this.

[0179] A public-private key pair may correspond to one resource category or multiple resource categories, which is not limited in the embodiments of the present application.

[0180] Through the above method, different public keys for initializing TEE (i.e., the above second public key) can be configured for different computing instances. In this way, the trusted execution environment can be initialized in a more fine-grained manner, thereby enhancing the security of the system.

[0181] As an optional embodiment, the method further includes: the resource controller sends a confirmation message to the reasoning plane functional network element, where the confirmation message is used to indicate that the TEE initialization has been completed; correspondingly, the reasoning plane functional network element receives the confirmation message.

[0182] As an optional embodiment, the information used to indicate multiple second public keys required to configure the computing environment is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in the third public-private key pair. The above method also includes: the reasoning surface functional network element generates a third public-private key pair, and the third public-private key pair includes a third public key and a third private key. The reasoning surface functional network element sends the third public key to the resource controller; correspondingly, the resource controller receives the third public key. The resource controller uses the third public key to decrypt the multiple third ciphertexts respectively to obtain the multiple second public keys.

[0183] The embodiment of the present application introduces a third public-private key pair between the reasoning plane functional network element and the resource controller, which can prevent the second key from being leaked, making the information transmission process between the reasoning plane functional network element and the resource controller more secure, thereby improving the security of the entire resource configuration process.

[0184] As an optional embodiment, the method also includes: the first terminal device generates the first public-private key pair, the first public-private key pair including the first public key and the first private key; the first terminal device generates multiple second public-private key pairs, each second public-private key pair in the multiple second public-private key pairs includes the second public key and the second private key.

[0185] It should be understood that, in general, the public key will be sent by the generator to other devices for public disclosure, and the private key will be retained by the generator for subsequent verification or encryption. For example, the first terminal device can use the first private key to encrypt the second public key, and the first terminal device can use the second private key to subsequently access the TEE.

[0186] The following takes the first terminal device as UE 1, the second terminal device as UE 2, and the reasoning plane function network element as RPF as an example. Figure 3 The semantic communication process is described as a whole. UE 1 is the sending device, AMF 1 is the sending side AMF, RPF 1 is the sending side reasoning plane functional network element, UPF 1 is the sending side UPF, UE 2 is the receiving device, AMF 2 is the receiving side AMF, RPF 2 is the receiving side reasoning plane functional network element, and UPF 2 is the receiving side UPF. Figure 3 The illustrated semantic communication process 300 includes the following steps:

[0187] In step 1, UE 1 connects to AMF 1 through the control plane, connects to the resource controller through AMF, configures feature flow reasoning resources, aligns the semantic library, and assists in key exchange.

[0188] The resource controller is responsible for managing resources in the resource pool, which includes the inference resource pool and the rendering resource pool.

[0189] Step 2: RPF 1 uses UE 1's key to initialize the TEE of the computing nodes and storage nodes in the configuration resource pool through AMF 1.

[0190] Step 3: RPF 1 obtains the existing feature flow information through the model library.

[0191] Step 4: RPF 1 uses the configured environment and based on the structured feature stream information to perform semantic extraction on the data stream from UE 1 to obtain semantic key information.

[0192] Step 5, RPF 1 sends the semantic key information to UPF 1.

[0193] Step 6: UPF 1 sends the above semantic key information to UPF 2, and UPF 2 sends the above semantic key information to RPF 2.

[0194] Optionally, in other possible implementations, the above semantic key information may also be sent from RPF 1 to RPF 2, which is not limited in this embodiment of the present application.

[0195] Step 7: RPF 1 and RPF 2 perform knowledge alignment. The knowledge alignment here can be understood as the alignment of the information required for this semantic communication, such as the environment and semantic library.

[0196] In step 8, AMF 2 performs semantic alignment (i.e. alignment of semantic bases), resource configuration, and key exchange.

[0197] Step 9: RPF 2 uses the configured environment to perform semantic restoration on the semantic key information, obtains semantic restoration information, and sends it to UE 2.

[0198] Optionally, in other possible implementations, the above semantic key information may be sent to UE 2, and UE 2 performs semantic restoration by itself, which is not limited in this embodiment of the present application. It should be understood that Figure 3 The RPF 2 shown is optional.

[0199] In the following, without loss of generality, the semantic communication method provided by the embodiment of the present application is described in detail by taking the interaction process between devices as an example. Terminal device 1 corresponds to the first terminal device in the above method, terminal device 2 corresponds to the second terminal device in the above method, and RPF corresponds to the reasoning plane function network element in the above method.

[0200] Figure 4 A schematic flow chart of a semantic communication method 400 provided in an embodiment of the present application is shown. The method 400 includes:

[0201] S401, terminal device 1 establishes a radio resource control (RRC) connection and a protocol data unit (PDU) session with the network side. At this time, terminal device 1 is connected to the user plane of the currently active access network.

[0202] It should be understood that before the process of the embodiment of the present application begins, terminal device 1, as the calling party, has uploaded the semantic library used for semantic communication with terminal device 2 to the semantic library storage device via the network, or terminal device 1 declares to conduct semantic communication with terminal device 2 based on a common semantic library, and the common semantic library has been stored in the semantic library storage device.

[0203] It should also be understood that the AMF of the embodiment of the present application has resource coordination capabilities, there is an existing connection between the terminal device 1 and the AMF, and the two-way authentication process between them has been completed.

[0204] S402, terminal device 1 sends a resource configuration request to AMF, where the resource configuration request is used to request configuration of computing resources and storage resources for semantic communication. Correspondingly, AMF receives the resource configuration request.

[0205] It should be understood that terminal device 1 can send the above resource configuration request to AMF when preparing to communicate with terminal device 2 in a semantic manner.

[0206] Optionally, the resource configuration request may carry at least one of the following information:

[0207] 1. Semantic communication type. The semantic communication type can be, for example, any one of source-channel joint coding (i.e., feature stream), object-based semantic extraction, multimedia encoding and decoding, task segmentation, etc.

[0208] 2. Description of computing resources and storage resources required for semantic communication, including computing power type, standard computing power measurement unit, latency requirements, storage capacity, etc. The computing power type can be, for example, any one of CPU type, GPU type, heterogeneous type (such as CPU+GPU type, or dedicated computing power type), etc. The standard computing power measurement unit can be, for example, any one of floating-point operations per second (FLOPS), teraoperations per second (TOPS), giga operations per second (GOPS), million operations per second (MOPS), etc.

[0209] 3. The identification of terminal device 1 and the identification of terminal device 2.

[0210] In a possible implementation, the identifier of the terminal device 1 is the ID of the terminal device 1 , and the identifier of the terminal device 2 is the ID of the terminal device 2 .

[0211] In another possible implementation, the identifier of the terminal device 1 is the public key ID of the terminal device 1 , and the identifier of the terminal device 2 is the public key ID of the terminal device 2 .

[0212] It should be understood that the above public key ID is an ID derived from a public key. The public key ID of the terminal device 1 can be, for example, a distributed identity, a blockchain address, etc. of the terminal device 1. Specifically, it can be, for example, Hash (PKu 1 ), PKu 1 is the public key of terminal device 1, Hash(PKu 1 ) indicates that PKu 1 The value obtained after the hash operation.

[0213] It should also be understood that in actual applications, terminal device 1 may perform semantic communication with multiple terminal devices, that is, a corresponding semantic library is established between terminal device 1 and each of the multiple terminal devices, and terminal device 2 may also perform semantic communication with multiple terminal devices, that is, a corresponding semantic library is established between terminal device 2 and each of the multiple terminal devices. Therefore, for each semantic library, the semantic library storage device will store the correspondence between the identifier of the semantic library and the identifiers of the two parties who use the semantic library for semantic communication, so that accurate search can be performed later. In an embodiment of the present application, the semantic library storage device stores the correspondence between the identifier of the semantic library, the identifier of the above-mentioned terminal device 1, and the identifier of the above-mentioned terminal device 2.

[0214] Exemplarily, if the identifier of the terminal device stored in the semantic library storage device is the ID of the terminal device, the above-mentioned resource configuration request can carry the ID of terminal device 1 and the ID of terminal device 2; if the identifier of the terminal device stored in the semantic library storage device is the public key ID of the terminal device, the above-mentioned resource configuration request can carry the public key ID of terminal device 1 and the public key ID of terminal device 2.

[0215] S403, the AMF sends a query request to the semantic database storage device based on the resource configuration request, and the query request is used to request to query the semantic database used by the terminal device 1 and the terminal device 2. Correspondingly, the semantic database storage device receives the query request.

[0216] Optionally, the query request may carry the identifier of terminal device 1 and the identifier of terminal device 2.

[0217] S404: The semantic database storage device obtains the identifier of the semantic database based on the query request, and sends a query response to the AMF, where the query response carries the identifier of the semantic database. Correspondingly, the AMF receives the query response.

[0218] For example, the semantic library used for semantic communication between terminal device 1 and terminal device 2 is referred to as LA. The identifier of the semantic library can be Hash (PKu 2 (LA)).

[0219] The embodiment of the present application can accurately find the semantic library used for communication between terminal device 1 and terminal device 2 through the identification of terminal device 1 and the identification of terminal device 2.

[0220] S405: AMF determines whether the above semantic library is available based on the query response.

[0221] Specifically, if AMF can query the above-mentioned semantic library, that is, the above-mentioned query response carries the identifier of the semantic library, it means that the semantic library is available. If AMF cannot query the above-mentioned semantic library, that is, the above-mentioned query response does not carry the identifier of the semantic library, it means that the semantic library is not available.

[0222] S406, AMF sends a response message to the terminal device 1, where the response message is used to indicate the status (ie, available or unavailable) of the semantic library requested by the terminal device 1. Correspondingly, the terminal device 1 receives the response message.

[0223] Exemplarily, the response message is ACK, indicating that the semantic library requested by the terminal device 1 is available, and the response message is NACK, indicating that the semantic library requested by the terminal device 1 is unavailable.

[0224] Optionally, the above response message may also carry a new public-private key pair additionally generated by AMF for use in subsequent resource configuration processes to improve the security of resource configuration.

[0225] S407, when the semantic library is available, the AMF sends a resource configuration instruction to the resource controller, where the resource configuration instruction is used to instruct resource reservation and resource instantiation configuration. Correspondingly, the resource controller receives the resource configuration instruction.

[0226] Optionally, the resource configuration indication may carry description information of computing resources and storage resources required for the above semantic communication.

[0227] S408: The resource controller performs resource reservation and resource instantiation configuration based on the resource configuration indication.

[0228] Optionally, the resource controller may select computing resources and storage resources and complete resource instantiation based on the computing power type, standard computing power measurement unit, latency requirements, storage capacity, etc. in the description information.

[0229] S409, the resource controller sends resource configuration information to the AMF, where the resource configuration information includes the identifier of the computing node and / or the identifier of the storage node. Correspondingly, the AMF receives the resource configuration information.

[0230] Exemplarily, the identifier of the computing node may be an Internet Protocol (IP) address of the computing node or a uniform resource identifier (URI) of the computing node, and the identifier of the storage node may be an IP address of the storage node or a URI of the storage node.

[0231] It should be understood that the above-mentioned computing nodes and storage nodes may correspond to the same physical device or to different physical devices, and the embodiments of the present application are not limited to this.

[0232] S410, terminal device 1 sends a key and a session identifier to AMF. Exemplarily, the session identifier may be an RPF flow ID.

[0233] It should be understood that in actual applications, the terminal device 1 may be performing semantic communication with multiple terminal devices at the same time, that is, there are multiple sessions, and different sessions have different session identifiers so that RPF can distinguish them.

[0234] S411, AMF sends resource configuration parameters to RPF, where the resource configuration parameters may include the identifier of the computing node, the identifier of the storage node, the identifier of the semantic library, the session identifier, the key of the terminal device 1, etc. Correspondingly, RPF receives the resource configuration parameters.

[0235] S412, RPF connects to the network interface of the configured resource instance based on the identifier of the computing node and the identifier of the storage node, and initializes the TEE of the computing node and the storage node in the resource pool using the key of terminal device 1.

[0236] It should be understood that this step is completed by the interaction between the RPF and the computing nodes and storage nodes, and the computing nodes and storage nodes are not shown in the figure.

[0237] S413, RPF sends a notification message to AMF to notify the resource configuration status. Correspondingly, AMF receives the notification message.

[0238] Specifically, if the resource configuration is completed, the notification message is used to notify that the resource configuration is in place; if a resource configuration failure occurs, the notification message is used to notify the failure type.

[0239] S414, the RPF sends a data request to the terminal device 1 for requesting the transmission of semantic data, wherein the data request includes a session identifier and an identifier of the semantic library. Correspondingly, the terminal device 1 receives the data request.

[0240] S415, based on the data request, the terminal device 1 sends a data stream of semantic communication to the RPF, the data stream being encrypted using the key of the terminal device 1 and including the session identifier. Correspondingly, the RPF receives the data stream.

[0241] It should be understood that the above data stream can also be referred to as the source data of the terminal device 1.

[0242] Optionally, the above data stream also includes parameters for task segmentation, such as the capability description of the terminal device 1 and the task requirements of this semantic communication (such as latency requirements, QoS requirements, etc.).

[0243] Optionally, in the above S415, the terminal device 1 can send the data stream to the RPF in the form of streaming. The main advantage of streaming transmission is that the RPF can view or listen to the received data without waiting for the download to be completed. On the one hand, it does not require a large amount of storage space, which can save the memory of the RPF. On the other hand, the RPF can download while processing, which saves the waiting time of the RPF.

[0244] S416, RPF performs semantic extraction on the received data stream to obtain semantic key information.

[0245] Specifically, RPF can perform semantic extraction processing (including processing based on feature streams, objects, task segmentation, etc.) on the above data streams on instantiated resources (including computing resources and storage resources) to obtain semantic key information. It should be understood that the above semantic extraction can also be called semantic compression.

[0246] It should also be understood that before executing S416, RPF has already obtained the semantic library (not shown in the figure) for semantic communication between terminal device 1 and terminal device 2 from the semantic library storage device, and based on the semantic library, RPF performs semantic extraction on the data stream.

[0247] The RPF may send the semantic key information to the UFP, or may send the semantic key information to the terminal device 1, and the terminal device 1 may then send the semantic key information to the UFP, which is not limited in this embodiment of the present application.

[0248] Mode 1, S417, RPF sends the semantic key information and the above session identifier to UFP. Correspondingly, UPF receives the semantic key information and the session identifier.

[0249] Mode 2, S418, RPF sends a semantic extraction response to terminal device 1, the semantic extraction response carries the semantic key information and the above session identifier. Correspondingly, terminal device 1 receives the semantic extraction response. S419, terminal device 1 sends the above semantic key information and session identifier to UFP.

[0250] In a possible implementation, RPF performs all semantic extraction operations in S416, and can execute method 1 or method 2, and the semantic key information in S417 is the same as the semantic key information in S419.

[0251] In another possible implementation, RPF performs a partial semantic extraction operation in S416, and RPF can send the semantic key information to terminal device 1, which then performs another partial semantic extraction operation, and then terminal device 1 sends the semantic key information to UPF. In this case, the semantic key information in S417 is not exactly the same as the semantic key information in S419.

[0252] Optionally, an integrity check of the semantic key information may be added, for example, a check bit or a hash value may be carried in the semantic key information so that the receiving end of the information (eg, the above-mentioned UPF or terminal device 1) can verify the integrity of the semantic key information.

[0253] After obtaining the semantic key information, the UPF can send the semantic key information to the terminal device 2 (or the network side device corresponding to the terminal device 2) according to the session identifier therein.

[0254] Optionally, the method 400 may further include the following steps:

[0255] S420, the terminal device 1 sends an end notification to the RPF to notify the end of the current semantic processing flow; correspondingly, the RPF receives the end notification.

[0256] S421, the RPF sends a resource release notification to the resource controller based on the above end notification; correspondingly, the resource controller receives the resource release notification to release related computing resources and storage resources.

[0257] It should be understood that the end of the semantic processing flow means the end of this semantic session, that is, there will be no more data streams with the same session identifier from terminal device 1. The way in which terminal device 1 sends an end notification can release relevant resources earlier so that relevant resources can be used for other communications, which is conducive to improving resource utilization.

[0258] Optionally, the above S420 and S421 can be replaced by another possible implementation, in which if RPF does not receive the data stream from terminal device 1 for a long time, RPF can send a resource release notification to the resource controller to notify the resource controller to release the relevant computing resources and storage resources. Exemplarily, RPF can start a timer when receiving the data stream from terminal device 1. If the timer times out and RPF does not receive the next data stream from terminal device 1, RPF can consider that the current semantic processing flow is over and send a resource release notification to the resource controller.

[0259] The semantic communication method of the embodiment of the present application introduces the reasoning plane functional network element to provide the required computing resources and storage resources for the communicating parties of the semantic communication in a trusted privacy protection manner, thereby protecting the user's content from being processed in the TEE, thereby ensuring the user's privacy on the basis of ensuring the normal progress of the semantic communication, thereby improving the system security and improving the user experience.

[0260] Combined with the above Figure 4 The method 400 shown in the figure introduces the process of requesting resources when the terminal device 1 and the terminal device 2 perform semantic communication. Figure 5The process of computing and storing resource key distribution when semantic communication is performed between terminal device 1 and terminal device 2 is introduced.

[0261] Figure 5 A schematic flow chart of another semantic communication method 500 provided in an embodiment of the present application is shown. The method 500 includes:

[0262] S501, terminal device 1 establishes an RRC connection and a PDU session with the network side. At this time, terminal device 1 is connected to the user plane of the currently active access network.

[0263] S502, the terminal device 1 generates a public-private key pair (Kp, Ks) for semantic communication.

[0264] S503, the terminal device 1 sends a resource configuration request to the AMF, where the resource configuration request is used to request configuration of computing resources and storage resources for semantic communication. Correspondingly, the AMF receives the resource configuration request.

[0265] The resource configuration request carries the public key Kp and task description information, wherein the task description information may include the semantic communication type, the computing resources and storage resource description information required for semantic communication, the identification of terminal device 1 and the identification of terminal device 2, etc., which is not limited in the present embodiment of the application.

[0266] S504, the AMF sends a query request to the semantic database storage device based on the resource configuration request, and the query request is used to request to query the semantic database used by the terminal device 1 and the terminal device 2. Correspondingly, the semantic database storage device receives the query request.

[0267] S505: The semantic database storage device obtains the identifier of the semantic database based on the query request, and sends a query response to the AMF, where the query response carries the identifier of the semantic database. Correspondingly, the AMF receives the query response.

[0268] S506: AMF determines whether the above semantic library is available.

[0269] S507, AMF sends a response message to terminal device 1, where the response message is used to indicate the status of the semantic library requested by terminal device 1 (ie, available or unavailable).

[0270] S508, when the semantic library is available, the AMF sends a resource configuration instruction to the resource controller, the resource configuration instruction performs resource reservation and instantiation configuration. Correspondingly, the resource controller receives the resource configuration instruction.

[0271] S509: The resource controller performs resource reservation and resource instantiation configuration based on the resource configuration indication.

[0272] S510, the resource controller sends resource configuration information to the AMF, where the resource configuration information includes an identifier of a computing node and an identifier of a storage node. Correspondingly, the AMF receives the resource configuration information.

[0273] The specific details of the above S501 to S510 can refer to the description of S401 to S409 in the above method 400, which will not be repeated here.

[0274] S511, when the semantic library is available, the terminal device 1 generates multiple public-private key pairs (PK, SK).

[0275] Optionally, the number of public-private key pairs generated by the terminal device 1 may be determined based on the resource category or the number of resources required for semantic communication. Exemplarily, the terminal device 1 generates a public-private key pair for each resource category or each resource.

[0276] It should be understood that the above resource categories may specifically include, for example, computing resources, storage resources, or, for example, CPU, GPU, heterogeneous, etc.

[0277] In a possible implementation, one public-private key pair corresponds to one resource category, that is, in S511 , the terminal device 1 generates a public-private key pair for each resource category according to the resource category.

[0278] In another possible implementation, one public-private key pair corresponds to multiple resource categories, that is, in S511, the terminal device 1 generates a public-private key pair according to the number of resources or in other ways.

[0279] S512: Terminal device 1 encrypts the public key PK in the above multiple public-private key pairs with private key Ks according to resource categories, obtains multiple Ks(PK), and sends multiple Ks(PK) and resource categories corresponding to each Ks(PK) to AMF. Correspondingly, AMF receives multiple Ks(PK) and resource categories corresponding to each Ks(PK).

[0280] S513, AMF uses Kp to decrypt multiple Ks (PK), obtain multiple PKs, and determine the resource category corresponding to each PK.

[0281] S514: AMF establishes a connection with RPF.

[0282] S515, the AMF sends resource configuration parameters to the RPF, where the resource configuration parameters may include an identifier of a computing node, an identifier of a storage node, an identifier of a semantic library, multiple PKs and a resource category corresponding to each of the multiple PKs, etc. Correspondingly, the RPF receives the resource configuration parameters.

[0283] S516, RPF generates a public-private key pair (KpR, KsR) between itself and the resource controller, and based on the resource configuration parameters, determines the public key PK corresponding to each computing instance, as well as the computing node and storage node corresponding to each computing instance.

[0284] Optionally, one computing instance corresponds to one PK, that is, each computing instance corresponds to a different key, which can enhance the security of the system.

[0285] S517, RPF encrypts the above multiple PKs with the private key KsR to obtain multiple KsR(PK), and sends the multiple KsR(PK) and the computing instance identifier corresponding to each PK to the resource controller.

[0286] Optionally, the computing instance identifier may include an identifier of a computing node and an identifier of a storage node corresponding to the computing instance.

[0287] S518, the resource controller uses KpR to decrypt the above multiple KsR (PK) to obtain multiple PK.

[0288] S519, the resource controller sends each PK to its corresponding computing instance based on the computing instance identifier corresponding to each PK, and initializes the TEE of the corresponding computing instance with the PK.

[0289] It should be understood that the computing instance includes a computing node and a storage node. The resource controller sends each PK to its corresponding computing instance, which can be understood as the resource controller sends each PK to the computing node and storage node of its corresponding computing instance based on the identifier of the computing node and the identifier of the storage node of each computing instance.

[0290] S520, the resource controller sends a confirmation message to the RPF, which is used to notify the RPF that the computing instance has completed key injection (ie, TEE initialization has been completed). Correspondingly, the RPF receives the confirmation message.

[0291] The above confirmation message may carry the relevant configuration information of the computing instance, which is encrypted by KpR. After receiving the confirmation message, RPF may use KsR to decrypt and obtain the relevant configuration information of the computing instance. The relevant configuration information here may include the network address of the computing instance (i.e., the IP address or URI of the corresponding node), the identifier of the computing instance, the key injection status of the computing instance (i.e., the key injection of the corresponding node is successful or the key injection of the corresponding node fails), etc.

[0292] S521, the computing instance generates its own public and private key pair.

[0293] S522, the computing instance uses the public and private key pair generated above to perform two-way authentication with the terminal device 1, and obtains a session key for processing the data stream.

[0294] Optionally, the session key exchange message of the computing instance needs to be forwarded by RPF and AMF, and each forwarding segment needs to be encrypted by the public keys of both ends, that is, the message sent by terminal device 1 to AMF is encrypted by the public key of AMF, the message sent by AMF to terminal device 1 is encrypted by the public key of terminal device 1, the message sent by RPF to the computing instance is encrypted by the public key of the computing instance, and the message sent by the computing instance to RPF is encrypted by the public key of RPF. In general, the sending end uses the public key of the receiving end to encrypt the message to be sent, so that the receiving end can use its own private key to decrypt and obtain the specific message content.

[0295] It should be understood that the public key of the AMF and the public key of the terminal device 1 can be generated when the AMF and the terminal device 1 perform two-way authentication before the process is performed, or the public key of the terminal device 1 can be Kp generated in S502, which is not limited in this embodiment of the present application. The public key of the above-mentioned calculation instance can be generated in S521, and the public key of the above-mentioned RPF can be KpR generated in S516, or can be generated in other cases, which is not limited in this embodiment of the present application.

[0296] S523, the terminal device 1 encrypts the data stream with the session key and sends the encrypted data stream to the RPF. Correspondingly, the RPF receives the encrypted data stream.

[0297] Optionally, RPF can decrypt the encrypted data stream and perform subsequent semantic extraction processing on it. Exemplarily, the steps after S523 are the same as S416 to S421 in the above method 400, and will not be repeated here.

[0298] The semantic communication method of the embodiment of the present application can configure different public keys (i.e., the second public key) for initializing TEE for different computing instances, so that the trusted execution environment can be initialized in a more fine-grained manner, thereby enhancing the security of the system. The embodiment of the present application is more suitable for the configuration of computing resources and storage resources for user privacy protection.

[0299] It should be understood that the sequence numbers of the above processes do not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0300] Combined with the above Figures 1 to 5 , describes in detail the semantic communication method according to the embodiment of the present application, and will now be combined with Figures 6 to 8 , describe in detail the semantic communication device of an embodiment of the present application.

[0301] Figure 6The semantic communication device 600 provided in the embodiment of the present application is shown. The device 600 includes: a sending unit 610 and a receiving unit 620.

[0302] In a possible design, the apparatus 600 may be a first terminal device, or may be a chip in the first terminal device.

[0303] Among them, the sending unit 610 is used to: send a resource configuration request to the access mobility management function network element, and the resource configuration request is used to request configuration of semantic communication resources between the first terminal device and the second terminal device; the receiving unit 620 is used to: receive a response message from the access mobility management function network element, and the response message is used to indicate whether the semantic library is available; the sending unit 610 is also used to: when the semantic library is available, send first information to the access mobility management function network element, and the first information carries a key required for configuring the computing environment and a session identifier between the first terminal device and the second terminal device.

[0304] Optionally, the receiving unit 620 is further used to: receive a data request from the reasoning plane functional network element, where the data request is used to request data transmission; and the sending unit 610 is further used to: send the encrypted data stream to the reasoning plane functional network element based on the data request.

[0305] Optionally, the data request carries the session identifier and an identifier of the semantic library, and the encrypted data stream carries the session identifier.

[0306] Optionally, the receiving unit 620 is further used to: receive the semantic key information and the session identifier from the reasoning plane functional network element; and the sending unit 610 is further used to: send the semantic key information and the session identifier to the user plane functional network element.

[0307] Optionally, the receiving unit 620 is further configured to: receive semantic restoration information and the session identifier from the reasoning plane functional network element.

[0308] Optionally, the sending unit 610 is further used to: send an end notification to the reasoning plane function network element, where the end notification is used to indicate that the semantic communication between the first terminal device and the second terminal device is ended.

[0309] Optionally, the resource configuration request carries at least one of the following: the type of semantic communication between the first terminal device and the second terminal device; descriptive information of computing resources and storage resources required for semantic communication between the first terminal device and the second terminal device; or, the identification of the first terminal device and the identification of the second terminal device.

[0310] Optionally, the resource configuration request carries the first public key of a first public-private key pair used for semantic communication; the first information carries multiple first ciphertexts and resource category information corresponding to the second public keys corresponding to the multiple first ciphertexts, and the multiple first ciphertexts are obtained by encrypting the multiple second public keys required for configuring the computing environment using the first private key of the first public-private key pair.

[0311] Optionally, the above-mentioned device 600 also includes: a processing unit, used to generate the first public-private key pair, the first public-private key pair including the first public key and the first private key; generate multiple second public-private key pairs, each second public-private key pair in the multiple second public-private key pairs includes the second public key and the second private key.

[0312] In another possible design, the device 600 may be an access mobility management function network element, or may be a chip in an access mobility management function network element.

[0313] Among them, the receiving unit 620 is used to: receive a resource configuration request from a first terminal device, the resource configuration request is used to request configuration of semantic communication resources between the first terminal device and the second terminal device; the sending unit 610 is used to: in response to the resource configuration request, send a resource configuration indication to the resource controller, the resource configuration indication is used to indicate resource reservation and resource instantiation configuration; the receiving unit 620 is also used to: receive resource configuration information from the resource controller, the resource configuration information is used to indicate configured resources; and receive first information from the first terminal device, the first information carries a key required for configuring a computing environment and a session identifier between the first terminal device and the second terminal device; the sending unit 610 is also used to: send second information to the reasoning plane functional network element, the second information includes the resource configuration information, the key required for configuring the computing environment and the session identifier.

[0314] Optionally, the resource configuration information includes identifiers of configured computing nodes and / or identifiers of storage nodes.

[0315] Optionally, the sending unit 610 is also used to: send a query request to the semantic library storage device, the query request is used to request a query on the semantic libraries of the first terminal device and the second terminal device; the receiving unit 620 is also used to: receive a query response from the semantic library storage device, the query response is used to indicate whether the semantic library is available; the sending unit 610 is also used to: send a response message to the first terminal device, the response message is used to indicate whether the semantic library is available.

[0316] Optionally, the sending unit 610 is further configured to: when the semantic library is available, send the resource configuration indication to the resource controller based on the resource configuration request.

[0317] Optionally, the resource configuration request carries the first public key of a first public-private key pair used for semantic communication; the first information carries multiple first ciphertexts and resource category information corresponding to the second public keys corresponding to the multiple first ciphertexts, and the multiple first ciphertexts are obtained by encrypting the multiple second public keys required for configuring the computing environment respectively using the first private key of the first public-private key pair; the second information carries the multiple second public keys and resource category information corresponding to the multiple second public keys; the above-mentioned device 600 also includes: a processing unit, used to use the first public key to decrypt the multiple first ciphertexts respectively to obtain the multiple second public keys.

[0318] It should be understood that the device 600 here is embodied in the form of a functional unit. The term "unit" here may refer to an application specific integrated circuit (ASIC), an electronic circuit, a processor (such as a shared processor, a dedicated processor or a group processor, etc.) and a memory for executing one or more software or firmware programs, a merged logic circuit and / or other suitable components that support the described functions. In an optional example, those skilled in the art may understand that the device 600 may be specifically the first terminal device or the access mobility management function network element in the above-mentioned embodiment, and the device 600 may be used to execute the various processes and / or steps corresponding to the first terminal device or the access mobility management function network element in the above-mentioned method embodiment. To avoid repetition, it will not be repeated here.

[0319] The device 600 of each of the above schemes has the function of implementing the corresponding steps performed by the first terminal device or the access mobility management function network element in the above method; the function can be implemented by hardware, or by hardware executing the corresponding software implementation. The hardware or software includes one or more modules corresponding to the above functions. For example, the above sending unit 610 and receiving unit 620 can be combined to be referred to as a transceiver unit. The sending unit can be replaced by a transmitter, and the receiving unit can be replaced by a receiver, respectively performing the transceiver operations and related processing operations in each method embodiment.

[0320] In the embodiments of the present application, Figure 6 The device 600 in the embodiment may also be a chip or a chip system, such as a system on chip (SoC). Correspondingly, the sending unit 610 and the receiving unit 620 may be the transceiver circuits of the chip, which is not limited here.

[0321] Figure 7Another semantic communication device 700 provided in an embodiment of the present application is shown. The device 700 includes: a transceiver unit 710 and a processing unit 720 .

[0322] In a possible design, the device 600 may be a reasoning plane functional network element, or may be a chip in the reasoning plane functional network element.

[0323] Among them, the transceiver unit 710 is used to: receive second information from the access mobility management function network element, the second information includes resource configuration information for semantic communication between the first terminal device and the second terminal device, the key required for configuring the computing environment and the session identifier between the first terminal device and the second terminal device, and the resource configuration information is used to indicate the resources that have been configured; the processing unit 720 is used to: based on the second information, use the key to initialize the trusted execution environment TEE of the computing node and / or storage node.

[0324] Optionally, the resource configuration information includes identifiers of configured computing nodes and / or identifiers of storage nodes.

[0325] Optionally, the second information carries multiple second public keys and resource category information corresponding to the multiple second public keys; the processing unit 720 is specifically used to: determine, based on the second information, the computing instance corresponding to each second public key in the multiple second public keys, and the computing node and / or storage node corresponding to the computing instance; the transceiver unit 710 is also used to: send third information to the resource controller, the third information including information used to indicate the multiple second public keys and computing instance information corresponding to each second public key, the computing instance information including the identifier of the computing node and / or the identifier of the storage node.

[0326] Optionally, the information indicating the multiple second public keys is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in a third public-private key pair.

[0327] Optionally, the processing unit 720 is further used to: generate the third public-private key pair, the third public-private key pair including a third public key and the third private key; the transceiver unit 710 is further used to: send the third public key to the resource controller.

[0328] Optionally, the transceiver unit 710 is further used to: receive a confirmation message from the resource controller, where the confirmation message is used to indicate that TEE initialization is completed.

[0329] Optionally, the transceiver unit 710 is also used to: send a data request to the first terminal device, the data request is used to request data transmission; receive an encrypted data stream from the first terminal device; the processing unit 720 is also used to: use the semantic library of the first terminal device and the second terminal device to perform semantic extraction on the data stream to obtain semantic key information; the transceiver unit 710 is also used to: send the semantic key information and the session identifier to the user plane functional network element.

[0330] Optionally, the transceiver unit 710 is also used to: receive semantic key information and the session identifier from the user plane functional network element; the processing unit 720 is also used to: use the semantic library of the first terminal device and the second terminal device to semantically restore the semantic key information to obtain semantic restoration information; the transceiver unit 710 is also used to: send the semantic restoration information and the session identifier to the first terminal device.

[0331] Optionally, the transceiver unit 710 is further used to: receive an end notification from the first terminal device, the end notification being used to indicate the end of semantic communication between the first terminal device and the second terminal device; and send a resource release notification to the resource controller.

[0332] In another possible design, the device 600 may be a resource controller or a chip in the resource controller.

[0333] Among them, the transceiver unit 710 is used to: receive a resource configuration indication from an access mobility management function network element, where the resource configuration indication is used to indicate resource reservation and resource instantiation configuration; the processing unit 720 is used to: perform resource reservation and resource instantiation configuration based on the resource configuration indication; the transceiver unit 710 is also used to: send resource configuration information to the access mobility management function network element, where the resource configuration information is used to indicate the resources that have been configured.

[0334] Optionally, the transceiver unit 710 is also used to: receive third information from the reasoning plane functional network element, the third information including information indicating multiple second public keys required to configure the computing environment and computing instance information corresponding to each second public key in the multiple second public keys, the computing instance information including the identifier of the computing node and / or the identifier of the storage node; the processing unit 720 is also used to: based on the third information, initialize the trusted execution environment TEE of the computing node and / or the storage node using the multiple second public keys.

[0335] Optionally, the information used to indicate multiple second public keys required to configure the computing environment is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in the third public-private key pair; the transceiver unit 710 is also used to: receive the third public key from the reasoning plane functional network element; the processing unit 720 is also used to: use the third public key to decrypt the multiple third ciphertexts respectively to obtain the multiple second public keys.

[0336] Optionally, the transceiver unit 710 is further configured to: receive a resource release notification from a reasoning plane functional network element; and the processing unit 720 is further configured to: release resources based on the resource release notification.

[0337] It should be understood that the device 700 here is embodied in the form of a functional unit. The term "unit" here may refer to an application specific integrated circuit (ASIC), an electronic circuit, a processor (such as a shared processor, a dedicated processor or a group processor, etc.) and a memory for executing one or more software or firmware programs, a merged logic circuit and / or other suitable components that support the described functions. In an optional example, those skilled in the art may understand that the device 700 may specifically be the reasoning surface functional network element or resource controller in the above-mentioned embodiment, and the device 700 may be used to execute the various processes and / or steps corresponding to the reasoning surface functional network element or resource controller in the above-mentioned method embodiment. To avoid repetition, it will not be repeated here.

[0338] The device 700 of each of the above-mentioned schemes has the function of implementing the corresponding steps executed by the reasoning surface functional network element or resource controller in the above-mentioned method; the function can be implemented by hardware, or by hardware executing the corresponding software implementation. The hardware or software includes one or more modules corresponding to the above-mentioned functions. For example, the above-mentioned transceiver unit 710 may include a sending unit and a receiving unit, the sending unit can be used to implement the various steps and / or processes for performing the sending action corresponding to the above-mentioned transceiver unit, and the receiving unit can be used to implement the various steps and / or processes for performing the receiving action corresponding to the above-mentioned transceiver unit. The sending unit can be replaced by a transmitter, and the receiving unit can be replaced by a receiver, respectively performing the sending and receiving operations and related processing operations in each method embodiment.

[0339] In the embodiments of the present application, Figure 7 The device 700 in the embodiment may also be a chip or a chip system, such as a system on chip (SoC). Correspondingly, the transceiver unit 710 may be a transceiver circuit of the chip, which is not limited here.

[0340] Figure 8Another communication device 800 provided by an embodiment of the present application is shown. The device 800 includes a processor 810, a transceiver 820, and a memory 830. The processor 810, the transceiver 820, and the memory 830 communicate with each other through an internal connection path, the memory 830 is used to store instructions, and the processor 810 is used to execute the instructions stored in the memory 830 to control the transceiver 820 to send signals and / or receive signals.

[0341] It should be understood that the device 800 can be specifically the first terminal device, access mobility management function network element, reasoning plane function network element or resource controller in the above embodiment, and can be used to execute the various steps and / or processes corresponding to the first terminal device, access mobility management function network element, reasoning plane function network element or resource controller in the above method embodiment. Optionally, the memory 830 may include a read-only memory and a random access memory, and provide instructions and data to the processor. A part of the memory may also include a non-volatile random access memory. For example, the memory may also store information about the device type. The processor 810 may be used to execute instructions stored in the memory, and when the processor 810 executes the instructions stored in the memory, the processor 810 is used to execute the various steps and / or processes of the above method embodiments corresponding to the first terminal device, access mobility management function network element, reasoning plane function network element or resource controller. The transceiver 820 may include a transmitter and a receiver, the transmitter may be used to implement the various steps and / or processes corresponding to the above transceiver for performing the sending action, and the receiver may be used to implement the various steps and / or processes corresponding to the above transceiver for performing the receiving action.

[0342] It should be understood that in the embodiments of the present application, the processor of the above-mentioned device may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0343] In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in a processor or an instruction in the form of software. The steps of the method disclosed in conjunction with the embodiment of the present application can be directly embodied as a hardware processor for execution, or a combination of hardware and software units in a processor for execution. The software unit can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in a memory, and the processor executes the instructions in the memory, and completes the steps of the above method in conjunction with its hardware. To avoid repetition, it is not described in detail here.

[0344] The present application also provides a semantic communication system, comprising one or more of the above-mentioned first terminal device, access mobility management function network element, reasoning plane function network element and resource controller.

[0345] The present application also provides a computer-readable storage medium, which is used to store a computer program, and the computer program is used to implement the method corresponding to the first terminal device, the access mobility management function network element, the reasoning plane function network element or the resource controller in the above-mentioned embodiment.

[0346] The present application also provides a computer program product, which includes a computer program (also referred to as code, or instructions). When the computer program runs on a computer, the computer can execute the method corresponding to the first terminal device, access mobility management function network element, reasoning plane function network element or resource controller shown in the above embodiment.

[0347] Those of ordinary skill in the art will appreciate that the various method steps and units described in the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the steps and components of each embodiment have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Those of ordinary skill in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0348] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0349] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, or it can be an electrical, mechanical or other form of connection.

[0350] The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the embodiments of the present application.

[0351] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0352] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk and other media that can store program code.

[0353] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and these modifications or replacements should be included in the protection scope of the present application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims.

Claims

1. A semantic communication method, characterized in that: Applied to a first terminal device, the method includes: Sending a resource configuration request to an access mobility management function network element, wherein the resource configuration request is used to request configuration of semantic communication resources between the first terminal device and the second terminal device; receiving a response message from the access mobility management function network element, wherein the response message is used to indicate whether the semantic library is available; When the semantic library is available, first information is sent to the access mobility management function network element, where the first information carries a key required for configuring a computing environment and a session identifier between the first terminal device and the second terminal device.

2. The method according to claim 1, characterized in that The method further comprises: receiving a data request from a reasoning plane functional network element, wherein the data request is used to request data transmission; Based on the data request, the encrypted data stream is sent to the reasoning plane functional network element.

3. The method according to claim 2, characterized in that The data request carries the session identifier and the identifier of the semantic library, and the encrypted data stream carries the session identifier.

4. The method according to claim 2 or 3, characterized in that: The method further comprises: Receiving semantic key information and the session identifier from the reasoning plane functional network element; The semantic key information and the session identifier are sent to a user plane functional network element.

5. The method according to claim 1, characterized in that The method further comprises: Receive semantic restoration information and the session identifier from the reasoning plane functional network element.

6. The method according to any one of claims 1 to 5, characterized in that The method further comprises: An end notification is sent to the reasoning plane function network element, where the end notification is used to indicate the end of the semantic communication between the first terminal device and the second terminal device.

7. The method according to any one of claims 1 to 6, characterized in that The resource configuration request carries at least one of the following: The semantic communication type between the first terminal device and the second terminal device; or Description information of computing resources and storage resources required for semantic communication between the first terminal device and the second terminal device; or, The identifier of the first terminal device and the identifier of the second terminal device.

8. The method according to any one of claims 1 to 7, characterized in that The resource configuration request carries a first public key in a first public-private key pair used for semantic communication; The first information carries multiple first ciphertexts and resource category information corresponding to the second public keys corresponding to the multiple first ciphertexts, and the multiple first ciphertexts are obtained by encrypting multiple second public keys required for configuring the computing environment using the first private key in the first public-private key pair.

9. The method according to claim 8, characterized in that The method further comprises: Generate the first public-private key pair, the first public-private key pair including the first public key and the first private key; A plurality of second public-private key pairs are generated, each of the plurality of second public-private key pairs comprising the second public key and a second private key.

10. A semantic communication method, characterized in that: Applied to accessing a mobile management function network element, the method comprises: Receiving a resource configuration request from a first terminal device, wherein the resource configuration request is used to request configuration of semantic communication resources between the first terminal device and a second terminal device; In response to the resource configuration request, sending a resource configuration indication to a resource controller, wherein the resource configuration indication is used to instruct resource reservation and resource instantiation configuration; Receiving resource configuration information from the resource controller, wherein the resource configuration information is used to indicate the resources that have been configured; receiving first information from the first terminal device, where the first information carries a key required for configuring a computing environment and a session identifier between the first terminal device and the second terminal device; Sending second information to the reasoning plane function network element, where the second information includes the resource configuration information, the key required for configuring the computing environment, and the session identifier.

11. The method according to claim 10, characterized in that The resource configuration information includes identifiers of configured computing nodes and / or storage nodes.

12. The method according to claim 10 or 11, characterized in that: The method further comprises: Sending a query request to a semantic library storage device, wherein the query request is used to request querying the semantic libraries of the first terminal device and the second terminal device; receiving a query response from the semantic repository storage device, the query response being used to indicate whether the semantic repository is available; A response message is sent to the first terminal device, where the response message is used to indicate whether the semantic library is available.

13. The method according to claim 12, characterized in that The sending of a resource configuration instruction to a resource controller in response to the resource configuration request comprises: In the case where the semantic library is available, the resource configuration indication is sent to the resource controller based on the resource configuration request.

14. The method according to any one of claims 10 to 13, characterized in that The resource configuration request carries a first public key in a first public-private key pair used for semantic communication; The first information carries a plurality of first ciphertexts and resource category information corresponding to second public keys corresponding to the plurality of first ciphertexts, wherein the plurality of first ciphertexts are obtained by respectively encrypting a plurality of second public keys required for configuring a computing environment using the first private key in the first public-private key pair; The second information carries the multiple second public keys and resource category information corresponding to the multiple second public keys; The method further comprises: The first public key is used to decrypt the multiple first ciphertexts respectively to obtain the multiple second public keys.

15. A semantic communication method, characterized in that: Applied to the reasoning plane functional network element, the method includes: receiving second information from an access mobility management function network element, the second information including resource configuration information for semantic communication between the first terminal device and the second terminal device, a key required for configuring a computing environment, and a session identifier between the first terminal device and the second terminal device, the resource configuration information being used to indicate a resource that has been configured; Based on the second information, the trusted execution environment TEE of the computing node and / or storage node is initialized using the key.

16. The method according to claim 15, characterized in that The resource configuration information includes identifiers of configured computing nodes and / or storage nodes.

17. The method according to claim 15 or 16, characterized in that The second information carries multiple second public keys and resource category information corresponding to the multiple second public keys; Initializing a trusted execution environment TEE of a computing node and / or a storage node using the key based on the second information includes: Based on the second information, determine a computing instance corresponding to each second public key in a plurality of second public keys, and a computing node and / or a storage node corresponding to the computing instance; Sending third information to the resource controller, the third information including information indicating the multiple second public keys and computing instance information corresponding to each second public key, the computing instance information including an identifier of a computing node and / or an identifier of a storage node.

18. The method according to claim 17, characterized in that The information indicating the multiple second public keys is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in the third public-private key pair.

19. The method according to claim 18, characterized in that The method further comprises: Generate the third public-private key pair, wherein the third public-private key pair includes a third public key and the third private key; The third public key is sent to the resource controller.

20. The method according to any one of claims 17 to 19, characterized in that The method further comprises: A confirmation message is received from the resource controller, where the confirmation message is used to indicate that TEE initialization has been completed.

21. The method according to any one of claims 15 to 20, characterized in that The method further comprises: Sending a data request to the first terminal device, where the data request is used to request data transmission; receiving an encrypted data stream from the first terminal device; Using the semantic libraries of the first terminal device and the second terminal device, semantic extraction is performed on the data stream to obtain semantic key information; The semantic key information and the session identifier are sent to a user plane functional network element.

22. The method according to any one of claims 15 to 20, characterized in that The method further comprises: Receiving semantic key information and the session identifier from a user plane functional network element; Using the semantic libraries of the first terminal device and the second terminal device, semantically restore the semantic key information to obtain semantically restored information; The semantic restoration information and the session identifier are sent to the first terminal device.

23. The method according to any one of claims 15 to 22, characterized in that The method further comprises: receiving an end notification from the first terminal device, where the end notification is used to indicate that semantic communication between the first terminal device and the second terminal device is ended; Send resource release notification to resource controller.

24. A semantic communication method, characterized in that: Applied to a resource controller, the method comprises: receiving a resource configuration indication from an access mobility management function network element, where the resource configuration indication is used to instruct resource reservation and resource instantiation configuration; Based on the resource configuration indication, perform resource reservation and resource instantiation configuration; Send resource configuration information to the access mobility management function network element, where the resource configuration information is used to indicate the resources that have been configured.

25. The method according to claim 24, characterized in that The method further comprises: receiving third information from the reasoning plane function network element, the third information including information indicating multiple second public keys required to configure the computing environment and computing instance information corresponding to each second public key in the multiple second public keys, the computing instance information including an identifier of a computing node and / or an identifier of a storage node; Based on the third information, the trusted execution environment TEE of the computing node and / or the storage node is initialized using the multiple second public keys.

26. The method according to claim 25, characterized in that The information for indicating the multiple second public keys required for configuring the computing environment is multiple third ciphertexts, and the multiple third ciphertexts are obtained by encrypting the multiple second public keys respectively using the third private key in the third public-private key pair; The method further comprises: Receiving a third public key from the reasoning plane function network element; The third public key is used to decrypt the multiple third ciphertexts respectively to obtain the multiple second public keys.

27. The method according to any one of claims 24 to 26, characterized in that The method further comprises: Receive resource release notification from the reasoning plane functional network element; Based on the resource release notification, resources are released.

28. A semantic communication device, characterized in that: include: A unit for implementing the method according to any one of claims 1 to 27.

29. A semantic communication device, characterized in that: include: A processor, wherein the processor is coupled to a memory, wherein the memory is used to store a computer program, and when the processor calls the computer program, the device executes the method according to any one of claims 1 to 27.

30. A computer-readable storage medium, characterized in that: Used to store a computer program, the computer program comprising instructions for implementing the method according to any one of claims 1 to 27.

31. A computer program product, comprising instructions, characterized in that: When the instructions are executed on a computer, the computer is caused to implement the method according to any one of claims 1 to 27.

Images