Auxiliary terminal and method for performing communication service with southbound equipment, court terminal and master station

Abstract

The invention provides an auxiliary terminal and method for carrying out communication service with southbound equipment, a transformer area terminal and a master station, belongs to the technical field of Internet of Things, and is used for ensuring the reliability of data acquisition and transmission through the auxiliary terminal. The method is applied to an environment Internet of Things (A-IoT) scene, in the A-IoT scene, the method is executed by an auxiliary terminal, the auxiliary terminal supports the function of a reader, a southbound device is an A-IoT device, a transformer area terminal is a terminal supporting the function of the reader, and the method comprises the steps that the auxiliary terminal determines a read command # 1 by interacting with the transformer area terminal, the address indicated by the read command # 1 is at least part of the address indicated by the read command # 2, the read command # 2 is provided by the master station, and the read command # 2 needs to be sent to the southbound equipment by the station area terminal; the auxiliary terminal sends a read command # 1 to the southbound equipment and receives data # 1 which is returned by the southbound equipment and read by the southbound equipment according to the read command # 1, and the data # 1 is data collected by the southbound equipment; the auxiliary terminal transmits data # 1 to the master station.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to an auxiliary terminal and method for providing communication services with southbound equipment, a substation terminal and a master station. Background Art

[0002] Southbound devices, substation terminals and master stations are several important concepts in the field of the Internet of Things, and each of them has different functions and roles. Southbound devices: Southbound devices usually refer to intelligent devices on site, such as sensors, meters and other measurement and control devices. These devices are responsible for collecting data on site and transmitting these data to the upper system for processing and analysis. It is called "southbound" because in the system architecture diagram, these devices are usually located at the bottom of the system (equivalent to the south on the map). Substation terminal: The substation terminal is an intermediate layer device connecting the southbound device and the master station. It is mainly responsible for aggregating the data of the southbound devices and performing preliminary processing and aggregation. The substation terminal is also responsible for forwarding the aggregated data to the master station, and receiving and executing the commands and instructions issued by the master station. In the automation of the distribution network, the substation terminal plays a connecting role, ensuring that the data of the field equipment can be efficiently transmitted to the master station and executing the control strategy of the master station. Master station: The master station is the core control center in the automation of the entire system. It is responsible for collecting and managing data from various substation terminals and southbound devices, and conducting comprehensive analysis and decision-making. The master station can realize functions such as load management, fault detection and recovery, and optimized operation through data analysis and processing.

[0003] At present, the Internet of Things can be further developed into the ambient IoT (A-IoT) scenario. In the A-IoT scenario, the southbound device is the A-IoT device (also called the A-IoT terminal), and the substation terminal is also a terminal that supports the reader function, which can be understood as a reader. The master station can be a server, specifically an application function (AF), an application server (AS) or an ambient IoT / passive IoT application function (A-IoT / P-IoT AF) in the A-IoT scenario, and there is no restriction on the specific naming.

[0004] The devices in A-IoT scenarios are relatively lightweight, and how to ensure the reliability of data transmission is a current research issue. Summary of the invention

[0005] The embodiment of the present invention provides an auxiliary terminal and method for performing communication services with southbound equipment, a substation terminal, and a main station, so as to ensure the reliability of data collection and transmission through the auxiliary terminal.

[0006] In order to achieve the above object, the present invention adopts the following technical scheme: In a first aspect, a method for providing communication services with a southbound device, a substation terminal, and a main station is provided. The method is applied to an A-IoT scenario. In the A-IoT scenario, the method is executed by an auxiliary terminal, the auxiliary terminal supports a reader function, the southbound device is an A-IoT device, and the substation terminal is also a terminal supporting a reader function. The method includes: the auxiliary terminal determines a read command #1 by interacting with the substation terminal, the address indicated by the read command #1 is at least a part of the address indicated by the read command #2, the read command #2 is provided by the main station, and the read command #2 needs to be sent by the substation terminal to the southbound device; the auxiliary terminal sends a read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, wherein the data #1 is the data collected by the southbound device; the auxiliary terminal sends data #1 to the main station.

[0007] Optionally, the auxiliary terminal determines read command #1 by interacting with the station terminal, including: when the auxiliary terminal is discovered by the station terminal, the auxiliary terminal establishes a secure connection with the station terminal; the auxiliary terminal receives read command #2 from the station terminal through the secure connection; the auxiliary terminal determines read command #1 based on read command #2.

[0008] Optionally, when the auxiliary terminal is discovered by the substation terminal, the auxiliary terminal establishes a secure connection with the substation terminal, including: when read command #2 is a command with high reliability requirements, the auxiliary terminal receives a device discovery message from the substation terminal, the device discovery message is used to discover a new reader, the device discovery message indicates a designated area, and the designated area is the area where the southbound device is located; the auxiliary terminal covers the designated area according to its own service range, and sends a response to the device discovery message to the substation terminal, the response to the device discovery message indicates that the auxiliary terminal can serve the designated area; in response to the auxiliary terminal sending a response to the device discovery message to the substation terminal, the auxiliary terminal establishes a secure connection with the substation terminal.

[0009] Optionally, the address indicated by the read command #2 is a continuous address segment, and the auxiliary terminal determines the read command #1 based on the read command #2, including: the auxiliary terminal determines multiple non-continuous address segments from the continuous address segment; the auxiliary terminal determines the read command #1 based on the multiple non-continuous address segments, and the address indicated by the read command #1 is multiple non-continuous address segments.

[0010] Optionally, the method also includes: the auxiliary terminal receives address segmentation indication information from the station terminal through a secure connection, the address segmentation indication information indicates: when a continuous address segment is segmented, the number of segments between two adjacent non-continuous address segments; on this basis, the address length of a continuous address segment is K bytes, K is an integer greater than 3, and the auxiliary terminal determines multiple non-continuous address segments from a continuous address segment, including: the auxiliary terminal determines that the number of segments corresponding to K bytes is L based on the address length of a continuous address segment being K bytes, L is an integer greater than or equal to 3, and the corresponding relationship between the number of segments and the address length is a positive correlation; the auxiliary terminal segments a continuous address segment into L address segments based on the length of each segment being ⌈K / L⌉ bytes, ⌈ ⌉ represents rounding up; if the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is 1 segment, the auxiliary terminal determines the 1+2*kth address segment among the L address segments as one address segment, and obtains multiple non-continuous address segments, k is an integer traversed from 0, and 1+2*k is less than or equal to L; or, if the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is 2 segments, the auxiliary terminal determines the 1+3*kth address segment among the L address segments as one address segment, and obtains multiple non-continuous address segments, k is an integer traversed from 0, and 1+3*k is less than or equal to L; wherein, the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is related to the high reliability requirement level of the read command #2.

[0011] Optionally, the auxiliary terminal sends a read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, including: the auxiliary terminal sends a read command #1 and a security parameter to the southbound device; wherein the security parameter includes at least one item: a freshness parameter R1, or a freshness parameter R2, the freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, the freshness parameter R2 is a parameter randomly generated by the substation terminal, and the freshness parameter R2 is obtained by the auxiliary terminal from the substation terminal through a secure connection; the auxiliary terminal receives the encrypted ciphertext #1 of the data #1 returned by the southbound device, the ciphertext #1 is obtained by the southbound device encrypting the data #1 according to the security parameters; the auxiliary terminal sends data #1 to the main station, including: the auxiliary terminal decrypts the ciphertext #1 to obtain data #1; the auxiliary terminal encrypts the data #1 using a key synchronized between the auxiliary terminal and the main station to obtain ciphertext #2, and sends the ciphertext #2 to the main station.

[0012] Optionally, if the security parameter is the freshness parameter R2, the southbound device uses the session key #1 to encrypt the data #1 to obtain the ciphertext #1, where the session key #1 is obtained by deriving the preconfigured root key using the freshness parameter R2 provided in advance by the southbound device at the substation terminal; accordingly, the method also includes: the auxiliary terminal obtains the freshness parameter R2 from the substation terminal through a secure connection; the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: the auxiliary terminal uses the freshness parameter R2 to derive the preconfigured root key to obtain the session key #1, and uses the session key #1 to decrypt the ciphertext #1 to obtain the data #1.

[0013] Optionally, if at least one item of information is a freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to derive the root key to obtain session key #2, and uses session key #2 to encrypt data #1 to obtain ciphertext #1; accordingly, the auxiliary terminal decrypts ciphertext #1 to obtain data #1, including: the auxiliary terminal uses the freshness parameter R1 to derive the preconfigured root key to obtain session key #2, and uses session key #2 to decrypt ciphertext #1 to obtain data #1.

[0014] Optionally, if at least one item of information is a freshness parameter R1 and a freshness parameter R2, the southbound device uses the freshness parameter R1 and the freshness parameter R2 to derive the root key to obtain session key #3, and uses the session key #3 to encrypt data #1 to obtain ciphertext #1; accordingly, the method also includes: the auxiliary terminal obtains the freshness parameter R2 from the substation terminal through a secure connection; the auxiliary terminal decrypts the ciphertext #1 to obtain data #1, including: the auxiliary terminal uses the freshness parameter R1 and the freshness parameter R2 to derive the pre-configured root key to obtain session key #3, and uses the session key #3 to decrypt the ciphertext #1 to obtain data #1.

[0015] On the second aspect, an auxiliary terminal is provided for communication services with a southbound device, a substation terminal, and a main station, and is applied to an A-IoT scenario of the environmental Internet of Things. In the A-IoT scenario, the auxiliary terminal supports the function of a reader, the southbound device is an A-IoT device, and the substation terminal is also a terminal supporting the reader function. The auxiliary terminal is configured as follows: the auxiliary terminal determines read command #1 by interacting with the substation terminal, and the address indicated by read command #1 is at least part of the address indicated by read command #2. Read command #2 is provided by the main station, and read command #2 needs to be sent by the substation terminal to the southbound device; the auxiliary terminal sends read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to read command #1, where data #1 is data collected by the southbound device; the auxiliary terminal sends data #1 to the main station.

[0016] Optionally, the auxiliary terminal determines read command #1 by interacting with the station terminal, including: when the auxiliary terminal is discovered by the station terminal, the auxiliary terminal establishes a secure connection with the station terminal; the auxiliary terminal receives read command #2 from the station terminal through the secure connection; the auxiliary terminal determines read command #1 based on read command #2.

[0017] Optionally, when the auxiliary terminal is discovered by the substation terminal, the auxiliary terminal establishes a secure connection with the substation terminal, including: when read command #2 is a command with high reliability requirements, the auxiliary terminal receives a device discovery message from the substation terminal, the device discovery message is used to discover a new reader, the device discovery message indicates a designated area, and the designated area is the area where the southbound device is located; the auxiliary terminal covers the designated area according to its own service range, and sends a response to the device discovery message to the substation terminal, the response to the device discovery message indicates that the auxiliary terminal can serve the designated area; in response to the auxiliary terminal sending a response to the device discovery message to the substation terminal, the auxiliary terminal establishes a secure connection with the substation terminal.

[0018] Optionally, the address indicated by the read command #2 is a continuous address segment, and the auxiliary terminal determines the read command #1 based on the read command #2, including: the auxiliary terminal determines multiple non-continuous address segments from the continuous address segment; the auxiliary terminal determines the read command #1 based on the multiple non-continuous address segments, and the address indicated by the read command #1 is multiple non-continuous address segments.

[0019] Optionally, the auxiliary terminal is configured as follows: the auxiliary terminal receives address segmentation indication information from the substation terminal through a secure connection, the address segmentation indication information indicating: when a continuous address segment is segmented, the number of segments between two adjacent non-continuous address segments; on this basis, the address length of a continuous address segment is K bytes, K is an integer greater than 3, and the auxiliary terminal determines multiple non-continuous address segments from a continuous address segment, including: the auxiliary terminal determines that the number of segments corresponding to K bytes is L based on the address length of a continuous address segment being K bytes, L is an integer greater than or equal to 3, and the corresponding relationship between the number of segments and the address length is a positive correlation; the auxiliary terminal segments a continuous address segment into L address segments based on the length of each segment being ⌈K / L⌉ bytes, ⌈ ⌉ represents rounding up; if the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is 1 segment, the auxiliary terminal determines the 1+2*kth address segment among the L address segments as one address segment, and obtains multiple non-continuous address segments, k is an integer traversed from 0, and 1+2*k is less than or equal to L; or, if the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is 2 segments, the auxiliary terminal determines the 1+3*kth address segment among the L address segments as one address segment, and obtains multiple non-continuous address segments, k is an integer traversed from 0, and 1+3*k is less than or equal to L; wherein, the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is related to the high reliability requirement level of the read command #2.

[0020] Optionally, the auxiliary terminal sends a read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, including: the auxiliary terminal sends a read command #1 and a security parameter to the southbound device; wherein the security parameter includes at least one item: a freshness parameter R1, or a freshness parameter R2, the freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, the freshness parameter R2 is a parameter randomly generated by the substation terminal, and the freshness parameter R2 is obtained by the auxiliary terminal from the substation terminal through a secure connection; the auxiliary terminal receives the encrypted ciphertext #1 of the data #1 returned by the southbound device, the ciphertext #1 is obtained by the southbound device encrypting the data #1 according to the security parameters; the auxiliary terminal sends data #1 to the main station, including: the auxiliary terminal decrypts the ciphertext #1 to obtain data #1; the auxiliary terminal encrypts the data #1 using a key synchronized between the auxiliary terminal and the main station to obtain ciphertext #2, and sends the ciphertext #2 to the main station.

[0021] Optionally, if the security parameter is the freshness parameter R2, the southbound device uses the session key #1 to encrypt the data #1 to obtain the ciphertext #1, where the session key #1 is derived from the preconfigured root key by the southbound device using the freshness parameter R2 provided in advance by the substation terminal; accordingly, the auxiliary terminal is configured as follows: the auxiliary terminal obtains the freshness parameter R2 from the substation terminal through a secure connection; the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: the auxiliary terminal uses the freshness parameter R2 to derive the preconfigured root key to obtain the session key #1, and uses the session key #1 to decrypt the ciphertext #1 to obtain the data #1.

[0022] Optionally, if at least one item of information is a freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to derive the root key to obtain session key #2, and uses session key #2 to encrypt data #1 to obtain ciphertext #1; accordingly, the auxiliary terminal decrypts ciphertext #1 to obtain data #1, including: the auxiliary terminal uses the freshness parameter R1 to derive the preconfigured root key to obtain session key #2, and uses session key #2 to decrypt ciphertext #1 to obtain data #1.

[0023] Optionally, if at least one item of information is a freshness parameter R1 and a freshness parameter R2, the southbound device uses the freshness parameter R1 and the freshness parameter R2 to derive the root key to obtain session key #3, and uses the session key #3 to encrypt data #1 to obtain ciphertext #1; accordingly, the auxiliary terminal is configured as follows: the auxiliary terminal obtains the freshness parameter R2 from the substation terminal through a secure connection; the auxiliary terminal decrypts the ciphertext #1 to obtain data #1, including: the auxiliary terminal uses the freshness parameter R1 and the freshness parameter R2 to derive the pre-configured root key to obtain session key #3, and uses the session key #3 to decrypt the ciphertext #1 to obtain data #1.

[0024] In a third aspect, an electronic device is provided, comprising: a processor and a memory; the memory is used to store a computer program, and when the processor executes the computer program, the electronic device executes the method described in the first aspect.

[0025] In a possible design solution, the electronic device described in the third aspect may further include a transceiver. The transceiver may be a transceiver circuit or an interface circuit. The transceiver may be used for the electronic device described in the third aspect to communicate with other electronic devices.

[0026] In an embodiment of the present invention, the electronic device described in the third aspect may be a terminal, or a chip (system) or other parts or components that may be arranged in the terminal, or a system including the terminal.

[0027] In a fourth aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer is caused to execute the method described in the first aspect.

[0028] The substation terminal also needs to send a read command #2 and a freshness parameter R2 to the southbound device. For example, the substation terminal can first send a paging message carrying the mask of the southbound device. Afterwards, the substation terminal receives the RN16 sent by the southbound device to trigger random access. After the random access is successful, that is, after the EPC of the southbound device is obtained, the substation terminal sends a read command #1 and a freshness parameter R2 to the southbound device to obtain the ciphertext #3 reported by the southbound device. Ciphertext #3 is obtained by the southbound device using session key #1 to encrypt data #2. Data #2 is the data read from the local storage area by the southbound device according to the address indicated by read command #2. In this way, the substation terminal also decrypts ciphertext #3 to obtain data #2. In addition, the substation terminal also uses the key synchronized between the substation terminal and the main station to encrypt data #2 to obtain ciphertext #4, and sends ciphertext #4 to the main station.

[0029] Therefore, due to the transmission performance limitations in the A-IoT scenario, data #2 and data #1 may be randomly partially lost during the transmission process due to interference, weak signals, unstable signals, etc. If the lost data in data #2 is transmitted by data #1, data #1 can be used to recover it to improve transmission reliability. In addition, because data loss is random, the address corresponding to data #2 needs to be segmented in the above manner, that is, the pseudo-randomness of the segmentation can match the randomness of packet loss, increasing the possibility that the lost data is carried in data #1. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 A schematic diagram of the architecture of an Internet of Things system provided by an embodiment of the present invention; Figure 2 A flow chart of a method for providing communication services with southbound equipment, a substation terminal, and a master station provided in an embodiment of the present invention; Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0031] The technical solution of the present invention will be described below in conjunction with the accompanying drawings.

[0032] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0033] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0034] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0035] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. The one or more memories can be set separately or integrated in an encoder or decoder, a processor, or an electronic device. The one or more memories can also be partially set separately and partially integrated in a decoder, a processor, or an electronic device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0036] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol applied in future systems, and the embodiments of the present invention do not specifically limit this.

[0037] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0038] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present invention, in the embodiments of the present invention, the words "first" and "second" are used to distinguish the same or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0039] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0040] To facilitate understanding of the embodiments of the present invention, first Figure 1 Taking the Internet of Things system shown in as an example, Figure 1 A schematic diagram of the architecture of an Internet of Things system applicable to the method for providing communication services with southbound equipment, substation terminals, and a master station provided in an embodiment of the present invention.

[0041] like Figure 1 As shown, the Internet of Things system may include: southbound equipment, station terminals, auxiliary terminals and a master station.

[0042] The above-mentioned southbound equipment, station area terminal, and auxiliary terminal can all be terminal-shaped equipment, that is, terminals. The terminal can be a terminal with transceiver functions, or a chip or chip system that can be set in the terminal. The terminal can also be called user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent or user device. The terminal in the embodiments of the present application can be a mobile phone, a cellular phone, a smart phone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handheld device (handset), a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, a vehicle-mounted terminal, a road side unit (RSU) with terminal function, etc. The terminal of the present application may also be a vehicle-mounted module, a vehicle-mounted module, a vehicle-mounted component, a vehicle-mounted chip or a vehicle-mounted unit built into a vehicle as one or more components or units. Alternatively, the terminal may also be customer-premises equipment (CPE).

[0043] The IoT system can be applied to the ambient IoT (A-IoT) scenario, which is also called ambient power-enabled IoT or passive IoT (P-IoT). A-IoT can be applied to a variety of value scenarios. In the A-IoT scenario, the auxiliary terminal can support the function of the reader, and can also be understood as a reader (reader), such as reader #1, the southbound device is an A-IoT device (also called an A-IoT terminal), and the station terminal is also a terminal that supports the reader function, such as reader #2. The master station can be a server, specifically an application function (AF), an application server (AS) or an ambient IoT / passive IoT application function (A-IoT / P-IoT AF) in the A-IoT scenario, and there is no restriction on the specific naming.

[0044] Figure 2 A flow chart of a method provided by an embodiment of the present invention. The method for providing communication services with southbound equipment, a substation terminal, and a master station is applicable to the above-mentioned Internet of Things system, and involves the interaction between devices in the above-mentioned Internet of Things system. The specific process is as follows: S201, the auxiliary terminal determines the read command #1 by interacting with the station terminal.

[0045] The address indicated by the read command #1 is at least part of the address indicated by the read command #2. The read command #2 is provided by the master station, and the read command #2 needs to be sent by the station terminal to the southbound device.

[0046] For example, if the master station wants to read the data collected by the southbound device, or wants the southbound device to report the currently collected data, the master station can send instructions to the substation terminal through the network (such as a mobile communication network), and the substation terminal is connected to the mobile communication network. The instruction contains a specified area (such as the latitude and longitude information of the specified area, or the respective identifiers of one or more cells covered by the specified area), read command #2, and the high reliability requirement level of read command #2. Among them, the high reliability requirement level of read command #2 indicates that read command #2 is a command with high reliability requirements, that is, it is necessary to ensure that the data can be read reliably and avoid data packet loss or loss as much as possible. The higher the high reliability requirement level of read command #2, such as increasing in order from level 1, level 2, level 3, etc., it means that the reliability of the data required during the transmission process is also higher to determine the interval of subsequent segments. For details, please refer to the following. Therefore, the substation terminal can trigger the discovery of a new reader based on the high reliability requirement of read command #2.

[0047] Correspondingly, when the auxiliary terminal is discovered by the station terminal, the auxiliary terminal establishes a secure connection with the station terminal.

[0048] For example, when read command #2 is a command with high reliability requirements, the station terminal triggers the discovery of a new reader, such as sending a device discovery message, and accordingly, the auxiliary terminal receives the device discovery message from the station terminal. The device discovery message can be used to discover a new reader, such as the device discovery message indicating a specified area (such as including the latitude and longitude information of the specified area, or the respective identifications of one or more cells covered by the specified area), the specified area is the area where the southbound device is located, and the device discovery message can also include the identification of the station terminal. The auxiliary terminal can cover the specified area according to its own service range, and send a response to the device discovery message to the station terminal. The response to the device discovery message indicates that the auxiliary terminal can serve the specified area. Here, in response to the auxiliary terminal sending a response to the device discovery message to the station terminal, the auxiliary terminal establishes a secure connection with the station terminal, and the secure connection can be a sidewalk security link between the terminals, such as the auxiliary terminal and the station terminal can derive a key for sidewalk security communication, and configure the key to the auxiliary terminal and the station terminal for communication, that is, to achieve the establishment of a secure connection. For details, please refer to the relevant introduction of PC5 connection in the prior art, which will not be repeated here.

[0049] The station terminal can send a read command #2 to the auxiliary terminal through a secure connection, and the auxiliary terminal can receive a read command #2 from the station terminal through a secure connection.

[0050] The auxiliary terminal determines the read command #1 according to the read command #2. For example, the address indicated by the read command #2 is an address segment with continuous addresses, such as addr1 to addr2. The auxiliary terminal can determine multiple address segments with non-continuous addresses from the address segment with continuous addresses. Specifically, the auxiliary terminal can also receive address segmentation indication information from the station terminal through a secure connection, and the address segmentation indication information can indicate: when segmenting an address segment with continuous addresses, the number of segments spaced between two adjacent segments with non-continuous addresses. Assume that the address length of an address segment with continuous addresses is K bytes, such as addr2-addr1=K, K is an integer greater than 3, wherein the address segmentation indication information indicates that the number of segments spaced between two adjacent segments with non-continuous addresses is related to the high reliability requirement level of the read command #2, that is, the higher the high reliability requirement level is, the corresponding relationship is with the number of segments spaced, and in this corresponding relationship, the higher the high reliability requirement level is, the smaller the number of segments spaced correspondingly, and the minimum can be 1 segment spaced.

[0051] The auxiliary terminal can determine that the number of segments corresponding to K bytes is L according to the address length of a continuous address segment being K bytes, where L is an integer greater than or equal to 3, and the corresponding relationship between the number of segments and the address length is a positive correlation. For example, if K bytes belong to the interval of 1-50 bytes, the number of segments corresponding to the interval is L=3, if K bytes belong to the interval of 51-100 bytes, the number of segments corresponding to the interval is L=5, if K bytes belong to the interval of 101-150 bytes, the number of segments corresponding to the interval is L=7, etc. The auxiliary terminal segments a continuous address segment into L address segments according to the length of each segment being ⌈K / L⌉ bytes, where ⌈ ⌉ indicates rounding up. Among them, the length of the Lth address segment in the L address segments may be different from the length of the first L-1 address segments, such as K bytes = 100, L = 7, ⌈K / L⌉ = 15, the first 6 segments are 15 bytes each, and the 7th segment is 20 bytes. If the address segment indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 1 segment, the auxiliary terminal determines the 1+2*kth address segment in the L address segments as one address segment, and obtains multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+2*k is less than or equal to L; or, if the address segment indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 2 segments, the auxiliary terminal determines the 1+3*kth address segment in the L address segments as one address segment, and obtains multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+3*k is less than or equal to L.

[0052] For example, still taking K bytes = 100, L = 7, ⌈K / L⌉ = 15 as an example, if the number of interval segments is 1 segment, then the multiple address segments with non-continuous addresses can be the 1st, 3rd, 5th, and 7th segments; if the number of interval segments is 2 segments, then the multiple address segments with non-continuous addresses can be the 1st, 4th, and 6th segments.

[0053] Finally, the auxiliary terminal determines the read command #1 according to the multiple non-continuous address segments, and the address indicated by the read command #1 is the multiple non-continuous address segments.

[0054] S202, the auxiliary terminal sends a read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1.

[0055] S203, the auxiliary terminal sends data #1 to the main station.

[0056] In S202-S203: Data #1 may be data collected by the southbound device. For example, the data collected by the southbound device may be temperature data at different times, pressure data at different times, humidity data at different times, electric energy data at different times, current data at different times, voltage data at different times, power data at different times, device status data at different times, etc. The southbound device may store these data in a local storage area in chronological order. The address of the read command #1 is the address in the storage area, and the southbound device may read data #1 from the storage area according to the address.

[0057] S1: The auxiliary terminal may first send a read command #1 and security parameters to the southbound device.

[0058] For example, the auxiliary terminal can first send a paging message carrying the mask of the southbound device, and the mask is also obtained by the auxiliary terminal from the substation terminal through a secure connection. Afterwards, the auxiliary terminal receives the RN16 sent by the southbound device to trigger random access. After the random access is successful, that is, after the device identifier (EPC) of the southbound device is obtained, the auxiliary terminal sends a read command #1 and security parameters to the southbound device. Among them, the security parameters include at least one item: freshness parameter R1, or freshness parameter R2, freshness parameter R1 is a parameter randomly generated by the auxiliary terminal (such as a random number), freshness parameter R2 is a parameter randomly generated by the substation terminal (such as a random number), and freshness parameter R2 is obtained by the auxiliary terminal from the substation terminal through a secure connection.

[0059] S2: The auxiliary terminal receives the encrypted ciphertext #1 of the data #1 returned by the southbound device. The ciphertext #1 is obtained by encrypting the data #1 by the southbound device according to the security parameters.

[0060] S3: The auxiliary terminal decrypts the ciphertext #1 to obtain data #1. Also, the auxiliary terminal encrypts data #1 using the key synchronized between the auxiliary terminal and the main station to obtain ciphertext #2, and sends the ciphertext #2 to the main station.

[0061] For example, if the security parameter is the freshness parameter R2, the southbound device uses the session key #1 to encrypt the data #1 to obtain the ciphertext #1, and the session key #1 is obtained by the southbound device using the freshness parameter R2 provided by the substation terminal in advance to derive the preconfigured root key. It can be understood that the root key is a key that is pre-configured by the substation terminal, the southbound device, and the auxiliary terminal or pre-defined by the protocol. Correspondingly, the auxiliary terminal can also obtain the freshness parameter R2 from the substation terminal through a secure connection, such as the freshness parameter R2 can be transmitted together with the read command #2. On this basis, the auxiliary terminal uses the freshness parameter R2 to derive the pre-configured root key to obtain the session key #1, and uses the session key #1 to decrypt the ciphertext #1 to obtain the data #1. In this case, the communication between the southbound device and the auxiliary terminal can reuse the session key #1 used by the southbound device to communicate with the substation terminal. The southbound device can determine that there is no need to derive the key based on the received read command #1 and the freshness parameter R2, and reuse the session key #1 to reduce the overhead of the southbound device.

[0062] For another example, if at least one item of information is a freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to derive the root key to obtain session key #2, and uses session key #2 to encrypt data #1 to obtain ciphertext #1. Correspondingly, the auxiliary terminal uses the freshness parameter R1 to derive the preconfigured root key to obtain session key #2, and uses session key #2 to decrypt ciphertext #1 to obtain data #1. In this case, the southbound device can determine that key derivation is required based on the received read command #1 and the freshness parameter R1, and thereby derive session key #2, so that different devices can use different keys for communication, which is more secure.

[0063] For another example, if at least one item of information is a freshness parameter R1 and a freshness parameter R2, the southbound device uses the freshness parameter R1 and the freshness parameter R2 to derive the root key to obtain session key #3, and uses the session key #3 to encrypt data #1 to obtain ciphertext #1. The auxiliary terminal obtains the freshness parameter R2 from the substation terminal through a secure connection, as described above. The auxiliary terminal uses the freshness parameter R1 and the freshness parameter R2 to derive the preconfigured root key to obtain session key #3, and uses the session key #3 to decrypt the ciphertext #1 to obtain data #1. Similarly, in this case, the southbound device can determine that key derivation is required based on the received read command #1 and the freshness parameters R1 and R2, thereby deriving the session key #2, so as to achieve the use of different keys for communication between different devices, which is more secure.

[0064] It can be understood that before S1-S3, the substation terminal also needs to send a read command #2 and a freshness parameter R2 to the southbound device.

[0065] For example, the substation terminal can first send a paging message carrying the mask of the southbound device. Afterwards, the substation terminal receives the RN16 sent by the southbound device to trigger random access. After the random access is successful, that is, after the EPC of the southbound device is obtained, the substation terminal sends a read command #1 and a freshness parameter R2 to the southbound device to obtain the ciphertext #3 reported by the southbound device. Ciphertext #3 is obtained by the southbound device using session key #1 to encrypt data #2. Data #2 is the data read from the local storage area by the southbound device according to the address indicated by read command #2. In this way, the substation terminal also decrypts ciphertext #3 to obtain data #2. In addition, the substation terminal also uses the key synchronized between the substation terminal and the main station to encrypt data #2 to obtain ciphertext #4, and sends ciphertext #4 to the main station.

[0066] It should be noted that, due to the transmission performance limitations in the A-IoT scenario, data #2 and data #1 may be randomly partially lost during the transmission process due to interference, weak signals, unstable signals, etc. If the lost data in data #2 is transmitted by data #1, data #1 can be used to recover it to improve transmission reliability. In addition, precisely because of the randomness of data loss, the address corresponding to data #2 needs to be segmented in the above manner, that is, the pseudo-randomness of the segmentation can match the randomness of packet loss, making it more likely that the lost data is carried in data #1.

[0067] Combination of the above Figure 2 The method provided by the embodiment of the present invention is described in detail. The following is combined with a detailed description of an auxiliary terminal for performing communication services with a southbound device, a substation terminal, and a master station for executing the method provided by the embodiment of the present invention, which is applied to an A-IoT scenario of the environmental Internet of Things. In the A-IoT scenario, the auxiliary terminal supports the function of a reader, the southbound device is an A-IoT device, and the substation terminal is also a terminal supporting the reader function.

[0068] The auxiliary terminal is configured as follows: the auxiliary terminal determines read command #1 by interacting with the substation terminal, the address indicated by read command #1 is at least part of the address indicated by read command #2, read command #2 is provided by the main station, and read command #2 needs to be sent by the substation terminal to the southbound device; the auxiliary terminal sends read command #1 to the southbound device, and receives data #1 returned by the southbound device, which is read by the southbound device according to read command #1, and data #1 is the data collected by the southbound device; the auxiliary terminal sends data #1 to the main station.

[0069] Optionally, the auxiliary terminal determines read command #1 by interacting with the station terminal, including: when the auxiliary terminal is discovered by the station terminal, the auxiliary terminal establishes a secure connection with the station terminal; the auxiliary terminal receives read command #2 from the station terminal through the secure connection; the auxiliary terminal determines read command #1 based on read command #2.

[0070] Optionally, when the auxiliary terminal is discovered by the substation terminal, the auxiliary terminal establishes a secure connection with the substation terminal, including: when read command #2 is a command with high reliability requirements, the auxiliary terminal receives a device discovery message from the substation terminal, the device discovery message is used to discover a new reader, the device discovery message indicates a designated area, and the designated area is the area where the southbound device is located; the auxiliary terminal covers the designated area according to its own service range, and sends a response to the device discovery message to the substation terminal, the response to the device discovery message indicates that the auxiliary terminal can serve the designated area; in response to the auxiliary terminal sending a response to the device discovery message to the substation terminal, the auxiliary terminal establishes a secure connection with the substation terminal.

[0071] Optionally, the address indicated by the read command #2 is a continuous address segment, and the auxiliary terminal determines the read command #1 based on the read command #2, including: the auxiliary terminal determines multiple non-continuous address segments from the continuous address segment; the auxiliary terminal determines the read command #1 based on the multiple non-continuous address segments, and the address indicated by the read command #1 is multiple non-continuous address segments.

[0072] Optionally, the auxiliary terminal is configured as follows: the auxiliary terminal receives address segmentation indication information from the substation terminal through a secure connection, the address segmentation indication information indicating: when a continuous address segment is segmented, the number of segments between two adjacent non-continuous address segments; on this basis, the address length of a continuous address segment is K bytes, K is an integer greater than 3, and the auxiliary terminal determines multiple non-continuous address segments from a continuous address segment, including: the auxiliary terminal determines that the number of segments corresponding to K bytes is L based on the address length of a continuous address segment being K bytes, L is an integer greater than or equal to 3, and the corresponding relationship between the number of segments and the address length is a positive correlation; the auxiliary terminal segments a continuous address segment into L address segments based on the length of each segment being ⌈K / L⌉ bytes, ⌈ ⌉ represents rounding up; if the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is 1 segment, the auxiliary terminal determines the 1+2*kth address segment among the L address segments as one address segment, and obtains multiple non-continuous address segments, k is an integer traversed from 0, and 1+2*k is less than or equal to L; or, if the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is 2 segments, the auxiliary terminal determines the 1+3*kth address segment among the L address segments as one address segment, and obtains multiple non-continuous address segments, k is an integer traversed from 0, and 1+3*k is less than or equal to L; wherein, the address segment indication information indicates that the number of segments between two adjacent non-continuous address segments is related to the high reliability requirement level of the read command #2.

[0073] Optionally, the auxiliary terminal sends a read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, including: the auxiliary terminal sends a read command #1 and a security parameter to the southbound device; wherein the security parameter includes at least one item: a freshness parameter R1, or a freshness parameter R2, the freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, the freshness parameter R2 is a parameter randomly generated by the substation terminal, and the freshness parameter R2 is obtained by the auxiliary terminal from the substation terminal through a secure connection; the auxiliary terminal receives the encrypted ciphertext #1 of the data #1 returned by the southbound device, the ciphertext #1 is obtained by the southbound device encrypting the data #1 according to the security parameters; the auxiliary terminal sends data #1 to the main station, including: the auxiliary terminal decrypts the ciphertext #1 to obtain data #1; the auxiliary terminal encrypts the data #1 using a key synchronized between the auxiliary terminal and the main station to obtain ciphertext #2, and sends the ciphertext #2 to the main station.

[0074] Optionally, if the security parameter is the freshness parameter R2, the southbound device uses the session key #1 to encrypt the data #1 to obtain the ciphertext #1, where the session key #1 is derived from the preconfigured root key by the southbound device using the freshness parameter R2 provided in advance by the substation terminal; accordingly, the auxiliary terminal is configured as follows: the auxiliary terminal obtains the freshness parameter R2 from the substation terminal through a secure connection; the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: the auxiliary terminal uses the freshness parameter R2 to derive the preconfigured root key to obtain the session key #1, and uses the session key #1 to decrypt the ciphertext #1 to obtain the data #1.

[0075] Optionally, if at least one item of information is a freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to derive the root key to obtain session key #2, and uses session key #2 to encrypt data #1 to obtain ciphertext #1; accordingly, the auxiliary terminal decrypts ciphertext #1 to obtain data #1, including: the auxiliary terminal uses the freshness parameter R1 to derive the preconfigured root key to obtain session key #2, and uses session key #2 to decrypt ciphertext #1 to obtain data #1.

[0076] Optionally, if at least one item of information is a freshness parameter R1 and a freshness parameter R2, the southbound device uses the freshness parameter R1 and the freshness parameter R2 to derive the root key to obtain session key #3, and uses the session key #3 to encrypt data #1 to obtain ciphertext #1; accordingly, the auxiliary terminal is configured as follows: the auxiliary terminal obtains the freshness parameter R2 from the substation terminal through a secure connection; the auxiliary terminal decrypts the ciphertext #1 to obtain data #1, including: the auxiliary terminal uses the freshness parameter R1 and the freshness parameter R2 to derive the pre-configured root key to obtain session key #3, and uses the session key #3 to decrypt the ciphertext #1 to obtain data #1.

[0077] Figure 3 The schematic diagram of the structure of the electronic device provided by the embodiment of the present invention. For example, the electronic device may be a network device, or a chip (system) or other components or assemblies that can be set in the network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may further include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, such as being connected via a communication bus.

[0078] Combine the following Figure 3 The components of the electronic device 400 are described in detail: The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0079] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 2 The method shown is for providing communication services with southbound equipment, area terminals, and a master station.

[0080] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0081] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (such as computer program instructions).

[0082] The memory 402 is used to store the software program for executing the solution of the present invention, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0083] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0084] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal, or with another network device.

[0085] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0086] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0087] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or fewer components than those shown in the figure, or combine certain components, or arrange the components differently.

[0088] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the methods described in the above method embodiments, which will not be repeated here.

[0089] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0090] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0091] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, the process or function described in the embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0092] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0093] In the present invention, "at least one" means one or more, and "plurality" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0094] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0095] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0096] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0097] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0098] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0099] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0100] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program codes.

[0101] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A method for providing communication services with southbound equipment, a substation terminal, and a master station, characterized in that: The method is applied to an A-IoT scenario. In the A-IoT scenario, the method is performed by an auxiliary terminal, the auxiliary terminal supports a reader function, the southbound device is an A-IoT device, and the station terminal is also a terminal supporting a reader function. The method includes: The auxiliary terminal determines a read command #1 by interacting with the station area terminal, the address indicated by the read command #1 is at least a part of the address indicated by the read command #2, the read command #2 is provided by the master station, and the read command #2 needs to be sent by the station area terminal to the southbound device; The auxiliary terminal sends the read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, wherein the data #1 is the data collected by the southbound device; The auxiliary terminal sends the data #1 to the master station.

2. The method according to claim 1, characterized in that The auxiliary terminal determines the read command #1 by interacting with the station terminal, including: When the auxiliary terminal is discovered by the station terminal, the auxiliary terminal establishes a secure connection with the station terminal; The auxiliary terminal receives the read command #2 from the station terminal through the secure connection; The auxiliary terminal determines the read command #1 according to the read command #2.

3. The method according to claim 2, characterized in that In the case where the auxiliary terminal is discovered by the station area terminal, the auxiliary terminal establishes a secure connection with the station area terminal, including: In the case where the read command #2 is a command requiring high reliability, the auxiliary terminal receives a device discovery message from the station terminal, the device discovery message is used to discover a new reader, and the device discovery message indicates a designated area, and the designated area is an area where the southbound device is located; The auxiliary terminal sends a response to the device discovery message to the station terminal according to the service range of the auxiliary terminal covering the designated area, and the response to the device discovery message indicates that the auxiliary terminal can serve the designated area; In response to the auxiliary terminal sending a response of the device discovery message to the station terminal, the auxiliary terminal establishes a secure connection with the station terminal.

4. The method according to claim 2, characterized in that: The address indicated by the read command #2 is a continuous address segment, and the auxiliary terminal determines the read command #1 according to the read command #2, including: The auxiliary terminal determines a plurality of address segments with non-continuous addresses from the one address segment with continuous addresses; The auxiliary terminal determines the read command #1 according to the multiple non-continuous address segments, and the address indicated by the read command #1 is the multiple non-continuous address segments.

5. The method according to claim 4, characterized in that The method further comprises: The auxiliary terminal receives address segmentation indication information from the station area terminal through the secure connection, wherein the address segmentation indication information indicates: when a continuous address segment is segmented, the number of segments between two adjacent non-continuous address segments; On this basis, the address length of the one address segment with continuous addresses is K bytes, K is an integer greater than 3, and the auxiliary terminal determines a plurality of address segments with non-continuous addresses from the one address segment with continuous addresses, including: The auxiliary terminal determines that the number of segments corresponding to the K bytes is L according to the address length of a continuous address segment of the address being K bytes, where L is an integer greater than or equal to 3, and the corresponding relationship between the number of segments and the address length is a positive correlation; The auxiliary terminal segments an address segment with continuous addresses into L address segments according to the length of each segment being ⌈K / L⌉ bytes, where ⌈ ⌉ represents rounding up; If the address segmentation indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 1 segment, the auxiliary terminal determines that the 1+2*kth address segment among the L address segments is one address segment, and obtains the multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+2*k is less than or equal to L; or, if the address segmentation indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 2 segments, the auxiliary terminal determines that the 1+3*kth address segment among the L address segments is one address segment, and obtains the multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+3*k is less than or equal to L; The address segment indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is related to the high reliability requirement level of the read command #2.

6. The method according to claim 2, characterized in that The auxiliary terminal sends the read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, including: The auxiliary terminal sends the read command #1 and security parameters to the southbound device; wherein the security parameters include at least one item: a freshness parameter R1 or a freshness parameter R2, wherein the freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, and the freshness parameter R2 is a parameter randomly generated by the station terminal, and the freshness parameter R2 is obtained by the auxiliary terminal from the station terminal through the secure connection; The auxiliary terminal receives a ciphertext #1 of the encrypted data #1 returned by the southbound device, where the ciphertext #1 is obtained by the southbound device encrypting the data #1 according to the security parameter; The auxiliary terminal sends the data #1 to the master station, including: The auxiliary terminal decrypts the ciphertext #1 to obtain the data #1; The auxiliary terminal encrypts the data #1 using a key synchronized between the auxiliary terminal and the main station to obtain ciphertext #2, and sends the ciphertext #2 to the main station.

7. The method according to claim 6, characterized in that If the security parameter is the freshness parameter R2, the southbound device encrypts the data #1 using the session key #1 to obtain the ciphertext #1, wherein the session key #1 is obtained by deriving a preconfigured root key using the freshness parameter R2 provided by the station terminal in advance by the southbound device; Accordingly, the method further includes: The auxiliary terminal obtains the freshness parameter R2 from the station terminal through the secure connection; The auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: The auxiliary terminal uses the freshness parameter R2 to derive the pre-configured root key to obtain the session key #1, and uses the session key #1 to decrypt the ciphertext #1 to obtain the data #1.

8. The method according to claim 6, characterized in that If the at least one item of information is the freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to derive the root key to obtain the session key #2, and uses the session key #2 to encrypt the data #1 to obtain the ciphertext #1; Correspondingly, the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: The auxiliary terminal uses the freshness parameter R1 to derive the pre-configured root key to obtain the session key #2, and uses the session key #2 to decrypt the ciphertext #1 to obtain the data #1.

9. The method according to claim 6, characterized in that If the at least one item of information is the freshness parameter R1 and the freshness parameter R2, the southbound device uses the freshness parameter R1 and the freshness parameter R2 to derive the root key to obtain the session key #3, and uses the session key #3 to encrypt the data #1 to obtain the ciphertext #1; Accordingly, the method further includes: The auxiliary terminal obtains the freshness parameter R2 from the station terminal through the secure connection; The auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: The auxiliary terminal uses the freshness parameter R1 and the freshness parameter R2 to derive the preconfigured root key to obtain the session key #3, and uses the session key #3 to decrypt the ciphertext #1 to obtain the data #1.

10. An auxiliary terminal for communication services with southbound equipment, area terminals, and master stations, characterized in that: Applied to the A-IoT scenario of the ambient Internet of Things, in which the auxiliary terminal supports the function of a reader, the southbound device is an A-IoT device, the station terminal is also a terminal supporting the reader function, and the auxiliary terminal is configured as follows: The auxiliary terminal determines a read command #1 by interacting with the station area terminal, the address indicated by the read command #1 is at least a part of the address indicated by the read command #2, the read command #2 is provided by the master station, and the read command #2 needs to be sent by the station area terminal to the southbound device; The auxiliary terminal sends the read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, wherein the data #1 is the data collected by the southbound device; The auxiliary terminal sends the data #1 to the master station.

Images