Auxiliary terminal and method for providing communication services with southbound equipment, area terminal and main station

Abstract

The present invention provides an auxiliary terminal and method for performing communication services with a southbound device, a substation terminal, and a main station, which belongs to the field of Internet of Things technology and is used to ensure the reliability of data collection and transmission through an auxiliary terminal. The method is applied to an A‑IoT scenario of the environmental Internet of Things. In the A‑IoT scenario, the method is executed by an auxiliary terminal, the auxiliary terminal supports the function of a reader, the southbound device is an A‑IoT device, and the substation terminal is also a terminal supporting the reader function. The method includes: the auxiliary terminal determines a read command #1 by interacting with the substation terminal, the address indicated by the read command #1 is at least part of the address indicated by the read command #2, the read command #2 is provided by the main station, and the read command #2 needs to be sent by the substation terminal to the southbound device; the auxiliary terminal sends a read command #1 to the southbound device, and receives data #1 returned by the southbound device to the southbound device according to the read command #1, and the data #1 is the data collected by the southbound device; the auxiliary terminal sends data #1 to the main station.

Description

Technical Field

[0001] This invention relates to the field of Internet of Things (IoT) technology, and in particular to an auxiliary terminal and method for communication services with southbound devices, distribution terminals, and master stations. Background Technology

[0002] Southbound devices, distribution area terminals, and the master station are several important concepts in the Internet of Things (IoT) field, each undertaking different functions and roles. Southbound devices: Southbound devices typically refer to field-mounted smart devices, such as sensors, meters, and other measurement and control devices. These devices are responsible for collecting field data and transmitting it to the upper-level system for processing and analysis. They are called "southbound" because in the system architecture diagram, these devices are usually located at the bottom of the system (equivalent to the south on a map). Distribution area terminals: Distribution area terminals are intermediate layer devices connecting southbound devices and the master station. They are primarily responsible for aggregating data from southbound devices and performing preliminary processing and summarization. Distribution area terminals are also responsible for forwarding this summarized data to the master station, while simultaneously receiving and executing commands and instructions issued by the master station. In distribution network automation, distribution area terminals play a crucial role in ensuring that data from field devices can be efficiently transmitted to the master station and that the master station's control strategies can be executed. Master station: The master station is the core control center of the entire system automation. It is responsible for collecting and managing data from various distribution area terminals and southbound devices, performing comprehensive analysis and decision-making. The main station can perform functions such as load management, fault detection and recovery, and optimized operation through data analysis and processing.

[0003] Currently, the Internet of Things (IoT) can be further developed into ambient IoT (A-IoT) scenarios. In A-IoT scenarios, southbound devices are A-IoT devices (also known as A-IoT terminals), and the distribution terminal is also a terminal that supports reader functionality, which can be understood as a reader. The main station can be a server, specifically an application function (AF), application server (AS) in the A-IoT scenario, or an ambient IoT / passive IoT application function (A-IoT / P-IoT AF), etc., with no restrictions on the specific naming.

[0004] Devices in A-IoT scenarios are relatively lightweight, and ensuring the reliability of data transmission is a current research challenge. Summary of the Invention

[0005] This invention provides an auxiliary terminal and method for communicating with southbound equipment, distribution area terminals, and the main station, so as to ensure the reliability of data acquisition and transmission through the auxiliary terminal.

[0006] To achieve the above objectives, the present invention adopts the following technical solution:

[0007] Firstly, a method for communication services with a southbound device, a distribution terminal, and a master station is provided. This method is applied to an A-IoT (Artificial Intelligence of Things) scenario. In the A-IoT scenario, the method is executed by an auxiliary terminal, which supports reader functionality. The southbound device is an A-IoT device, and the distribution terminal is also a terminal supporting reader functionality. The method includes: the auxiliary terminal interacting with the distribution terminal to determine a read command #1, where the address indicated by read command #1 is at least a part of the address indicated by read command #2. Read command #2 is provided by the master station and needs to be sent from the distribution terminal to the southbound device; the auxiliary terminal sending read command #1 to the southbound device and receiving data #1 returned by the southbound device, which is data collected by the southbound device according to read command #1; and the auxiliary terminal sending data #1 to the master station.

[0008] Optionally, the auxiliary terminal determines the read command #1 by interacting with the local terminal, including: if the auxiliary terminal is discovered by the local terminal, the auxiliary terminal establishes a secure connection with the local terminal; the auxiliary terminal receives the read command #2 from the local terminal through the secure connection; and the auxiliary terminal determines the read command #1 based on the read command #2.

[0009] Optionally, when the auxiliary terminal is discovered by the regional terminal, the auxiliary terminal establishes a secure connection with the regional terminal, including: when read command #2 is a command with high reliability requirements, the auxiliary terminal receives a device discovery message from the regional terminal, the device discovery message is used to discover new readers, the device discovery message indicates a specified area, the specified area is the area where the southbound device is located; the auxiliary terminal sends a response to the device discovery message to the regional terminal according to its own service range covering the specified area, the response to the device discovery message indicates that the auxiliary terminal can serve the specified area; in response to the auxiliary terminal sending the device discovery message to the regional terminal, the auxiliary terminal establishes a secure connection with the regional terminal.

[0010] Optionally, the address indicated by read command #2 is a continuous address segment. The auxiliary terminal determines read command #1 based on read command #2, including: the auxiliary terminal determines multiple non-contiguous address segments from the continuous address segment; the auxiliary terminal determines read command #1 based on the multiple non-contiguous address segments, and the address indicated by read command #1 is a multiple non-contiguous address segment.

[0011] Optionally, the method further includes: the auxiliary terminal receiving address segmentation indication information from the station terminal via a secure connection, the address segmentation indication information indicating the number of segments between two adjacent non-contiguous segments when segmenting a contiguous address segment; based on this, the address length of a contiguous address segment is K bytes, where K is an integer greater than 3, the auxiliary terminal determining multiple non-contiguous address segments from the contiguous address segment, including: the auxiliary terminal determining the number of segments corresponding to K bytes as L, where L is an integer greater than or equal to 3, based on the address length of K bytes of the contiguous address segment, and the correspondence between the number of segments and the address length is positively correlated; the auxiliary terminal segmenting the contiguous address segment into L address segments based on the length of each segment being ⌈K / L⌉ bytes, ⌈ ⌉ indicates rounding up; if the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 1 segment, then the auxiliary terminal determines the 1+2*kth address segment out of L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+2*k is less than or equal to L; or, if the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 2 segments, then the auxiliary terminal determines the 1+3*kth address segment out of L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+3*k is less than or equal to L; where the number of segments between two adjacent non-contiguous address segments indicated by the address segmentation indication information is related to the high reliability requirement level of read command #2.

[0012] Optionally, the auxiliary terminal sends a read command #1 to the southbound device and receives data #1 returned by the southbound device, which was read by the southbound device according to the read command #1. This includes: the auxiliary terminal sending the read command #1 and security parameters to the southbound device; wherein, the security parameters include at least one: freshness parameter R1 or freshness parameter R2, where freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, and freshness parameter R2 is a parameter randomly generated by the station terminal, and freshness parameter R2 is obtained by the auxiliary terminal from the station terminal through a secure connection; the auxiliary terminal receives ciphertext #1, which is the encrypted version of data #1 returned by the southbound device, where ciphertext #1 is obtained by the southbound device encrypting data #1 according to the security parameters; the auxiliary terminal sends data #1 to the master station, including: the auxiliary terminal decrypting ciphertext #1 to obtain data #1; the auxiliary terminal encrypting data #1 using a key synchronized between the auxiliary terminal and the master station to obtain ciphertext #2, and sending ciphertext #2 to the master station.

[0013] Optionally, if the security parameter is the freshness parameter R2, the southbound device encrypts data #1 using session key #1 to obtain ciphertext #1. Session key #1 is derived by the southbound device from the pre-configured root key using the freshness parameter R2 provided by the substation terminal. Correspondingly, the method also includes: the auxiliary terminal obtaining the freshness parameter R2 from the substation terminal through a secure connection; the auxiliary terminal decrypting the ciphertext #1 to obtain data #1, including: the auxiliary terminal using the freshness parameter R2 to deduce the pre-configured root key to obtain session key #1, and using session key #1 to decrypt the ciphertext #1 to obtain data #1.

[0014] Optionally, if at least one piece of information is a freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to deduce the root key to obtain the session key #2, and uses the session key #2 to encrypt the data #1 to obtain ciphertext #1; correspondingly, the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: the auxiliary terminal uses the freshness parameter R1 to deduce the pre-configured root key to obtain the session key #2, and uses the session key #2 to decrypt the ciphertext #1 to obtain the data #1.

[0015] Optionally, if at least one piece of information is freshness parameter R1 and freshness parameter R2, the southbound device uses freshness parameter R1 and freshness parameter R2 to deduce session key #3 from the root key, and uses session key #3 to encrypt data #1 to obtain ciphertext #1; correspondingly, the method further includes: the auxiliary terminal obtaining freshness parameter R2 from the station terminal through a secure connection; the auxiliary terminal decrypting ciphertext #1 to obtain data #1, including: the auxiliary terminal using freshness parameter R1 and freshness parameter R2 to deduce the pre-configured root key to obtain session key #3, and using session key #3 to decrypt ciphertext #1 to obtain data #1.

[0016] Secondly, an auxiliary terminal is provided to provide communication services with southbound devices, distribution area terminals, and a master station. This is applied in an environmental IoT (A-IoT) scenario. In the A-IoT scenario, the auxiliary terminal supports reader functionality. The southbound device is an A-IoT device, and the distribution area terminal is also a terminal supporting reader functionality. The auxiliary terminal is configured as follows: the auxiliary terminal interacts with the distribution area terminal to determine read command #1. The address indicated by read command #1 is at least a part of the address indicated by read command #2. Read command #2 is provided by the master station and needs to be sent from the distribution area terminal to the southbound device. The auxiliary terminal sends read command #1 to the southbound device and receives data #1 returned by the southbound device, which is the data collected by the southbound device. The auxiliary terminal then sends data #1 to the master station.

[0017] Optionally, the auxiliary terminal determines the read command #1 by interacting with the local terminal, including: if the auxiliary terminal is discovered by the local terminal, the auxiliary terminal establishes a secure connection with the local terminal; the auxiliary terminal receives the read command #2 from the local terminal through the secure connection; and the auxiliary terminal determines the read command #1 based on the read command #2.

[0018] Optionally, when the auxiliary terminal is discovered by the regional terminal, the auxiliary terminal establishes a secure connection with the regional terminal, including: when read command #2 is a command with high reliability requirements, the auxiliary terminal receives a device discovery message from the regional terminal, the device discovery message is used to discover new readers, the device discovery message indicates a specified area, the specified area is the area where the southbound device is located; the auxiliary terminal sends a response to the device discovery message to the regional terminal according to its own service range covering the specified area, the response to the device discovery message indicates that the auxiliary terminal can serve the specified area; in response to the auxiliary terminal sending the device discovery message to the regional terminal, the auxiliary terminal establishes a secure connection with the regional terminal.

[0019] Optionally, the address indicated by read command #2 is a continuous address segment. The auxiliary terminal determines read command #1 based on read command #2, including: the auxiliary terminal determines multiple non-contiguous address segments from the continuous address segment; the auxiliary terminal determines read command #1 based on the multiple non-contiguous address segments, and the address indicated by read command #1 is a multiple non-contiguous address segment.

[0020] Optionally, the auxiliary terminal is configured to: receive address segmentation indication information from the station terminal via a secure connection. The address segmentation indication information indicates the number of segments between two adjacent non-contiguous segments when segmenting a continuous address segment. Based on this, given that the address length of a continuous address segment is K bytes, where K is an integer greater than 3, the auxiliary terminal determines multiple non-contiguous address segments from the continuous address segment, including: determining the number of segments corresponding to the K bytes, where L is an integer greater than or equal to 3, based on the address length of the continuous address segment being K bytes; and segmenting the continuous address segment into L address segments, where each segment has a length of ⌈K / L⌉ bytes. ⌉ indicates rounding up; if the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 1 segment, then the auxiliary terminal determines the 1+2*kth address segment out of L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+2*k is less than or equal to L; or, if the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 2 segments, then the auxiliary terminal determines the 1+3*kth address segment out of L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+3*k is less than or equal to L; where the number of segments between two adjacent non-contiguous address segments indicated by the address segmentation indication information is related to the high reliability requirement level of read command #2.

[0021] Optionally, the auxiliary terminal sends a read command #1 to the southbound device and receives data #1 returned by the southbound device, which was read by the southbound device according to the read command #1. This includes: the auxiliary terminal sending the read command #1 and security parameters to the southbound device; wherein, the security parameters include at least one: freshness parameter R1 or freshness parameter R2, where freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, and freshness parameter R2 is a parameter randomly generated by the station terminal, and freshness parameter R2 is obtained by the auxiliary terminal from the station terminal through a secure connection; the auxiliary terminal receives ciphertext #1, which is the encrypted version of data #1 returned by the southbound device, where ciphertext #1 is obtained by the southbound device encrypting data #1 according to the security parameters; the auxiliary terminal sends data #1 to the master station, including: the auxiliary terminal decrypting ciphertext #1 to obtain data #1; the auxiliary terminal encrypting data #1 using a key synchronized between the auxiliary terminal and the master station to obtain ciphertext #2, and sending ciphertext #2 to the master station.

[0022] Optionally, if the security parameter is the freshness parameter R2, the southbound device encrypts data #1 using session key #1 to obtain ciphertext #1. Session key #1 is derived by the southbound device from the pre-configured root key using the freshness parameter R2 provided by the substation terminal. Correspondingly, the auxiliary terminal is configured to: obtain the freshness parameter R2 from the substation terminal through a secure connection; and decrypt the ciphertext #1 to obtain data #1, including: the auxiliary terminal derives the session key #1 using the freshness parameter R2 to obtain the pre-configured root key, and then decrypts the ciphertext #1 using the session key #1 to obtain data #1.

[0023] Optionally, if at least one piece of information is a freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to deduce the root key to obtain the session key #2, and uses the session key #2 to encrypt the data #1 to obtain ciphertext #1; correspondingly, the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: the auxiliary terminal uses the freshness parameter R1 to deduce the pre-configured root key to obtain the session key #2, and uses the session key #2 to decrypt the ciphertext #1 to obtain the data #1.

[0024] Optionally, if at least one piece of information is freshness parameter R1 and freshness parameter R2, the southbound device uses freshness parameter R1 and freshness parameter R2 to deduce the session key #3 from the root key, and uses the session key #3 to encrypt data #1 to obtain ciphertext #1; correspondingly, the auxiliary terminal is configured to: the auxiliary terminal obtains freshness parameter R2 from the station terminal through a secure connection; the auxiliary terminal decrypts ciphertext #1 to obtain data #1, including: the auxiliary terminal uses freshness parameter R1 and freshness parameter R2 to deduce the pre-configured root key to obtain the session key #3, and uses the session key #3 to decrypt ciphertext #1 to obtain data #1.

[0025] Thirdly, an electronic device is provided, comprising: a processor and a memory; the memory is used to store a computer program, which, when executed by the processor, causes the electronic device to perform the method described in the first aspect.

[0026] In one possible design, the electronic device described in the third aspect may further include a transceiver. This transceiver may be a transceiver circuit or an interface circuit. The transceiver can be used for communication between the electronic device described in the third aspect and other electronic devices.

[0027] In the embodiments of the present invention, the electronic device described in the third aspect may be a terminal, or a chip (system) or other component or assembly disposed in the terminal, or a system containing the terminal.

[0028] Fourthly, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer causes the computer to perform the method described in the first aspect.

[0029] The substation terminal also needs to send read command #2 and freshness parameter R2 to the southbound device. For example, the substation terminal can first send a paging message carrying the mask of the southbound device. Then, the substation terminal receives RN16 from the southbound device to trigger random access. After successful random access, i.e., after obtaining the EPC of the southbound device, the substation terminal sends read command #1 and freshness parameter R2 to the southbound device to obtain the ciphertext #3 reported by the southbound device. Ciphertext #3 is obtained by the southbound device encrypting data #2 using session key #1. Data #2 is data read by the southbound device from its local storage area according to the address indicated by read command #2. The substation terminal also decrypts ciphertext #3 to obtain data #2. Furthermore, the substation terminal also encrypts data #2 using the key synchronized between the substation terminal and the master station to obtain ciphertext #4, and sends ciphertext #4 to the master station.

[0030] Therefore, due to the limitations of transmission performance in A-IoT scenarios, both data #2 and data #1 may experience random partial loss during transmission due to interference, weak signals, or unstable signals. If the lost data in data #2 originated from data #1, it can be recovered using data #1, thus improving transmission reliability. Furthermore, precisely because data loss is random, the address corresponding to data #2 needs to be segmented as described above. This pseudo-random segmentation matches the randomness of packet loss, increasing the likelihood that the lost data is carried within data #1. Attached Figure Description

[0031] Figure 1 This is a schematic diagram of the architecture of an Internet of Things (IoT) system provided in an embodiment of the present invention;

[0032] Figure 2 This is a flowchart illustrating a method for providing communication services with southbound equipment, distribution terminals, and a master station according to an embodiment of the present invention.

[0033] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0034] The technical solution of the present invention will now be described with reference to the accompanying drawings.

[0035] In this embodiment of the invention, "instruction" can include direct and indirect instructions, as well as explicit and implicit instructions. The information indicated by a certain piece of information is called the information to be instructed. In specific implementation, there are many ways to instruct the information to be instructed, such as, but not limited to, directly instructing the information to be instructed, such as the information to be instructed itself or its index. It can also indirectly instruct the information to be instructed by instructing other information, where there is a correlation between the other information and the information to be instructed. It can also instruct only a part of the information to be instructed, while the other parts are known or pre-agreed upon. For example, the instruction of specific information can be achieved by using a pre-agreed (e.g., protocol-defined) arrangement of various pieces of information, thereby reducing instruction overhead to some extent. Simultaneously, common parts of various pieces of information can be identified and uniformly indicated to reduce the instruction overhead caused by individually indicating the same information.

[0036] Furthermore, the specific indication method can also be any existing indication method, such as, but not limited to, the above-mentioned indication methods and their various combinations. Specific details of various indication methods can be found in existing technologies, and will not be elaborated upon here. As described above, for example, when multiple pieces of information of the same type need to be indicated, the indication methods for different pieces of information may differ. In specific implementation, the required indication method can be selected according to specific needs. This embodiment of the invention does not limit the selected indication method; therefore, the indication methods involved in this embodiment of the invention should be understood to cover various methods that enable the party to be indicated to obtain the information to be indicated.

[0037] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information messages sent separately, and the sending period and / or timing of these sub-information messages can be the same or different. The specific sending method is not limited in this embodiment of the invention. The sending period and / or timing of these sub-information messages can be predefined, for example, according to a protocol, or configured by the sending device by sending configuration information to the receiving device.

[0038] "Predefined" or "pre-configured" can be achieved by pre-saving corresponding codes, tables, or other means that can be used to indicate relevant information in the device. This embodiment of the invention does not limit the specific implementation method. "Saving" can refer to saving in one or more memories. These memories can be separate installations or integrated into the encoder, decoder, processor, or electronic device. Alternatively, some memories can be separately installed, while others are integrated into the decoder, processor, or electronic device. The type of memory can be any form of storage medium, and this embodiment of the invention does not limit this.

[0039] In the embodiments of this invention, "protocol" may refer to a protocol family in the field of communication, a standard protocol with a similar protocol family frame structure, or a related protocol to be applied in future systems. The embodiments of this invention do not specifically limit this.

[0040] In this embodiment of the invention, descriptions such as "when," "under the circumstances," "if," and "if" all refer to the device making corresponding processing under certain objective circumstances, and are not limited to a specific time. They do not require the device to make a judgment action during implementation, nor do they imply any other limitations.

[0041] In the description of the embodiments of the present invention, unless otherwise stated, " / " indicates that the objects before and after are in an "or" relationship. For example, A / B can represent A or B. "And / or" in the embodiments of the present invention is merely a description of the relationship between the related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, and B alone, where A and B can be singular or plural. Furthermore, in the description of the embodiments of the present invention, unless otherwise stated, "multiple" refers to two or more. "At least one of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple. Additionally, to facilitate a clear description of the technical solutions of the embodiments of the present invention, the terms "first" and "second" are used in the embodiments of the present invention to distinguish identical or similar items with essentially the same function and effect. Those skilled in the art will understand that the terms "first," "second," etc., do not limit the quantity or order of execution, and that "first," "second," etc., are not necessarily different. Furthermore, in the embodiments of this invention, words such as "exemplary" or "for example" are used to indicate that something is being described as an example, illustration, or description. Any embodiment or design scheme described as "exemplary" or "for example" in the embodiments of this invention should not be construed as being more preferred or advantageous than other embodiments or design schemes. Specifically, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner for ease of understanding.

[0042] The network architecture and business scenarios described in the embodiments of this invention are for the purpose of more clearly illustrating the technical solutions of the embodiments of this invention, and do not constitute a limitation on the technical solutions provided by the embodiments of this invention. As those skilled in the art will know, with the evolution of network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of this invention are also applicable to similar technical problems.

[0043] To facilitate understanding of the embodiments of the present invention, firstly, let's take... Figure 1 The IoT system shown in the figure is an example, Figure 1 This is a schematic diagram of the architecture of an Internet of Things (IoT) system to which the method for providing communication services with southbound devices, distribution terminals, and the main station provided in the embodiments of the present invention is applicable.

[0044] like Figure 1 As shown, the IoT system may include: southbound devices, distribution area terminals, auxiliary terminals, and a master station.

[0045] The aforementioned southbound equipment, distribution area terminals, and auxiliary terminals can all be terminal-type devices, i.e., terminals. This terminal can be a terminal with transceiver capabilities, or a chip or chip system that can be installed on the terminal. This terminal can also be referred to as user equipment (UE), access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, wireless communication equipment, user agent, or user device. The terminals in the embodiments of this application may be mobile phones, cellular phones, smartphones, tablets, wireless data cards, personal digital assistants (PDAs), wireless modems, handsets, laptop computers, machine-type communication (MTC) terminals, computers with wireless transceiver capabilities, virtual reality (VR) terminals, augmented reality (AR) terminals, wireless terminals in industrial control, wireless terminals in self-driving, wireless terminals in remote medical care, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, wireless terminals in smart homes, vehicle-mounted terminals, roadside units (RSUs) with terminal functions, etc. The terminal in this application may also be an on-board module, on-board unit, on-board component, on-board chip, or on-board unit that is built into the vehicle as one or more components or units. Alternatively, the terminal may also be customer-premises equipment (CPE).

[0046] This IoT system can be applied to ambient IoT (A-IoT) scenarios, also known as ambient power-enabled IoT or passive IoT (P-IoT). A-IoT can be applied to various value scenarios. In A-IoT scenarios, auxiliary terminals can support reader functions and can also be understood as readers, such as reader #1. Southbound devices are A-IoT devices (also known as A-IoT terminals), and substation terminals also support reader functions, such as reader #2. The master station can be a server, specifically an application function (AF), application server (AS) in the A-IoT scenario, or an ambient IoT / passive IoT application function (A-IoT / P-IoT AF), etc., with no specific naming restrictions.

[0047] Figure 2 This is a flowchart illustrating the method provided in an embodiment of the present invention. This method for providing communication services with southbound devices, distribution terminals, and the main station is applicable to the aforementioned Internet of Things (IoT) system and involves interaction between devices within the IoT system. The specific process is as follows:

[0048] S201, the auxiliary terminal determines the read command #1 by interacting with the station terminal.

[0049] The address indicated by read command #1 is at least a part of the address indicated by read command #2. Read command #2 is provided by the master station and needs to be sent to the southbound device by the substation terminal.

[0050] For example, if the master station wants to read data collected by a southbound device, or wants the southbound device to report currently collected data, the master station can send a command to the substation terminal via a network (such as a mobile communication network), and the substation terminal accesses that mobile communication network. This command includes a specified area (such as the latitude and longitude information of the specified area, or the identifiers of one or more cells covered by the specified area), read command #2, and the high reliability requirement level of read command #2. The high reliability requirement level of read command #2 indicates that it is a command with high reliability requirements, meaning that reliable data reading is necessary to minimize data loss or missing data. Higher high reliability requirement levels for read command #2, such as level 1, level 2, level 3, etc., indicate higher reliability requirements during data transmission, which determines the interval of subsequent segmentation. See below for details. Therefore, the substation terminal can trigger the discovery of new readers based on the high reliability requirement of read command #2.

[0051] Correspondingly, when the auxiliary terminal is discovered by the local terminal, the auxiliary terminal establishes a secure connection with the local terminal.

[0052] For example, if command #2 is a command with high reliability requirements, the substation terminal triggers the discovery of new readers, such as by sending a device discovery message. Correspondingly, the auxiliary terminal receives the device discovery message from the substation terminal. The device discovery message can be used to discover new readers. For example, the device discovery message may indicate a specified area (such as including the latitude and longitude information of the specified area, or the identifiers of one or more cells covered by the specified area), where the specified area is the area where southbound devices are located. The device discovery message may also include the identifier of the substation terminal. The auxiliary terminal can send a response to the device discovery message to the substation terminal based on its service range covering the specified area. The response to the device discovery message indicates that the auxiliary terminal can serve the specified area. In response to the auxiliary terminal sending the device discovery message to the substation terminal, the auxiliary terminal and the substation terminal establish a secure connection. This secure connection can be a side-link secure link between terminals. For example, the auxiliary terminal and the substation terminal can deduce a key for side-link secure communication and configure this key for communication between the auxiliary terminal and the substation terminal, thus establishing a secure connection. For details, please refer to the relevant introduction to PC5 connections in the prior art, which will not be elaborated here.

[0053] The substation terminal can send read command #2 to the auxiliary terminal through a secure connection, and the auxiliary terminal can receive read command #2 from the substation terminal through a secure connection.

[0054] The auxiliary terminal determines read command #1 based on read command #2. For example, read command #2 indicates a contiguous address segment, such as addr1 to addr2. The auxiliary terminal can then determine multiple non-contiguous address segments from this contiguous address segment. Specifically, the auxiliary terminal can also receive address segmentation indication information from the station terminal via a secure connection. This information indicates the number of segments between two adjacent non-contiguous address segments when segmenting a contiguous address segment. Assuming the address length of a contiguous address segment is K bytes (e.g., addr2 - addr1 = K), where K is an integer greater than 3, the address segmentation indication information shows that the number of segments between two adjacent non-contiguous address segments is related to the high reliability requirement level of read command #2. That is, a higher high reliability requirement level corresponds to a smaller number of segments, with a minimum interval of one segment.

[0055] The auxiliary terminal can determine the number of segments (L) corresponding to a continuous address segment with a length of K bytes, where L is an integer greater than or equal to 3. The relationship between the number of segments and the address length is positively correlated. For example, if the K bytes belong to the range of 1-50 bytes, the number of segments for that range is L=3; if the K bytes belong to the range of 51-100 bytes, the number of segments for that range is L=5; if the K bytes belong to the range of 101-150 bytes, the number of segments for that range is L=7, and so on. The auxiliary terminal then divides a continuous address segment into L address segments, each segment having a length of ⌈K / L⌉ bytes, where ⌈⌉ represents rounding up. In this system, the length of the Lth address segment may differ from the lengths of the previous L-1 address segments. For example, if K bytes = 100, L = 7, ⌈K / L⌉ = 15, the first 6 segments are all 15 bytes long, and the 7th segment is 20 bytes long. If the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 1 segment, then the auxiliary terminal determines the 1+2*kth address segment in the L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+2*k is less than or equal to L. Alternatively, if the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 2 segments, then the auxiliary terminal determines the 1+3*kth address segment in the L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+3*k is less than or equal to L.

[0056] For example, taking K bytes = 100, L = 7, and ⌈K / L⌉ = 15 as an example, if the number of interval segments is 1 segment, then multiple non-contiguous address segments can be segments 1, 3, 5, and 7. If the number of interval segments is 2 segments, then multiple non-contiguous address segments can be segments 1, 4, and 6.

[0057] Finally, the auxiliary terminal determines read command #1 based on multiple non-contiguous address segments. The address indicated by read command #1 is multiple non-contiguous address segments.

[0058] S202, the auxiliary terminal sends a read command #1 to the southbound device and receives data #1 returned by the southbound device based on the read command #1.

[0059] S203, the auxiliary terminal sends data #1 to the master station.

[0060] In S202-S203:

[0061] Data #1 can be data collected by the southbound device. For example, the data collected by the southbound device could be temperature data, pressure data, humidity data, electrical energy data, current data, voltage data, power data, and device status data at different times. The southbound device can store this data in its local storage area in chronological order. The address of read command #1 is an address within this storage area, allowing the southbound device to retrieve data #1 from the storage area based on that address.

[0062] S1: The auxiliary terminal can first send the read command #1 and security parameters to the southbound device.

[0063] For example, the auxiliary terminal can first send a paging message carrying the mask of the southbound device, which is also obtained by the auxiliary terminal from the substation terminal through a secure connection. Then, the auxiliary terminal receives RN16 sent by the southbound device to trigger random access. After successful random access, i.e., after obtaining the device identifier (EPC) of the southbound device, the auxiliary terminal sends read command #1 and security parameters to the southbound device. The security parameters include at least one: freshness parameter R1 or freshness parameter R2. Freshness parameter R1 is a parameter randomly generated by the auxiliary terminal (e.g., a random number), and freshness parameter R2 is a parameter randomly generated by the substation terminal (e.g., a random number). Freshness parameter R2 is obtained by the auxiliary terminal from the substation terminal through a secure connection.

[0064] S2: The auxiliary terminal receives the encrypted ciphertext #1 of the data #1 returned by the southbound device. Ciphertext #1 is obtained by the southbound device encrypting data #1 according to security parameters.

[0065] S3: The auxiliary terminal decrypts ciphertext #1 to obtain data #1. Then, the auxiliary terminal uses the key synchronized with the master station to encrypt data #1 to obtain ciphertext #2, and sends ciphertext #2 to the master station.

[0066] For example, if the security parameter is freshness parameter R2, the southbound device uses session key #1 to encrypt data #1, obtaining ciphertext #1. Session key #1 is derived by the southbound device from the pre-configured root key using the freshness parameter R2 provided by the substation terminal. It can be understood that the root key is a key pre-configured or predefined by the substation terminal, southbound device, and auxiliary terminal. Correspondingly, the auxiliary terminal can also obtain the freshness parameter R2 from the substation terminal through a secure connection, such as transmitting the freshness parameter R2 along with the read command #2. Based on this, the auxiliary terminal uses the freshness parameter R2 to deduce the pre-configured root key, obtaining session key #1, and uses session key #1 to decrypt ciphertext #1, obtaining data #1. In this case, the communication between the southbound device and the auxiliary terminal can reuse the session key #1 used for communication between the southbound device and the substation terminal. The southbound device can determine that key derivation is unnecessary based on the received read command #1 and freshness parameter R2, thus reusing session key #1 to reduce the overhead of the southbound device.

[0067] For example, if at least one piece of information is the freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to deduce the root key, obtaining session key #2, and uses session key #2 to encrypt data #1, obtaining ciphertext #1. Correspondingly, the auxiliary terminal uses the freshness parameter R1 to deduce the pre-configured root key, obtaining session key #2, and uses session key #2 to decrypt ciphertext #1, obtaining data #1. In this case, the southbound device can determine the need for key deduction based on the received read command #1 and the freshness parameter R1, thereby deduce the session key #2, enabling different devices to use different keys for communication, resulting in better security.

[0068] For example, if at least one piece of information is freshness parameter R1 and freshness parameter R2, the southbound device uses freshness parameters R1 and R2 to deduce the session key #3 from the root key, and uses session key #3 to encrypt data #1 to obtain ciphertext #1. The auxiliary terminal obtains freshness parameter R2 from the regional terminal through a secure connection, as described above. The auxiliary terminal uses freshness parameters R1 and R2 to deduce the pre-configured root key to obtain the session key #3, and uses session key #3 to decrypt ciphertext #1 to obtain data #1. Similarly, in this case, the southbound device can determine that key deduction is needed based on the received read command #1 and freshness parameters R1 and R2, thereby deducing the session key #2, so that different devices can use different keys for communication, resulting in better security.

[0069] It is understandable that before S1-S3, the station terminal also needs to send read command #2 and freshness parameter R2 to the southbound device.

[0070] For example, the substation terminal can first send a paging message carrying the mask of the southbound device. Then, the substation terminal receives RN16 from the southbound device to trigger random access. After successful random access, i.e., after acquiring the southbound device's EPC, the substation terminal sends a read command #1 and a freshness parameter R2 to the southbound device to obtain the ciphertext #3 reported by the southbound device. Ciphertext #3 is obtained by the southbound device encrypting data #2 using session key #1. Data #2 is data read by the southbound device from its local storage area according to the address indicated by read command #2. The substation terminal also decrypts ciphertext #3 to obtain data #2. Furthermore, the substation terminal also encrypts data #2 using the key synchronized between the substation terminal and the master station to obtain ciphertext #4, and sends ciphertext #4 to the master station.

[0071] It should be noted that, due to the limitations of transmission performance in A-IoT scenarios, both data #2 and data #1 may experience partial loss during transmission due to interference, weak signals, or unstable signals. If the lost data in data #2 originated from data #1, it can be recovered using data #1, thus improving transmission reliability. Furthermore, precisely because data loss is random, the address corresponding to data #2 needs to be segmented as described above. This pseudo-random segmentation matches the randomness of packet loss, increasing the likelihood that the lost data is carried within data #1.

[0072] The above combination Figure 2 The method provided by the embodiments of the present invention has been described in detail. The following description, in conjunction with the auxiliary terminal used to perform the method provided by the embodiments of the present invention for communication services with a southbound device, a distribution station terminal, and a master station, is applied in an environmental Internet of Things (A-IoT) scenario. In the A-IoT scenario, the auxiliary terminal supports reader functionality, the southbound device is an A-IoT device, and the distribution station terminal is also a terminal supporting reader functionality.

[0073] The auxiliary terminal is configured as follows: the auxiliary terminal determines read command #1 by interacting with the area terminal. The address indicated by read command #1 is at least a part of the address indicated by read command #2. Read command #2 is provided by the master station and needs to be sent to the southbound device by the area terminal. The auxiliary terminal sends read command #1 to the southbound device and receives data #1 returned by the southbound device, which is the data collected by the southbound device according to read command #1. The auxiliary terminal sends data #1 to the master station.

[0074] Optionally, the auxiliary terminal determines the read command #1 by interacting with the local terminal, including: if the auxiliary terminal is discovered by the local terminal, the auxiliary terminal establishes a secure connection with the local terminal; the auxiliary terminal receives the read command #2 from the local terminal through the secure connection; and the auxiliary terminal determines the read command #1 based on the read command #2.

[0075] Optionally, when the auxiliary terminal is discovered by the regional terminal, the auxiliary terminal establishes a secure connection with the regional terminal, including: when read command #2 is a command with high reliability requirements, the auxiliary terminal receives a device discovery message from the regional terminal, the device discovery message is used to discover new readers, the device discovery message indicates a specified area, the specified area is the area where the southbound device is located; the auxiliary terminal sends a response to the device discovery message to the regional terminal according to its own service range covering the specified area, the response to the device discovery message indicates that the auxiliary terminal can serve the specified area; in response to the auxiliary terminal sending the device discovery message to the regional terminal, the auxiliary terminal establishes a secure connection with the regional terminal.

[0076] Optionally, the address indicated by read command #2 is a continuous address segment. The auxiliary terminal determines read command #1 based on read command #2, including: the auxiliary terminal determines multiple non-contiguous address segments from the continuous address segment; the auxiliary terminal determines read command #1 based on the multiple non-contiguous address segments, and the address indicated by read command #1 is a multiple non-contiguous address segment.

[0077] Optionally, the auxiliary terminal is configured to: receive address segmentation indication information from the station terminal via a secure connection. The address segmentation indication information indicates the number of segments between two adjacent non-contiguous segments when segmenting a continuous address segment. Based on this, given that the address length of a continuous address segment is K bytes, where K is an integer greater than 3, the auxiliary terminal determines multiple non-contiguous address segments from the continuous address segment, including: determining the number of segments corresponding to the K bytes, where L is an integer greater than or equal to 3, based on the address length of the continuous address segment being K bytes; and segmenting the continuous address segment into L address segments, where each segment has a length of ⌈K / L⌉ bytes. ⌉ indicates rounding up; if the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 1 segment, then the auxiliary terminal determines the 1+2*kth address segment out of L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+2*k is less than or equal to L; or, if the address segmentation indication information indicates that the number of segments between two adjacent non-contiguous address segments is 2 segments, then the auxiliary terminal determines the 1+3*kth address segment out of L address segments as one address segment, resulting in multiple non-contiguous address segments, where k is an integer starting from 0, and 1+3*k is less than or equal to L; where the number of segments between two adjacent non-contiguous address segments indicated by the address segmentation indication information is related to the high reliability requirement level of read command #2.

[0078] Optionally, the auxiliary terminal sends a read command #1 to the southbound device and receives data #1 returned by the southbound device, which was read by the southbound device according to the read command #1. This includes: the auxiliary terminal sending the read command #1 and security parameters to the southbound device; wherein, the security parameters include at least one: freshness parameter R1 or freshness parameter R2, where freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, and freshness parameter R2 is a parameter randomly generated by the station terminal, and freshness parameter R2 is obtained by the auxiliary terminal from the station terminal through a secure connection; the auxiliary terminal receives ciphertext #1, which is the encrypted version of data #1 returned by the southbound device, where ciphertext #1 is obtained by the southbound device encrypting data #1 according to the security parameters; the auxiliary terminal sends data #1 to the master station, including: the auxiliary terminal decrypting ciphertext #1 to obtain data #1; the auxiliary terminal encrypting data #1 using a key synchronized between the auxiliary terminal and the master station to obtain ciphertext #2, and sending ciphertext #2 to the master station.

[0079] Optionally, if the security parameter is the freshness parameter R2, the southbound device encrypts data #1 using session key #1 to obtain ciphertext #1. Session key #1 is derived by the southbound device from the pre-configured root key using the freshness parameter R2 provided by the substation terminal. Correspondingly, the auxiliary terminal is configured to: obtain the freshness parameter R2 from the substation terminal through a secure connection; and decrypt the ciphertext #1 to obtain data #1, including: the auxiliary terminal derives the session key #1 using the freshness parameter R2 to obtain the pre-configured root key, and then decrypts the ciphertext #1 using the session key #1 to obtain data #1.

[0080] Optionally, if at least one piece of information is a freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to deduce the root key to obtain the session key #2, and uses the session key #2 to encrypt the data #1 to obtain ciphertext #1; correspondingly, the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: the auxiliary terminal uses the freshness parameter R1 to deduce the pre-configured root key to obtain the session key #2, and uses the session key #2 to decrypt the ciphertext #1 to obtain the data #1.

[0081] Optionally, if at least one piece of information is freshness parameter R1 and freshness parameter R2, the southbound device uses freshness parameter R1 and freshness parameter R2 to deduce the session key #3 from the root key, and uses the session key #3 to encrypt data #1 to obtain ciphertext #1; correspondingly, the auxiliary terminal is configured to: the auxiliary terminal obtains freshness parameter R2 from the station terminal through a secure connection; the auxiliary terminal decrypts ciphertext #1 to obtain data #1, including: the auxiliary terminal uses freshness parameter R1 and freshness parameter R2 to deduce the pre-configured root key to obtain the session key #3, and uses the session key #3 to decrypt ciphertext #1 to obtain data #1.

[0082] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Exemplarily, the electronic device may be a network device, or a chip (system) or other component or assembly that can be disposed in a network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may also include a memory 402 and / or a transceiver 403. The processor 401 is coupled to the memory 402 and the transceiver 403, for example, via a communication bus.

[0083] The following is combined Figure 3 A detailed description of each component of the electronic device 400 is provided below:

[0084] The processor 401 is the control center of the electronic device 400. It can be a single processor or a collective term for multiple processing elements. For example, the processor 401 can be one or more central processing units (CPUs), application-specific integrated circuits (ASICs), or one or more integrated circuits configured to implement embodiments of the present invention, such as one or more digital signal processors (DSPs), or one or more field-programmable gate arrays (FPGAs).

[0085] Optionally, the processor 401 can perform various functions of the electronic device 400 by running or executing software programs stored in the memory 402 and calling data stored in the memory 402, such as performing the aforementioned functions. Figure 2 The method shown is for providing communication services with southbound equipment, distribution terminals, and the main station.

[0086] In a specific implementation, as one example, processor 401 may include one or more CPUs, for example... Figure 3 CPU0 and CPU1 are shown in the diagram.

[0087] In a specific implementation, as one example, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). Here, a processor may refer to one or more devices, circuits, and / or processing cores used to process data (e.g., computer program instructions).

[0088] The memory 402 is used to store the software program that executes the solution of the present invention, and is controlled by the processor 401 to execute it. The specific implementation method can be referred to the above method embodiment, and will not be repeated here.

[0089] Optionally, the memory 402 may be a read-only memory (ROM) or other type of static storage device capable of storing static information and instructions, random access memory (RAM) or other type of dynamic storage device capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital universal optical discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but not limited thereto. The memory 402 may be integrated with the processor 401 or exist independently, and may be accessed through the interface circuit of the electronic device 400. Figure 3 (Not shown in the image) is coupled to processor 401, and this embodiment of the invention does not specifically limit this.

[0090] Transceiver 403 is used for communication with other electronic devices. For example, if electronic device 400 is a terminal, transceiver 403 can be used to communicate with a network device or with another terminal device. As another example, if electronic device 400 is a network device, transceiver 403 can be used to communicate with a terminal or with another network device.

[0091] Alternatively, transceiver 403 may include a receiver and a transmitter. Figure 3(Not shown separately). The receiver is used to implement the receiving function, and the transmitter is used to implement the transmitting function.

[0092] Alternatively, the transceiver 403 can be integrated with the processor 401, or it can exist independently and be connected via the interface circuit of the electronic device 400. Figure 3 (Not shown in the image) is coupled to processor 401, and this embodiment of the invention does not specifically limit this.

[0093] Understandable, Figure 3 The structure of the electronic device 400 shown does not constitute a limitation on the electronic device. Actual electronic devices may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0094] Furthermore, the technical effects of the electronic device 400 can be referred to the technical effects of the methods described in the above method embodiments, and will not be repeated here.

[0095] It should be understood that the processor in the embodiments of the present invention can be a central processing unit (CPU), or it can be other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor.

[0096] It should also be understood that the memory in the embodiments of the present invention can be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. The non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. The volatile memory can be random access memory (RAM), which is used as an external cache. By way of example, but not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate synchronous DRAM (DDR SDRAM), enhanced synchronous DRAM (ESDRAM), synchronous linked DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0097] The above embodiments can be implemented, in whole or in part, by software, hardware (such as circuits), firmware, or any other combination thereof. When implemented using software, the above embodiments can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions or computer programs. When the computer instructions or computer programs are loaded or executed on a computer, all or part of the processes or functions described in the embodiments of the present invention are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more sets of available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium. A semiconductor medium can be a solid-state drive.

[0098] It should be understood that the term "and / or" in this article is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. A and B can be singular or plural. Additionally, the character " / " in this article generally indicates an "or" relationship between the preceding and following related objects, but it can also represent an "and / or" relationship. Please refer to the context for a more accurate understanding.

[0099] In this invention, "at least one" means one or more, and "more than one" means two or more. "At least one of the following" or similar expressions refer to any combination of these items, including any combination of a single item or a plurality of items. For example, at least one of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, and c can be a single item or multiple items.

[0100] It should be understood that, in various embodiments of the present invention, the order of the above-mentioned process numbers does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0101] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0102] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0103] In the embodiments provided by this invention, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or units may be electrical, mechanical, or other forms.

[0104] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0105] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0106] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0107] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A method for providing communication services with southbound equipment, a substation terminal, and a master station, characterized in that: The method is applied to an A-IoT scenario. In the A-IoT scenario, the method is performed by an auxiliary terminal, the auxiliary terminal supports a reader function, the southbound device is an A-IoT device, and the station terminal is also a terminal supporting a reader function. The method includes: The auxiliary terminal determines a read command #1 by interacting with the station area terminal, the address indicated by the read command #1 is at least a part of the address indicated by the read command #2, the read command #2 is provided by the master station, and the read command #2 needs to be sent by the station area terminal to the southbound device; The auxiliary terminal sends the read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, wherein the data #1 is the data collected by the southbound device; The auxiliary terminal sends the data #1 to the master station; The auxiliary terminal determines the read command #1 by interacting with the station terminal, including: When the auxiliary terminal is discovered by the station terminal, the auxiliary terminal establishes a secure connection with the station terminal; The auxiliary terminal receives the read command #2 from the station terminal through the secure connection; The auxiliary terminal determines the read command #1 according to the read command #2; The address indicated by the read command #2 is a continuous address segment, and the auxiliary terminal determines the read command #1 according to the read command #2, including: The auxiliary terminal determines a plurality of address segments with non-continuous addresses from the one address segment with continuous addresses; The auxiliary terminal determines the read command #1 according to the multiple non-continuous address segments of the address, and the address indicated by the read command #1 is the multiple non-continuous address segments of the address; The method further comprises: The auxiliary terminal receives address segmentation indication information from the station area terminal through the secure connection, wherein the address segmentation indication information indicates: when a continuous address segment is segmented, the number of segments between two adjacent non-continuous address segments; On this basis, the address length of the one address segment with continuous addresses is K bytes, K is an integer greater than 3, and the auxiliary terminal determines a plurality of address segments with non-continuous addresses from the one address segment with continuous addresses, including: The auxiliary terminal determines that the number of segments corresponding to the K bytes is L according to the address length of a continuous address segment of the address being K bytes, where L is an integer greater than or equal to 3, and the corresponding relationship between the number of segments and the address length is a positive correlation; The auxiliary terminal is based on the length of each segment. bytes, segmenting a continuous address segment of the address into L address segments, Indicates rounding up; If the address segmentation indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 1 segment, the auxiliary terminal determines that the 1+2*kth address segment among the L address segments is one address segment, and obtains the multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+2*k is less than or equal to L; or, if the address segmentation indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 2 segments, the auxiliary terminal determines that the 1+3*kth address segment among the L address segments is one address segment, and obtains the multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+3*k is less than or equal to L; The address segment indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is related to the high reliability requirement level of the read command #2.

2. The method according to claim 1, characterized in that In the case where the auxiliary terminal is discovered by the station area terminal, the auxiliary terminal establishes a secure connection with the station area terminal, including: In the case where the read command #2 is a command requiring high reliability, the auxiliary terminal receives a device discovery message from the station terminal, the device discovery message is used to discover a new reader, and the device discovery message indicates a designated area, and the designated area is an area where the southbound device is located; The auxiliary terminal sends a response to the device discovery message to the station terminal according to the service range of the auxiliary terminal covering the designated area, and the response to the device discovery message indicates that the auxiliary terminal can serve the designated area; In response to the auxiliary terminal sending a response of the device discovery message to the station terminal, the auxiliary terminal establishes a secure connection with the station terminal.

3. The method according to claim 1, characterized in that The auxiliary terminal sends the read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, including: The auxiliary terminal sends the read command #1 and security parameters to the southbound device; wherein the security parameters include at least one item: a freshness parameter R1 or a freshness parameter R2, wherein the freshness parameter R1 is a parameter randomly generated by the auxiliary terminal, and the freshness parameter R2 is a parameter randomly generated by the station terminal, and the freshness parameter R2 is obtained by the auxiliary terminal from the station terminal through the secure connection; The auxiliary terminal receives a ciphertext #1 of the encrypted data #1 returned by the southbound device, where the ciphertext #1 is obtained by the southbound device encrypting the data #1 according to the security parameter; The auxiliary terminal sends the data #1 to the master station, including: The auxiliary terminal decrypts the ciphertext #1 to obtain the data #1; The auxiliary terminal encrypts the data #1 using a key synchronized between the auxiliary terminal and the main station to obtain ciphertext #2, and sends the ciphertext #2 to the main station.

4. The method according to claim 3, characterized in that If the security parameter is the freshness parameter R2, the southbound device encrypts the data #1 using the session key #1 to obtain the ciphertext #1, wherein the session key #1 is obtained by deriving a preconfigured root key using the freshness parameter R2 provided by the station terminal in advance by the southbound device; Accordingly, the method further includes: The auxiliary terminal obtains the freshness parameter R2 from the station terminal through the secure connection; The auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: The auxiliary terminal uses the freshness parameter R2 to derive the pre-configured root key to obtain the session key #1, and uses the session key #1 to decrypt the ciphertext #1 to obtain the data #1.

5. The method according to claim 3, characterized in that: If the security parameter is the freshness parameter R1, the southbound device uses the freshness parameter R1 provided by the auxiliary terminal to derive the root key to obtain the session key #2, and uses the session key #2 to encrypt the data #1 to obtain the ciphertext #1; Correspondingly, the auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: The auxiliary terminal uses the freshness parameter R1 to derive the pre-configured root key to obtain the session key #2, and uses the session key #2 to decrypt the ciphertext #1 to obtain the data #1.

6. The method according to claim 3, characterized in that If the security parameters are the freshness parameters R1 and R2, the southbound device uses the freshness parameters R1 and R2 to derive the root key to obtain the session key #3, and uses the session key #3 to encrypt the data #1 to obtain the ciphertext #1; Accordingly, the method further includes: The auxiliary terminal obtains the freshness parameter R2 from the station terminal through the secure connection; The auxiliary terminal decrypts the ciphertext #1 to obtain the data #1, including: The auxiliary terminal uses the freshness parameter R1 and the freshness parameter R2 to derive the preconfigured root key to obtain the session key #3, and uses the session key #3 to decrypt the ciphertext #1 to obtain the data #1.

7. An auxiliary terminal for communication services with southbound equipment, area terminals, and master stations, characterized in that: Applied to the A-IoT scenario of the ambient Internet of Things, in which the auxiliary terminal supports the function of a reader, the southbound device is an A-IoT device, the station terminal is also a terminal supporting the reader function, and the auxiliary terminal is configured as follows: The auxiliary terminal determines a read command #1 by interacting with the station area terminal, the address indicated by the read command #1 is at least a part of the address indicated by the read command #2, the read command #2 is provided by the master station, and the read command #2 needs to be sent by the station area terminal to the southbound device; The auxiliary terminal sends the read command #1 to the southbound device, and receives data #1 returned by the southbound device and read by the southbound device according to the read command #1, wherein the data #1 is the data collected by the southbound device; The auxiliary terminal sends the data #1 to the master station; The auxiliary terminal determines the read command #1 by interacting with the station terminal, including: When the auxiliary terminal is discovered by the station terminal, the auxiliary terminal establishes a secure connection with the station terminal; The auxiliary terminal receives the read command #2 from the station terminal through the secure connection; The auxiliary terminal determines the read command #1 according to the read command #2; The address indicated by the read command #2 is a continuous address segment, and the auxiliary terminal determines the read command #1 according to the read command #2, including: The auxiliary terminal determines a plurality of address segments with non-continuous addresses from the one address segment with continuous addresses; The auxiliary terminal determines the read command #1 according to the multiple non-continuous address segments of the address, and the address indicated by the read command #1 is the multiple non-continuous address segments of the address; And, the auxiliary terminal receives address segment indication information from the station area terminal through the secure connection, the address segment indication information indicating: when a continuous address segment is segmented, the number of segments between two adjacent non-continuous address segments; On this basis, the address length of the one address segment with continuous addresses is K bytes, K is an integer greater than 3, and the auxiliary terminal determines a plurality of address segments with non-continuous addresses from the one address segment with continuous addresses, including: The auxiliary terminal determines that the number of segments corresponding to the K bytes is L according to the address length of a continuous address segment of the address being K bytes, where L is an integer greater than or equal to 3, and the corresponding relationship between the number of segments and the address length is a positive correlation; The auxiliary terminal is based on the length of each segment. bytes, segmenting a continuous address segment of the address into L address segments, Indicates rounding up; If the address segmentation indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 1 segment, the auxiliary terminal determines that the 1+2*kth address segment among the L address segments is one address segment, and obtains the multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+2*k is less than or equal to L; or, if the address segmentation indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is 2 segments, the auxiliary terminal determines that the 1+3*kth address segment among the L address segments is one address segment, and obtains the multiple address segments with discontinuous addresses, k is an integer traversed from 0, and 1+3*k is less than or equal to L; The address segment indication information indicates that the number of segments between two adjacent segments with discontinuous addresses is related to the high reliability requirement level of the read command #2.

Images