Information transmission method and device

Abstract

The invention provides an information transmission method and device, and the method comprises the steps: a relay terminal obtains a first request message, the first request message comprises at least one piece of first information and second information, the first information is used for indicating a direct communication secure connection establishment method supported by a first terminal, and the second information is used for indicating a direct communication secure connection establishment method supported by the first terminal; the second information is used for indicating a security policy of direct communication between the first terminal and the relay terminal; under the condition that the relay terminal meets the direct communication security requirement of the first terminal, the relay terminal sends a second request message to a second terminal; the direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message comprises at least one of third information and fourth information, and the third information is used for indicating a direct communication security connection establishment method supported by the relay terminal; the fourth information is used for indicating a security policy of direct communication between the relay terminal and the second terminal.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to an information transmission method and device. Background Art

[0002] 5G Proximity Services (5G ProSe) will support terminal-to-terminal (UE-to-UE, U2U) relay communication in R-18. In U2U relay communication, there are two modes for establishing direct communication security connections between user equipment (UE): one is a mode in which the network participates in establishing direct communication security connections, and the other is a mode in which the network does not participate in establishing direct communication security connections. The mode in which the network participates in establishing direct communication security can be divided into: a direct communication security connection establishment mode based on the user plane and a direct communication security connection establishment mode based on the control plane.

[0003] In order to realize U2U relay communication, the three terminals participating in the U2U relay communication need to discover each other first. However, the UE that has executed the U2U relay discovery process may not be able to establish direct communication due to security capability mismatch, thereby failing to realize the final U2U relay communication, which in turn affects the efficiency of establishing U2U relay communication. Summary of the invention

[0004] The purpose of the present application is to provide an information transmission method and device to solve the problem that a UE that has executed a U2U relay discovery process in a related solution may be unable to establish direct communication due to a mismatch in security capabilities.

[0005] In order to achieve the above object, the present application provides an information transmission method, comprising:

[0006] The relay terminal obtains a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal;

[0007] In a case where the relay terminal meets the direct communication security requirement of the first terminal, the relay terminal sends a second request message to the second terminal;

[0008] The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

[0009] Optionally, the second request message also includes at least one of the first information and the second information.

[0010] Optionally, the security of the security policy indicated by the fourth information meets the security of the security policy indicated by the second information.

[0011] Optionally, the first information includes:

[0012] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0013] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0014] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0015] Optionally, the third information includes:

[0016] A second list, wherein the second list includes at least one direct communication security connection establishment method supported by the relay terminal.

[0017] Optionally, the sorting order of the direct communication security connection establishment methods in the second list is related to the priority of the direct communication security connection establishment methods.

[0018] Optionally, the second request message includes a second relay discovery data set and a first direct discovery data set, the third information is located in the second relay discovery data set, the fourth information is located in the second relay discovery data set, and the first direct discovery data set is the direct discovery data set in the first request message.

[0019] The present application also provides an information transmission method, including:

[0020] The first terminal sends a first request message, which includes at least one of first information and second information, the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0021] Optionally, the first information includes:

[0022] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0023] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0024] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0025] The present application also provides an information transmission method, including:

[0026] The second terminal obtains a second request message sent by at least one relay terminal, where the second request message includes at least one item of third information and fourth information, where the third information is used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information is used to indicate a security policy for direct communication between the relay terminal and the second terminal;

[0027] The second terminal determines at least one of a target direct communication secure connection establishment method and a target security policy according to the second request message sent by the at least one relay terminal;

[0028] Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

[0029] Optionally, the second request message further includes at least one of the first information and the second information;

[0030] The first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0031] Optionally, when the second request message also includes the second information, the second terminal determines at least one of a target direct communication security connection establishment method and a target security policy according to the second request message sent by the relay terminal, including:

[0032] When the security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information, the second terminal determines at least one of the target direct communication security connection establishment method and the target security policy based on the second request message sent by the relay terminal.

[0033] Optionally, after the second terminal obtains the second request message sent by at least one relay terminal, the method further includes:

[0034] The second terminal selects a relay terminal from the at least one relay terminal as the target relay terminal according to a relay selection policy.

[0035] The embodiment of the present application also provides an information transmission device, including a memory, a transceiver, and a processor;

[0036] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0037] Obtaining a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal;

[0038] When the relay terminal meets the direct communication security requirement of the first terminal, sending a second request message to the second terminal;

[0039] The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

[0040] Optionally, the second request message also includes at least one of the first information and the second information.

[0041] Optionally, the security of the security policy indicated by the fourth information meets the security of the security policy indicated by the second information.

[0042] Optionally, the first information includes:

[0043] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0044] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0045] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0046] Optionally, the third information includes:

[0047] A second list, wherein the second list includes at least one direct communication security connection establishment method supported by the relay terminal.

[0048] Optionally, the sorting order of the direct communication security connection establishment methods in the second list is related to the priority of the direct communication security connection establishment methods.

[0049] Optionally, the second request message includes a second relay discovery data set and a first direct discovery data set, the third information is located in the second relay discovery data set, the fourth information is located in the second relay discovery data set, and the first direct discovery data set is the direct discovery data set in the first request message.

[0050] The embodiment of the present application also provides an information transmission device, including a memory, a transceiver, and a processor;

[0051] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0052] A first request message is sent, wherein the first request message includes at least one item of first information and second information, wherein the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0053] Optionally, the first information includes:

[0054] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0055] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0056] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0057] The embodiment of the present application also provides an information transmission device, including a memory, a transceiver, and a processor;

[0058] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0059] Acquire a second request message sent by at least one relay terminal, where the second request message includes at least one item of third information and fourth information, where the third information is used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information is used to indicate a security policy for direct communication between the relay terminal and the second terminal;

[0060] Determining at least one of a target direct communication secure connection establishment method and a target security policy according to the second request message sent by the at least one relay terminal;

[0061] Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

[0062] Optionally, the second request message further includes at least one of the first information and the second information;

[0063] The first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0064] Optionally, when the second request message further includes the second information, the processor further implements the following steps:

[0065] When the security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information, at least one of the target direct communication security connection establishment method and the target security policy is determined according to the second request message sent by the relay terminal.

[0066] Optionally, the processor further implements the following steps:

[0067] According to the relay selection strategy, a relay terminal is selected from the at least one relay terminal as the target relay terminal.

[0068] The present application also provides an information transmission device, including:

[0069] A first acquiring unit, configured to acquire a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal;

[0070] A first sending unit, configured to send a second request message to a second terminal when the relay terminal meets the direct communication security requirement of the first terminal;

[0071] The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

[0072] The present application also provides an information transmission device, including:

[0073] A second sending unit is used to send a first request message, wherein the first request message includes at least one of first information and second information, the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0074] The present application also provides an information transmission device, including:

[0075] a second acquiring unit, configured to acquire a second request message sent by at least one relay terminal, the second request message including at least one item of third information and fourth information, the third information being used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information being used to indicate a security policy for direct communication between the relay terminal and the second terminal;

[0076] a determining unit, configured to determine at least one of a target direct communication secure connection establishment method and a target security policy according to a second request message sent by the at least one relay terminal;

[0077] Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

[0078] An embodiment of the present application further provides a processor-readable storage medium, wherein the processor-readable storage medium stores a computer program, and the computer program is used to enable the processor to execute the steps of the information transmission method as described above.

[0079] The above technical solution of the present application has at least the following beneficial effects:

[0080] In an embodiment of the present application, the relay terminal obtains a first request message, the first request message includes at least one of the first information and the second information, the first information is used to indicate the direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate the security policy for direct communication between the first terminal and the relay terminal; when the relay terminal meets the direct communication security requirements of the first terminal, the relay terminal sends a second request message to the second terminal; the second request message includes at least one of the third information and the fourth information, the third information is used to indicate the direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal. Through the above scheme, the relay communication participants can determine whether the direct communication security establishment requirements are met in the discovery stage, thereby avoiding the subsequent failure of direct communication connection establishment due to failure to meet the direct communication security establishment requirements, and improving the communication reliability and communication efficiency of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0081] Figure 1 A schematic diagram showing a flow chart of an information transmission method according to an embodiment of the present application;

[0082] Figure 2 A second flowchart of the information transmission method according to an embodiment of the present application is shown;

[0083] Figure 3 A third flowchart of the information transmission method according to an embodiment of the present application is shown;

[0084] Figure 4 One of the structural schematic diagrams showing the first request message in an embodiment of the present application;

[0085] Figure 5 One of the structural schematic diagrams showing the second request message in an embodiment of the present application;

[0086] Figure 6A second structural diagram showing a first request message in an embodiment of the present application;

[0087] Figure 7 A second structural diagram showing a second request message in an embodiment of the present application;

[0088] Figure 8 A structural block diagram showing an information transmission device according to an embodiment of the present application;

[0089] Fig. 9 One of the module schematic diagrams showing the information transmission device according to an embodiment of the present application;

[0090] Fig.10 A second schematic diagram showing a module of the information transmission device according to an embodiment of the present application;

[0091] Fig.11 A third schematic diagram of a module showing the information transmission device according to an embodiment of the present application. DETAILED DESCRIPTION

[0092] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0093] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application described herein, for example, are implemented in a sequence other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, the process, method, system, product or equipment comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or equipment.

[0094] In the embodiments of the present application, the term "and / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent three situations: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. In the embodiments of the present application, the term "plurality" refers to two or more than two, and other quantifiers are similar.

[0095] In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0096] In order to enable those skilled in the art to better understand the embodiments of the present application, the following description is first made.

[0097] 5G ProSe supports two discovery modes:

[0098] Model A: The announcing UE sends an announcement message to announce its existence, and the monitoring UE does not need to reply after receiving the announcement message. The monitoring UE can establish a communication connection with the announcing UE as needed.

[0099] Model B: The discoverer UE actively sends a discovery request message to find the discoveree UE; the discoveree UE needs to reply to the discoverer UE after receiving the message. Then, the discoverer UE establishes a communication connection with the discoveree UE.

[0100] 5G ProSe will support UE-to-UE relay (U2U Relay) communication scenarios, that is, the source UE (Source UE) establishes a communication connection with the target UE (Target UE) through the relay UE (Relay UE). U2U relay communication first involves the end UE (source UE, target UE) discovering each other through the relay UE, and then establishing a communication connection based on this. In the relay communication scenario, the source UE can be the Monitoring UE or Discoverer UE in the discovery process, and the target UE can be the Announcing UE or Discoveree UE in the discovery process.

[0101] The U2U relay discovery message contains two parts: the data required for interaction between the source UE / target UE and the relay UE, called the relay discovery data set (U2U discovery set); the data required for interaction between the source UE and the target UE, called the direct discovery data set (direct discovery set).

[0102] PC5 security in U2U relay communication can be established in two ways:

[0103] Method 1: Establish PC5 security between UEs with the participation of core network elements. In this case, the RelayUE needs to be within the network coverage. In this method, there are two options:

[0104] PC5 security establishment method based on user plane;

[0105] PC5 security establishment method based on control plane.

[0106] Mode 2: Independent of the core network element, PC5 security is directly established between UEs. In this case, the RelayUE does not need to be within the network coverage.

[0107] In addition, the end UE and relay UE may have the following capabilities to establish PC5 security:

[0108] Supports PC5 security establishment process based on both user plane and control plane;

[0109] Only supports the PC5 security establishment process based on the user plane;

[0110] Only supports the PC5 security establishment process based on the control plane;

[0111] Only PC5 security establishment process independent of core network elements is supported.

[0112] In the related art, there is no relevant solution as to which method the end UE and the relay UE should adopt to establish PC5 communication security, and how the communicating parties determine the method to be adopted.

[0113] The information transmission method provided in the embodiment of the present application is described in detail below through some embodiments and their application scenarios in combination with the accompanying drawings.

[0114] like Figure 1 As shown, an embodiment of the present application provides an information transmission method, including:

[0115] Step 101: The relay terminal obtains a first request message, where the first request message includes at least one item of first information and second information, where the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0116] In this step, the relay terminal obtains a first request message sent by a first terminal, the first terminal may be specifically a source terminal. The first terminal establishes a direct communication connection with a second terminal through the relay terminal. The second terminal may be specifically a target terminal.

[0117] The direct communication security connection in the embodiment of the present application can be established through a direct communication interface (also called a PC5 interface). That is, the above-mentioned direct communication security connection establishment method can also be described as a PC5 communication security connection establishment method.

[0118] The first request message may be a first relay discovery request message or a first direct access request (Direct Access Request, DCR).

[0119] Step 102: When the relay terminal meets the direct communication security requirement of the first terminal, the relay terminal sends a second request message to the second terminal;

[0120] The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

[0121] The second request message may be a second relay discovery request message or a second direct access request.

[0122] Exemplarily, in the case where the first request message is a first relay discovery request message, the second request message is a second relay discovery request message;

[0123] In the case that the first request message is a first direct access request, the second request message is a second direct access request.

[0124] Optionally, the first request message includes the first information, and the second request message includes the third information; or, the first request message includes the second information, and the second request message includes the fourth information; or, the first request message includes the first information and the second information, and the second request message includes the third information and the fourth information.

[0125] Assuming that the first request message includes the first information and the second information, the relay terminal performs the following detection after receiving the first request message:

[0126] Detecting whether the relay terminal supports the direct communication secure connection establishment method provided in the first request message;

[0127] Check whether the relay terminal supports the security policy provided by the first request message.

[0128] If the relay terminal supports the direct communication security connection establishment method and security policy provided in the first request message, it is determined that the direct communication security requirements of the first terminal can be met, and the corresponding direct communication security connection establishment method and security policy are adopted to communicate with the first terminal PC5, and a second request message can be generated.

[0129] In addition, the security policy in the embodiment of the present application is a security policy for the PC5 communication control plane and the user plane. Specifically, for the NR PC5 unicast link, the following content should be provided to the UE:

[0130] A list of vehicle to X (V2X) services, such as the Provider Service Identifier (PSID) or Intelligent Transport System-Application Identifier (ITS-AID) of the V2X application, as well as the geographic region and its security policy, indicating the following:

[0131] Signal integrity protection: required / preferred / not required;

[0132] Signal confidentiality protection: required / preferred / not required;

[0133] User plane integrity protection: required / preferred / not required;

[0134] User plane confidentiality protection: required / preferred / not required.

[0135] For example, the second message in the above-mentioned first request message may be that signal confidentiality protection needs to be enabled, or signal confidentiality protection may be enabled first (or not enabled), or signal confidentiality protection does not need to be enabled, etc.

[0136] In the above scheme of the embodiment of the present application, the relay terminal obtains a first request message, and the first request message includes at least one of the first information and the second information, the first information is used to indicate the direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate the security policy for direct communication between the first terminal and the relay terminal; when the relay terminal meets the direct communication security requirements of the first terminal, the relay terminal sends a second request message to the second terminal; the second request message includes at least one of the third information and the fourth information, the third information is used to indicate the direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal. Through the above scheme, the relay communication participants can determine whether the direct communication security establishment requirements are met in the discovery stage, thereby avoiding the subsequent failure of direct communication connection establishment due to failure to meet the direct communication security establishment requirements, and improving the communication reliability and communication efficiency of the system.

[0137] Optionally, the second request message also includes at least one of the first information and the second information.

[0138] Here, in addition to the third information and / or the fourth information, the second request message may also include the first information and / or the second information, so that when the second terminal determines the method and / or security policy for establishing a direct communication security connection between the relay terminal and the second terminal based on the second request message, it can refer to the method and / or security policy for establishing a direct communication security connection between the first terminal and the relay terminal to ensure that the communication security between the second terminal and the relay terminal can meet the communication security between the first terminal and the relay terminal.

[0139] Optionally, the security of the security policy indicated by the fourth information meets the security of the security policy indicated by the second information.

[0140] For example, the security policy indicated by the fourth information is more secure than the security policy indicated by the second information. Exemplarily, if the first terminal sets the PC5 signaling encryption security policy between it and the relay terminal to be enabled first, the relay terminal cannot set the PC5 signaling encryption security policy between it and the target terminal to not need to be enabled.

[0141] Optionally, the first information includes:

[0142] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0143] In an embodiment of the present application, at least one of the above-mentioned direct communication secure connection establishment methods can be represented in the form of a list.

[0144] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0145] For example, the priority of the direct communication secure connection establishment method in the front is higher. In this way, the priority of the direct communication secure connection establishment method can be obtained through the arrangement order of the direct communication secure connection establishment method.

[0146] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0147] Optionally, the third information includes:

[0148] A second list, wherein the second list includes at least one direct communication security connection establishment method supported by the relay terminal.

[0149] Optionally, the sorting order of the direct communication security connection establishment methods in the second list is related to the priority of the direct communication security connection establishment methods.

[0150] Optionally, the second request message includes a second relay discovery data set and a first direct discovery data set, the third information is located in the second relay discovery data set, the fourth information is located in the second relay discovery data set, and the first direct discovery data set is the direct discovery data set in the first request message.

[0151] In an embodiment of the present application, the relay terminal obtains a first request message, the first request message includes at least one of the first information and the second information, the first information is used to indicate the direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate the security policy for direct communication between the first terminal and the relay terminal; when the relay terminal meets the direct communication security requirements of the first terminal, the relay terminal sends a second request message to the second terminal; the second request message includes at least one of the third information and the fourth information, the third information is used to indicate the direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal. Through the above scheme, the relay communication participants can determine whether the direct communication security establishment requirements are met in the discovery stage, thereby avoiding the subsequent failure of direct communication connection establishment due to failure to meet the direct communication security establishment requirements, and improving the communication reliability and communication efficiency of the system.

[0152] like Figure 2 As shown, the embodiment of the present application also provides an information transmission method, including:

[0153] Step 201: The first terminal sends a first request message, which includes at least one item of first information and second information, the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0154] The first terminal may be specifically a source terminal. The first terminal establishes a direct communication connection with the second terminal through the relay terminal. The second terminal may be specifically a target terminal.

[0155] The direct communication security connection in the embodiment of the present application can be established through a direct communication interface (also called a PC5 interface). That is, the above-mentioned direct communication security connection establishment method can also be described as a PC5 communication security connection establishment method.

[0156] The first request message may be a first relay discovery request message or a first direct access request (Direct Access Request, DCR).

[0157] In an embodiment of the present application, the first terminal includes at least one of the first information and the second information in the first request message, so that the relay terminal can determine whether the direct communication security establishment requirements are met in the discovery phase based on the first request message, thereby avoiding the subsequent failure of direct communication connection establishment due to failure to meet the direct communication security establishment requirements, and improving the communication reliability and communication efficiency of the system.

[0158] Optionally, the first information includes:

[0159] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0160] In an embodiment of the present application, at least one of the above-mentioned direct communication secure connection establishment methods can be represented in the form of a list.

[0161] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0162] For example, the priority of the direct communication secure connection establishment method in the front is higher. In this way, the priority of the direct communication secure connection establishment method can be obtained through the arrangement order of the direct communication secure connection establishment method.

[0163] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0164] In the above-mentioned scheme of the embodiment of the present application, the first terminal includes at least one of the first information and the second information in the first request message, so that the relay terminal can determine whether the direct communication security establishment requirements are met in the discovery phase based on the first request message, thereby avoiding the subsequent failure of direct communication connection establishment due to failure to meet the direct communication security establishment requirements, and improving the communication reliability and communication efficiency of the system.

[0165] like Figure 3 As shown, the embodiment of the present application also provides an information transmission method, including:

[0166] Step 301: The second terminal obtains a second request message sent by at least one relay terminal, the second request message includes at least one item of third information and fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate a security policy for direct communication between the relay terminal and the second terminal.

[0167] In the embodiment of the present application, the second terminal is a target terminal, and the first terminal establishes a direct communication connection with the second terminal through the relay terminal. The first terminal may be specifically a source terminal.

[0168] The direct communication security connection in the embodiment of the present application can be established through a direct communication interface (also called a PC5 interface). That is, the above-mentioned direct communication security connection establishment method can also be described as a PC5 communication security connection establishment method.

[0169] The second request message may be a second relay discovery request message or a second direct access request.

[0170] Exemplarily, in the case where the first request message is a first relay discovery request message, the second request message is a second relay discovery request message;

[0171] In the case that the first request message is a first direct access request, the second request message is a second direct access request.

[0172] Step 302: The second terminal determines at least one of a target direct communication secure connection establishment method and a target security policy according to the second request message sent by the at least one relay terminal;

[0173] Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

[0174] Optionally, when the second request message includes the third information, the second terminal determines a target direct communication security connection establishment method;

[0175] In the case where the second request message includes the fourth information, the second terminal determines the target security policy.

[0176] In the case where the above-mentioned second request message includes the third information and the fourth information, the second terminal determines the target direct communication security connection establishment method according to the third information, and determines the target security policy according to the fourth information.

[0177] The above-mentioned target direct communication security connection establishment method is a direct communication security connection establishment method adopted when the second terminal communicates directly with the terminal, and the above-mentioned target security policy is a security policy adopted when the second terminal communicates directly with the terminal.

[0178] As an example, after receiving the second request message sent by the relay terminal, the second terminal detects whether the second terminal can meet the direct communication security requirements of the relay terminal. For example, if the second terminal supports the direct communication security connection establishment method and security policy in the second request message, it is determined that the second terminal can meet the direct communication security requirements of the relay terminal, and the corresponding direct communication security connection establishment method and security policy are adopted to communicate with the relay terminal PC5.

[0179] In an embodiment of the present application, the second terminal obtains a second request message sent by at least one relay terminal; based on the second request message sent by the at least one relay terminal, at least one of the target direct communication security connection establishment method and the target security policy is determined, so that the second terminal can determine whether the direct communication security establishment requirements are met during the discovery phase, thereby avoiding the subsequent failure of direct communication connection establishment due to failure to meet the direct communication security establishment requirements, and improving the communication reliability and communication efficiency of the system.

[0180] Optionally, the second request message further includes at least one of the first information and the second information;

[0181] The first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0182] Here, in addition to the third information and / or the fourth information, the second request message may also include the first information and / or the second information, so that when the second terminal determines the direct communication security connection establishment method and / or security policy between the relay terminal and the second terminal based on the second request message, it can refer to the direct communication security connection establishment method and / or security policy between the first terminal and the relay terminal to ensure that the communication security between the second terminal and the relay terminal can meet the communication security between the first terminal and the relay terminal. Optionally, the security of the security policy in the second request message meets the security of the security policy in the first request message.

[0183] Optionally, when the second request message also includes the second information, the second terminal determines at least one of a target direct communication security connection establishment method and a target security policy according to the second request message sent by the relay terminal, including:

[0184] When the security of the security policy indicated by the fourth information meets the security of the security policy indicated by the second information, the second terminal determines at least one of the target direct communication security connection establishment method and the target security policy based on the second request message sent by the relay terminal.

[0185] In an embodiment of the present application, when the second request message also includes the above-mentioned second information, the second terminal determines whether the security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information. If so, it determines at least one of the target direct communication security connection establishment method and the target security policy; otherwise, it ignores the second request message.

[0186] Optionally, after the second terminal obtains the second request message sent by at least one relay terminal, the method further includes:

[0187] The second terminal selects a relay terminal from the at least one relay terminal as the target relay terminal according to a relay selection policy.

[0188] In an embodiment of the present application, after the second terminal receives the second request message sent by multiple relay terminals, based on the locally set relay selection policy, the target relay terminal is selected to perform a subsequent discovery process (Model B scenario) or establish a communication process (Model A scenario). For example, a relay UE that can provide the strongest security (such as supporting the establishment of PC5 security between UEs with the participation of core network elements) is selected, or a relay UE with the strongest communication signal strength is selected, etc.

[0189] In the above-mentioned scheme of the embodiment of the present application, the second terminal obtains a second request message sent by at least one relay terminal; and determines at least one of the target direct communication security connection establishment method and the target security policy based on the second request message sent by the at least one relay terminal. In this way, the second terminal can determine whether the direct communication security establishment requirements are met during the discovery phase, thereby avoiding the subsequent failure of direct communication connection establishment due to failure to meet the direct communication security establishment requirements, thereby improving the communication reliability and communication efficiency of the system.

[0190] The information transmission method of the present application is described below in conjunction with embodiments.

[0191] The first embodiment of the present application is directed to a scenario in which the PC5 security policy of the source UE (first terminal) is located in a direct discovery data set:

[0192] The technical solution described in this embodiment is applicable to the scenario where the relay UE has low credibility. In the case where the data set is directly found to be integrity protected, the solution can prevent the relay UE from tampering with the PC5 security policy and selecting the low-security PC5 security policy in the second stage, thereby causing information leakage.

[0193] The structure of the relay discovery request message 1 (i.e., the first request message) generated by the source UE is as follows: Figure 4 As shown, the PC5 security policy 1 (i.e., the security policy corresponding to the second information) in the direct discovery data set cannot be encrypted by the direct discovery key shared between the source UE and the target UE (i.e., the second terminal), otherwise the relay UE will not be able to obtain the content of the security policy. However, the policy can be protected by the integrity of the direct discovery key shared between the source UE and the target UE.

[0194] The structure of the relay discovery request message 2 (i.e., the second request message) generated by the Relay UE is as follows Figure 5 As shown, the relay discovery request message 2 does not need to continue to include the first information provided by the source UE. Among them, PC5 security policy 2 is (the security policy corresponding to the fourth information). When the discovery mode is Model A, the direct data set part can be a list of direct discovery data sets from multiple different source UEs. When the discovery mode is Model B, the direct data set part is a direct discovery data set from a single source UE.

[0195] The second embodiment of the present application is aimed at the scenario where the source UE PC5 security policy is located in the relay discovery data set. The scenario described in this embodiment is suitable for the scenario where the relay UE has high credibility, that is, the scenario where the possibility of the relay UE tampering with the PC5 security policy is low. The structure of the source UE generating the relay discovery request message 1 (i.e., the first request message) is as follows: Figure 6 As shown, the structure of the relay discovery request message 2 (i.e., the second request message) generated by the RelayUE is as follows Figure 7 The relay discovery request message 2 does not need to continue to include the first information and / or the second information provided by the source UE.

[0196] The third embodiment of the present application is directed to a scenario where the first information, the second information, the third information and the fourth information are integrated into the DCR. The relevant technical support is to place the discovery information of the target UE into a direct DCR message, thereby eliminating the need for a separate UE discovery process and improving communication efficiency. In this process, at least one of the following is met:

[0197] Item 1: The source UE includes the following parameters in the DCR it sends to the relay UE:

[0198] First information;

[0199] Second information:

[0200] Item 2: The relay UE includes the following parameters in the DCR it sends to the target UE:

[0201] Third information;

[0202] Fourth information;

[0203] In this embodiment, the processing method of the source UE, relay UE and target UE for the PC5 security establishment method list and PC5 security policy is the same as described in the above solution. The difference is that the message carrying these parameters is a DCR message instead of a ProSe discovery message.

[0204] like Figure 8 As shown, an embodiment of the present application provides an information transmission device, including a memory 820, a transceiver 800, and a processor 810;

[0205] The memory 820 is used to store computer programs; the transceiver 800 is used to send and receive data under the control of the processor 810;

[0206] In one embodiment of the present application, the processor 810 is configured to read the computer program in the memory 820 and perform the following operations:

[0207] Obtaining a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal;

[0208] When the relay terminal meets the direct communication security requirement of the first terminal, sending a second request message to the second terminal;

[0209] The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

[0210] Optionally, the second request message also includes at least one of the first information and the second information.

[0211] Optionally, the security of the security policy indicated by the fourth information meets the security of the security policy indicated by the second information.

[0212] Optionally, the first information includes:

[0213] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0214] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0215] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0216] Optionally, the third information includes:

[0217] A second list, wherein the second list includes at least one direct communication security connection establishment method supported by the relay terminal.

[0218] Optionally, the sorting order of the direct communication security connection establishment methods in the second list is related to the priority of the direct communication security connection establishment methods.

[0219] Optionally, the second request message includes a second relay discovery data set and a first direct discovery data set, the third information is located in the second relay discovery data set, the fourth information is located in the second relay discovery data set, and the first direct discovery data set is the direct discovery data set in the first request message.

[0220] In one embodiment of the present application, the processor 810 is configured to read the computer program in the memory 820 and perform the following operations:

[0221] A first request message is sent, wherein the first request message includes at least one item of first information and second information, wherein the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0222] Optionally, the first information includes:

[0223] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0224] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0225] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0226] In one embodiment of the present application, the processor 810 is configured to read the computer program in the memory 820 and perform the following operations:

[0227] Acquire a second request message sent by at least one relay terminal, where the second request message includes at least one item of third information and fourth information, where the third information is used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information is used to indicate a security policy for direct communication between the relay terminal and the second terminal;

[0228] Determining at least one of a target direct communication secure connection establishment method and a target security policy according to the second request message sent by the at least one relay terminal;

[0229] Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

[0230] Optionally, the second request message further includes at least one of the first information and the second information;

[0231] The first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0232] Optionally, when the second request message further includes the second information, the processor further implements the following steps:

[0233] When the security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information, at least one of the target direct communication security connection establishment method and the target security policy is determined according to the second request message sent by the relay terminal.

[0234] Optionally, the processor further implements the following steps:

[0235] According to the relay selection strategy, a relay terminal is selected from the at least one relay terminal as the target relay terminal.

[0236] Among them, Figure 8 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 810 and various circuits of memory represented by memory 820 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 800 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, including transmission media such as wireless channels, wired channels, and optical cables. For different user devices, the user interface 830 may also be an interface capable of externally and internally connecting required devices, and the connected devices include but are not limited to a keypad, a display, a speaker, a microphone, a joystick, and the like.

[0237] The processor 810 is responsible for managing the bus architecture and general processing, and the memory 820 can store data used by the processor 810 when performing operations.

[0238] Optionally, the processor 810 may be a CPU (central processing unit), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array) or a CPLD (Complex Programmable Logic Device), and the processor may also adopt a multi-core architecture.

[0239] The processor calls the computer program stored in the memory to execute any of the methods provided in the embodiments of the present application according to the obtained executable instructions. The processor and the memory can also be arranged physically separately.

[0240] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned information transmission method embodiment, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0241] like Fig. 9 As shown, the embodiment of the present application also provides an information transmission device, including:

[0242] A first acquiring unit 901 is configured to acquire a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal;

[0243] A first sending unit 902 is configured to send a second request message to a second terminal when the relay terminal meets the direct communication security requirement of the first terminal;

[0244] The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

[0245] Optionally, the second request message also includes at least one of the first information and the second information.

[0246] Optionally, the security of the security policy indicated by the fourth information meets the security of the security policy indicated by the second information.

[0247] Optionally, the first information includes:

[0248] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0249] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0250] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0251] Optionally, the third information includes:

[0252] A second list, wherein the second list includes at least one direct communication security connection establishment method supported by the relay terminal.

[0253] Optionally, the sorting order of the direct communication security connection establishment methods in the second list is related to the priority of the direct communication security connection establishment methods.

[0254] Optionally, the second request message includes a second relay discovery data set and a first direct discovery data set, the third information is located in the second relay discovery data set, the fourth information is located in the second relay discovery data set, and the first direct discovery data set is the direct discovery data set in the first request message.

[0255] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned information transmission method embodiment applied to the relay terminal, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0256] like Fig.10 As shown, the embodiment of the present application also provides an information transmission device, including:

[0257] The second sending unit 1001 is used to send a first request message, wherein the first request message includes at least one item of first information and second information, the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0258] Optionally, the first information includes:

[0259] A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

[0260] Optionally, the arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

[0261] Optionally, the first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

[0262] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned information transmission method embodiment applied to the first terminal, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0263] like Fig.11 As shown, the embodiment of the present application also provides an information transmission device, including:

[0264] A second acquiring unit 1101 is configured to acquire a second request message sent by at least one relay terminal, where the second request message includes at least one item of third information and fourth information, where the third information is used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information is used to indicate a security policy for direct communication between the relay terminal and the second terminal;

[0265] a determining unit, configured to determine at least one of a target direct communication secure connection establishment method and a target security policy according to a second request message sent by the at least one relay terminal;

[0266] Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

[0267] Optionally, the second request message further includes at least one of the first information and the second information;

[0268] The first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

[0269] Optionally, when the second request message also includes the second information, the determination unit is used to determine at least one of the target direct communication security connection establishment method and the target security policy according to the second request message sent by the relay terminal, when the security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information.

[0270] Optionally, the device of the embodiment of the present application further includes:

[0271] A selecting unit is configured to select a relay terminal from the at least one relay terminal as the target relay terminal according to a relay selection policy after the second obtaining unit obtains the second request message sent by the at least one relay terminal.

[0272] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned information transmission method embodiment applied to the second terminal, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0273] It should be noted that the division of units in the embodiments of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional unit in each embodiment of the present application may be integrated into a processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0274] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor (processor) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), disk or optical disk and other media that can store program codes.

[0275] In some embodiments of the present application, a processor-readable storage medium is also provided, which stores program instructions, and the program instructions are used to enable the processor to execute all the steps implemented in the above-mentioned information transmission method embodiment, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0276] The terminal device involved in the embodiment of the present application may be a device that provides voice and / or data connectivity to a user, a handheld device with a wireless connection function, or other processing devices connected to a wireless modem. In different systems, the name of the terminal device may also be different. For example, in a 5G system, the terminal device may be called a user equipment (UE). A wireless terminal device can communicate with one or more core networks (CN) via a radio access network (RAN). The wireless terminal device may be a mobile terminal device, such as a mobile phone (or a "cellular" phone) and a computer with a mobile terminal device. For example, it may be a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device that exchanges language and / or data with a wireless access network. For example, personal communication service (PCS) phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDAs) and other devices. The wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, a remote terminal device, an access terminal device, a user terminal device, a user agent, and a user device, but is not limited in the embodiments of the present application.

[0277] The network device (or network side device) involved in the embodiment of the present application may be a base station, which may include multiple cells providing services for the terminal. Depending on the specific application scenario, the base station may also be called an access point, or may be a device in the access network that communicates with the wireless terminal device through one or more sectors on the air interface, or other names. The network device may be used to interchange received air frames with Internet Protocol (IP) packets, and serve as a router between the wireless terminal device and the rest of the access network, wherein the rest of the access network may include an Internet Protocol (IP) communication network. The network device may also coordinate the attribute management of the air interface. For example, the network device involved in the embodiments of the present application may be a network device (Base TransceiverStation, BTS) in the Global System for Mobile communications (Global System for Mobile communications, GSM) or Code Division Multiple Access (Code Division Multiple Access, CDMA), or a network device (NodeB) in Wide-band Code Division Multiple Access (WCDMA), or an evolutionary network device (evolutional Node B, eNB or e-NodeB) in the Long Term Evolution (Long Term Evolution, LTE) system, a 5G base station (gNB) in the 5G network architecture (next generation system), or a home evolved Node B (Home evolved Node B, HeNB), a relay node, a home base station (femto), a pico base station (pico), etc., which is not limited in the embodiments of the present application. In some network structures, the network device may include a centralized unit (CU) node and a distributed unit (DU) node, and the centralized unit and the distributed unit may also be arranged geographically separately.

[0278] Network devices and terminal devices can each use one or more antennas for multiple-input multiple-output (MIMO) transmission. MIMO transmission can be single-user MIMO (SU-MIMO) or multi-user MIMO (MU-MIMO). Depending on the form and number of antenna combinations, MIMO transmission can be 2D-MIMO, 3D-MIMO, FD-MIMO or massive-MIMO, or it can be diversity transmission, precoded transmission or beamforming transmission, etc.

[0279] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0280] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer executable instructions. These computer executable instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0281] These processor executable instructions may also be stored in a processor readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the processor readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0282] These processor-executable instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0283] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. An information transmission method, characterized in that: include: The relay terminal obtains a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal; In a case where the relay terminal meets the direct communication security requirement of the first terminal, the relay terminal sends a second request message to the second terminal; The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

2. The method according to claim 1, characterized in that The second request message further includes at least one of the first information and the second information.

3. The method according to claim 1, characterized in that The security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information.

4. The method according to claim 1, characterized in that: The first information includes: A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

5. The method according to claim 4, characterized in that The arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

6. The method according to claim 1, characterized in that The first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

7. The method according to claim 1, characterized in that The third information includes: A second list, wherein the second list includes at least one direct communication security connection establishment method supported by the relay terminal.

8. The method according to claim 7, characterized in that The sorting order of the direct communication security connection establishment methods in the second list is related to the priority of the direct communication security connection establishment methods.

9. The method according to claim 1, characterized in that: The second request message includes a second relay discovery data set and a first direct discovery data set, the third information is located in the second relay discovery data set, the fourth information is located in the second relay discovery data set, and the first direct discovery data set is the direct discovery data set in the first request message.

10. An information transmission method, characterized in that: include: The first terminal sends a first request message, which includes at least one of first information and second information, the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

11. The method according to claim 10, characterized in that The first information includes: A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

12. The method according to claim 11, characterized in that The arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

13. The method according to claim 10 or 11, characterized in that: The first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

14. An information transmission method, characterized in that: include: The second terminal obtains a second request message sent by at least one relay terminal, where the second request message includes at least one item of third information and fourth information, where the third information is used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information is used to indicate a security policy for direct communication between the relay terminal and the second terminal; The second terminal determines at least one of a target direct communication secure connection establishment method and a target security policy according to the second request message sent by the at least one relay terminal; Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

15. The method according to claim 14, characterized in that The second request message further includes at least one of the first information and the second information; The first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

16. The method according to claim 15, characterized in that In a case where the second request message further includes the second information, the second terminal determines, according to the second request message sent by the relay terminal, at least one of a target direct communication security connection establishment method and a target security policy, including: When the security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information, the second terminal determines at least one of the target direct communication security connection establishment method and the target security policy based on the second request message sent by the relay terminal.

17. The method according to claim 14, characterized in that After the second terminal obtains the second request message sent by at least one relay terminal, the method further includes: The second terminal selects a relay terminal from the at least one relay terminal as the target relay terminal according to a relay selection policy.

18. An information transmission device, characterized in that: Including memory, transceiver, processor; A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Obtaining a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal; When the relay terminal meets the direct communication security requirement of the first terminal, sending a second request message to the second terminal; The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

19. The device according to claim 18, characterized in that The second request message further includes at least one of the first information and the second information.

20. The device according to claim 18, characterized in that The security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information.

21. The device according to claim 18, characterized in that The first information includes: A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

22. The device according to claim 21, characterized in that The arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

23. The device according to claim 18, characterized in that The first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

24. The device according to claim 18, characterized in that The third information includes: A second list, wherein the second list includes at least one direct communication security connection establishment method supported by the relay terminal.

25. The device according to claim 24, characterized in that The sorting order of the direct communication security connection establishment methods in the second list is related to the priority of the direct communication security connection establishment methods.

26. The device according to claim 18, characterized in that The second request message includes a second relay discovery data set and a first direct discovery data set, the third information is located in the second relay discovery data set, the fourth information is located in the second relay discovery data set, and the first direct discovery data set is the direct discovery data set in the first request message.

27. An information transmission device, characterized in that: Including memory, transceiver, processor; A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: A first request message is sent, wherein the first request message includes at least one item of first information and second information, wherein the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

28. The device according to claim 27, characterized in that The first information includes: A first list, wherein the first list includes at least one direct communication security connection establishment method supported by the first terminal.

29. The device according to claim 28, characterized in that The arrangement order of the direct communication security connection establishment methods in the first list is related to the priority of the direct communication security connection establishment methods.

30. The device according to claim 27 or 28, characterized in that The first request message includes a first relay discovery data set and a first direct discovery data set, the first information is located in the first relay discovery data set or the first direct discovery data set, and the second information is located in the first direct discovery data set or the first relay discovery data set.

31. An information transmission device, characterized in that: Including memory, transceiver, processor; A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Acquire a second request message sent by at least one relay terminal, where the second request message includes at least one item of third information and fourth information, where the third information is used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information is used to indicate a security policy for direct communication between the relay terminal and the second terminal; Determining at least one of a target direct communication secure connection establishment method and a target security policy according to the second request message sent by the at least one relay terminal; Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

32. The device according to claim 31, characterized in that The second request message further includes at least one of the first information and the second information; The first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

33. The device according to claim 32, characterized in that In a case where the second request message also includes the second information, the processor further implements the following steps: When the security of the security policy indicated by the fourth information satisfies the security of the security policy indicated by the second information, at least one of the target direct communication security connection establishment method and the target security policy is determined according to the second request message sent by the relay terminal.

34. The device according to claim 31, characterized in that The processor also implements the following steps: According to the relay selection strategy, a relay terminal is selected from the at least one relay terminal as the target relay terminal.

35. An information transmission device, characterized in that: include: A first acquiring unit, configured to acquire a first request message, where the first request message includes at least one of first information and second information, where the first information is used to indicate at least one direct communication secure connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal; A first sending unit, configured to send a second request message to a second terminal when the relay terminal meets the direct communication security requirement of the first terminal; The direct communication security requirement of the first terminal is determined based on at least one of the first information and the second information, the second request message includes at least one of the third information and the fourth information, the third information is used to indicate at least one direct communication security connection establishment method supported by the relay terminal, and the fourth information is used to indicate the security policy for direct communication between the relay terminal and the second terminal.

36. An information transmission device, characterized in that: include: A second sending unit is used to send a first request message, wherein the first request message includes at least one of first information and second information, the first information is used to indicate at least one direct communication security connection establishment method supported by the first terminal, and the second information is used to indicate a security policy for direct communication between the first terminal and the relay terminal.

37. An information transmission device, characterized in that: include: a second acquiring unit, configured to acquire a second request message sent by at least one relay terminal, the second request message including at least one item of third information and fourth information, the third information being used to indicate at least one direct communication secure connection establishment method supported by the relay terminal, and the fourth information being used to indicate a security policy for direct communication between the relay terminal and the second terminal; a determining unit, configured to determine at least one of a target direct communication secure connection establishment method and a target security policy according to a second request message sent by the at least one relay terminal; Among them, the target direct communication security connection establishment method is a security connection establishment method adopted when the second terminal communicates directly with the target relay terminal, the target security policy is a security policy adopted when the second terminal communicates directly with the target relay terminal, and the target relay terminal is a relay terminal of the at least one relay terminal.

38. A processor-readable storage medium, characterized in that: The processor-readable storage medium stores a computer program, and the computer program is used to cause the processor to execute the steps of the information transmission method as described in any one of claims 1 to 9, or to execute the steps of the information transmission method as described in any one of claims 10 to 13, or to execute the steps of the information transmission method as described in any one of claims 14 to 17.

Images