Key processing method and device, related equipment, storage medium and computer program product

Abstract

The invention discloses a key processing method and device, a terminal, network equipment, a storage medium and a computer program product. The method comprises: in a random access process, a terminal generates a first key by using first information associated with a first channel between the terminal and a network device, the first information representing channel characteristics of the first channel; and deriving by using the first key to obtain one or more second keys, the one or more second keys being used for protecting transmission of access layer data and / or signaling.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to a key processing method, apparatus, related equipment, storage medium and computer program product. Background Art

[0002] In the related art, the security mechanism of the access layer (AS, Access-Stratum) (also known as the security mode) is activated interactively through signaling (such as the Security Mode Command (SMC)) during the process of establishing the context. Therefore, the access layer messages transmitted before the security mechanism is activated and the non-access layer (NAS, Non-Access Stratum) messages (such as registration requests) carried by the access layer messages are subject to security risks such as tampering, forgery, and eavesdropping by attackers. In addition, the access layer keys involved in the security mechanism of the access layer cannot be securely isolated from the non-access layer keys, and there is a security risk that the access layer keys and the non-access layer keys are leaked at the same time.

[0003] Therefore, there is currently no solution on how to ensure the secure isolation of access layer keys and non-access layer keys while being compatible with relevant security mechanisms to enhance the security of access layer keys. Summary of the invention

[0004] To solve related technical problems, the embodiments of the present application provide a key processing method, apparatus, related equipment, storage medium and computer program product.

[0005] The technical solution of the embodiment of the present application is implemented as follows:

[0006] The embodiment of the present application provides a key processing method, which is applied to a terminal, including:

[0007] In a random access process, generating a first key using first information associated with a first channel between the terminal and the network device, the first information representing a channel characteristic of the first channel;

[0008] One or more second keys are derived using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0009] In the above solution, the step of generating a first key by using first information associated with a first channel between the terminal and the network device includes:

[0010] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0011] Extracting features from the first channel to obtain the first information;

[0012] The first key is generated using the first information.

[0013] In the above solution, the step of determining to enable the first service includes:

[0014] During access to the network device, the first service is actively enabled.

[0015] In the above scheme, the method further includes:

[0016] Sending second information to the network device, where the second information is used to instruct the terminal to enable the first service.

[0017] In the above solution, the step of determining to enable the first service includes:

[0018] Receive third information sent by the network device, where the third information is used to instruct the network device to enable the first service.

[0019] In the above solution, the use of the first key to derive one or more second keys includes:

[0020] The first key is used as a root key to derive the one or more second keys.

[0021] In the above scheme, the method further includes:

[0022] Sending fourth information to the network device, where the fourth information represents the security capability of the terminal;

[0023] Receive the fifth information sent by the network device, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device, where the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer.

[0024] In the above scheme, the method further includes:

[0025] Before the establishment of a Radio Resource Control (RRC) connection is completed, a security mode of the access layer is enabled, where the security mode is used to provide security protection for data and / or signaling transmitted by the access layer.

[0026] The embodiment of the present application also provides a key processing method, which is applied to a network device, including:

[0027] In a random access process, generating a first key using first information associated with a first channel between the terminal and the network device, wherein the first information represents a channel characteristic of the first channel;

[0028] One or more second keys are derived using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0029] In the above solution, the step of generating the first key by using the first information associated with the first channel between the terminal and the network device includes:

[0030] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0031] Extracting features from the first channel to obtain the first information;

[0032] The first key is generated using the first information.

[0033] In the above solution, the step of determining to enable the first service includes:

[0034] Second information sent by the terminal is received, where the second information is used to instruct the terminal to enable the first service.

[0035] In the above solution, the step of determining to enable the first service includes:

[0036] In a case where a first condition is met, it is determined to enable the first service, where the first condition includes a condition associated with the first service.

[0037] In the above scheme, the method further includes:

[0038] Sending third information to the terminal, where the third information is used to instruct the network device to enable the first service.

[0039] In the above solution, the use of the first key to derive one or more second keys includes:

[0040] The first key is used as a root key to derive the one or more second keys.

[0041] In the above scheme, the method further includes:

[0042] receiving fourth information sent by the terminal, where the fourth information represents a security capability of the terminal;

[0043] Selecting a first algorithm and / or a second algorithm using the fourth information, wherein the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer;

[0044] Sending fifth information to the terminal, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device.

[0045] In the above scheme, the method further includes:

[0046] Before the RRC connection is established, a security mode of the access layer is enabled, where the security mode is used to provide security protection for data and / or signaling transmitted at the access layer.

[0047] The present application also provides a key processing device, including:

[0048] a first generating unit, configured to generate a first key by using first information associated with a first channel between a terminal and a network device during a random access process, wherein the first information represents a channel characteristic of the first channel;

[0049] The first derivation unit is used to derive one or more second keys using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0050] The present application also provides a key processing device, including:

[0051] a second generating unit, configured to generate a first key using first information associated with a first channel between a terminal and a network device during a random access process, wherein the first information represents a channel characteristic of the first channel;

[0052] The second derivation unit is used to derive one or more second keys using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0053] The embodiment of the present application also provides a terminal, comprising: a first processor and a first communication interface; wherein,

[0054] The first processor is used to generate a first key during a random access process using first information associated with a first channel between the terminal and the network device, wherein the first information represents a channel characteristic of the first channel; and to derive one or more second keys using the first key, wherein the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0055] The embodiment of the present application further provides a network device, comprising: a second processor and a second communication interface; wherein,

[0056] The second processor is used to generate a first key during a random access process using first information associated with a first channel between the terminal and the network device, wherein the first information represents channel characteristics of the first channel; and to derive one or more second keys using the first key, wherein the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0057] The embodiment of the present application further provides a terminal, comprising: a first processor and a first memory for storing a computer program that can be run on the processor,

[0058] Wherein, the first processor is used to execute the steps of any of the above-mentioned terminal side methods when running the computer program.

[0059] The embodiment of the present application further provides a network device, comprising: a second processor and a second memory for storing a computer program that can be run on the processor,

[0060] Wherein, the second processor is used to execute the steps of any one of the above-mentioned methods on the network device side when running the computer program.

[0061] An embodiment of the present application also provides a storage medium on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above-mentioned methods on the terminal side are implemented, or the steps of any of the above-mentioned methods on the network device side are implemented.

[0062] An embodiment of the present application also provides a computer program product, including a computer program, which, when executed by a processor, implements the steps of any of the above-mentioned methods on the terminal side, or implements the steps of any of the above-mentioned methods on the network device side.

[0063] The key processing method, apparatus, related equipment, storage medium and computer program product provided by the embodiment of the present application, in the process of random access, the terminal and the network device use the first information associated with the first channel between the terminal and the network device to generate a first key, the first information characterizing the channel characteristics of the first channel; and use the first key to derive one or more second keys, the one or more second keys are used to protect the transmission of access layer data and / or signaling. The technical solution provided by the embodiment of the present application, in the process of random access, the terminal and the network device (such as a base station) generate a wireless key through the characteristics of the wireless channel, and then derive an access layer key; the above scheme combines the wireless key generation technology with the access layer key associated with the access layer security mechanism. Since the process of generating the access layer key does not require information transmission with the core network, that is, it is independent of the non-access layer, therefore, it is possible to achieve secure isolation of the access layer key and the non-access layer key while being compatible with the relevant access layer security mechanism, thereby enhancing the security of the access layer key. BRIEF DESCRIPTION OF THE DRAWINGS

[0064] Figure 1 This is a schematic diagram of the first key processing method flow in an embodiment of the present application;

[0065] Figure 2 This is a schematic diagram of the structure of a communication system according to an embodiment of the present application;

[0066] Figure 3 This is a flow chart of a second method for key processing according to an embodiment of the present application;

[0067] Figure 4 This is a flowchart of the first access layer key derivation method for the application example of this application;

[0068] Figure 5 A schematic diagram of the structure of an access layer key derivation example for the application of this application;

[0069] Figure 6 A flowchart of the second access layer key derivation method for the application example of this application;

[0070] Figure 7 This is a schematic diagram of the structure of the first key processing device in the embodiment of the present application;

[0071] Figure 8 This is a schematic diagram of the structure of a second key processing device according to an embodiment of the present application;

[0072] Fig. 9 This is a schematic diagram of the terminal structure of an embodiment of the present application;

[0073] Fig.10 This is a schematic diagram of the network device structure of an embodiment of the present application;

[0074] Fig.11 This is a schematic diagram of the key processing system structure of an embodiment of the present application. DETAILED DESCRIPTION

[0075] The present application is further described in detail below in conjunction with the accompanying drawings and embodiments.

[0076] In the New Radio (NR) system, the initial signaling access includes RRC connection, context establishment, PDU session establishment and other processes. Among them, the access layer security mechanism between the terminal (UE) and the base station (gNB) is enabled after the SMC signaling is exchanged during the context establishment process. Specifically, after the terminal receives the SMC signaling, the RRC will obtain the integrity protection / verification key (denoted as K) of the user plane according to the algorithm carried in the signaling. UPint ), the encryption / decryption key of the user plane (denoted as K UPenc ), the integrity protection / verification key (denoted as KRRCint ) and the encryption / decryption key of the control plane (denoted as k RRCenc )4 access layer keys, and configure the 4 access layer keys to the Packet Data Convergence Protocol (PDCP) layer for use, thereby providing encryption and / or integrity protection for air interface signaling interaction and / or data transmission.

[0077] It should be noted that the access layer key derivation mechanism of the relevant network side and the terminal is the same. gNB , calculate and derive 4 access layer keys (K RRCint , K RRCenc , K UPint , K UPenc ), where K gNB It is the root key of the access layer key and can be obtained through K AMF and NAS UPLINK COUNT, with a length of 256 bits. In addition, the length of the four access layer keys is 128 bits. After RRC calculates the original key with a length of 256 bits through the key derivation function (KDF) algorithm, it selects the lower 128 bits from the 256-bit original key and configures it for use at the PDCP layer. gNB The calculation formula is as follows:

[0078] K gNB =KDF{K AMF ,S} (1)

[0079] Among them, S=FC||P0||L0||P1||L1, FC is 0x6E, P0 represents the uplink NAS value, L0 represents the length of the uplink NAS value (for example, 0x00), P1 represents the access type identifier, and L1 represents the length of the access type identifier (for example, 0x01).

[0080] However, in the above scheme, the access layer key is a key (K AMF ), in this case, the core network can calculate the access layer key based on the known parameters. Therefore, the access layer and non-access layer keys cannot be securely isolated, and there may be a security risk of simultaneous key leakage.

[0081] In order to solve the above problems, a related key generation scheme is to integrate the random access process with the wireless key generation technology to generate a wireless key before the RRC connection is established; however, this scheme will directly use the wireless key as the access layer key to protect the air interface information, without considering the relevant access layer keys, nor the need to configure the access layer key to the PDCP to activate the access layer security mechanism. Therefore, there is an incompatibility with the relevant security mechanism, and a major change is required to the access layer key mechanism.

[0082] Another related key generation scheme is to add a wireless key generation process after the RRC connection is established, and use the wireless key as the first-level access layer key. At the same time, the access layer key calculated by the core network is used as the second-level access layer key, and then a new access layer key is obtained based on the first-level access layer key and the second-level access layer key. In the above scheme, on the one hand, since the wireless key is generated after the RRC connection is established, it is impossible to perform security protection on the RRC signaling transmitted during the RRC connection establishment process (such as protecting sensitive information such as user identity carried by the RRC signaling); on the other hand, the terminal and the base station need to interact with the core network to obtain the access layer key, and the complete isolation of the access layer and the non-access layer is not achieved. At the same time, due to the addition of the wireless key generation process and the first-level access layer key generation process, the number of signaling interactions and the computational complexity will increase.

[0083] In summary, there is currently no solution on how to ensure the secure isolation of access layer keys and non-access layer keys while being compatible with relevant security mechanisms to enhance the security of access layer keys.

[0084] Based on this, in various embodiments of the present application, on the basis of relevant security mechanisms, the terminal and the base station use random access message interaction to generate a wireless key, and use the wireless key derivative calculation to obtain an access layer key associated with the access layer security mechanism; in this process, since there is no need to apply for key calculation parameters from the core network, it is possible to achieve complete isolation between the access layer and the non-access layer, thereby enhancing the security of the access layer key, and at the same time, it is possible not to increase the number of signaling interactions or the complexity of calculation.

[0085] The present application embodiment provides a key processing method, such as Figure 1 As shown, applied to a terminal, the method includes:

[0086] Step 101: In a random access process, a first key is generated using first information associated with a first channel between the terminal and a network device, where the first information represents a channel characteristic of the first channel;

[0087] Step 102: derive one or more second keys using the first key, where the one or more second keys are used to protect transmission of access layer data and / or signaling.

[0088] Among them, in actual application, the terminal may include a mobile phone, a laptop computer, a wireless local area network (WLAN) terminal device (STA), a user station and other devices, and the terminal may be called a user equipment (UE, User Equipment), or a user, etc. The embodiment of the present application does not limit the name and type of the terminal, as long as its function is realized. In addition, the network device (also referred to as an access point) may include a base station (gNB), ng-gNB in ​​the NR system, an eNB in ​​the long-term evolution (LTE, Long Term Evolution) system, a wireless local area network access point (AP), a base station of a future mobile communication network and other devices, and the network device can support wireless communication and can communicate with network elements in the core network (such as a mobile management entity (MME, Mobility Management Entity) in the LTE system or a session management function (SMF, Session Management Function) in the NR system). The embodiment of the present application does not limit the type of network device, as long as its function is realized.

[0089] For example, in the NR system, Figure 2 As shown, the network equipment can communicate with the terminals of the access layer, and at the same time, it can also communicate with network elements such as the unified data management (UDM), access and mobility management function (AMF) or SMF of the non-access layer.

[0090] In actual application, in step 101, since the first channel has uniqueness, short-time reciprocity and time-varying properties, the terminal can use the first information associated with the first channel to generate a highly secure first key; wherein the first channel can be called a wireless channel, and accordingly, the first key can be called a wireless key, an initial wireless key, a symmetric wireless key or a wireless physical layer key. The embodiment of the present application does not limit the name of the first key as long as its function is realized.

[0091] Specifically, in one embodiment, the specific implementation of step 101 may include:

[0092] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0093] Extracting features from the first channel to obtain the first information;

[0094] The first key is generated using the first information.

[0095] Among them, in actual application, the first service can be understood as a service or mechanism in which the terminal and the network device derive the second key through the first key, and enable (can also be understood as activate) the access layer security mode before the RRC connection is established; because the first service can achieve security isolation between the access layer and the non-access layer, that is, avoid the influence of the non-access layer on the key associated with the access layer, therefore, the first service can enhance the security of the key associated with the access layer.

[0096] In actual application, for the first service, the terminal may decide whether to enable (also understood as opening) the first service.

[0097] Specifically, in one embodiment, determining to enable the first service includes:

[0098] During access to the network device, the first service is actively enabled.

[0099] In actual application, the terminal may actively choose to enable the first service when accessing the network device; wherein, the first service may be actively enabled when the network operator provides the first service to the terminal; of course, the first service may also be actively enabled when a terminal with high security requirements has signed a contract with the network operator for the first service. The embodiment of the present application does not limit the conditions for the terminal to enable the first service.

[0100] In addition, in a scenario where the terminal does not enable the first service, the terminal and the network device may generate an access layer key by referring to a related key processing flow.

[0101] In actual application, when the terminal enables the first service, the terminal can transmit information with the network device so that the network device knows whether to enable the first service, and then determines whether to trigger the generation process of the first key.

[0102] Based on this, in one embodiment, the method may further include:

[0103] Sending second information to the network device, where the second information is used to instruct the terminal to enable the first service.

[0104] Among them, the second information can be sent through a random access request, that is, the terminal can send a random access request (which can also be understood as message 1 (MSG1)) to the network device for carrying the second information; the second information can also be sent through a defined message, that is, the terminal can send a pre-defined message for carrying the second information to the network device; of course, the second information can also be sent through other types of messages, which is not limited to this in the embodiment of the present application.

[0105] Here, for the second information, the terminal may set the second information on a predefined field, and represent the second information by the value of the field, for example, a value of 0 represents that the terminal does not enable the first service, and a value of 1 represents that the terminal enables the first service; or, the terminal may set the second information on two predefined fields, and represent the second information by the values ​​of the two fields, for example, a value of 1 in the first field represents that the terminal enables the first service, and a value of 1 in the second field represents that the terminal does not enable the first service; or, the terminal may transmit the second information in an implicit manner, for example, transmitting information associated with the first service (also referred to as key security enhancement service information) to the network device represents that the terminal enables the first service, and not transmitting information associated with the first service to the network device represents that the terminal enables the first service.

[0106] In actual application, after receiving the second information, the network device can parse the second information to determine whether the network device has enabled the first service; if it is determined that the first service is enabled, the network device can send sixth information to the terminal to indicate that the network device has enabled the first service; in this case, the terminal can measure and extract features of the first channel to obtain the first information; the first key is generated by quantizing the channel features represented by the first information; wherein the length of the first key can be flexibly set as needed, for example, according to the relevant key processing process, it can be set to 256 bits (expressed as bit in English).

[0107] Here, in the case where the second information is sent, the terminal may also send pilot information to the network device so that the network device can perform feature extraction to generate the first key.

[0108] In addition, when it is determined that the first service is not enabled, the network device may send seventh information to the terminal to indicate that the network device has not enabled the first service; in this case, the terminal may access the network device by referring to the relevant access process.

[0109] In actual application, for the first service, the network device may also decide whether to enable the first service.

[0110] Specifically, in one embodiment, determining to enable the first service includes:

[0111] Receive third information sent by the network device, where the third information is used to instruct the network device to enable the first service.

[0112] In actual application, the network device may decide whether to enable the first service, and send the third information to the terminal when the first service is enabled; after the terminal receives the third information, it may trigger the generation process of the first key.

[0113] In the case where the first service is not enabled, the network device may send eighth information to the terminal so that the terminal performs a related access process, wherein the eighth information is used to indicate that the network device has not enabled the first service.

[0114] Here, since there is a slight time difference when the network device and the terminal extract features of the first channel, the generated first key may be different. Therefore, the terminal and the network device can perform key coordination (also known as key reconciliation) and privacy amplification processing so that the first key generated by the terminal is consistent with the first key generated by the network device; wherein, the process of key coordination and privacy amplification processing can refer to the steps in the relevant technology, and the embodiment of the present application is not limited to this.

[0115] Exemplarily, based on the generated key and related algorithm, the terminal can generate key coordination information and send the key coordination information to the network device; after receiving the key coordination information, the network device performs key coordination and privacy amplification process, that is, using the first key generated by the terminal as a reference, the first key generated by the network device is adjusted to generate a first key consistent with the terminal.

[0116] In actual application, before step 102, the terminal may negotiate an algorithm with the network device so as to subsequently generate the second key based on the negotiated algorithm.

[0117] Based on this, in one embodiment, the method may further include:

[0118] Sending fourth information to the network device, where the fourth information represents the security capability of the terminal;

[0119] Receive the fifth information sent by the network device, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device, where the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer.

[0120] Among them, in actual application, the fourth information may include security capability information of the terminal (such as UE security level information), capability information of whether the terminal supports generating wireless keys, one or more (can also be understood as at least one) of the encryption algorithms and integrity confidentiality algorithms supported by the UE, and the types of encryption algorithms and integrity protection algorithms may include 128-NEA1, 128-NEA2, 128-NEA3, etc. The embodiment of the present application does not limit the algorithm type.

[0121] In actual application, the terminal can send the fourth information during the RRC connection establishment process. Of course, the terminal can also send the fourth information during the random access process. When the fourth information is sent during the RRC connection establishment process, it can be sent through the RRC connection establishment request; when the fourth information is sent during the random access process, it can be sent through the random access request.

[0122] Here, after receiving the fourth information, the network device can select the first algorithm and / or the second algorithm based on the security capabilities and security-related policies represented by the fourth information, and send the fifth information to the terminal; wherein the security-related policies can be an algorithm priority list pre-configured by the base station manufacturer or network operator, or a pre-configured algorithm selection list corresponding to the UE security level, etc.

[0123] It should be noted that, for the fifth information, the algorithms supported by the terminal and the network device may be marked in advance. In this case, the network device may send the fifth information by marking the sequence number. In addition, the network device may also send the fifth information by transmitting the algorithm name. The embodiment of the present application does not limit the method for transmitting the fifth information.

[0124] In actual application, in addition to the method in which the network device and the terminal perform algorithm negotiation, the first algorithm and the second algorithm used may also be configured in advance, and the relevant network elements inform the terminal and the network device.

[0125] In actual application, the terminal can derive the one or more second keys using the first key and the selected algorithm.

[0126] Specifically, in one embodiment, the step of deriving one or more second keys using the first key includes:

[0127] The first key is used as a root key to derive the one or more second keys.

[0128] In actual application, the second key can be called an access layer key. The second key is associated with the security mode of the access layer. The embodiment of the present application does not limit the name of the second key as long as its function is realized.

[0129] In actual application, by using the first key as the root key, the terminal can derive the one or more second keys based on the selected algorithm; wherein the second key can be derived based on the key derivation function, and the key derivation function is associated with the selected algorithm. In this way, the high security of the access layer key can be guaranteed, and the influence of the non-access layer on the access layer key derivation mechanism can be avoided.

[0130] For example, it is assumed that the terminal needs to derive four second keys, namely, second key 1, second key 2, second key 3 and second key 4 (which can be represented by K RRCint , K RRCenc , K UPint , K UPenc ); Taking the second key 3 as an example, the RRC layer of the terminal can calculate the original key with a length of 256 bits based on the key derivation function; the 256-bit original key is truncated to a key of the lower 128 bits, and the second key 3 can be obtained and configured to the PDCP layer; wherein the calculation formula of the second key 3 can be expressed as:

[0131] K UPint =Trunk{KDF{K PHY ,S'}} (2)

[0132] Among them, K UPint Represented as the second key 3, K PHY Represented as the first key, S'=FC'||P0'||L0'||P1'||L1', FC' is 0x69, P0' represents the value of the algorithm type specifier, L0' represents the length of the algorithm type specifier (such as 0x00), P1' represents the algorithm identifier, and L1' represents the length of the algorithm identifier (such as 0x01).

[0133] It should be noted that the terminal and the network device may negotiate in advance the correspondence between the second key and the algorithm identifier and the length of the algorithm identifier, so that the terminal and the network device can derive the required second key based on the key derivation function respectively; in addition, the terminal and the network device may negotiate in advance the correspondence between the algorithm type specifier and the numerical value; wherein the correspondence between the algorithm type specifier and the numerical value may be as shown in Table 1:

[0134] Algorithm type specifier Numeric N-RRC-enc-alg 0x03 N-RRC-int-alg 0x04 N-UP-enc-alg 0x05 N-UP-int-alg 0x06

[0135] Table 1

[0136] In actual application, the terminal may activate the security mechanism of the access layer before the RRC connection is established to protect sensitive information (such as user identity information) transmitted over the subsequent air interface, thereby better improving system security.

[0137] Based on this, in one embodiment, the method may further include:

[0138] Before the RRC connection is established, a security mode of the access layer is enabled, where the security mode is used to provide security protection for data and / or signaling transmitted at the access layer.

[0139] After the security mode of the access layer is enabled, security protection can be provided for data (such as sensitive data) and / or signaling transmitted subsequently at the access layer through the second key and the selected algorithm.

[0140] Accordingly, the embodiment of the present application also provides a key processing method, such as Figure 3 As shown, applied to a network device, the method includes:

[0141] Step 301: In a random access process, a first key is generated using first information associated with a first channel between a terminal and the network device, where the first information represents a channel characteristic of the first channel;

[0142] Step 302: derive one or more second keys using the first key, where the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0143] In actual application, since the first channel has uniqueness, short-time reciprocity and time-varying properties, the network device can generate a highly secure first key by using the first information associated with the first channel.

[0144] Specifically, in one embodiment, the specific implementation of step 301 may include:

[0145] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0146] Extracting features from the first channel to obtain the first information;

[0147] The first key is generated using the first information.

[0148] In actual application, for the first service, the terminal may decide whether to enable (also understood as opening) the first service.

[0149] Specifically, in one embodiment, determining to enable the first service includes:

[0150] Second information sent by the terminal is received, where the second information is used to instruct the terminal to enable the first service.

[0151] Here, when the second information is received, the network device can parse the second information to determine whether the network device has enabled the first service; when it is determined that the first service is enabled, the network device can send the sixth information to the terminal, and at the same time, measure and extract features of the first channel to obtain the first information; and generate the first key by quantifying the channel characteristics represented by the first information.

[0152] In addition, when it is determined that the first service is not to be enabled, the network device may send the seventh information to the terminal and execute a related access process.

[0153] In actual application, for the first service, the network device may also decide whether to enable the first service.

[0154] Specifically, in one embodiment, determining to enable the first service includes:

[0155] In a case where a first condition is met, it is determined to enable the first service, where the first condition includes a condition associated with the first service.

[0156] The first condition may be referred to as a condition for enabling key security enhanced service.

[0157] Here, the network device may determine whether the terminal satisfies the first condition, thereby determining whether to enable the first service.

[0158] Exemplarily, when the terminal has signed a contract for the first service with the network operator in advance, the network device can receive identification-related information sent by the terminal, and query whether the terminal is a subscribed user based on the identification-related information; if the terminal is a subscribed user, determine to enable the first service.

[0159] Exemplarily, when the terminal reports the fourth information to the network device, the network device can determine whether the terminal has the first key generation capability and supports the same algorithm as the network device based on the security capabilities represented by the fourth information; if the above conditions are met, determine to enable the first service.

[0160] Exemplarily, when a list of terminals that have activated the first service is pre-configured on the network device side, the network device can receive identification-related information sent by the terminal, and search for information matching the identification-related information from the terminal list (i.e., whether the terminal is in the terminal list); if matching information can be found, it is determined that the first service is enabled.

[0161] In actual application, when it is determined to enable the first service, the network device can measure and extract features of the first channel to obtain the first information; and generate the first key by quantifying the channel features represented by the first information.

[0162] Then, the network device may transmit information with the terminal, so that the terminal learns whether to enable the first service, and further determines whether to trigger the generation process of the first key.

[0163] Based on this, in one embodiment, the method may further include:

[0164] Sending third information to the terminal, where the third information is used to instruct the network device to enable the first service.

[0165] In actual application, before step 302, the network device may negotiate an algorithm with the terminal so as to subsequently generate the second key based on the negotiated algorithm.

[0166] Based on this, in one embodiment, the method may further include:

[0167] receiving fourth information sent by the terminal, where the fourth information represents a security capability of the terminal;

[0168] Selecting a first algorithm and / or a second algorithm using the fourth information, wherein the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer;

[0169] Sending fifth information to the terminal, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device.

[0170] In actual application, the network device can derive the one or more second keys using the first key and the selected algorithm.

[0171] Specifically, in one embodiment, the step of deriving one or more second keys using the first key includes:

[0172] The first key is used as a root key to derive the one or more second keys.

[0173] In actual application, by using the first key as the root key, the network device can derive the one or more second keys based on the selected algorithm; wherein the second key can be derived based on a key derivation function, and the key derivation function is associated with the selected algorithm.

[0174] Here, after diffracting to obtain the second key, the network device can activate the security mechanism of the access layer before the RRC connection is established to protect the sensitive information transmitted over the subsequent air interface, thereby better improving the security of the system.

[0175] Based on this, in one embodiment, the method may further include:

[0176] Before the RRC connection is established, a security mode of the access layer is enabled, where the security mode is used to provide security protection for data and / or signaling transmitted at the access layer.

[0177] The key processing method provided by the embodiment of the present application, during the random access process, the terminal and the network device use the first information associated with the first channel between the terminal and the network device to generate a first key, the first information characterizing the channel characteristics of the first channel; and use the first key to derive one or more second keys, the one or more second keys are used to protect the transmission of access layer data and / or signaling. The technical solution provided by the embodiment of the present application, during the random access process, the terminal and the network device (such as a base station) generate a wireless key through the characteristics of the wireless channel, and then derive an access layer key; the above scheme combines the wireless key generation technology with the access layer key associated with the access layer security mechanism. Since the process of generating the access layer key does not require information transmission with the core network, that is, it is unrelated to the non-access layer, it can achieve secure isolation of the access layer key and the non-access layer key while being compatible with the relevant access layer security mechanism, thereby enhancing the security of the access layer key.

[0178] The present application is described in further detail below in conjunction with application examples.

[0179] In the embodiment of the present application, taking the NR system as an example, an access layer key derivation scheme is proposed. This scheme combines the wireless physical layer key generation technology with the relevant AS layer key derivation method. Under the premise of not increasing the number of signaling interactions or the computational complexity, the terminal and the access point (which can be understood as the base station, that is, the above-mentioned network device) will use the wireless key (that is, the above-mentioned first key) generated by the random access message interaction as the root key to derive the access layer key (that is, the above-mentioned second key); at the same time, before the RRC connection is established, the generated access layer key is used to activate the AS layer security mechanism.

[0180] In order to trigger the derivation process of the access layer key, it is necessary for the terminal or the base station to decide whether to enable the key security enhancement service (i.e., the first service mentioned above); accordingly, depending on the identity of the decision maker, the access layer key derivation process is also different; among them, the key security enhancement service refers to the service in which the terminal and the base station derive the access layer key using the generated wireless key and activate the AS layer security mechanism before the terminal sends the RRC connection establishment completion message.

[0181] Here, in the scenario where the decision is made by the terminal, the derivation process of the access layer key is as follows: Figure 4 As shown, the following steps are included:

[0182] Step 401: The terminal selects to enable the key security enhancement service;

[0183] When the terminal chooses not to enable the key security enhancement service, the terminal executes the traditional access and AS layer security mechanism activation process.

[0184] Step 402: The terminal sends a random access request (MSG1) to the base station, where the random access request carries key security enhancement service activation information and pilot information;

[0185] The key security enhancement service activation information is used to inform the base station whether to execute the generation of the wireless key and the process of calculating the access layer key using the wireless key as the root key.

[0186] Step 403: After receiving the random access request, the base station detects the wireless channel and extracts channel characteristics, and quantifies to obtain an initial key;

[0187] Here, the base station parses the information carried in the random access request, and when the key security enhancement service is enabled, detects the wireless channel and extracts channel characteristics, thereby quantifying the initial key; when the key security enhancement service is not enabled, the traditional access process is performed.

[0188] Step 404: the base station sends a random access response (MSG2) to the terminal, where the random access response carries key security enhancement service activation response information;

[0189] The key security enhancement service activation response information is used to indicate that the base station side has activated the key security enhancement service, so that the terminal can execute the wireless key generation process.

[0190] Step 405: After receiving the random access response, the terminal detects the wireless channel and extracts channel characteristics, and quantifies to obtain an initial key;

[0191] Here, the terminal parses the information carried in the random access response, and detects the wireless channel and extracts channel characteristics when the key security enhancement service is enabled, thereby quantifying the initial key; when the key security enhancement service is not enabled, the traditional access process is performed.

[0192] Step 406: The terminal sends an RRC connection establishment request (MSG3) to the base station, where the RRC connection establishment request carries key consistency coordination information and terminal security capabilities (i.e., the fourth information mentioned above);

[0193] Step 407: After receiving the RRC connection establishment request, the base station performs information coordination and privacy amplification processes to obtain a wireless key, and at the same time, selects an encryption and security algorithm;

[0194] The length of the wireless key can be set to gNB The same length, i.e. 256 bits, not only simplifies the key management process, but also enhances the overall security and standardization of the system.

[0195] Here, by performing information coordination and privacy amplification processes, the base station can generate a wireless key consistent with the terminal. At the same time, the base station selects a suitable encryption algorithm (i.e., the first algorithm mentioned above) and a security algorithm (i.e., the second algorithm mentioned above) based on the terminal security capabilities and its own security policies.

[0196] Step 408: The base station sends an RRC connection establishment response (MSG4) to the terminal, and the RRC connection establishment response carries the key consistency coordination result, the encryption algorithm and the security algorithm;

[0197] Step 409: After receiving the RRC connection establishment response, the terminal performs information coordination and privacy amplification processes to obtain a wireless key;

[0198] Step 410a: The terminal calculates an access layer key using the wireless key;

[0199] Here, if Figure 5 As shown, the terminal can adjust (or remove) the related derivation mechanism marked by the dotted line part, and add the derivation process marked by the solid line frame part; specifically, the terminal uses the wireless key as the root key (that is, K gNB =KPHY ), and derive four access layer keys (K UPint , K UPenc , K RRCint , k RRCenc ); The calculation methods of different access layer keys are the same, but the value of parameter S is different. PHY ) is calculated by the terminal and the base station by extracting the characteristics of the wireless channel and has nothing to do with the non-access layer. Therefore, the complete isolation of the access layer and non-access layer keys is achieved.

[0200] Step 410b: The base station calculates the access layer key using the wireless key;

[0201] Here, the base station uses the wireless key as the root key and derives four access layer keys at the RRC layer.

[0202] Step 411a: The terminal enables the AS encryption and security mode (i.e., the security mode of the access layer described above);

[0203] After obtaining the access layer key, the terminal activates the AS layer security mechanism to protect the subsequent secure transmission of air interface signaling and data.

[0204] Step 411b: The base station enables AS encryption and full security mode;

[0205] After obtaining the access layer key, the base station activates the AS layer security mechanism to protect the subsequent secure transmission of air interface signaling and data.

[0206] Step 412: The terminal sends an RRC connection establishment completion message to the base station, where the RRC connection establishment completion message carries a registration request;

[0207] Step 413: After receiving the RRC connection establishment complete message, the base station sends an initial UE message to the AMF;

[0208] Step 414: The terminal and AMF NAS directly transmit information to complete the ID ENTITY query, authentication, NAS security mode and registration process.

[0209] Here, in the scenario where the decision is made by the base station, the process of access layer key derivation is as follows: Figure 6 As shown, the following steps are included:

[0210] Step 601: A random access request terminal sends a random access request (MSG1) to a base station. The random access request carries pilot information and terminal security capabilities.

[0211] Step 602: After receiving the random access request, the base station determines whether the condition for enabling the key security enhancement service (ie, the first condition mentioned above) is met;

[0212] Wherein, if the conditions for enabling the key security enhanced service are met, step 603a is executed; if the conditions for enabling the key security enhanced service are not met, step 603b is executed.

[0213] Step 603a: The base station detects the wireless channel and extracts the channel characteristics, thereby quantifying and obtaining the initial key; at the same time, the encryption and security algorithms are selected;

[0214] Here, the base station selects appropriate encryption algorithms and security algorithms based on the terminal security capabilities.

[0215] Step 603b: The base station returns a random access response to the terminal and executes related access procedures;

[0216] Step 604: The base station sends a random access response (MSG2) to the terminal, where the random access response carries the activation of the key security enhancement service, the encryption algorithm, the security algorithm, or the disactivation of the key security enhancement service;

[0217] Step 605: After receiving the random access response, the terminal detects the wireless channel and extracts the channel characteristics, thereby quantifying and obtaining the initial key;

[0218] Here, the terminal determines whether the base station enables the key security enhancement service according to the information carried in the random access response; and generates an initial key when the base station enables the key security enhancement service.

[0219] Step 606: The terminal sends an RRC connection establishment request (MSG3) to the base station, and the RRC connection establishment request carries key consistency reconciliation information;

[0220] Step 607: The base station performs information coordination and privacy amplification process and calculates a wireless key;

[0221] Step 608: The base station sends an RRC connection establishment response (MSG4) to the terminal, and the RRC connection establishment response carries the key consistency reconciliation result;

[0222] Step 609: The terminal performs information coordination and privacy amplification process and calculates a wireless key;

[0223] Step 610a: The terminal uses the wireless key to calculate the access layer key;

[0224] Step 610b: The base station calculates the access layer key using the wireless key;

[0225] Step 611a: The terminal enables AS encryption and full security mode;

[0226] Step 611b: The base station enables AS encryption and full security mode;

[0227] Step 612: The terminal sends an RRC connection establishment completion message to the base station, where the RRC connection establishment completion message carries a registration request;

[0228] Step 613: After receiving the RRC connection establishment completion message, the base station sends an initial UE message to the AMF;

[0229] Step 614: The terminal and AMF NAS directly transmit information to complete the ID ENTITY query, authentication, NAS security mode and registration process.

[0230] It should be noted that for encryption and security algorithms, the encryption or security algorithms used can be configured in advance in the communication system and notified to the terminal and base station. At the same time, the negotiation to enable key security enhancement services or security capability interaction information can also be carried in different messages or customized new messages, and the carrying method is flexible and variable.

[0231] In the application example of the present application, during the random access process, the terminal and the base station use wireless channel resources to extract wireless channel characteristics and generate a wireless key. Then, the wireless key is used as the access layer root key to derive the access layer key. In this way, there is no need to apply for key calculation parameters from the core network, thereby achieving complete isolation between the access layer and the non-access layer, which not only ensures the high security of the access layer key, but also avoids the influence of the non-access layer on the access layer key derivation mechanism. At the same time, the access layer key calculation method of the communication system is also taken into account, so that the impact on the modification of the related AS layer key derivation mechanism is relatively small, and the compatibility is strong. It can provide high-security and easy-to-implement security services for the communication system, and has high social value and economic value.

[0232] Secondly, depending on the decision maker on whether to enable the key security enhancement service, different information (such as key security enhancement service activation information, UE security capability information, etc.) is flexibly carried through random access messages, so that the system activates the AS layer security mechanism before the terminal sends sensitive information.

[0233] In addition, the application example of this application proposes a flexible way to decide whether to enable the key security enhancement mechanism, which can be selected by the terminal or by the base station according to a preset policy. For users with lower security requirements, this process can be omitted, saving signaling interaction and computing resources, and improving system operation efficiency.

[0234] In order to implement the method of the embodiment of the present application, the embodiment of the present application also provides a key processing device, which is arranged on the terminal, such as Figure 7 As shown, the device comprises:

[0235] A first generating unit 701 is configured to generate a first key using first information associated with a first channel between the terminal and the network device during a random access process, where the first information represents a channel characteristic of the first channel;

[0236] The first derivation unit 702 is configured to derive one or more second keys using the first key, where the one or more second keys are used to protect transmission of access layer data and / or signaling.

[0237] In one embodiment, the first generating unit 701 is used to:

[0238] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0239] Extracting features from the first channel to obtain the first information;

[0240] The first key is generated using the first information.

[0241] In one embodiment, the first generating unit 701 is used to actively enable the first service during access to the network device.

[0242] In one embodiment, the first generating unit 701 is further used to send second information to the network device, where the second information is used to instruct the terminal to enable the first service.

[0243] In one embodiment, the first generating unit 701 is used to receive third information sent by the network device, where the third information is used to instruct the network device to enable the first service.

[0244] In one embodiment, the first derivation unit 702 is used to derive the one or more second keys by using the first key as a root key.

[0245] In one embodiment, the first derivation unit 702 is further configured to:

[0246] Sending fourth information to the network device, where the fourth information represents the security capability of the terminal;

[0247] Receive the fifth information sent by the network device, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device, where the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer.

[0248] In one embodiment, the first derivation unit 702 is further used to enable a security mode of the access layer before the RRC connection is established, and the security mode is used to provide security protection for data and / or signaling transmitted by the access layer.

[0249] In actual application, the first generating unit 701 and the first deriving unit 702 can be implemented by a communication interface in a key processing device in combination with a processor.

[0250] In order to implement the method of the embodiment of the present application, the embodiment of the present application also provides a key processing device, which is arranged on a network device, such as Figure 8 As shown, the device comprises:

[0251] The second generating unit 801 is used to generate a first key by using first information associated with a first channel between the terminal and the network device during a random access process, where the first information represents a channel characteristic of the first channel;

[0252] The second derivation unit 802 is configured to derive one or more second keys using the first key, where the one or more second keys are used to protect transmission of access layer data and / or signaling.

[0253] In one embodiment, the second generating unit 801 is used to:

[0254] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0255] Extracting features from the first channel to obtain the first information;

[0256] The first key is generated using the first information.

[0257] In one embodiment, the second generating unit 801 is used to receive second information sent by the terminal, where the second information is used to instruct the terminal to enable the first service.

[0258] In one embodiment, the second generating unit 801 is used to determine to enable the first service when a first condition is met, where the first condition includes a condition associated with the first service.

[0259] In one embodiment, the second generating unit 801 is further used to send third information to the terminal, where the third information is used to instruct the network device to enable the first service.

[0260] In one embodiment, the second derivation unit 802 is used to derive the one or more second keys by using the first key as a root key.

[0261] In one embodiment, the second derivation unit 802 is further configured to:

[0262] receiving fourth information sent by the terminal, where the fourth information represents a security capability of the terminal;

[0263] Selecting a first algorithm and / or a second algorithm using the fourth information, wherein the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer;

[0264] Sending fifth information to the terminal, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device.

[0265] In one embodiment, the second derivation unit 802 is further used to enable a security mode of the access layer before the RRC connection is established, where the security mode is used to provide security protection for data and / or signaling transmitted at the access layer.

[0266] In actual application, the second generating unit 801 and the second deriving unit 802 can be implemented by a communication interface in the key processing device in combination with a processor.

[0267] It should be noted that: the key processing device provided in the above embodiment only uses the division of the above program modules as an example when performing key processing. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the key processing device provided in the above embodiment and the key processing method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0268] Based on the hardware implementation of the above program modules, and in order to implement the method on the terminal side of the embodiment of the present application, the embodiment of the present application also provides a terminal, such as Fig. 9 As shown, the terminal 900 includes:

[0269] The first communication interface 901 is capable of exchanging information with a network device;

[0270] A first processor 902, connected to the first communication interface 901, to implement information interaction with a network device, and configured to execute the method provided by one or more technical solutions on the terminal side when running a computer program;

[0271] A first memory 903 , in which the computer program is stored.

[0272] Specifically, the first processor 902 is used to generate a first key during a random access process using first information associated with a first channel between the terminal and the network device, wherein the first information represents a channel characteristic of the first channel; and to derive one or more second keys using the first key, wherein the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0273] In one embodiment, the first processor 902 is configured to:

[0274] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0275] Extracting features from the first channel to obtain the first information;

[0276] The first key is generated using the first information.

[0277] In one embodiment, the first processor 902 is configured to actively enable the first service during access to the network device.

[0278] In one embodiment, the first communication interface 901 is used to send second information to the network device, where the second information is used to instruct the terminal to enable the first service.

[0279] In one embodiment, the first communication interface 901 is used to receive third information sent by the network device, and the third information is used to instruct the network device to enable the first service.

[0280] In one embodiment, the first processor 902 is configured to use the first key as a root key to derive the one or more second keys.

[0281] In one embodiment, the first communication interface 901 is further used for:

[0282] Sending fourth information to the network device, where the fourth information represents the security capability of the terminal;

[0283] Receive the fifth information sent by the network device, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device, where the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer.

[0284] In one embodiment, the first processor 902 is further configured to enable a security mode of the access layer before the RRC connection is established, where the security mode is configured to provide security protection for data and / or signaling transmitted by the access layer.

[0285] It should be noted that the specific processing process of the first communication interface 901 and the first processor 902 can be understood by referring to the above method.

[0286] Of course, in actual application, the various components in the terminal 900 are coupled together through the bus system 904. It can be understood that the bus system 904 is used to realize the connection and communication between these components. In addition to the data bus, the bus system 904 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, Fig. 9 Various buses are labeled as bus system 904.

[0287] The first memory 903 in the embodiment of the present application is used to store various types of data to support the operation of the terminal 900. Examples of such data include: any computer program used to operate on the terminal 900.

[0288] The method disclosed in the above embodiment of the present application can be applied to the first processor 902, or implemented by the first processor 902. The first processor 902 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware or software instructions in the first processor 902. The above-mentioned first processor 902 may be a general-purpose processor, a digital signal processor (DSP, Digital Signal Processor), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The first processor 902 can implement or execute the methods, steps and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor may be a microprocessor or any conventional processor, etc. In combination with the steps of the method disclosed in the embodiment of the present application, it can be directly embodied as a hardware decoding processor to execute, or it can be executed by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium, which is located in the first memory 903, and the first processor 902 reads the information in the first memory 903, and completes the steps of the above method in combination with its hardware.

[0289] In an exemplary embodiment, the terminal 900 may be implemented by one or more application specific integrated circuits (ASIC), DSP, programmable logic device (PLD), complex programmable logic device (CPLD), field programmable gate array (FPGA), general processor, controller, microcontroller (MCU), microprocessor, or other electronic components to execute the aforementioned method.

[0290] Based on the hardware implementation of the above program modules, and in order to implement the method of the network device side of the embodiment of the present application, the embodiment of the present application also provides a network device, such as Fig.10 As shown, the network device 1000 includes:

[0291] The second communication interface 1001 is capable of exchanging information with the terminal;

[0292] The second processor 1002 is connected to the second communication interface 1001 to implement information interaction with the terminal, and is used to execute the method provided by one or more technical solutions on the network device side when running the computer program;

[0293] The second memory 1003 , on which the computer program is stored.

[0294] Specifically, the second processor 1002 is used to generate a first key during a random access process using first information associated with a first channel between the terminal and the network device, wherein the first information represents a channel characteristic of the first channel; and to derive one or more second keys using the first key, wherein the one or more second keys are used to protect the transmission of access layer data and / or signaling.

[0295] In one embodiment, the second processor 1002 is configured to:

[0296] Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer;

[0297] Extracting features from the first channel to obtain the first information;

[0298] The first key is generated using the first information.

[0299] In one embodiment, the second communication interface 1001 is used to receive second information sent by the terminal, where the second information is used to instruct the terminal to enable the first service.

[0300] In one embodiment, the second processor 1002 is configured to determine to enable the first service when a first condition is met, where the first condition includes a condition associated with the first service.

[0301] In one embodiment, the second communication interface 1001 is used to send third information to the terminal, and the third information is used to instruct the network device to enable the first service.

[0302] In one embodiment, the second processor 1002 is configured to use the first key as a root key to derive the one or more second keys.

[0303] In one embodiment, the second communication interface 1001 is further used to receive fourth information sent by the terminal, where the fourth information represents the security capability of the terminal;

[0304] In one embodiment, the second processor 1002 is further used to select a first algorithm and / or a second algorithm using the fourth information, wherein the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer; and to send fifth information to the terminal through the second communication interface 1001, wherein the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device.

[0305] In one embodiment, the second processor 1002 is further used to enable a security mode of the access layer before the RRC connection is established, where the security mode is used to provide security protection for data and / or signaling transmitted by the access layer.

[0306] It should be noted that the specific processing process of the second communication interface 1001 and the second processor 1002 can be understood by referring to the above method.

[0307] Of course, in actual application, the various components in the network device 1000 are coupled together through the bus system 1004. It can be understood that the bus system 1004 is used to realize the connection and communication between these components. In addition to the data bus, the bus system 1004 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, Fig.10 Various buses are labeled as bus system 1004 .

[0308] The second memory 1003 in the embodiment of the present application is used to store various types of data to support the operation of the network device 1000. Examples of such data include: any computer program used to operate on the network device 1000.

[0309] The method disclosed in the above embodiment of the present application can be applied to the second processor 1002, or implemented by the second processor 1002. The second processor 1002 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the second processor 1002. The above-mentioned second processor 1002 may be a general-purpose processor, DSP, or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The second processor 1002 can implement or execute the various methods, steps and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor may be a microprocessor or any conventional processor, etc. In combination with the steps of the method disclosed in the embodiment of the present application, it can be directly embodied as a hardware decoding processor to execute, or it can be executed by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium, which is located in the second memory 1003, and the second processor 1002 reads the information in the second memory 1003 and completes the steps of the above method in combination with its hardware.

[0310] In an exemplary embodiment, the network device 1000 may be implemented by one or more ASICs, DSPs, PLDs, CPLDs, FPGAs, general purpose processors, controllers, MCUs, Microprocessors, or other electronic components to perform the aforementioned methods.

[0311] It can be understood that the memory (first memory 903, second memory 1003) of the embodiment of the present application can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disc, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct RAM bus random access memory (DRRAM).The memories described in the embodiments of the present application are intended to include, but are not limited to, these and any other suitable types of memories.

[0312] In order to implement the method provided in the embodiment of the present application, the embodiment of the present application also provides a key processing system, such as Fig.11 As shown, the system includes: a terminal 1101 and a network device 1102.

[0313] Here, it should be noted that the specific processing process of the terminal 1101 and the network device 1102 has been described in detail above and will not be repeated here.

[0314] In an exemplary embodiment, the embodiment of the present application further provides a storage medium, namely a computer storage medium, specifically a computer-readable storage medium, for example, including a first memory 903 storing a computer program, the computer program can be executed by the first processor 902 of the terminal 900 to complete the steps of the aforementioned terminal-side method, and for another example, including a second memory 1003 storing a computer program, the computer program can be executed by the second processor 1002 of the network device 1000 to complete the steps of the aforementioned network device-side method. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disk, or CD-ROM.

[0315] In an exemplary embodiment, the embodiment of the present application also provides a computer program product, including a computer program, which can be executed by the first processor 902 of the terminal 900 to complete the steps of the aforementioned terminal-side method, or the computer program can be executed by the second processor 1002 of the network device 1000 to complete the steps of the aforementioned network device-side method.

[0316] It should be noted that: "first", "second", etc. are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0317] In addition, the technical solutions described in the embodiments of the present application can be combined arbitrarily without conflict.

[0318] The above description is only a preferred embodiment of the present application and is not intended to limit the protection scope of the present application.

Claims

1. A key processing method, characterized in that: Applied to terminals, including: In a random access process, generating a first key using first information associated with a first channel between the terminal and the network device, the first information representing a channel characteristic of the first channel; One or more second keys are derived using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

2. The method according to claim 1, characterized in that The step of generating a first key by using first information associated with a first channel between the terminal and the network device comprises: Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer; Extracting features from the first channel to obtain the first information; The first key is generated using the first information.

3. The method according to claim 2, characterized in that The determining to enable the first service includes: During access to the network device, the first service is actively enabled.

4. The method according to claim 3, characterized in that The method further comprises: Sending second information to the network device, where the second information is used to instruct the terminal to enable the first service.

5. The method according to claim 2, characterized in that: The determining to enable the first service includes: Receive third information sent by the network device, where the third information is used to instruct the network device to enable the first service.

6. The method according to claim 1, characterized in that The step of deriving one or more second keys by using the first key includes: The first key is used as a root key to derive the one or more second keys.

7. The method according to any one of claims 1 to 6, characterized in that: The method further comprises: Sending fourth information to the network device, where the fourth information represents the security capability of the terminal; Receive the fifth information sent by the network device, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device, where the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer.

8. The method according to any one of claims 1 to 6, characterized in that: The method further comprises: Before the radio resource control RRC connection is established, a security mode of the access layer is enabled, where the security mode is used to provide security protection for data and / or signaling transmitted by the access layer.

9. A key processing method, characterized in that: Applied to network equipment, including: In a random access process, generating a first key using first information associated with a first channel between the terminal and the network device, wherein the first information represents a channel characteristic of the first channel; One or more second keys are derived using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

10. The method according to claim 9, characterized in that The step of generating a first key by using first information associated with a first channel between the terminal and the network device comprises: Determining to enable a first service, the first service being used to enhance security of a key associated with an access layer; Extracting features from the first channel to obtain the first information; The first key is generated using the first information.

11. The method according to claim 10, characterized in that The determining to enable the first service includes: Second information sent by the terminal is received, where the second information is used to instruct the terminal to enable the first service.

12. The method according to claim 10, characterized in that The determining to enable the first service includes: In a case where a first condition is met, it is determined to enable the first service, where the first condition includes a condition associated with the first service.

13. The method according to claim 12, characterized in that The method further comprises: Sending third information to the terminal, where the third information is used to instruct the network device to enable the first service.

14. The method according to claim 9, characterized in that The step of deriving one or more second keys by using the first key includes: The first key is used as a root key to derive the one or more second keys.

15. The method according to any one of claims 9 to 14, characterized in that: The method further comprises: receiving fourth information sent by the terminal, where the fourth information represents a security capability of the terminal; Selecting a first algorithm and / or a second algorithm using the fourth information, wherein the first algorithm is used to perform confidentiality protection on data and / or signaling transmitted at the access layer, and the second algorithm is used to perform integrity protection on data and / or signaling transmitted at the access layer; Sending fifth information to the terminal, where the fifth information is used to indicate the first algorithm and / or the second algorithm selected by the network device.

16. The method according to any one of claims 9 to 14, characterized in that The method further comprises: Before the RRC connection is established, a security mode of the access layer is enabled, where the security mode is used to provide security protection for data and / or signaling transmitted at the access layer.

17. A key processing device, characterized in that: include: a first generating unit, configured to generate a first key by using first information associated with a first channel between a terminal and a network device during a random access process, wherein the first information represents a channel characteristic of the first channel; The first derivation unit is used to derive one or more second keys using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

18. A key processing device, characterized in that: include: a second generating unit, configured to generate a first key using first information associated with a first channel between a terminal and a network device during a random access process, wherein the first information represents a channel characteristic of the first channel; The second derivation unit is used to derive one or more second keys using the first key, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

19. A terminal, characterized in that: include: A first processor and a first communication interface; wherein, The first processor is configured to generate a first key using first information associated with a first channel between the terminal and the network device during a random access process, wherein the first information represents a channel characteristic of the first channel; And using the first key, one or more second keys are derived, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

20. A network device, characterized in that: include: A second processor and a second communication interface; wherein, The second processor is configured to generate a first key using first information associated with a first channel between the terminal and the network device during a random access process, wherein the first information represents a channel characteristic of the first channel; And using the first key, one or more second keys are derived, and the one or more second keys are used to protect the transmission of access layer data and / or signaling.

21. A terminal, characterized in that: include: a first processor and a first memory for storing a computer program executable on the processor, Wherein, when the first processor is used to run the computer program, the steps of the method described in any one of claims 1 to 8 are executed.

22. A network device, characterized in that: include: a second processor and a second memory for storing a computer program executable on the processor, Wherein, when the second processor is used to run the computer program, the steps of the method described in any one of claims 9 to 16 are executed.

23. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the computer program implements the steps of the method according to any one of claims 1 to 8, or implements the steps of the method according to any one of claims 9 to 16.

24. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the computer program implements the steps of the method according to any one of claims 1 to 8, or implements the steps of the method according to any one of claims 9 to 16.

Images