Communication method and communication device

Abstract

Provided is a communication method, comprising: an access network device configures a security algorithm of a user plane and a security key suitable for the security algorithm under the condition that the access network device determines to use the security algorithm to perform security protection of confidentiality and integrity of the user plane. In addition, the access network equipment notifies the terminal equipment to start user plane integrity security protection and confidentiality security protection through the first indication information. A security algorithm of a user plane and a security key suitable for the security algorithm are configured, so that the user plane can perform security protection based on the security algorithm capable of realizing both confidential security protection and integrity security protection; and potential safety hazards existing in safety protection of the user plane based on the combination of a confidentiality safety protection algorithm and an integrity safety protection algorithm are avoided.

Description

Technical Field

[0001] The present application relates to the field of communications, and more specifically, to a communication method and a communication device. Background Art

[0002] When the access network device starts the access stratum (AS) security mode control procedure, after the network side sends an AS security mode command (SMC) message to the terminal side, the terminal device responds to the AS SMC message and replies with an AS security mode complete (SMP) message to the network side.

[0003] Specifically, the terminal device and the access network device can negotiate a security protection algorithm based on the AS SMC process to protect the messages transmitted between the terminal device and the network side. In addition, the user plane security protection can be activated through the radio resource control (RRC) connection reconfiguration process. Currently, the confidentiality security protection algorithm and the integrity security protection algorithm can be negotiated in the AS SMC process, but when confidentiality security protection and integrity security protection are required, the combination of the confidentiality security protection algorithm and the integrity security protection algorithm has security risks. Summary of the invention

[0004] The present application provides a communication method to improve the security of user plane message transmission.

[0005] In a first aspect, a communication method is provided. The method may be executed by an access network device, or may be executed by a component (such as a chip or circuit) of the access network device, which is not limited in the present application.

[0006] The communication method includes: in the case of determining to use a security algorithm to perform user plane confidentiality and integrity security protection, configuring the security algorithm of the user plane and a security key applicable to the security algorithm; sending a first indication message to a terminal device, the first indication message is used to indicate activation of user plane confidentiality and integrity security protection, wherein the security algorithm includes a part for confidentiality protection and a part for integrity protection, the security algorithm is used to perform user plane confidentiality and integrity security protection, the performing user plane confidentiality and integrity security protection includes: using the security key as an input key of the integrity protection part in the security algorithm to perform integrity protection on user plane messages, using the security key as an input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on user plane messages. In the present application, performing user plane security protection can be understood as: performing security protection on user plane messages, for example, performing confidentiality and integrity security protection on messages transmitted on the user plane.

[0007] Based on the above scheme, when the access network device determines to use a security algorithm that can achieve both confidentiality security protection and integrity security protection to protect the user plane, the access network device configures the user plane security algorithm and a security key applicable to the security algorithm. The access network device can perform integrity security protection and confidentiality security protection of user plane messages based on the same security key, thereby avoiding the security risks of the combination of the confidentiality security protection algorithm and the integrity security protection algorithm, and improving the security of user plane message transmission.

[0008] For example, when user-plane messages require integrity security protection and confidentiality security protection, there is no need to perform security protection based on the integrity security protection algorithm and the confidentiality security protection algorithm, thereby avoiding the potential security risks of the combination of the confidentiality security protection algorithm and the integrity security protection algorithm. Among them, the use of the confidentiality security protection algorithm and the integrity security protection algorithm to perform security protection on user-plane messages specifically includes: firstly performing integrity security protection on the user-plane messages based on the integrity security protection algorithm, and then using the result of the integrity security protection as the input parameter of the confidentiality security protection algorithm to perform confidentiality security protection on the user-plane messages. However, the confidentiality security protection algorithm and integrity security protection algorithm used are independent. When the result of the integrity security protection is used as the input parameter of the confidentiality security protection, there may be algorithm splicing, which brings security risks.

[0009] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: determining to use the security algorithm for user plane confidentiality and integrity security protection based on at least one of the following information: terminal device capability information, user plane message security protection policy, algorithm negotiation results, or algorithm selection policy.

[0010] Based on the above scheme, the access network device can determine whether to use a security algorithm to perform security protection on the user plane according to different information. For example, the access network device considers the capability information of the terminal device and chooses to use a security algorithm to perform security protection on the user plane, thereby avoiding selecting an inappropriate security algorithm, which may result in security protection failure during subsequent user plane message transmission. For another example, the access network device considers the security protection policy of the user plane and chooses to use a security algorithm to perform security protection on the user plane, and may select an algorithm that meets the security protection policy for user plane message transmission. For another example, the access network device considers the algorithm negotiation result and chooses to use a security algorithm to perform security protection on the user plane based on the algorithm negotiation result. The security algorithm can be selected directly based on the algorithm negotiation result, thereby avoiding re-execution of algorithm negotiation and reducing the complexity of the scheme.

[0011] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending second indication information to the terminal device, the second indication information being used to indicate user plane confidentiality and integrity security protection based on the security algorithm.

[0012] Based on the above scheme, the access network device can notify the terminal device through the second indication information that the subsequently transmitted user plane messages need to be securely protected based on the security algorithm, so that the terminal device can clarify the security protection method of the user plane messages based on the second indication information. The terminal device can determine the security protection method of the user plane messages without performing complex judgments, thereby reducing the implementation complexity of the terminal device.

[0013] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending a data radio bearer DRB identifier, a session identifier, or a distribution unit DU identifier corresponding to the second indication information to the terminal device.

[0014] Based on the above scheme, the access network device can send the DRB identifier, session identifier, or distribution unit DU identifier corresponding to the second indication information to the terminal device, indicating that the granularity of subsequent user plane security protection can be to configure a security protection algorithm and security key for a certain DRB, or to configure a security protection algorithm and security key for a certain session, and to configure a security protection algorithm and security key for a certain DU, etc., that is, the user plane security protection can be of different granularities, thereby improving the flexibility of the scheme.

[0015] In combination with the first aspect, in certain implementations of the first aspect, sending the second indication information to the terminal device includes: sending the second indication information to the terminal device when determining to use a security algorithm to perform user plane confidentiality and integrity security protection.

[0016] In combination with the first aspect, in certain implementations of the first aspect, before sending the first indication information to the terminal device, the method also includes: selecting the security algorithm for confidentiality and integrity security protection of the user plane; and sending an identifier of the security algorithm to the terminal device in the access layer security mode command AS SMC process.

[0017] In combination with the first aspect, in certain implementations of the first aspect, the sending of first indication information to the terminal device includes: sending a radio resource control RRC connection reconfiguration message to the terminal device, the RRC connection reconfiguration message including the first indication information.

[0018] In combination with the first aspect, in some implementations of the first aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm.

[0019] Based on the above solution, the access network device can carry the identifier of the security algorithm in the RRC connection reconfiguration message sent to the terminal device, or it can be the security algorithm used for user plane message security protection that has been negotiated with the terminal device before sending the first indication information. This technical solution does not limit the timing of the access network device and the terminal device negotiating the use of the algorithm, thereby improving the flexibility of the solution.

[0020] In combination with the first aspect, in some implementations of the first aspect, the first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

[0021] In combination with the first aspect, in certain implementations of the first aspect, the configuring the security algorithm of the user plane and the security key applicable to the security algorithm includes: configuring the security algorithm of the user plane and the security key applicable to the security algorithm in a packet data convergence layer protocol (Packet Data Convergence Protocol, PDCP) entity.

[0022] In combination with the first aspect, in certain implementations of the first aspect, an uplink user plane message is received from the terminal device, the integrity of the uplink user plane message is verified using the security key as the input key of the integrity protection part in the security algorithm, and the uplink user plane message is decrypted using the security key as the input key of the confidentiality protection part in the security algorithm.

[0023] Based on the above scheme, the access network equipment can perform confidentiality security protection and integrity security protection (such as integrity verification and decryption) of uplink user plane messages based on the same security key, thereby avoiding the security risks of the combination of confidentiality security protection algorithm and integrity security protection algorithm.

[0024] In a second aspect, a communication method is provided. The method may be executed by a terminal device, or by a component (such as a chip or a circuit) of the terminal device, which is not limited in the present application.

[0025] The communication method includes: receiving first indication information, wherein the first indication information is used to indicate activation of user plane confidentiality and integrity security protection; determining to use a security algorithm to perform user plane confidentiality and integrity security protection according to the first indication information, configuring the security algorithm of the user plane and a security key applicable to the security algorithm, wherein the security algorithm includes a part for performing confidentiality protection and a part for performing integrity protection, the security algorithm is used to perform user plane confidentiality and integrity security protection, and performing user plane confidentiality and integrity security protection includes: using the security key as an input key of the integrity protection part in the security algorithm to perform integrity protection on user plane messages, and using the security key as an input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user plane messages.

[0026] In combination with the second aspect, in some implementations of the second aspect, the method further includes: receiving second indication information, where the second indication information is used to indicate that user plane confidentiality and integrity security protection is performed based on the security algorithm.

[0027] In combination with the second aspect, in some implementations of the second aspect, before receiving the first indication information, the method further includes: receiving an identifier of the security algorithm.

[0028] In combination with the second aspect, in certain implementations of the second aspect, the receiving of the first indication information includes: receiving a radio resource control RRC connection reconfiguration message in an access layer security mode command AS SMC process, the RRC connection reconfiguration message including the first indication information.

[0029] In combination with the second aspect, in certain implementations of the second aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm.

[0030] In combination with the second aspect, in some implementations of the second aspect, the first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

[0031] In combination with the second aspect, in certain implementations of the second aspect, the configuring the security algorithm of the user plane and the security key applicable to the security algorithm includes: configuring the security algorithm of the user plane and the security key applicable to the security algorithm in a packet data convergence layer protocol PDCP entity.

[0032] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: receiving a downlink user plane message from a network end device, using the security key as an input key of the integrity protection part in the security algorithm to perform integrity verification on the downlink user plane message, and using the security key as an input key of the confidentiality protection part in the security algorithm to decrypt the downlink user plane message.

[0033] The technical effects of the method shown in the above second aspect and its possible design can refer to the technical effects in the first aspect and its possible design.

[0034] In a third aspect, a communication device is provided, which is used to implement the method shown in the first aspect. The device includes: a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0035] In a fourth aspect, a communication device is provided, which is used to implement the method shown in the second aspect. The device includes: a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0036] In a fifth aspect, a communication method is provided. The method may be executed by an access network device, or by a component (such as a chip or circuit) of the access network device, and this application does not limit this.

[0037] The communication method includes:

[0038] Determine an integrity security protection algorithm based on the selected security algorithm; when determining to activate user plane integrity security protection according to the security protection policy, configure the integrity security protection algorithm of the user plane and a security key applicable to the integrity security protection algorithm; send third indication information to the terminal device, the third indication information is used to indicate the activation of user plane integrity security protection; or,

[0039] Determine a confidentiality security protection algorithm based on the selected security algorithm; when determining to activate the confidentiality security protection of the user plane according to the security protection policy, configure the confidentiality security protection algorithm of the user plane and a security key applicable to the confidentiality security protection algorithm; send third indication information to the terminal device, the third indication information is used to indicate the activation of the confidentiality security protection of the user plane,

[0040] The security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform confidentiality and integrity security protection, and the confidentiality and integrity security protection includes: using the security key as an input key of the integrity protection part in the security algorithm for integrity protection, and using the security key as an input key of the confidentiality protection part in the security algorithm for confidentiality protection.

[0041] Based on the above solution, the access network device determines to activate the integrity security protection or confidentiality security protection of the user plane according to the security protection policy. If the negotiation result of the algorithm negotiation process is a security algorithm, the access network device can still determine the required integrity security protection algorithm or confidentiality security protection algorithm based on the security algorithm, so that the security protection of the user plane can still be achieved when the algorithm negotiation result and the security protection policy do not match.

[0042] In combination with the fifth aspect, in certain implementations of the fifth aspect, the sending of third indication information to the terminal device includes: sending a radio resource control RRC connection reconfiguration message to the terminal device, the RRC connection reconfiguration message including the third indication information.

[0043] In combination with the fifth aspect, in certain implementations of the fifth aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm; or, before sending the third indication information to the terminal device, the method also includes: selecting the security algorithm for confidentiality and integrity security protection of the user plane; and sending the identifier of the security algorithm to the terminal device in the access layer security mode command AS SMC process.

[0044] Based on the above solution, the access network device can carry the identifier of the security algorithm in the RRC connection reconfiguration message sent to the terminal device, or it can be the security algorithm used for user plane security protection that has been negotiated with the terminal device through the AS SMC process before sending the third indication information. This technical solution does not limit the timing of the access network device and the terminal device to negotiate the use of the algorithm, thereby improving the flexibility of the solution.

[0045] In combination with the fifth aspect, in certain implementations of the fifth aspect, the third indication information is status information of activating integrity security protection or activating confidentiality security protection.

[0046] In a sixth aspect, a communication method is provided. The method may be executed by a terminal device, or by a component (such as a chip or a circuit) of the terminal device, and this application does not limit this.

[0047] The communication method comprises: determining an integrity security protection algorithm based on a selected security algorithm; receiving third indication information, the third indication information being used to indicate activation of user plane integrity security protection; and configuring the integrity security protection algorithm of the user plane and a security key applicable to the integrity security protection algorithm when determining to use the integrity security protection algorithm for user plane integrity security protection according to the third indication information;

[0048] or,

[0049] Determine a confidentiality security protection algorithm based on the selected security algorithm; receive third indication information, the third indication information being used to indicate activation of user plane confidentiality security protection; in the case where it is determined according to the third indication information that a confidentiality security protection algorithm is used for user plane confidentiality security protection, determine the confidentiality security protection algorithm based on the security algorithm, and configure the confidentiality security protection algorithm of the user plane and a security key applicable to the confidentiality security protection algorithm;

[0050] The security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform user plane confidentiality and integrity security protection, and the confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm for integrity protection, and using the security key as the input key of the confidentiality protection part in the security algorithm for confidentiality protection.

[0051] In combination with the sixth aspect, in certain implementations of the sixth aspect, the receiving of the third indication information includes: receiving a radio resource control RRC connection reconfiguration message, the RRC connection reconfiguration message including the third indication information.

[0052] In combination with the sixth aspect, in certain implementations of the sixth aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm; or, before sending the third indication information to the terminal device, the method also includes: receiving an identifier of the security algorithm from the access network device in an access layer security mode command AS SMC process.

[0053] In combination with the sixth aspect, in certain implementations of the sixth aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm.

[0054] In combination with the sixth aspect, in certain implementations of the sixth aspect, the third indication information is status information of activating integrity security protection or activating confidentiality security protection.

[0055] The technical effects of the method shown in the sixth aspect and its possible design above can refer to the technical effects in the fifth aspect and its possible design.

[0056] In a seventh aspect, a communication device is provided, which is used to implement the method shown in the fifth aspect. The device includes: a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0057] In an eighth aspect, a communication device is provided, which is used to implement the method shown in the sixth aspect. The device includes: a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0058] In the ninth aspect, a communication system is provided, comprising an access network device and a terminal device, wherein the access network device is used to execute the method shown in the first aspect above, and the terminal device executes the method shown in the second aspect above; or, the access network device is used to execute the method shown in the fifth aspect above, and the terminal device executes the method shown in the sixth aspect above.

[0059] In a tenth aspect, a communication device is provided, which includes: a memory for storing programs; a processor for executing the programs stored in the memory, and when the programs stored in the memory are executed, the processor is used to execute the methods provided in the above aspects.

[0060] In the eleventh aspect, the present application provides a processor for executing the methods provided in the above aspects. In the process of executing these methods, the process of sending the above information and obtaining / receiving the above information in the above methods can be understood as the process of the processor outputting the above information and the process of the processor receiving the input above information. When outputting the above information, the processor outputs the above information to the transceiver so that it can be transmitted by the transceiver. After being output by the processor, the above information may also need to be processed otherwise before reaching the transceiver. Similarly, when the processor receives the input information, the transceiver obtains / receives the above information and inputs it into the processor. Furthermore, after the transceiver receives the above information, the above information may need to be processed otherwise before being input into the processor.

[0061] Based on the above principle, for example, the receiving request message mentioned in the above method can be understood as the processor receiving input information.

[0062] For the operations such as transmission, sending and acquisition / reception involved in the processor, unless otherwise specified, or unless they conflict with their actual functions or internal logic in the relevant descriptions, they can be more generally understood as processor output, reception, input and other operations, rather than transmission, sending and receiving operations performed directly by the RF circuit and antenna.

[0063] In the implementation process, the processor may be a processor specifically used to execute these methods, or a processor that executes computer instructions in a memory to execute these methods, such as a general-purpose processor. The memory may be a non-transitory memory, such as a read-only memory (ROM), which may be integrated with the processor on the same chip or may be separately arranged on different chips. The embodiment of the present application does not limit the type of memory and the arrangement of the memory and the processor.

[0064] In a twelfth aspect, a computer-readable storage medium is provided, which stores a program code for execution by a device, wherein the program code includes a program for executing the methods provided in the above aspects.

[0065] In a thirteenth aspect, a computer program product comprising instructions is provided. When the computer program product is run on a computer, the computer is used to execute the methods provided in the above aspects.

[0066] In a fourteenth aspect, a chip is provided, which includes a processor and a communication interface. The processor reads instructions stored in a memory through the communication interface to execute the methods provided in the above aspects.

[0067] Optionally, as an implementation manner, the chip may further include a memory, in which instructions are stored, and the processor is used to execute the instructions stored in the memory. When the instructions are executed, the processor is used to execute the methods provided by the above aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] Figure 1 is a schematic diagram of a network architecture 100 .

[0069] Figure 2 (a) and (b) are schematic diagrams of how to use the authentication encryption algorithm.

[0070] Figure 3 It is a schematic flow chart of the AS SMC process.

[0071] Figure 4 The present invention is a schematic flowchart of a security activation process of a UP message.

[0072] Figure 5 It is a schematic flow chart of a communication method provided by the present application.

[0073] Figure 6 It is a schematic flow chart of another communication method provided by the present application.

[0074] Figure 7 It is a schematic flow chart of another communication method provided by the present application.

[0075] Figure 8 It is a schematic block diagram of a communication device 10 provided in an embodiment of the present application.

[0076] Fig. 9 It is a schematic diagram of another communication device 20 provided in an embodiment of the present application.

[0077] Fig.10 It is a schematic diagram of a chip system 30 provided in an embodiment of the present application. DETAILED DESCRIPTION

[0078] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0079] The technical solution provided in this application can be applied to various communication systems, such as: new radio (NR) system, long term evolution (LTE) system, LTE frequency division duplex (FDD) system, LTE time division duplex (TDD) system, etc. The technical solution provided in this application can also be applied to device to device (D2D) communication, vehicle to everything (V2X) communication, machine to machine (M2M) communication, machine type communication (MTC), and Internet of things (IoT) communication system or other communication systems.

[0080] In the communication system, the part operated by the operator can be called a public land mobile network (PLMN), or an operator network, etc. PLMN is a network established and operated by the government or an operator approved by it for the purpose of providing land mobile communication services to the public. It is mainly a public network in which mobile network operators (MNO) provide mobile broadband access services to users. The PLMN described in the embodiment of the present application may specifically be a network that meets the requirements of the 3GPP standard, referred to as a 3GPP network. 3GPP networks generally include but are not limited to 5G networks, fourth-generation mobile communications (4th-generation, 4G) networks, and other future communication systems, such as (6th-generation, 6G) networks, etc. This technical solution is also applicable to SNPN (Stand-alone Non-Public Network).

[0081] For the convenience of description, the embodiments of the present application will be described using PLMN or 5G network as an example.

[0082] Figure 1 1 is a schematic diagram of a network architecture 100, taking the 5G network architecture based on a service-oriented architecture in a non-roaming scenario defined in the 3GPP standardization process as an example. As shown in the figure, the network architecture may include three parts, namely, a terminal device part, a DN, and an operator network PLMN part. The functions of the network elements of each part are briefly described below.

[0083] The terminal equipment part may include a terminal device 110, which may also be referred to as a user equipment (UE). The terminal device 110 in the present application is a device with wireless transceiver functions, which may communicate with one or more core network (CN) devices via an access network device (or may also be referred to as an access device) in a radio access network (RAN) 140. The terminal device 110 may also be referred to as an access terminal, a terminal, a user unit, a user station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a user agent or a user device, etc. The terminal device 110 may be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; it may also be deployed on the water (e.g., a ship, etc.); it may also be deployed in the air (e.g., on an airplane, a balloon, and a satellite, etc.). The terminal device 110 may be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a smart phone, a mobile phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), etc. Alternatively, the terminal device 110 may also be a handheld device with wireless communication function, a computing device or other device connected to a wireless modem, a vehicle-mounted device, a wearable device, a drone device or a terminal in the Internet of Things or the Internet of Vehicles, a terminal in any form in a 5G network and future networks, a relay user device or a terminal in a future evolved 6G network, etc. Among them, the relay user device may be, for example, a 5G residential gateway (RG). For example, the terminal device 110 can be a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, etc. The terminal device here refers to a 3GPP terminal. The embodiment of the present application does not limit the type or type of terminal device. For ease of explanation, the following description of the present application takes UE as an example to refer to the terminal device.

[0084] The operator network PLMN part may include but is not limited to a (radio) access network ((R)AN) 120 and a core network (CN) part.

[0085] (R)AN 120 can be regarded as a sub-network of the operator network, and is an implementation system between the service nodes in the operator network and the terminal device 110. To access the operator network, the terminal device 110 first passes through (R)AN 120, and then can connect to the service nodes of the operator network through (R)AN 120. The access network device (RAN device) in the embodiment of the present application is a device that provides wireless communication functions for the terminal device 110, and can also be called a network device. The RAN device includes but is not limited to: the next generation node base station (gNB) in the 5G system, the evolved node B (eNB) in the long term evolution (LTE), the radio network controller (RNC), the node B (NB), the base station controller (BSC), the base transceiver station (BTS), the home base station (for example, home evolved node B, or home node B, HNB), the base band unit (BBU), the transmission point (TRP), the transmitting point (TP), the small base station device (pico), the mobile switching center, or the network device in the future network. In systems using different wireless access technologies, the names of the devices with access network device functions may be different. For the convenience of description, in all embodiments of the present application, the above-mentioned devices that provide wireless communication functions for the terminal device 110 are collectively referred to as access network devices or RAN or AN for short. It should be understood that this document does not limit the specific type of access network equipment.

[0086] The CN part may include but is not limited to the following NFs: user plane function (UPF) 130, network exposure function (NEF) 131, network function repository function (NRF) 132, policy control function (PCF) 133, unified data management function (UDM) 134, unified data repository function (UDR) 135, network data analytics function (NWDAF) 136, authentication server function (AUSF) 137, access and mobility management function (AMF) 138, session management function (SMF) 139.

[0087] The data network DN 140, which may also be referred to as a packet data network (PDN), is usually a network located outside the operator network, such as a third-party network. Of course, in some implementations, the DN may also be deployed by the operator, that is, the DN is part of the PLMN. This application does not limit whether the DN belongs to the PLMN. The operator network PLMN may access multiple data networks DN 140, and multiple services may be deployed on the data network DN 140, which may provide services such as data and / or voice to the terminal device 110. For example, the data network DN 140 may be a private network of a smart factory, and the sensors installed in the workshop of the smart factory may be the terminal devices 110. The control server in which the sensors are deployed in the data network DN 140 may provide services for the sensors. The sensors may communicate with the control server, obtain instructions from the control server, and transmit the collected sensor data to the control server according to the instructions. For another example, the data network DN 140 may be an internal office network of a company, and the mobile phones or computers of the company's employees may be the terminal devices 110, and the employees' mobile phones or computers may access information, data resources, etc. on the company's internal office network. The terminal device 110 can establish a connection with the operator network through an interface (such as N1, etc.) provided by the operator network, and use data and / or voice services provided by the operator network. The terminal device 110 can also access the data network DN 140 through the operator network, and use the operator services deployed on the data network DN 140, and / or services provided by a third party.

[0088] The following is a brief description of the NF functions included in CN.

[0089] 1. UPF 130 is a gateway provided by the operator and is the gateway for communication between the operator network and the data network DN 140. UPF 130 includes user-plane related functions such as data packet routing and transmission, data packet detection, service usage reporting, quality of service (QoS) processing, legal monitoring, uplink data packet detection, downlink data packet storage, etc.

[0090] 2. NEF 131 is a control plane function provided by the operator. It mainly enables third parties to use the services provided by the network, supports the network to open its capabilities, event and data analysis, provides PLMN security configuration information from external applications, and converts the interactive information inside and outside the PLMN. It provides an API interface for the operator network to be open to the outside world, and provides it for the interaction between external servers and internal operator networks.

[0091] 3. NRF 132 is a control plane function provided by the operator, which can be used to maintain real-time information of network functions and services in the network. For example, it supports network service discovery, maintains the services supported by the NF profile of the NF instance, supports service discovery of the service communication proxy (SCP), maintains the SCP profile of the SCP instance, sends notifications about newly registered, unregistered, and updated NFs and SCPs, and maintains the health status of NF and SCP operations.

[0092] 4. PCF 133 is a control plane function provided by the operator. It supports a unified policy framework to govern network behavior, provide policy rules to other control functions, and contract information related to policy decisions.

[0093] 5. UDM 134 is a control plane function provided by the operator, which is responsible for storing the subscriber permanent identifier (SUPI) of the subscriber in the operator network, the generic public subscription identifier (GPSI) of the subscriber, the credential and other information. The confidentiality of the SUPI will be protected during the transmission process, and the SUPI after confidentiality protection is called the hidden user subscription identifier (SUCI). The information stored in UDM 134 can be used for the authentication and authorization of the terminal device 110 to access the operator network. The subscribers of the above-mentioned operator network can specifically be users who use the services provided by the operator network, such as users who use China Telecom's mobile phone chip card (subscriber identity module, SIM) card, or users who use China Mobile's mobile phone chip card, etc. The credential of the above-mentioned subscriber can be a small file storing long-term keys stored in the mobile phone chip card or information related to the confidentiality of the mobile phone chip card, which is used for authentication and / or authorization. It should be noted that permanent identifiers, credentials, security contexts, authentication data (cookies), and tokens are equivalent to verification / authentication and authorization-related information. In the embodiments of the present application, no distinction or restriction is made for the sake of convenience of description.

[0094] 6. UDR 135 is a control plane function provided by the operator, which provides the functions of storing and retrieving subscription data for UDM, storing and retrieving policy data for PCF, storing and retrieving user's NF group ID information, etc.

[0095] 7. NWDAF 136 is a control plane function provided by the operator. Its main function is to collect data from NF, external application function AF and operation, administration and maintenance (OAM) system, etc., and provide NWDAF service registration, data opening and analysis data to NF and AF. In this application, NWDAF is mainly responsible for security-related data analysis. Therefore, in this application, NWDAF can also be understood as a network element with security analysis function. The network element with security analysis function is called NWDAF only as an example. There may be other network element names in the future, and this application does not limit this.

[0096] 8. AUSF 137 is a control plane function provided by the operator, and is usually used for primary authentication, i.e., authentication between the terminal device 110 (subscriber) and the operator network. After receiving the authentication request initiated by the subscriber, AUSF 137 may authenticate and / or authorize the subscriber through the authentication information and / or authorization information stored in UDM 134, or generate the authentication and / or authorization information of the subscriber through UDM 134. AUSF 137 may feed back the authentication information and / or authorization information to the subscriber.

[0097] 9. AMF 138 is a control plane network function provided by the operator network, responsible for access control and mobility management of the terminal device 110 accessing the operator network, such as mobility status management, allocation of user temporary identity, authentication and authorization of users, etc.

[0098] AMF 138 is used to establish a non-access stratum (NAS) connection with the UE and has the same 5G NAS security context as the UE. The 5G NAS security context includes KAMF, key identification information with the same NAS layer key, UE security capabilities, and uplink NAS COUNT value and downlink NAS COUNT value. NAS layer keys include NAS confidentiality security protection keys and NAS integrity security protection keys, which are used for confidentiality security protection and integrity security protection of NAS messages respectively.

[0099] 10. SMF 139 is a control plane network function provided by the operator network, responsible for managing the PDU session of the terminal device 110. The PDU session is a channel for transmitting PDUs. The terminal device needs to transmit PDUs to and from the data network DN 140 through the PDU session. SMF 139 is responsible for establishing, maintaining and deleting PDU sessions. SMF 139 includes session management (such as session establishment, modification and release, including tunnel maintenance between the user plane function UPF 130 and (R)AN 120), selection and control of UPF 130, service and session continuity (SSC) mode selection, roaming and other session-related functions.

[0100] 11. AF 141 is a control plane network function provided by the operator network, which is used to provide application layer information. It can interact with the policy framework through the network open function network element or directly interact with the policy framework to make policy decision requests, etc. It can be located inside or outside the operator network.

[0101] It is understandable that the above network elements or functions can be physical entities in hardware devices, software instances running on dedicated hardware, or virtualized functions instantiated on a shared platform (e.g., a cloud platform). In short, an NF can be implemented by hardware or software.

[0102] Figure 1 Among them, Nnef, Nnrf, Npcf, Nudm, Nudr, Nnwdaf, Nausf, Namf, Nsmf, N1, N2, N3, N4, and N6 are interface serial numbers. For example, the meaning of the above interface serial numbers can refer to the meaning defined in the 3GPP standard protocol, and this application does not limit the meaning of the above interface serial numbers. It should be noted that the interface name between the various network functions in the figure is only an example. In the specific implementation, the interface name of the system architecture may also be other names, which is not limited by this application. In addition, the name of the message (or signaling) transmitted between the above-mentioned network elements is also only an example, and does not constitute any limitation on the function of the message itself.

[0103] For the convenience of explanation, in the embodiments of the present application, the network functions (such as NEF 131 ... SMF139) are collectively referred to as NFs, that is, the NFs described later in the embodiments of the present application can be replaced by any network function. Figure 1 Only some network functions are schematically described. The NF described below is not limited to Figure 1 The network functions shown in .

[0104] It should be understood that the above-mentioned network architecture applied to the embodiment of the present application is only a network architecture described from the perspective of a service-oriented architecture, and the network architecture applicable to the embodiment of the present application is not limited to this. Any network architecture that can realize the functions of the above-mentioned network elements is applicable to the embodiment of the present application.

[0105] It should also be understood that the AMF, SMF, UPF, NEF, AUSF, NRF, PCF, and UDM shown in the figure can be understood as network elements used to implement different functions in the core network, for example, they can be combined into network slices as needed. These core network network elements can be independent devices or integrated into the same device to implement different functions. This application does not limit the specific form of the above network elements.

[0106] It should also be understood that the above naming is only defined for the convenience of distinguishing different functions and should not constitute any limitation to this application. This application does not exclude the possibility of using other naming in 5G networks and other future networks. For example, in a 6G network, some or all of the above network elements may use the terminology in 5G, or may use other names.

[0107] To facilitate understanding of the embodiments of the present application, some basic concepts involved in the present application are briefly described.

[0108] 1. Activate security protection based on confidentiality security protection algorithm: refers to configuring confidentiality security protection key and confidentiality security protection algorithm.

[0109] Furthermore, after activating security protection based on the confidentiality security protection algorithm, the sender can use the confidentiality security protection key and the confidentiality security protection algorithm to perform confidentiality protection (e.g., encrypt) on the outgoing message; the receiver can use the confidentiality security protection key and the confidentiality security protection algorithm to decrypt the received message (e.g., decrypt).

[0110] 2. Activate security protection based on integrity security protection algorithm: refers to configuring integrity security protection key and integrity security protection algorithm.

[0111] Furthermore, after activating security protection based on the integrity security protection algorithm, the sender can use the integrity security protection key and the integrity security protection algorithm to perform integrity security protection on the sent message, that is, calculate the MAC used for integrity security protection; the receiver can use the integrity security protection key and the integrity security protection algorithm to perform integrity security verification on the received message, that is, determine whether the received MAC is correct.

[0112] 3. Security algorithm that can achieve both confidentiality security protection and integrity security protection: The security algorithm involved in this application that can achieve both confidentiality security protection and integrity security protection can be called an authenticated encryption algorithm. An authenticated encryption algorithm is an authenticated encryption with associated data (AEAD) algorithm. The AEAD algorithm (also called AEAD mode) can achieve both confidentiality security protection and integrity security protection of data. In other words, the AEAD algorithm can achieve both confidentiality security protection and integrity security protection of data at the same time, and it can also be understood that the AEAD algorithm can achieve both confidentiality security protection and integrity security protection of data with a single key (AEAD key) as the input key.

[0113] For ease of understanding, combined Figure 2 (a) and (b) briefly introduce how to use the authenticated encryption algorithm.

[0114] from Figure 2 As can be seen from (a) and (b), the authenticated encryption algorithm includes a part for confidentiality protection and a part for integrity protection.

[0115] from Figure 2 In (a), it can be seen that the sender can perform confidentiality protection (e.g., encryption) on the parameter to be protected based on the security key and the confidentiality protection part to obtain the ciphertext; in addition, the sender can perform integrity protection operation on the parameter to be protected based on the security key, the integrity protection part and the ciphertext to obtain the MAC. The parameter to be protected is transmitted to the receiving end in plain text.

[0116] For example, the sender uses the parameters to be protected for confidentiality and the security key as the input of the confidentiality protection part, performs confidentiality protection, and outputs the ciphertext; and uses the ciphertext, the security key, and the parameters to be protected for integrity as the input of the integrity protection part, performs integrity protection operation to obtain MAC. It can be understood that after the parameters to be protected for confidentiality are protected for confidentiality, the ciphertext is obtained, and the ciphertext will be protected for integrity, that is, the parameters to be protected for confidentiality will be protected for confidentiality and integrity.

[0117] from Figure 2It can be seen from (b) in the figure that the receiving end can perform integrity protection operations based on the security key, the parameter to be integrity verified, the received ciphertext and the integrity-protected part to obtain MAC. It should be understood that, in the absence of a security attack, the parameter to be integrity verified is also the aforementioned parameter to be integrity-secured; in addition, the receiving end can decrypt the ciphertext (e.g., decrypt it) based on the security key, the ciphertext and the confidentiality-protected part to obtain the decrypted parameter (e.g., the plaintext obtained by decrypting the ciphertext). It should be understood that, in the absence of a security attack, the decrypted parameter is also the aforementioned parameter to be confidentiality-secured.

[0118] For example, the receiving end uses the received parameters to be verified for integrity, security keys, and ciphertext as the input of the integrity protection part, performs integrity protection operation to obtain MAC, compares the MAC obtained by itself with the received MAC to see if they are consistent, and implements integrity security protection (e.g., integrity verification). The receiving end can also use the ciphertext and security key as the input of the confidentiality protection part, perform confidentiality protection (e.g., decryption), and then output the parameters for deconfidentiality protection.

[0119] From the above, we can see that for the sender, confidentiality protection is encryption; for the receiver, integrity protection is integrity verification, and confidentiality protection is decryption.

[0120] For example, if Figure 2 The authenticated encryption algorithm shown in (a) and (b) is the AEAD algorithm.

[0121] For the sender, the input of the AEAD algorithm includes plaintext (e.g., Figure 2 Parameters to be protected for confidentiality shown in (a)), additional authenticated data (AAD) (e.g., Figure 2 The parameters to be protected by integrity security as shown in (a) of Figure 2 The plaintext part will be encrypted by the AEAD key to obtain the ciphertext (eg, Figure 2 The ciphertext shown in (a) in the figure is used as the input of the integrity protection part. Among them, AAD is the part that does not perform confidentiality security protection but performs integrity security protection. The output of the AEAD algorithm includes the ciphertext part and the MAC part. Among them, the AEAD key can be used for both confidentiality security protection and integrity security protection, so it can also be called a single key.

[0122] For the receiving end, the input of the AEAD algorithm includes ciphertext, AAD and AEAD key. Among them, the ciphertext, AAD and AEAD key will be used as the input of the integrity protection part, and the ciphertext and AEAD key will be used as the input of the encryption protection part.

[0123] Exemplarily, AAD may be carried in a message as plain text and transmitted between the sender and the receiver, or it may be a known parameter shared by the sender and the receiver.

[0124] In this application, the following relationship exists between the authentication encryption algorithm and the integrity security protection algorithm and the confidentiality security protection algorithm:

[0125] 1) The authentication encryption algorithm can be used to determine the corresponding integrity security protection algorithm.

[0126] As an optional method, the authenticated encryption algorithm is used to determine the corresponding integrity security protection algorithm, including:

[0127] The algorithm after the confidentiality protection part of the authenticated encryption algorithm is cleared can be considered as an integrity security protection algorithm. The confidentiality protection part being cleared can be understood as a confidentiality protection part null mechanism (null-scheme). When the confidentiality protection part is cleared, the parameters to be protected in the confidentiality protection part of the input part and the ciphertext of the output part of the confidentiality protection part are the same, that is, the confidentiality protection part does not achieve confidentiality protection.

[0128] Optionally, the integrity security protection algorithm determined in this way can also be called the integrity security protection algorithm of the authenticated encryption algorithm.

[0129] As another optional method, the authentication encryption algorithm is used to determine the corresponding integrity security protection algorithm, including:

[0130] According to the preset rules, determine the integrity security protection algorithm corresponding to the authentication encryption algorithm. The preset rules can be the correspondence between the authentication encryption algorithm and the integrity security protection algorithm. For example: the correspondence between the integrity security protection algorithm and the authentication encryption algorithm can be: the SNOW-AEAD algorithm corresponds to the SNOW integrity security protection algorithm, the ZUC-AEAD algorithm corresponds to the ZUC integrity security protection algorithm, the AES-AEAD algorithm corresponds to the AES integrity security protection algorithm, and so on. Then the SNOW-AEAD algorithm and the corresponding relationship can determine the SNOW integrity security protection algorithm, the ZUC-AEAD algorithm and the corresponding relationship can determine the ZUC integrity security protection algorithm, and the others are similar and will not be repeated. In addition, the correspondence between the integrity security protection algorithm and the authentication encryption algorithm can also be referred to as the mapping relationship between the integrity security protection algorithm and the authentication encryption algorithm, which is not limited in this application.

[0131] Exemplarily, the method of omitting the confidentiality protection part in the authentication encryption algorithm to obtain the integrity security protection algorithm is called mapping, and this application does not limit this. Therefore, the authentication encryption algorithm can be used to determine the corresponding integrity security protection algorithm, which can also be understood as the authentication encryption algorithm can be used to map the corresponding integrity security protection algorithm.

[0132] 2) The authenticated encryption algorithm can be used to determine the corresponding confidentiality security protection algorithm.

[0133] As an optional method, the authenticated encryption algorithm is used to determine the corresponding confidentiality security protection algorithm, including:

[0134] The algorithm after the integrity protection part of the authentication encryption algorithm is cleared can be considered as a confidentiality security protection algorithm. Among them, the integrity protection part can be understood as a null scheme. When the integrity protection part is cleared, the output MAC is a constant (such as all zeros), that is, the integrity protection part does not achieve integrity protection.

[0135] Optionally, the confidentiality security protection algorithm determined in this way can also be called a confidentiality security protection algorithm of the authenticated encryption algorithm.

[0136] As another optional method, the authenticated encryption algorithm is used to determine the corresponding confidentiality security protection algorithm, including:

[0137] According to the preset rules, determine the encryption algorithm corresponding to the authentication encryption algorithm. The preset rules can be the correspondence between the authentication encryption algorithm and the encryption algorithm. For example, the correspondence between the confidentiality security protection algorithm and the authentication encryption algorithm can be: the SNOW-AEAD algorithm corresponds to the SNOW confidentiality security protection algorithm, the ZUC-AEAD algorithm corresponds to the ZUC confidentiality security protection algorithm, the AES-AEAD algorithm corresponds to the AES confidentiality security protection algorithm, and so on. Then the SNOW-AEAD algorithm and the corresponding relationship can determine the SNOW confidentiality security protection algorithm, the ZUC-AEAD algorithm and the corresponding relationship can determine the ZUC confidentiality security protection algorithm, and the others are similar and will not be repeated. In addition, the corresponding relationship between the confidentiality security protection algorithm and the authentication encryption algorithm can also be referred to as the mapping relationship between the confidentiality security protection algorithm and the authentication encryption algorithm, which is not limited in this application.

[0138] Exemplarily, the method of omitting the integrity protection part in the authentication encryption algorithm to obtain the confidentiality security protection algorithm is called mapping, and this application does not limit this. Therefore, the authentication encryption algorithm can be used to determine the corresponding confidentiality security protection algorithm, which can also be understood as the authentication encryption algorithm can be used to map the corresponding confidentiality security protection algorithm.

[0139] 3) The integrity security protection algorithm can be used to determine the corresponding authentication encryption algorithm.

[0140] Exemplarily, the integrity security protection algorithm is used to determine the corresponding authentication encryption algorithm, including:

[0141] According to the preset rules, determine the authentication encryption algorithm corresponding to the integrity security protection algorithm. The preset rule can be the correspondence between the authentication encryption algorithm and the integrity security protection algorithm. For example, see the description in 1) above. The SNOW integrity security protection algorithm can determine the SNOW-AEAD algorithm, the ZUC integrity security protection algorithm can determine the ZUC-AEAD algorithm, and the others are similar and will not be repeated.

[0142] Exemplarily, the correspondence between the authentication encryption algorithm and the integrity security protection algorithm can also be referred to as the mapping relationship between the authentication encryption algorithm and the integrity security protection algorithm. Therefore, the integrity security protection algorithm can be used to determine the corresponding authentication encryption algorithm, which can also be understood as the integrity security protection algorithm can be used to map the corresponding authentication encryption algorithm.

[0143] 4) The confidentiality security protection algorithm can be used to determine the corresponding authentication encryption algorithm.

[0144] Exemplarily, the confidentiality security protection algorithm is used to determine the corresponding authentication encryption algorithm, including:

[0145] According to the preset rules, the authentication encryption algorithm corresponding to the confidentiality security protection algorithm is determined. The preset rules can be the correspondence between the authentication encryption algorithm and the encryption algorithm. For example, see the description in 2) above. The SNOW confidentiality security protection algorithm can determine the SNOW-AEAD algorithm, the ZUC confidentiality security protection algorithm can determine the ZUC-AEAD algorithm, and the others are similar and will not be repeated.

[0146] Exemplarily, the correspondence between the authentication encryption algorithm and the confidentiality security protection algorithm can also be referred to as the mapping relationship between the authentication encryption algorithm and the confidentiality security protection algorithm. Therefore, the confidentiality security protection algorithm can be used to determine the corresponding authentication encryption algorithm, which can also be understood as the confidentiality security protection algorithm can be used to map the corresponding authentication encryption algorithm.

[0147] 4. AS SMC process:

[0148] For example, the AS SMC process is mainly used to negotiate the radio resource control (RRC) and user plane (UP) algorithms and to activate RRC security. The RRC reconfiguration message is mainly used to activate UP security.

[0149] For ease of understanding, combined Figure 3 Introduce the AS SMC process in detail.

[0150] Figure 3 It is a schematic flow chart of the AS SMC process, including the following steps:

[0151] S310, the access network device configures a priority list of algorithms allowed to be used.

[0152] Exemplarily, an AS integrity security protection algorithm priority list is configured on the access network device (e.g., the AS integrity security protection algorithms configured on the access network device include AES integrity security protection algorithm, SNOW integrity security protection algorithm, ZUC integrity security protection algorithm, empty integrity security protection algorithm, etc., wherein the priorities of the configured multiple integrity security protection algorithms are ranked from high to low as AES integrity security protection algorithm, SNOW integrity security protection algorithm, ZUC integrity security protection algorithm, empty integrity security protection algorithm) and an AS confidentiality security protection algorithm priority list (e.g., the AS confidentiality security protection algorithms configured on the access network device include ZUC confidentiality security protection algorithm, AES confidentiality security protection algorithm, SNOW confidentiality security protection algorithm, empty integrity security protection algorithm, wherein the priorities of the configured multiple confidentiality security protection algorithms are ranked from high to low as ZUC confidentiality security protection algorithm, AES confidentiality security protection algorithm, SNOW confidentiality security protection algorithm, empty integrity security protection algorithm).

[0153] The access network device receives the UE security capability and selects the AS integrity security protection algorithm and the AS confidentiality security protection algorithm according to the UE security capability and the algorithm priority list. For example, if the UE security capability includes the supported AS integrity security protection algorithm as the AES integrity security protection algorithm and the SNOW integrity security protection algorithm, the integrity security protection algorithm selected by the access network device is the AES integrity security protection algorithm; for another example, if the UE security capability includes the supported AS confidentiality security protection algorithm as the AES confidentiality security protection algorithm and the ZUC confidentiality security protection algorithm, the confidentiality security protection algorithm selected by the access network device is the ZUC confidentiality security protection algorithm.

[0154] S320, activate RRC integrity security protection.

[0155] Specifically, before sending the AS SMC message, the access network device activates RRC integrity security protection.

[0156] Further, the access network device performs integrity security protection calculation on the AS SMC message and obtains MAC-I. Exemplarily, the calculation input key of AS MAC is Krrcint, the input parameters are the bearer identifier, direction parameter, counter value, etc., and the security protection algorithm used is the selected integrity security protection algorithm.

[0157] Among them, the bearer identifier is used to distinguish different bearers. For example, in a 3GPP connection, the bearer identifier can be "0x01", and in a non-3GPP connection, the bearer identifier can be "0x02"; the direction parameter is used to distinguish whether it is an uplink message or a downlink message. For example, in an uplink message, the direction parameter takes a value of 0, and in a downlink message, the direction parameter takes a value of 1; the value of the counter is used as a freshness parameter to prevent replay attacks.

[0158] It should be noted that only integrity security protection is performed in the AS SMC message, but confidentiality security protection is not performed, because the UE side needs to use the parameters in the message (such as ngKSI, etc.) to obtain the key and algorithm for integrity verification.

[0159] S330: The access network device sends an AS SMC message to the UE.

[0160] The AS SMC message includes but is not limited to the selected confidentiality security protection algorithm and the selected integrity security protection algorithm. The selected confidentiality security protection algorithm and the selected integrity security protection algorithm are part of the AS security context and are used by the UE and the access network device to negotiate the security protection algorithm for subsequent security protection.

[0161] It should be noted that the security protection algorithms for RRC messages and UP messages can be unified, that is, the selected confidentiality security protection algorithm and the selected integrity security protection algorithm are applicable to both the security protection of RRC messages and the security protection of UP messages; the security protection algorithms for RRC messages and UP messages can be independent, that is, the message includes the confidentiality security protection algorithm selected for the RRC message, the integrity security protection algorithm selected for the RRC message, the confidentiality security protection algorithm selected for the UP message, and the integrity security protection algorithm selected for the UP message.

[0162] S340, the access network device activates decryption of the uplink RRC message.

[0163] Specifically, after sending the AS SMC message, the access network device activates decryption of the uplink RRC message.

[0164] S350, the UE verifies the AS SMC message.

[0165] Exemplarily, the UE obtains the corresponding Krrcint and performs an integrity check according to the integrity security protection algorithm carried in the message. If the integrity check succeeds, the UE activates the integrity security protection and confidentiality security protection (e.g., encryption) of the uplink RRC message and the de-confidentiality security protection (e.g., decryption) operation of the downlink message.

[0166] S360, the UE sends an AS SMP message to the access network device.

[0167] Specifically, if the verification in step S350 succeeds, the UE sends an AS SMP message to the access network device, which is integrity-protected and confidentiality-protected. For example, the integrity-protection key is Krrcint, the integrity-protection algorithm is the integrity-protection algorithm selected by the AS SMC message in step S330, the confidentiality-protection key is Krrcenc, and the confidentiality-protection algorithm is the confidentiality-protection algorithm selected by the AS SMC message in step S330. Among them, MAC-I is used for integrity-protection; the access network device receives the AS SMP message, and decrypts and performs integrity verification on the message.

[0168] S370, the UE activates RRC uplink message confidentiality security protection.

[0169] After sending the AS SMP message, the UE activates RRC uplink message confidentiality security protection.

[0170] S380, the access network device activates RRC downlink message confidentiality protection.

[0171] After receiving the AS SMP message, the access network device activates the RRC downlink message confidentiality security protection.

[0172] It should be noted that in the existing security mechanism, confidentiality security protection and integrity security protection are independent of each other, that is, the key and algorithm are isolated.

[0173] 5. Security activation of user plan (UP) messages: RRC connection reconfiguration messages are mainly used for security activation of UP messages.

[0174] For ease of understanding, combined Figure 4 This section describes the UP security activation process in detail.

[0175] Figure 4 The following is a schematic flow chart of the UP security activation process, including the following steps:

[0176] S410, RAN sends an RRC connection reconfiguration message to the UE.

[0177] The RRC connection reconfiguration message includes a data radio bearer (DRB) identifier and its corresponding UP message integrity security protection indication and confidentiality security protection indication.

[0178] It should be understood that the RRC connection reconfiguration process for performing UP message security activation occurs after the AS SMC process, that is, after RRC security activation.

[0179] S420, RAN configures a key and algorithm for UP message security protection;

[0180] Exemplarily, the RAN configures a Packet Data Convergence Protocol (PDCP) entity corresponding to the DRB identifier.

[0181] If the DRB indicated in the RRC connection reconfiguration message has UP integrity security protection activated and the RAN does not have the UP integrity security protection key, the RAN shall generate the UP integrity security protection key. The RAN configures the integrity security protection key and integrity security protection algorithm for UP messages in the PDCP entity. The RAN activates the integrity check of the uplink user plane messages on the DRB; and activates the integrity security protection of the downlink user plane messages on the DRB.

[0182] Similarly, if the DRB indicated in the RRC connection reconfiguration message has UP confidentiality activated and the RAN does not have a UP confidentiality security protection key, the RAN shall generate a UP confidentiality security protection key. The RAN configures the confidentiality security protection key and confidentiality security protection algorithm for UP messages in the PDCP entity. The RAN activates the decryption operation of the uplink user plane message on the DRB; activates the confidentiality security protection of the downlink user plane message on the DRB.

[0183] S430, the UE verifies the integrity of the RRC connection reconfiguration message.

[0184] If the RRC connection reconfiguration message indicates to activate the UP integrity security protection of the DRB, and if the UE does not have the UP integrity security protection key, the UE shall generate the UP integrity security protection key. The UE configures the key and algorithm for UP message security protection. Exemplarily, the UE configures the UP message integrity security protection key and integrity security protection algorithm in the PDCP entity. The UE activates the integrity security protection of the uplink user plane messages on the DRB; activates the integrity check of the downlink user plane messages on the DRB.

[0185] Similarly, if the RRC connection reconfiguration message indicates to activate the UP confidentiality security protection of the DRB, and if the UE does not have the UP confidentiality security protection key, the UE shall generate the UP confidentiality security protection key. The UE configures the integrity security protection key and integrity security protection algorithm of the UP message in the PDCP entity. The UE activates the confidentiality security protection of the uplink user plane messages on the DRB; activates the decryption operation of the downlink user plane messages on the DRB.

[0186] S440, the UE sends an RRC connection reconfiguration complete message to the RAN.

[0187] Specifically, if the UE successfully verifies the integrity of the RRC connection reconfiguration message, the UE shall send an RRC connection reconfiguration complete message to the RAN.

[0188] In addition, in order to facilitate understanding of the embodiments of the present application, the following points are explained.

[0189] First, in this application, "used for indication" may include being used for direct indication and being used for indirect indication. When describing that a certain indication information is used for indicating A, it may include that the indication information directly indicates A or indirectly indicates A, but it does not mean that A must be included in the indication information.

[0190] The information indicated by the indication information is called the information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated. The information to be indicated can be sent as a whole, or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in this application. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to the protocol, or can be configured by the transmitting end device by sending configuration information to the receiving end device.

[0191] Second, "at least one" shown in the present application refers to one or more, and "multiple" refers to two or more. In addition, in the embodiments of the present application, "first", "second" and various digital numbers (for example, "#1", "#2", etc.) are only for the convenience of description, and are not used to limit the scope of the embodiments of the present application. The size of the sequence number of each process below does not mean the order of execution, and the execution order of each process should be determined by its function and inherent logic, and should not constitute any limitation to the implementation process of the embodiments of the present application. It should be understood that the objects described in this way can be interchanged in appropriate circumstances, so that the schemes other than the embodiments of the present application can be described. In addition, in the embodiments of the present application, the words "510", "520" and the like are only for the convenience of description, and are not to limit the order of execution steps.

[0192] Third, in this application, the words "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in this application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a specific way.

[0193] Fourth, the "storage" involved in the embodiments of the present application may refer to storage in one or more memories. The one or more memories may be separately set or integrated in an encoder or decoder, a processor, or a communication device. The one or more memories may also be partially separately set and partially integrated in a decoder, a processor, or a communication device. The type of memory may be any form of storage medium, which is not limited by the present application.

[0194] Fifth, the “protocol” involved in the embodiments of the present application may refer to a standard protocol in the communication field, for example, it may include an LTE protocol, an NR protocol, and related protocols used in future communication systems, which is not limited in the present application.

[0195] Sixth, in the embodiments of the present application, "under the circumstances", "when", and "if" can sometimes be used interchangeably. It should be pointed out that when the distinction between them is not emphasized, the meanings they intend to express are the same.

[0196] Seventh, in the embodiments of the present application, various terms and English abbreviations, such as radio resource control (RRC), etc., are illustrative examples given for the convenience of description and should not constitute any limitation to the present application. The present application does not exclude the possibility of defining other terms that can achieve the same or similar functions in existing or future protocols.

[0197] Eighth, the term "and / or" in this article is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0198] Combination of the above Figure 1 Briefly introduces the scenarios in which the communication method provided in the embodiments of the present application can be applied, and introduces the basic concepts that may be involved in the embodiments of the present application, and combines the basic concepts with the Figure 3 and Figure 4 Introduces the AS SMC process and the secure activation process of user plane messages. Figure 3In the AS SMC process shown, the confidentiality security protection algorithm and the integrity security protection algorithm can be negotiated. When confidentiality security protection and integrity security protection are required, the combination of the confidentiality security protection algorithm and the integrity security protection algorithm has potential security risks. For example, the confidentiality security protection algorithm and the integrity security protection algorithm are used to perform security protection on the user plane message, specifically including: firstly performing integrity security protection on the user plane message based on the integrity security protection algorithm, and then using the result of the integrity security protection as the input parameter of the confidentiality security protection algorithm to perform confidentiality security protection on the user plane message. However, the confidentiality security protection algorithm and integrity security protection algorithm used are independent and not necessarily algorithms with the same number of bits. When the result of the integrity security protection is used as the input parameter of the confidentiality security protection, there may be algorithm splicing, and algorithm splicing brings security risks.

[0199] If the security protection algorithm based on which the user plane message is negotiated in the AS SMC process is an authentication encryption algorithm that can achieve both confidentiality security protection and integrity security protection, it is necessary to provide a user plane security protection activation process to activate the authentication encryption algorithm to perform security protection on the user plane message and improve the security of user plane message transmission.

[0200] The present application provides a communication method which can be applied in Figure 1 In the communication system shown, the security of user plane message transmission is expected to be improved.

[0201] It should be understood that the embodiments shown below do not particularly limit the specific structure of the execution subject of the method provided in the embodiments of the present application, as long as it is possible to communicate according to the method provided in the embodiments of the present application by running a program that records the code of the method provided in the embodiments of the present application. For example, the execution subject of the method provided in the embodiments of the present application may be an access network device and a terminal device, or a functional module in the access network device and the terminal device that can call and execute a program.

[0202] Figure 5 This is a schematic flow chart of a communication method provided by this application. In this communication method, the access network device and the terminal device can negotiate a security algorithm for protecting user plane messages through the AS SMC process, or they can also negotiate a security algorithm for protecting user plane messages through other methods. The specific negotiation method is not limited in this application.

[0203] The security algorithm involved in the following embodiments may be the authenticated encryption algorithm introduced above, including a part for confidentiality protection and a part for integrity protection, a security algorithm that can achieve both confidentiality security protection and integrity security protection. For example, the security algorithm is the AEAD algorithm shown above. The security algorithm and the authenticated encryption algorithm in the embodiments of the present application may be described interchangeably.

[0204] The security key involved in the following embodiments is the input key of the security algorithm, and integrity security protection and confidentiality security protection are performed based on the security key and the security algorithm, or integrity verification and decryption are performed on the received message. The security key is a key shared between the terminal device and the network device, for example, the security key is a key generated during the primary authentication process, or the security key is a key derived from the key generated during the primary authentication process.

[0205] For ease of understanding, two possible algorithm negotiation implementations are introduced below:

[0206] As a possible implementation method, the access network device and the terminal device negotiate a security protection algorithm for protecting user plane messages through the AS SMC process. In this implementation method, before sending an SMC message to the terminal device, the access network device selects a security protection algorithm suitable for UP messages, and then transmits the selected security protection algorithm to the terminal device through the AS SMC message. For example, during the process of the terminal device converting from an idle state to a connected state (idle-connected), the terminal device and the access network device can negotiate a security protection algorithm through the AS SMC process, and activate UP message security protection through the RRC reconfiguration process. For example, during the process of the terminal device converting from an inactive state to a connected state (inactive-connected), if the security protection algorithms used by the source base station and the target base station are different or the security activation states are different, the terminal device and the access network device first negotiate the security protection algorithm through the AS SMC process, and then activate UP message security protection through the RRC reconfiguration process.

[0207] Exemplarily, in this implementation, if the security protection algorithms of the RRC message and the UP message are independent, that is, the ASSMC message includes the security protection algorithm selected by the access network device for the RRC message, and the security protection algorithm selected by the access network device for the UP message. It should be understood that in this embodiment, how the access network device selects the security protection algorithm for the RRC message and the UP message is not described in detail, and the appropriate security protection algorithm may be selected based on the algorithm priority, algorithm selection policy or security capability of the terminal device configured locally.

[0208] For example, the algorithm selected by the access network device for the RRC message is an authentication encryption algorithm, and the security protection algorithm selected by the access network device for UP message protection is an integrity security protection algorithm and a confidentiality security protection algorithm. The AS SMC message includes the identifier of the integrity security protection algorithm, the identifier of the confidentiality security protection algorithm, and the identifier of the authentication encryption algorithm.

[0209] For example, the algorithm selected by the access network device for the RRC message is authentication encryption algorithm #1, and the security protection algorithm selected by the access network device for UP message protection is authentication encryption algorithm #2. The AS SMC message includes the identifier of authentication encryption algorithm #1 and the identifier of authentication encryption algorithm #2.

[0210] Exemplarily, in this implementation, if the security protection algorithm of the RRC message and the UP message is common, that is, the ASSMC message includes an identifier of the common security protection algorithm selected by the access network device.

[0211] For example, if the shared security protection algorithm selected by the access network device is an integrity security protection algorithm and a confidentiality security protection algorithm, the AS SMC message includes the identifier of the integrity security protection algorithm and the identifier of the confidentiality security protection algorithm. The integrity security protection algorithm may be an algorithm determined based on the authentication encryption algorithm (e.g., an algorithm with the confidentiality protection part in the authentication encryption algorithm cleared, or an integrity security protection algorithm determined by the authentication encryption algorithm), and the confidentiality security protection algorithm may be an algorithm determined based on the authentication encryption algorithm (e.g., an algorithm with the integrity protection part in the authentication encryption algorithm cleared, or a confidentiality security protection algorithm determined based on a corresponding relationship and the authentication encryption algorithm).

[0212] For another example, the shared security protection algorithm selected by the access network device is an authentication encryption algorithm, and the AS SMC message includes an identifier of the authentication encryption algorithm.

[0213] Exemplarily, in this implementation mode, if the security protection algorithms of the RRC message and the UP message are shared, the access network device carries indication information #1, as well as an identifier of the integrity security protection algorithm and / or an identifier of the confidentiality security protection algorithm in the AS SMC message. Indication information #1 is used to indicate that the RRC message and the user plane message are securely protected based on the authentication encryption algorithm. The terminal device and the access network device can determine the authentication encryption algorithm based on the integrity security protection algorithm and / or the confidentiality security protection algorithm.

[0214] For example, the AS SMC message carries the identifier of the integrity security protection algorithm and the identifier of the confidentiality security protection algorithm. The message also carries indication information #1, where indication information #1 is used to indicate that the message after the SMC uses the authentication confidentiality algorithm. Indication information #1 can also be called AEAD indication information.

[0215] Optionally, the AEAD indication information may be a 1-bit value. For example, when the AEAD indication information value is 1, it indicates that the message after the SMC uses the AEAD algorithm; when the AEAD indication information value is 0 or is not carried, it indicates that the message after the SMC does not use the AEAD algorithm.

[0216] Optionally, the AEAD indication information may also be an identifier of a specific AEAD algorithm. When the SMC message carries the identifier of the AEAD algorithm, it indicates that the message after the SMC uses the AEAD algorithm; when not carried, it indicates that the message after the SMC does not use the AEAD algorithm.

[0217] Further, after receiving the AEAD indication information, the terminal device determines the AEAD protection algorithm according to the AEAD indication information. For example, the terminal device determines the AEAD algorithm according to the selected integrity security protection algorithm and confidentiality security protection algorithm. For example, if the integrity security protection algorithm is the SNOW integrity security protection algorithm, the determined AEAD algorithm is the SNOW-AEAD algorithm. In this implementation, the access network device can also determine the AEAD algorithm according to the selected integrity security protection algorithm and confidentiality security protection algorithm.

[0218] Optionally, the terminal device may determine the AEAD algorithm after receiving an RRC connection reconfiguration message. For example, when the RRC connection reconfiguration message includes an indication of integrity security protection being turned on and confidentiality security protection being turned on, the terminal device determines the AEAD algorithm applicable to the UP message. This application does not impose any restrictions on the timing at which the terminal device determines the AEAD algorithm.

[0219] Exemplarily, in this implementation mode, if the security protection algorithms of the RRC message and the UP message are shared, the access network device carries indication information #2 and an identifier of the authentication encryption algorithm in the AS SMC message, and indication information #2 is used to indicate that the RRC message and the user plane message are protected based on the integrity security protection algorithm or the confidentiality security protection algorithm. The terminal device and the access network device can determine the integrity security protection algorithm and / or the confidentiality security protection algorithm based on the authentication encryption algorithm.

[0220] For example, the AS SMC message carries the identification and indication information #2 of the AEAD algorithm, and the terminal device determines the integrity security protection algorithm or the confidentiality security protection algorithm according to the AEAD algorithm. For example, if the selected AEAD algorithm is the SNOW-AEAD algorithm, the integrity security protection algorithm is the SNOW integrity security protection algorithm. In this implementation, the access network device can also determine the integrity security protection algorithm or the confidentiality security protection algorithm according to the selected AEAD algorithm.

[0221] Optionally, after receiving the AS SMC message (e.g., upon receiving the AEAD algorithm applicable to the UP message), the terminal device may determine the integrity security protection algorithm or the confidentiality security protection algorithm applicable to the RRC message and the UP message based on the AEAD algorithm.

[0222] Optionally, the terminal device may determine the confidentiality security protection algorithm applicable to the UP message based on the AEAD algorithm of the UP message after receiving the RRC connection reconfiguration message (e.g., when the RRC connection reconfiguration message includes an indication that confidentiality security protection is turned on and integrity security protection is not turned on); or when the RRC connection reconfiguration message includes an indication that confidentiality security protection is not turned on and integrity security protection is turned on, the terminal device may determine the integrity security protection algorithm applicable to the UP message based on the AEAD algorithm of the UP message. The present application does not impose any restriction on the timing when the terminal device determines the integrity security protection algorithm.

[0223] As another possible implementation, the access network device may carry the identifier of the security protection algorithm corresponding to the UP message through the RRC reconfiguration message. In this implementation, the access network device selects the security protection algorithm of the UP message before sending the RRC reconfiguration message to the terminal device, and then transmits the selected security protection algorithm to the terminal device through the RRC reconfiguration message. For example, in the process of UE switching from the source base station to the target base station, the algorithm negotiation process used for the UP message can be incorporated into the RRC connection reconfiguration process, that is, the RRC connection reconfiguration message includes both the security protection algorithm and the security protection indication. Among them, handover (HO) can be understood as Xn connection switching (that is, the access network device serving the terminal device changes, switching from the source access network device to the target access network device, and the access network device and the target access network device have a direct interface), or N2 switching (that is, the access network device serving the terminal device changes, and the source access network device and the target access network device have no direct interface). Alternatively, switching can also be understood as network switching, such as switching from a 4G network to a 5G network.

[0224] Exemplarily, in this implementation, the access network device may carry the integrity security protection algorithm and the confidentiality security protection algorithm in the RRC reconfiguration message to indicate that the security protection algorithm protected by the UP message is an independent integrity security protection algorithm and confidentiality security protection algorithm.

[0225] Exemplarily, in this implementation, the access network device may indicate that the security protection algorithm protected by the UP message is the authentication encryption algorithm by carrying an identifier of the authentication encryption algorithm in the RRC reconfiguration message.

[0226] It should be noted that this embodiment does not limit the method for negotiating the algorithm between the terminal device and the access network device, and takes the case where the algorithm negotiation result between the terminal device and the access network device is an authentication encryption algorithm as an example for explanation.

[0227] Specifically, Figure 5 In the communication method shown, the algorithm negotiation result is mainly introduced as an authentication encryption algorithm, and the user plane security protection based on the authentication encryption algorithm is activated. The communication method includes the following steps:

[0228] S510 , when the access network device determines to use a security algorithm to perform confidentiality and integrity security protection on the user plane, the access network device configures the security algorithm on the user plane and a security key applicable to the security algorithm.

[0229] For access network equipment, confidentiality and integrity security protection of user plane messages includes: integrity verification and decryption operations of uplink UP messages, and integrity security protection and confidentiality security protection of downlink UP messages.

[0230] Exemplarily, the integrity check and decryption operations of the access network device for the uplink UP message include: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity check on the uplink UP message, and using the security key as the input key of the confidentiality protection part in the security algorithm to decrypt the uplink UP message.

[0231] Exemplarily, the access network device provides integrity security protection and confidentiality security protection for downlink UP messages, including: using the security key as an input key of the integrity protection part in the security algorithm to perform integrity protection on the downlink UP message, and using the security key as an input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the downlink UP message.

[0232] From the above, it can be seen that when the access network device determines to use a security algorithm to perform user plane confidentiality and integrity security protection, the access network device can perform integrity security protection and confidentiality security protection of user plane messages based on the same security key, or integrity verification and decryption, thereby avoiding the security risks of the combination of confidentiality security protection algorithms and integrity security protection algorithms, and improving the security of user plane message transmission.

[0233] It should be noted that this application does not provide detailed information on how to use security algorithms to perform user plane confidentiality and integrity security protection. This application mainly introduces how to activate user plane security protection based on security algorithms.

[0234] Exemplarily, in this embodiment, the access network device configures the security algorithm of the UP message and the security key applicable to the security algorithm, including but not limited to the following possible implementations:

[0235] As a possible implementation, the access network device configures the security algorithm of the UP message and the security key applicable to the security algorithm in the PDCP entity. The PDCP entity uses the authentication encryption algorithm and the security key of the UP message to perform security protection on the UP message.

[0236] As another possible implementation, the access network device configures the security algorithm of the UP message and the security key applicable to the security algorithm in the RRC entity. The RRC entity uses the security algorithm and the security key of the UP message to perform security protection on the UP message.

[0237] As another possible implementation, the access network device configures the security algorithm of the UP message and the security key applicable to the security algorithm in the security processing dedicated entity. The security processing dedicated entity uses the security algorithm and security key of the UP message to perform security protection on the UP message.

[0238] The PDCP entity, RRC entity, or security processing dedicated entity configured by the above-mentioned access network device may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DRB, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the session, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DU, and no limitation is made here. It is explained that the granularity of user plane security protection may be to configure a security protection algorithm and security key for a certain DRB, or to configure a security protection algorithm and security key for a certain session, or to configure a security protection algorithm and security key for a certain DU, etc., that is, the user plane security protection may be of different granularities.

[0239] Exemplarily, determining the situation where an authentication encryption algorithm is used to securely protect user plane messages can be understood as: determining that the algorithm negotiation result is a situation where an authentication encryption algorithm is used to securely protect user plane messages, that is, the authentication encryption algorithm is selected to securely protect user plane messages; and / or determining that user plane messages require integrity security protection and confidentiality security protection, that is, both user plane confidentiality and integrity security protection are activated.

[0240] It should be noted that this embodiment does not limit how the access network device determines whether to use the authentication encryption algorithm to protect the user plane message. It can be predefined or determined according to the algorithm negotiation result in the AS SMC process.

[0241] Exemplarily, the access network device determines to use an authentication encryption algorithm to perform security protection on the user plane message according to at least one of the following information:

[0242] Terminal device capability information, user plane message security protection policy, algorithm negotiation results, or algorithm selection policy.

[0243] The capability information of the terminal device indicates the security capability of the terminal device. For example, the security capability of the terminal device includes that the supported security protection algorithm is an authentication encryption algorithm.

[0244] The user plane message security protection policy can be obtained by the access network device through the core network. For example, the terminal device sends a session request message through the access network device, and the session request message includes a session identifier, which is used to identify the session of the terminal device. The core network device searches for the corresponding user plane message security protection policy based on the session identifier, and provides the queried user plane message security protection policy to the access network device.

[0245] Optionally, the security protection policy includes: a confidentiality security policy and an integrity security policy. The values ​​of the confidentiality security policy include required, preferred, and not needed. If the value of the confidentiality security policy is required, it means that the confidentiality security protection needs to be activated. If the value of the confidentiality security policy is not needed, it means that the confidentiality security protection does not need to be activated. If the value of the confidentiality security policy is recommended, it means that the confidentiality security protection can be activated or not activated. The values ​​of the integrity security policy include required, preferred, and not needed. If the value of the integrity security policy is required, it means that the integrity security protection needs to be activated. If the value of the integrity security policy is not needed, it means that the integrity security protection does not need to be activated. If the value of the integrity security policy is recommended, it means that the integrity security protection can be activated or not activated.

[0246] The algorithm negotiation result may be a security protection algorithm corresponding to a UP message negotiated between the access network device and the terminal device during the algorithm negotiation process. For example, the security protection algorithm corresponding to a UP message negotiated between the access network device and the terminal device during the algorithm negotiation process includes an authentication encryption algorithm.

[0247] The algorithm selection policy can be configured locally on the access network device. For example, the algorithm selection policy is configured on the access network device, and the algorithm selection policy can be to give priority to the authentication encryption algorithm. That is, when both the terminal device and the access network device support the same authentication encryption algorithm (such as the AEAD algorithm), the authentication encryption algorithm is selected, otherwise the independent integrity security protection algorithm and the confidentiality security protection algorithm are selected for security protection.

[0248] Optionally, the access network device may determine to use an authentication encryption algorithm to securely protect the user plane message according to the capability information of the terminal device. For example, when the capability information of the terminal device indicates that the terminal device supports the authentication encryption algorithm, the access network device determines to use the authentication encryption algorithm to securely protect the user plane message.

[0249] Optionally, the access network device may determine to use an authentication encryption algorithm to perform security protection on the user plane message according to the user plane message security protection policy. For example, when the user plane message security protection policy indicates that the user plane message is to be protected for integrity and confidentiality, the access network device determines to use an authentication encryption algorithm to perform security protection on the user plane message.

[0250] Optionally, the access network device may determine to use the authentication encryption algorithm to securely protect the user plane message according to the algorithm negotiation result. For example, when the algorithm negotiation result includes the authentication encryption algorithm, the access network device determines to use the authentication encryption algorithm to securely protect the user plane message.

[0251] Optionally, the access network device may determine to use the authentication encryption algorithm to perform security protection on the user plane message according to the algorithm selection policy. For example, when the algorithm selection policy indicates to give priority to the authentication encryption algorithm, the access network device determines to use the authentication encryption algorithm to perform security protection on the user plane message.

[0252] In addition, the access network device may also determine to use an authentication encryption algorithm to perform security protection on the user plane message based on one or more of the terminal device capability information, user plane message security protection policy, algorithm negotiation result, or algorithm selection policy.

[0253] For ease of understanding, a specific example is used to illustrate whether the access network device determines whether to use the authentication encryption algorithm to perform security protection on the user plane message:

[0254] Example 1:

[0255] A session is carried by multiple DRBs. The access network device receives the user plane message security protection policy for the session from the core network device, and activates the security of the DRB according to the user plane message security protection policy.

[0256] Exemplarily, when the user plane message security protection policy is required, the access network device configures the DRB security to be turned on; when the user plane message security protection policy is not required, the access network device configures the DRB security to be not turned on; when the user plane message security protection policy is recommended, the access network device determines whether to turn on the DRB security according to the local policy.

[0257] Furthermore, when the security of DRB is configured to be on, it can be determined based on the capability information of the terminal device, the algorithm negotiation result, or the algorithm selection policy whether to enable authentication encryption algorithm security protection, integrity security protection, or confidentiality security protection.

[0258] It should be understood that the above examples are only examples of how the access network device determines the user plane message security protection, and do not constitute any limitation on the scope of protection of this application. In this embodiment, the access network device can also determine the user plane message security protection method in other ways. For example, the user plane message security protection method is determined based on historical communication data (e.g., if the historical communication data shows that the UP message transmitted between the terminal device and the terminal device requires integrity security protection and confidentiality security protection, then the user plane message security protection method is determined to be integrity security protection and confidentiality security protection).

[0259] Furthermore, the access network device may instruct the terminal device to activate UP message integrity security protection and confidentiality security protection through the first indication information. There is no limitation on the order between the access network device sending the first indication information to the terminal device and the access network device configuring the authentication encryption algorithm and the security key applicable to the authentication encryption algorithm for the UP message. For example, the access network device may send the first indication information to the terminal device after configuring the authentication encryption algorithm and the security key applicable to the authentication encryption algorithm for the UP message, or the access network device may configure the authentication encryption algorithm and the security key applicable to the authentication encryption algorithm for the UP message after sending the first indication information to the terminal device.

[0260] Figure 5 The method flow shown also includes:

[0261] S520, the access network device sends first indication information to the terminal device.

[0262] Specifically, the first indication information is used to indicate the activation of integrity security protection and confidentiality security protection of user plane messages. For example, the first indication information is status information of activating integrity security protection and activating confidentiality security protection; for another example, the first indication information is an identifier of an authentication encryption algorithm. Among them, the first indication information being an identifier of an authentication encryption algorithm can be understood as follows: since the authentication encryption algorithm can implement integrity security protection and confidentiality security protection, when the access network device sends the identifier of the authentication encryption algorithm to the terminal device, the terminal device can determine the activation of integrity security protection and confidentiality security protection of the user plane based on the identifier of the authentication encryption algorithm.

[0263] Exemplarily, the first indication information is used to indicate the activation of user plane message integrity security protection and confidentiality security protection, for example: the first indication information includes information #1 and information #2, wherein information #1 is used to indicate the activation of user plane message integrity security protection, and information #2 is used to indicate the activation of user plane message confidentiality security protection.

[0264] Exemplarily, the access network device sends an RRC connection reconfiguration message to the terminal device, and the RRC connection reconfiguration message carries the first indication information.

[0265] Exemplarily, the access network device may also send second indication information to the terminal device, the second indication information being used to indicate that the UP message is to be securely protected based on the authentication encryption algorithm. For example, when the access network device determines to use the authentication encryption algorithm to securely protect the UP message, the second indication information is sent to the terminal device.

[0266] Exemplarily, the access network device may also send a DRB identifier, a session identifier, or a DU identifier corresponding to the second indication information to the terminal device. The granularity of the PDCP entity configured by the terminal device is indicated as DRB, session, or DU granularity. The second indication information indicates that the granularity of the user plane security protection may be to configure a security protection algorithm and a security key for a certain DRB, or to configure a security protection algorithm and a security key for a certain session, or to configure a security protection algorithm and a security key for a certain DU, etc., that is, the user plane security protection may be of different granularities.

[0267] Optionally, the first indication information, the second indication information, the DRB identifier, etc. are all carried in the RRC reconfiguration message.

[0268] S530, the terminal device configures a security algorithm for the UP message and a security key applicable to the security algorithm.

[0269] Specifically, the terminal device performs an integrity check on the RRC connection reconfiguration message. If the verification is successful, the terminal device configures a security algorithm for the UP message and a security key applicable to the security algorithm.

[0270] For terminal devices, the security protection of UP messages includes: integrity security protection and confidentiality security protection of uplink UP messages, as well as integrity verification and decryption operations of downlink UP messages.

[0271] Exemplarily, the integrity check and decryption operations of the terminal device for the downlink UP message include: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity check on the downlink UP message, and using the security key as the input key of the confidentiality protection part in the security algorithm to decrypt the downlink UP message.

[0272] Exemplarily, the terminal device provides integrity security protection and confidentiality security protection for uplink UP messages, including: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the uplink UP message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the uplink UP message.

[0273] From the above, it can be seen that when the terminal device determines to use a security algorithm to perform user-plane confidentiality and integrity security protection, the terminal device can perform integrity security protection and confidentiality security protection of user-plane messages based on the same security key, or integrity verification and decryption, thereby avoiding the security risks of the combination of confidentiality security protection algorithms and integrity security protection algorithms, and improving the security of user-plane message transmission.

[0274] It should be noted that this application does not provide detailed information on how to use security algorithms to perform user plane confidentiality and integrity security protection. This application mainly introduces how to activate user plane security protection based on authentication encryption algorithm.

[0275] Exemplarily, in this embodiment, the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm, including but not limited to the following possible implementations:

[0276] As a possible implementation, the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm in the PDCP entity. The PDCP entity uses the authentication encryption algorithm and the security key of the UP message to perform security protection on the UP message.

[0277] As another possible implementation, the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm in the RRC entity. The RRC entity uses the authentication encryption algorithm and the security key of the UP message to perform security protection on the UP message.

[0278] As another possible implementation, the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm in the security processing dedicated entity. The security processing dedicated entity uses the authentication encryption algorithm and the security key of the UP message to protect the UP message.

[0279] The PDCP entity, RRC entity, or security processing dedicated entity configured in the above-mentioned terminal device may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DRB, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the session, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DU, and no limitation is made here. It is explained that the granularity of user plane security protection may be to configure a security protection algorithm and security key for a certain DRB, or to configure a security protection algorithm and security key for a certain session, or to configure a security protection algorithm and security key for a certain DU, etc., that is, the user plane security protection may be of different granularities.

[0280] As a possible implementation, the terminal device may determine to activate integrity security protection and confidentiality security protection of the UP message based on the first indication information, so that the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm. For example, the terminal device determines to use the authentication encryption algorithm to perform security protection on the UP message based on the first indication information, so that the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm.

[0281] As another possible implementation, after receiving the first indication information, the terminal device determines to activate the integrity security protection and confidentiality security protection of the UP message based on the first indication information, and the terminal device determines that the authentication encryption algorithm can be used to securely protect the UP message according to the algorithm negotiation result, so that the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm. For example, the terminal device determines that the authentication encryption algorithm can be used to securely protect the UP message based on the first indication information, and the terminal device determines that the algorithm negotiation result includes the authentication encryption algorithm, so that the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm.

[0282] As another possible implementation method, if the terminal device receives the above-mentioned first indication information and second indication information, the terminal device can determine to activate the integrity security protection and confidentiality security protection of the UP message based on the first indication information, and the terminal device can determine to use the authentication encryption algorithm to perform security protection on the UP message based on the second indication information, so that the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm.

[0283] Optionally, if the terminal device successfully verifies the integrity of the RRC connection reconfiguration message, the terminal device may send an RRC connection reconfiguration completion message to the access network device.

[0284] Figure 5 In the illustrated embodiment, when the access network device and the terminal device determine to use an authentication encryption algorithm that can achieve both confidentiality security protection and integrity security protection to securely protect the user plane message, the access network device and the terminal device configure the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm, so that the user plane message subsequently transmitted between the terminal device and the access network device can be securely protected based on the authentication encryption algorithm, thereby improving the security of the user plane message transmission. For example, in the case where the user plane message requires integrity security protection and confidentiality security protection, it is not necessary to perform security protection based on the integrity security protection algorithm and the confidentiality security protection algorithm, thereby avoiding the security risks existing in the confidentiality security protection algorithm and the integrity security protection algorithm. For example, in this scheme, when performing confidentiality security protection and integrity security protection on the user plane message, it is not necessary to perform security protection based on independent confidentiality security protection algorithms and integrity security protection algorithms respectively. The confidentiality security protection and integrity security protection of the user plane message are both performed based on the authentication encryption algorithm, thereby avoiding the splicing between different algorithms, thereby avoiding the security risks existing in the combination of independent confidentiality security protection algorithms and integrity security protection algorithms.

[0285] It should be noted that Figure 5 In the communication method shown, the example of the terminal device and the access network device negotiating to use an authentication encryption algorithm to provide security protection for UP messages, and activating user plane confidentiality and integrity security protection is used for explanation. It should be understood that when the terminal device and the access network device negotiate to use an authentication encryption algorithm to provide security protection for UP messages, it is possible to activate user plane confidentiality security protection or integrity security protection.

[0286] For example, in Figure 6 In the illustrated embodiment, the terminal device and the access network device negotiate to use an authentication encryption algorithm to perform security protection for UP messages, and determine the confidentiality security protection algorithm required for user plane confidentiality security protection based on the authentication encryption algorithm. This may be that before the access network device activates the user plane confidentiality security protection through the third indication information activation indication, and does not activate the user plane integrity security protection, the terminal device and the access network device have already determined to obtain the confidentiality security protection algorithm based on the negotiated authentication encryption algorithm. For example, when the terminal device and the access network device negotiate to obtain the authentication encryption algorithm in the AS SMC process, it can be determined that the confidentiality security protection algorithm is obtained.

[0287] Similarly, in Figure 6In the illustrated embodiment, the terminal device and the access network device negotiate to use an authentication encryption algorithm to perform security protection for UP messages, and determine the integrity security protection algorithm required for user plane integrity security protection based on the authentication encryption algorithm. This may be before the access network device activates the user plane integrity security protection through the third indication information activation indication, and does not activate the user plane confidentiality security protection. The terminal device and the access network device have already determined the integrity security protection algorithm based on the negotiated authentication encryption algorithm. For example, when the terminal device and the access network device negotiate to obtain the authentication encryption algorithm in the AS SMC process, the integrity security protection algorithm can be determined.

[0288] In addition, the terminal device and the access network device determine the confidentiality security protection algorithm required for the user plane confidentiality security protection based on the authentication encryption algorithm, which can also be performed after the access network device activates the user plane confidentiality security protection through the third indication information activation instruction, and does not activate the user plane integrity security protection. For example, after the terminal device receives the third indication information, it determines to activate the user plane confidentiality security protection, and does not activate the user plane integrity security protection, and then determines the confidentiality security protection algorithm based on the negotiated authentication encryption algorithm.

[0289] Similarly, the terminal device and the access network device determine the integrity security protection algorithm required for the user plane integrity security protection based on the authentication encryption algorithm, which can also be performed after the access network device activates the user plane integrity security protection through the third indication information activation instruction, and does not activate the user plane confidentiality security protection. For example, after the terminal device receives the third indication information, it determines to activate the user plane integrity security protection, and does not activate the user plane confidentiality security protection, and then determines the integrity security protection algorithm based on the negotiated authentication encryption algorithm.

[0290] Combine the following Figure 6 The algorithm negotiation result is described in detail as an authentication encryption algorithm, and the user plane confidentiality security protection or integrity security protection is activated. The communication method includes the following steps:

[0291] S610: The access network device determines a security protection state of a user plane according to a security protection policy.

[0292] Security protection strategies include: confidentiality security strategy and integrity security strategy.

[0293] Among them, the values ​​of the confidentiality security policy include required, preferred, and not needed. If the value of the confidentiality security policy is required, it means that confidentiality security protection needs to be activated; if the value of the confidentiality security policy is not needed, it means that confidentiality security protection does not need to be activated; if the value of the confidentiality security policy is recommended, it means that confidentiality security protection can be activated or not; the values ​​of the integrity security policy include required, preferred, and not needed. If the value of the integrity security policy is required, it means that integrity security protection needs to be activated; if the value of the integrity security policy is not needed, it means that integrity security protection does not need to be activated; if the value of the integrity security policy is recommended, it means that integrity security protection can be activated or not.

[0294] In this embodiment, the access network device determines the security protection status of the user plane according to the security protection policy, including: the access network device determines to enable user plane confidentiality security protection according to the security protection policy, and does not enable integrity security protection; or, the access network device determines to enable user plane integrity security protection according to the security protection policy, and does not enable confidentiality security protection.

[0295] S620: The access network device determines a security protection algorithm according to the authentication encryption algorithm.

[0296] Exemplarily, the access network device may determine a confidentiality security protection algorithm required for user plane confidentiality security protection and / or an integrity security protection algorithm required for user plane integrity security protection based on the negotiated authentication encryption algorithm.

[0297] For example, when the access network device obtains the authentication encryption algorithm through negotiation in the AS SMC process, it can determine the confidentiality security protection algorithm and / or the integrity security protection algorithm.

[0298] For example, after the access network device determines to activate the user plane integrity security protection and does not activate the user plane confidentiality security protection, it determines the integrity security protection algorithm based on the negotiated authentication encryption algorithm; or, after the access network device determines to activate the user plane confidentiality security protection and does not activate the user plane integrity security protection, it determines the confidentiality security protection algorithm based on the negotiated authentication encryption algorithm.

[0299] In this embodiment, there is no limitation on the timing when the access network device determines the confidentiality security protection algorithm required for user plane confidentiality security protection and / or the integrity security protection algorithm required for user plane integrity security protection based on the negotiated authentication encryption algorithm. Before the security protection based on the confidentiality security protection algorithm or the integrity security protection algorithm needs to be activated, the confidentiality security protection algorithm or the integrity security protection algorithm can be determined based on the authentication encryption algorithm.

[0300] S630: The access network device configures a security protection algorithm and a security key for the user plane.

[0301] In this embodiment, since the terminal device and the access network device negotiate to use the authentication encryption algorithm to perform security protection for the UP message, if the access network device determines to activate the confidentiality security protection of the user plane according to the security protection policy, and does not activate the integrity security protection of the user plane, the access network device can configure the confidentiality security protection algorithm of the user plane and the key corresponding to the confidentiality security protection algorithm; if the access network device determines to activate the integrity security protection of the user plane according to the security protection policy, and does not activate the confidentiality security protection of the user plane, the access network device can configure the integrity security protection algorithm of the user plane and the key corresponding to the integrity security protection algorithm. Among them, the key corresponding to the confidentiality security protection algorithm and the key corresponding to the integrity security protection algorithm can be the same as the security key corresponding to the authentication encryption algorithm, or they can be different, and this is not limited in this application.

[0302] Exemplarily, the access network device may configure the security protection algorithm and security key of the user plane in the PDCP entity, the RRC entity, or the security processing dedicated entity.

[0303] In this embodiment, the access network device configures the security protection algorithm and security key of the user plane, including the following two possible implementation methods:

[0304] As a possible implementation method, the UP message security activation state is to activate the UP message integrity security protection, and not activate the confidentiality security protection of the UP message, then the access network device configures the UP message integrity security protection key and integrity security protection algorithm. Among them, the integrity security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can also be an algorithm after the confidentiality protection part in the authentication encryption algorithm is left blank.

[0305] As another possible implementation, the UP message security activation state is to activate the UP message confidentiality security protection, and not activate the UP message integrity security protection, then the access network device configures the UP message confidentiality security protection key and confidentiality security protection algorithm. Among them, the confidentiality security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW confidentiality security protection algorithm. Alternatively, the confidentiality security protection algorithm can also be an algorithm after the integrity protection part in the authentication encryption algorithm is left blank.

[0306] Exemplarily, when it is determined that the UP message security activation status is to activate the UP message integrity security protection and not activate the UP message confidentiality security protection, the access network device can configure the user plane security protection algorithm and security key of the terminal device through the third indication information S660.

[0307] In this embodiment, since the terminal device and the access network device negotiate to use an authentication encryption algorithm to perform security protection for UP messages, if the terminal device determines to activate user plane confidentiality security protection and not activate user plane integrity security protection based on the third indication information, the terminal device can configure the user plane confidentiality security protection algorithm and the key corresponding to the confidentiality security protection algorithm; if the terminal device determines to activate user plane integrity security protection and not activate user plane confidentiality security protection based on the third indication information, the access network device can configure the user plane integrity security protection algorithm and the key corresponding to the integrity security protection algorithm.

[0308] Exemplarily, the terminal device may configure the security protection algorithm and security key of the user plane in a PDCP entity, an RRC entity, or a security processing dedicated entity.

[0309] As a possible implementation method, the UP message security activation state is to activate the UP message integrity security protection and not activate the confidentiality security protection of the UP message, then the terminal device configures the UP message integrity security protection key and integrity security protection algorithm. Among them, the integrity security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can also be an algorithm with the confidentiality protection part of the authentication encryption algorithm cleared.

[0310] As another possible implementation, the UP message security activation state is to activate the UP message confidentiality security protection and not activate the UP message integrity security protection, then the terminal device configures the UP message confidentiality security protection key and confidentiality security protection algorithm. Among them, the confidentiality security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW confidentiality security protection algorithm. Alternatively, the confidentiality security protection algorithm can also be an algorithm after the integrity protection part in the authentication encryption algorithm is left blank.

[0311] Figure 6 In the communication method shown, the access network device determines to activate user plane integrity security protection or confidentiality security protection according to the security protection policy, but when the negotiation result of the algorithm negotiation process is an authentication encryption algorithm, the access network device and the terminal device can still determine the required integrity security protection algorithm or confidentiality security protection algorithm based on the authentication encryption algorithm, so that when the algorithm negotiation result and the security protection policy do not match, user plane security protection can still be achieved.

[0312] The above Figure 5 and Figure 6 In the communication method shown, it is mainly introduced that the result of the algorithm negotiation between the terminal device and the access network device is the authentication encryption algorithm. It should be understood that the terminal device and the access network device can also negotiate to use the integrity security protection algorithm and / or the confidentiality security protection algorithm to perform security protection for the UP message. For example, the result of the algorithm negotiation between the terminal device and the access network device is the integrity security protection algorithm and / or the confidentiality security protection algorithm. When the integrity security protection and confidentiality security protection of the user plane are activated, the authentication encryption algorithm can be determined based on the integrity security protection algorithm and / or the confidentiality security protection algorithm, and the user plane message is securely protected based on the determined authentication encryption algorithm. The specific determination method is not repeated here. For another example, the result of the algorithm negotiation between the terminal device and the access network device is the authentication encryption algorithm. When the integrity security protection and confidentiality security protection of the user plane are activated, the integrity security protection algorithm and the confidentiality security protection algorithm can be determined based on the authentication encryption algorithm. The user plane message is securely protected based on the determined integrity security protection algorithm and the confidentiality security protection algorithm. The specific determination method is not repeated here.

[0313] For ease of understanding, the following Figure 7 A detailed description is given of the method of configuring the security protection algorithm and key of the UP message by the terminal device and the access network device when the terminal device and the access network device negotiate to use different security protection algorithms to protect the UP message.

[0314] Figure 7It is a schematic flow chart of another communication method provided in an embodiment of the present application, comprising the following steps:

[0315] S710, the terminal device and the access network device negotiate a security protection algorithm.

[0316] The terminal device and the access network device negotiate a security protection algorithm, including but not limited to negotiating a security protection algorithm applicable to RRC messages and / or UP messages. This embodiment mainly involves negotiating a security protection algorithm applicable to UP messages between the terminal device and the access network device, and activating security protection for UP messages.

[0317] The security protection algorithm negotiated between the terminal device and the access network device includes: at least one of an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm.

[0318] Exemplarily, for a terminal device, the security protection of an UP message includes: integrity security protection and encryption security protection of an uplink UP message, and integrity verification and decryption operations of a downlink UP message.

[0319] Exemplarily, for the access network device, the security protection of the UP message includes: integrity verification and decryption operations of the uplink UP message, and integrity security protection and encryption security protection of the downlink UP message.

[0320] The specific algorithm negotiation process is not limited in this embodiment, and includes but is not limited to the following possible algorithm negotiation methods:

[0321] As a possible implementation, the terminal device and the access network device can negotiate the security protection algorithm through the AS SMC process. In this implementation, the access network device selects a security protection algorithm suitable for the UP message before sending an SMC message to the terminal device, and then transmits the selected security protection algorithm to the terminal device through the SMC message.

[0322] For example, the access network device selects a security protection algorithm for the UP message based on the security capabilities of the terminal device, the local algorithm selection policy, or the locally configured algorithm priority: one or more of an authentication encryption algorithm, an independent integrity security protection algorithm, and an encryption security protection algorithm.

[0323] Exemplarily, when the terminal device is converted from an idle state to a connected state (idle-connected), the terminal device and the access network device can negotiate a security protection algorithm through the AS SMC process, and activate UP message security protection through the RRC reconfiguration process.

[0324] For example, when a terminal device is converted from an inactive state to a connected state (inactive-connected), if the source base station and the target base station use different security protection algorithms or different security activation states, the terminal device and the access network device first negotiate the security protection algorithm through the AS SMC process, and then activate the UP message security protection through the RRC reconfiguration process.

[0325] As another possible implementation, the terminal device and the access network device may negotiate a security protection algorithm through an RRC reconfiguration message. In this implementation, the access network device selects a security protection algorithm for the UP message before sending the RRC reconfiguration message to the terminal device, and then transmits the selected security protection algorithm to the terminal device through the RRC reconfiguration message.

[0326] For example, the access network device selects a security protection algorithm for the UP message based on the security capabilities of the terminal device, the local algorithm selection policy, or the locally configured algorithm priority: at least one of an authentication encryption algorithm, an independent integrity security protection algorithm, and an encryption security protection algorithm. The access network device can pass the message to the terminal device via an RRC reconfiguration message.

[0327] Exemplarily, during the process of UE switching from the source base station to the target base station, the algorithm negotiation process used to perform the UP message can be incorporated into the RRC connection reconfiguration process, that is, the RRC connection reconfiguration message includes both a security protection algorithm and a security protection indication. Among them, handover (HO) can be understood as Xn connection switching (that is, the access network device of the service terminal device changes, switching from the source access network device to the target access network device, and the access network device and the target access network device have a direct interface), or N2 switching (that is, the access network device of the service terminal device changes, and the source access network device and the target access network device have no direct interface). Alternatively, the handover can also be understood as a network switch, such as switching from a 4G network to a 5G network.

[0328] For ease of description, this embodiment takes the negotiation of the security protection algorithm between the terminal device and the access network device through the AS SMC process, and the activation of the UP message security protection algorithm through the RRC reconfiguration process as an example, and other algorithm negotiation methods are not repeated.

[0329] S720, the access network device configures the security protection algorithm and key of the UP message.

[0330] Exemplarily, the access network device may configure the UP message security protection algorithm and key according to the security protection algorithm negotiation result and the UP message security activation status. Optionally, in this embodiment, the access network device configures the UP message security protection algorithm and key including but not limited to the following possible implementations:

[0331] As a possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the access network device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0332] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation state is to activate UP message integrity security protection and encryption security protection, then the access network device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key and encryption security protection algorithm. Among them, the integrity security protection algorithm and the encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithms are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm. Alternatively, the integrity security protection algorithm may also be the integrity protection part of the authentication encryption algorithm, and the encryption security protection algorithm may also be the encryption protection part of the authentication encryption algorithm.

[0333] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation state is to activate the UP message integrity security protection and not activate the encryption security protection of the UP message, then the access network device configures the UP message integrity security protection key and integrity security protection algorithm. Among them, the integrity security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can also be the integrity protection part of the authentication encryption algorithm.

[0334] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation state is to activate the UP message encryption security protection and not activate the integrity security protection of the UP message, then the access network device configures the UP message encryption security protection key and the encryption security protection algorithm. Among them, the encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW encryption security protection algorithm. Alternatively, the encryption security protection algorithm can also be the encryption protection part of the authentication encryption algorithm.

[0335] As another possible implementation, the security protection algorithm negotiation result includes an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation state is to activate the UP message integrity security protection and encryption security protection, then the access network device configures the UP message authentication encryption algorithm and the key applicable to the authentication encryption algorithm. Among them, the authentication encryption algorithm can be determined based on the integrity security protection algorithm and the encryption security protection algorithm. For example, if the negotiated integrity security protection algorithm and encryption security protection algorithm are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0336] As another possible implementation, the security protection algorithm negotiation result includes the integrity security protection algorithm, and the UP message security activation state is to activate the UP message integrity security protection and encryption security protection, then the access network device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm. Among them, the authentication encryption algorithm can be determined based on the integrity security protection algorithm. For example, if the negotiated integrity security protection algorithm is the SNOW integrity security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0337] As another possible implementation, the security protection algorithm negotiation result includes an encryption security protection algorithm, and the UP message security activation state is to activate UP message integrity security protection and encryption security protection, then the access network device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm. Among them, the authentication encryption algorithm can be determined based on the encryption security protection algorithm. For example, if the negotiated encryption security protection algorithm is the SNOW encryption security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0338] As another possible implementation method, the security protection algorithm negotiation result includes an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the access network device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key and encryption security protection algorithm.

[0339] As another possible implementation method, the security protection algorithm negotiation result includes an integrity security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and not activate UP message encryption security protection, then the access network device configures the UP message integrity security protection key and integrity security protection algorithm.

[0340] As another possible implementation method, the security protection algorithm negotiation result includes encryption security protection, and the UP message security activation status is to activate UP message encryption security protection and not activate UP message integrity security protection, then the access network device configures the UP message encryption security protection key and encryption security protection algorithm.

[0341] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the access network device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0342] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is to activate the UP message integrity security protection and not activate the encryption security protection of the UP message, then the access network device configures the UP message integrity security protection key and integrity security protection algorithm.

[0343] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is to activate UP message encryption security protection and not activate UP message integrity security protection, then the access network device configures the UP message encryption security protection key and encryption security protection algorithm.

[0344] Specifically, after the access network device determines to use the security protection algorithm to perform security protection on the UP message, the access network device activates integrity security protection and / or encryption security protection of the UP message based on the security protection algorithm.

[0345] Furthermore, after the terminal device and the access network device negotiate the security protection algorithm through the AS SMC process, the access network device can instruct the terminal device to activate UP message integrity security protection and / or encryption security protection through RRC reconfiguration information. Figure 6 The method flow shown also includes:

[0346] S730, the access network device sends an RRC reconfiguration message to the terminal device.

[0347] Exemplarily, the RRC reconfiguration message is used to indicate UP message integrity security protection and / or encryption security protection.

[0348] Optionally, the RRC reconfiguration message includes second indication information, where the second indication information is used to indicate whether the UP message is to be securely protected based on an authentication encryption algorithm.

[0349] S740, the terminal device configures the security protection algorithm and key of the UP message.

[0350] Exemplarily, the terminal device may configure the UP message security protection algorithm and key according to the security protection algorithm negotiation result and the UP message activation state. Optionally, in this embodiment, the terminal device configures the UP message security protection algorithm and key including but not limited to the following possible implementations:

[0351] As a possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0352] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation state is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key and encryption security protection algorithm. Among them, the integrity security protection algorithm and the encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithms are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm. Alternatively, the integrity security protection algorithm may also be the integrity protection part of the authentication encryption algorithm, and the encryption security protection algorithm may also be the encryption protection part of the authentication encryption algorithm.

[0353] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation state is to activate the UP message integrity security protection and not activate the encryption security protection of the UP message, then the terminal device configures the UP message integrity security protection key and integrity security protection algorithm. Among them, the integrity security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can also be part of the integrity protection of the authentication encryption algorithm.

[0354] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation state is to activate the UP message encryption security protection and not activate the integrity security protection of the UP message, then the terminal device configures the UP message encryption security protection key and the encryption security protection algorithm. Among them, the encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW encryption security protection algorithm. Alternatively, the encryption security protection algorithm can also be the encryption protection part of the authentication encryption algorithm.

[0355] As another possible implementation, the security protection algorithm negotiation result includes an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation state is to activate the UP message integrity security protection and encryption security protection, then the terminal device configures the UP message authentication encryption algorithm and the key applicable to the authentication encryption algorithm. Among them, the authentication encryption algorithm can be determined based on the integrity security protection algorithm and the encryption security protection algorithm. For example, if the negotiated integrity security protection algorithm and encryption security protection algorithm are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0356] As another possible implementation, the security protection algorithm negotiation result includes the integrity security protection algorithm, and the UP message security activation state is to activate the UP message integrity security protection and encryption security protection, then the terminal device configures the UP message authentication encryption algorithm and the key applicable to the authentication encryption algorithm. Among them, the authentication encryption algorithm can be determined based on the integrity security protection algorithm. For example, if the negotiated integrity security protection algorithm is the SNOW integrity security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0357] As another possible implementation, the security protection algorithm negotiation result includes an encryption security protection algorithm, and the UP message security activation state is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm. Among them, the authentication encryption algorithm can be determined based on the encryption security protection algorithm. For example, if the negotiated encryption security protection algorithm is the SNOW encryption security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0358] As another possible implementation method, the security protection algorithm negotiation result includes an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key and encryption security protection algorithm.

[0359] As another possible implementation method, the security protection algorithm negotiation result includes an integrity security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and not activate UP message encryption security protection, then the terminal device configures the UP message integrity security protection key and integrity security protection algorithm.

[0360] As another possible implementation method, the security protection algorithm negotiation result includes encryption security protection, and the UP message security activation status is to activate UP message encryption security protection and not activate UP message integrity security protection, then the terminal device configures the UP message encryption security protection key and encryption security protection algorithm.

[0361] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0362] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is to activate the UP message integrity security protection and not activate the encryption security protection of the UP message, then the terminal device configures the UP message integrity security protection key and integrity security protection algorithm.

[0363] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is to activate UP message encryption security protection and not activate UP message integrity security protection, then the terminal device configures the UP message encryption security protection key and encryption security protection algorithm.

[0364] Exemplarily, if the access network device indicates through the second indication information whether the UP message is to be securely protected based on the authentication encryption algorithm, the terminal device may configure the UP message security protection algorithm and key according to the security protection algorithm negotiation result, the UP message activation state, and the second indication information. Optionally, in this embodiment, the terminal device configures the UP message security protection algorithm and key, including but not limited to the following possible implementations:

[0365] As a possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, the UP message security activation status is to activate UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is security protected based on the authentication encryption algorithm, then the terminal device is configured with the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0366] As another possible implementation, the security protection algorithm negotiation result includes the authentication encryption algorithm, the UP message security activation state is to activate the UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is not based on the authentication encryption algorithm for security protection, then the terminal device determines the independent integrity security protection algorithm and the encryption security protection algorithm based on the authentication encryption algorithm, and configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key, and encryption security protection algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithms are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm.

[0367] As another possible implementation, the security protection algorithm negotiation result includes an encryption security protection algorithm and an integrity security protection algorithm, the UP message security activation state is to activate the UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is security-protected based on the authentication encryption algorithm, then the terminal device determines the authentication encryption algorithm based on the independent encryption security protection algorithm and the integrity security protection algorithm, and further configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm. For example, if the independent encryption security protection algorithm and the integrity security protection algorithm are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0368] As another possible implementation, the security protection algorithm negotiation result includes an encryption security protection algorithm, the UP message security activation state is to activate UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is security protected based on the authentication encryption algorithm, then the terminal device determines the authentication encryption algorithm based on the encryption security protection algorithm, and further configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm. For example, if the encryption security protection algorithm is the SNOW encryption security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0369] As another possible implementation, the security protection algorithm negotiation result includes an integrity security protection algorithm, the UP message security activation state is to activate the UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is security-protected based on the authentication encryption algorithm, then the terminal device determines the authentication encryption algorithm based on the integrity security protection algorithm, and further configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm. For example, if the integrity security protection algorithm is the SNOW integrity security protection algorithm, then the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0370] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm and an encryption security protection algorithm, the UP message security activation status is to activate UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is security protected based on the authentication encryption algorithm, then the terminal device is configured with the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0371] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm, the UP message security activation state is to activate UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is not to be security-protected based on the authentication encryption algorithm, then the terminal device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key, and encryption security protection algorithm. Further, after the terminal device determines to use the security protection algorithm to security-protect the UP message, the terminal device activates the integrity security protection and / or encryption security protection of the UP message based on the security protection algorithm.

[0372] Optionally, if the terminal device successfully verifies the integrity of the RRC connection reconfiguration message, the terminal device may send an RRC connection reconfiguration completion message to the access network device. Figure 7 In the communication method shown, a security protection algorithm can be negotiated between the terminal device and the access network device, and UP message security protection can be activated through the RRC reconfiguration process. In some cases, the security protection algorithm negotiated between the terminal device and the access network device can be an authenticated encryption algorithm that can achieve both encryption security protection and integrity security protection, thereby improving security. In some cases, the security protection algorithm negotiated between the terminal device and the access network device can be an independent integrity security protection algorithm and / or encryption security protection algorithm, thereby improving the backward compatibility of the solution.

[0373] It should be understood that the sequence numbers of the above processes do not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0374] It should also be understood that in the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between different embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form new embodiments according to their internal logical relationships.

[0375] It should also be understood that in some of the above embodiments, the devices in the existing network architecture are mainly used as examples for exemplary description (such as UE, RAN, etc.), and it should be understood that the embodiments of the present application do not limit the specific form of the device. For example, devices that can achieve the same function in the future are applicable to the embodiments of the present application.

[0376] It can be understood that, in the above-mentioned various method embodiments, the methods and operations implemented by the device (such as UE, RAN) can also be implemented by components of the device (such as chips or circuits).

[0377] Above, combined Figures 5 to 7 The communication method provided by the embodiment of the present application is described in detail. The above communication method is mainly introduced from the perspective of interaction between the terminal device and the access network device. It can be understood that in order to realize the above functions, the terminal device and the access network device include hardware structures and / or software modules corresponding to the execution of each function.

[0378] Those skilled in the art should be aware that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is performed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0379] The following combination Figures 8 to 10 The communication device provided by the present application is described in detail. It should be understood that the description of the device embodiment corresponds to the description of the method embodiment. Therefore, the content not described in detail can be referred to the method embodiment above, and some content will not be repeated for the sake of brevity.

[0380] The embodiment of the present application can divide the functional modules of the transmitting end device or the receiving end device according to the above method example. For example, each functional module can be divided corresponding to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical functional division. There may be other division methods in actual implementation. The following is an example of dividing each functional module corresponding to each function.

[0381] Figure 8 1 is a schematic block diagram of a communication device 10 provided in an embodiment of the present application. The device 10 includes a transceiver module 11 and a processing module 12. The transceiver module 11 can implement corresponding communication functions, and the processing module 12 is used to perform data processing, or in other words, the transceiver module 11 is used to perform operations related to receiving and sending, and the processing module 12 is used to perform other operations besides receiving and sending. The transceiver module 11 can also be called a communication interface or a communication unit.

[0382] Optionally, the device 10 may further include a storage module 13, which may be used to store instructions and / or data. The processing module 12 may read the instructions and / or data in the storage module so that the device implements the actions of the devices in the aforementioned method embodiments.

[0383] In one design, the apparatus 10 may correspond to the UE in the above method embodiment, or a component (such as a chip) of the UE.

[0384] The device 10 can implement the steps or processes executed by the UE in the above method embodiment, wherein the transceiver module 11 can be used to perform the transceiver-related operations of the UE in the above method embodiment, and the processing module 12 can be used to perform the processing-related operations of the UE in the above method embodiment.

[0385] In a possible implementation, the transceiver module 11 is used to receive first indication information, wherein the first indication information is used to indicate activation of user plane integrity security protection and confidentiality security protection. The processing module 12 is used to determine the use of an authentication encryption algorithm to perform user plane confidentiality and integrity security protection according to the first indication information, and configure the authentication encryption algorithm of the user plane and a security key applicable to the authentication encryption algorithm, wherein the security algorithm includes a part for confidentiality protection and a part for integrity protection, the security algorithm is used to perform user plane confidentiality and integrity security protection, and the user plane confidentiality and integrity security protection includes: using the security key as an input key of the integrity protection part of the security algorithm to perform integrity protection on the user plane message, and using the security key as an input key of the confidentiality protection part of the security algorithm to perform confidentiality protection on the user plane message.

[0386] In another possible implementation, the processing module 12 is configured to determine an integrity security protection algorithm based on a selected security algorithm. The transceiver module 11 is configured to receive third indication information, where the third indication information is used to indicate activation of user plane integrity security protection. The processing module 12 is configured to configure the integrity security protection algorithm of the user plane and a security key applicable to the integrity security protection algorithm when it is determined according to the third indication information that the integrity security protection algorithm is used for user plane integrity security protection.

[0387] In another possible implementation, the processing module 12 is used to determine the confidentiality security protection algorithm based on the selected security algorithm. The transceiver module 11 is used to receive a third indication information, and the third indication information is used to indicate the activation of user plane confidentiality security protection. The processing module 12 is used to determine the confidentiality security protection algorithm based on the authentication encryption algorithm when it is determined according to the third indication information to use the confidentiality security protection algorithm for the user plane confidentiality security protection, and configure the confidentiality security protection algorithm of the user plane and the security key applicable to the confidentiality security protection algorithm; wherein the authentication encryption algorithm is an authentication encryption algorithm that can implement both confidentiality security protection and integrity security protection.

[0388] Wherein, when the device 10 is used to perform Figure 5 When the method is performed, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as step S510, and the processing module 12 can be used to execute the processing steps in the method, such as step S530.

[0389] When the device 10 is used to perform Figure 6When the method is performed, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as step S640, and the processing module 12 can be used to execute the processing steps in the method, such as steps S650 and S660.

[0390] When the device 10 is used to perform Figure 7 When the method is performed, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as steps S710 and S730, and the processing module 12 can be used to execute the processing steps in the method, such as step S740.

[0391] It should be understood that the specific process of each unit executing the above corresponding steps has been described in detail in the above method embodiment, and for the sake of brevity, it will not be repeated here.

[0392] In another design, the device 10 may correspond to the RAN in the above method embodiment, or a component (such as a chip) of the RAN.

[0393] The device 10 can implement the steps or processes executed by the RAN in the above method embodiment, wherein the transceiver module 11 can be used to perform the transceiver-related operations of the RAN in the above method embodiment, and the processing module 12 can be used to perform the processing-related operations of the RAN in the above method embodiment.

[0394] In one possible implementation, the processing module 12 is used to configure the authentication encryption algorithm of the user plane and the security key applicable to the authentication encryption algorithm when it is determined to use the authentication encryption algorithm to perform user plane confidentiality and integrity security protection. The transceiver module 11 is used to send a first indication message to the terminal device, and the first indication message is used to indicate the activation of user plane integrity security protection and confidentiality security protection, wherein the security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform user plane confidentiality and integrity security protection, and the user plane confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part of the security algorithm to perform integrity protection on the user plane message, and using the security key as the input key of the confidentiality protection part of the security algorithm to perform confidentiality protection on the user plane message.

[0395] In another possible implementation, the processing module 12 is used to determine the integrity security protection algorithm based on the selected security algorithm. The processing module 12 is used to configure the integrity security protection algorithm of the user plane and the security key applicable to the integrity security protection algorithm when determining to activate the user plane integrity security protection according to the security protection policy. The transceiver module 11 is used to send a third indication information to the terminal device, and the third indication information is used to indicate the activation of the user plane integrity security protection.

[0396] In another possible implementation, the processing module 12 is used to determine a confidentiality security protection algorithm based on a selected security algorithm. The processing module 12 is used to configure the confidentiality security protection algorithm of the user plane and a security key applicable to the confidentiality security protection algorithm when determining to activate the confidentiality security protection of the user plane according to the security protection policy. The transceiver module 11 is used to send a third indication information to the terminal device, and the third indication information is used to indicate the activation of the confidentiality security protection of the user plane.

[0397] Wherein, when the device 10 is used to perform Figure 5 When the method is performed, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as step S520, and the processing module 12 can be used to execute the processing steps in the method, such as step S510.

[0398] When the device 10 is used to perform Figure 6 When the method is performed, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as step S640, and the processing module 12 can be used to execute the processing steps in the method, such as steps S610, S620 and S630.

[0399] When the device 10 is used to perform Figure 7 When the method is performed, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as steps S710 and S730, and the processing module 12 can be used to execute the processing steps in the method, such as step S720.

[0400] It should be understood that the specific process of each unit executing the above corresponding steps has been described in detail in the above method embodiment, and for the sake of brevity, it will not be repeated here.

[0401] It should also be understood that the device 10 here is embodied in the form of a functional module. The term "module" here may refer to an application specific integrated circuit (ASIC), an electronic circuit, a processor (such as a shared processor, a dedicated processor or a group processor, etc.) and a memory for executing one or more software or firmware programs, a merged logic circuit and / or other suitable components that support the described functions. In an optional example, those skilled in the art may understand that the device 10 may be specifically a mobile management network element in the above-mentioned embodiment, and may be used to execute the various processes and / or steps corresponding to the mobile management network element in the above-mentioned method embodiments; or, the device 10 may be specifically a terminal device in the above-mentioned embodiment, and may be used to execute the various processes and / or steps corresponding to the terminal device in the above-mentioned method embodiments. To avoid repetition, it will not be repeated here.

[0402] The device 10 of each of the above schemes has the function of implementing the corresponding steps performed by the device (such as terminal device, network device) in the above method. This function can be implemented by hardware, or by hardware executing the corresponding software implementation. The hardware or software includes one or more modules corresponding to the above functions; for example, the transceiver module can be replaced by a transceiver (for example, the sending unit in the transceiver module can be replaced by a transmitter, and the receiving unit in the transceiver module can be replaced by a receiver), and other units, such as processing modules, can be replaced by processors to respectively perform the transceiver operations and related processing operations in each method embodiment.

[0403] In addition, the transceiver module 11 may also be a transceiver circuit (for example, may include a receiving circuit and a sending circuit), and the processing module may be a processing circuit.

[0404] Fig. 9 2 is a schematic diagram of another communication device 20 provided in an embodiment of the present application. The device 20 includes a processor 21, and the processor 21 is used to execute a computer program or instruction stored in a memory 22, or read data / signaling stored in the memory 22 to execute the method in each method embodiment above. Optionally, there are one or more processors 21.

[0405] Alternatively, if Fig. 9 As shown, the device 20 also includes a memory 22, which is used to store computer programs or instructions and / or data. The memory 22 can be integrated with the processor 21, or can also be separately set. Optionally, the memory 22 is one or more.

[0406] Alternatively, if Fig. 9 As shown, the device 20 further includes a transceiver 23, and the transceiver 23 is used for receiving and / or sending signals. For example, the processor 21 is used to control the transceiver 23 to receive and / or send signals.

[0407] As a solution, the device 20 is used to implement the operations performed by the UE in the above various method embodiments.

[0408] As another solution, the device 20 is used to implement the operations performed by the RAN in the above various method embodiments.

[0409] It should be understood that the processor mentioned in the embodiments of the present application may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0410] It should also be understood that the memory mentioned in the embodiments of the present application may be a volatile memory and / or a non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM). For example, RAM can be used as an external cache. By way of example and not limitation, RAM includes the following forms: static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus RAM (DR RAM).

[0411] It should be noted that when the processor is a general-purpose processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, the memory (storage module) can be integrated into the processor.

[0412] It should also be noted that the memory described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0413] Fig.10 Schematic diagram of a chip system 30 provided in an embodiment of the present application. The chip system 30 (or also referred to as a processing system) includes a logic circuit 31 and an input / output interface 32.

[0414] Among them, the logic circuit 31 can be a processing circuit in the chip system 30. The logic circuit 31 can be coupled to the storage unit and call the instructions in the storage unit so that the chip system 30 can implement the methods and functions of each embodiment of the present application. The input / output interface 32 can be an input / output circuit in the chip system 30, outputting information processed by the chip system 30, or inputting data or signaling information to be processed into the chip system 30 for processing.

[0415] As a solution, the chip system 30 is used to implement the operations performed by the UE or the RAN in the above various method embodiments.

[0416] For example, the logic circuit 31 is used to implement the processing-related operations performed by the UE or RAN in the above method embodiments; the input / output interface 32 is used to implement the sending and / or receiving-related operations performed by the UE or RAN in the above method embodiments.

[0417] An embodiment of the present application further provides a computer-readable storage medium on which computer instructions for implementing the methods executed by the UE or the RAN in the above-mentioned method embodiments are stored.

[0418] For example, when the computer program is executed by a computer, the computer can implement the method performed by the UE or the RAN in each embodiment of the above method.

[0419] An embodiment of the present application further provides a computer program product, comprising instructions, which, when executed by a computer, implement the methods performed by the UE or the RAN in the above-mentioned method embodiments.

[0420] An embodiment of the present application also provides a communication system, including the aforementioned UE and RAN.

[0421] The explanation of the relevant contents and beneficial effects of any of the above-mentioned devices can be referred to the corresponding method embodiments provided above, which will not be repeated here.

[0422] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0423] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. For example, the computer can be a personal computer, a server, or a network device, etc. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that contains one or more available media integrations. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a magnetic tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid state disk (SSD)). For example, the aforementioned available medium includes, but is not limited to, various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0424] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A communication method, characterized in that: include: In the case where it is determined to use a security algorithm to perform confidentiality and integrity security protection on the user plane, configuring the security algorithm of the user plane and a security key applicable to the security algorithm; Sending first indication information to the terminal device, where the first indication information is used to indicate activation of user plane confidentiality and integrity security protection, The security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform user-plane confidentiality and integrity security protection, and the user-plane confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the user-plane message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user-plane message.

2. The method according to claim 1, characterized in that: The method further comprises: Determine using the security algorithm to perform user plane confidentiality and integrity security protection according to at least one of the following information: Terminal device capability information, user plane message security protection policy, algorithm negotiation results, or algorithm selection policy.

3. The method according to claim 1 or 2, characterized in that: The method further comprises: Sending second indication information to the terminal device, where the second indication information is used to indicate that user plane confidentiality and integrity security protection is performed based on the security algorithm.

4. The method according to claim 3, characterized in that The method further comprises: Send a data radio bearer DRB identifier, session identifier, or distribution unit DU identifier corresponding to the second indication information to the terminal device.

5. The method according to claim 3 or 4, characterized in that: The sending the second indication information to the terminal device includes: In the case where it is determined to use the security algorithm to perform user plane confidentiality and integrity security protection, second indication information is sent to the terminal device.

6. The method according to any one of claims 1 to 5, characterized in that Before sending the first indication information to the terminal device, the method further includes: Selecting the security algorithm for confidentiality and integrity security protection of the user plane; The identifier of the security algorithm is sent to the terminal device in the access layer security mode command AS SMC process.

7. The method according to any one of claims 1 to 6, characterized in that The sending the first indication information to the terminal device includes: A radio resource control (RRC) connection reconfiguration message is sent to the terminal device, wherein the RRC connection reconfiguration message includes the first indication information.

8. The method according to claim 7, characterized in that The RRC connection reconfiguration message also includes an identifier of the security algorithm.

9. The method according to any one of claims 1 to 8, characterized in that The first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

10. The method according to any one of claims 1 to 9, characterized in that The configuring the security algorithm of the user plane and a security key applicable to the security algorithm includes: The security algorithm of the user plane and a security key applicable to the security algorithm are configured in a packet data convergence layer protocol PDCP entity.

11. The method according to any one of claims 1 to 10, characterized in that The method further comprises: Receive an uplink user plane message from the terminal device, use the security key as an input key for the integrity protection part in the security algorithm to verify the integrity of the uplink user plane message, and use the security key as an input key for the confidentiality protection part in the security algorithm to decrypt the uplink user plane message.

12. A communication method, characterized in that: include: receiving first indication information, where the first indication information is used to indicate activation of user plane confidentiality and integrity security protection; Determine, according to the first indication information, to use a security algorithm to perform confidentiality and integrity security protection on the user plane, configure the security algorithm on the user plane and a security key applicable to the security algorithm, The security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform user-plane confidentiality and integrity security protection, and the user-plane confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the user-plane message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user-plane message.

13. The method according to claim 12, characterized in that The method further comprises: Second indication information is received, where the second indication information is used to instruct to perform user plane confidentiality and integrity security protection based on the security algorithm.

14. The method according to claim 13, characterized in that The method further comprises: Receive a data radio bearer DRB identifier, a session identifier, or a distributed unit DU identifier corresponding to the second indication information.

15. The method according to any one of claims 12 to 14, characterized in that Before receiving the first indication information, the method further includes: The identifier of the security algorithm is received in the access layer security mode command AS SMC process.

16. The method according to any one of claims 12 to 15, characterized in that The receiving first indication information includes: A radio resource control (RRC) connection reconfiguration message is received, where the RRC connection reconfiguration message includes the first indication information.

17. The method according to claim 16, characterized in that The RRC connection reconfiguration message also includes an identifier of the security algorithm.

18. The method according to any one of claims 12 to 17, characterized in that The first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

19. The method according to any one of claims 12 to 18, characterized in that The configuring the security of the user plane and a security key applicable to the security algorithm includes: The security algorithm of the user plane and a security key applicable to the security algorithm are configured in a packet data convergence layer protocol PDCP entity.

20. The method according to any one of claims 11 to 19, characterized in that The method further comprises: Receive a downlink user plane message from a network end device, use the security key as an input key of the integrity protection part in the security algorithm to verify the integrity of the downlink user plane message, and use the security key as an input key of the confidentiality protection part in the security algorithm to decrypt the downlink user plane message.

21. A communication device, characterized in that: include: One or more functional modules for executing the method according to any one of claims 1 to 11, or one or more functional modules for executing the method according to any one of claims 12 to 20.

22. A communication device, characterized in that: include: A processor, configured to execute a computer program stored in a memory, so that the apparatus performs the method according to any one of claims 1 to 11, or so that the apparatus performs the method according to any one of claims 12 to 20.

23. A computer program product, characterized in that The computer program product comprises instructions for performing the method of any one of claims 1 to 20.

24. A computer-readable storage medium, characterized in that: include: The computer-readable storage medium stores a computer program; when the computer program is executed on a computer, the computer is caused to perform the method according to any one of claims 1 to 20.

25. A chip, characterized in that: The chip is installed in a communication device, and the chip includes a processor and a communication interface. When the processor reads instructions through the communication interface and runs, the communication device executes the method as described in any one of claims 1 to 20.

Images