Session establishment method and related device

Abstract

The invention provides a session establishment method and a related device, in the method, an application function network element can receive a connection establishment request message from a terminal device, the connection establishment request message is used for requesting to establish an end-to-end secure connection, and the connection establishment request message comprises a ciphertext; the ciphertext is obtained by encrypting an identifier of the terminal equipment and a key KCONN used when end-to-end secure connection is established by using a public key PKAF of an application function network element through an identity verification and key management anchor function network element of the application; the application function network element can decrypt the ciphertext by using a private key SKAF of the application function network element to obtain a key KCONN; and sending a connection establishment response message to the terminal equipment. Visibly, the connection establishment request message sent by the terminal can carry the key KCONN used when the end-to-end secure connection is established, and interaction between the application function network element and the core network is not needed to obtain the secure connection key, so that the complexity of interaction between the application function network element and the core network is reduced.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a session establishment method and related devices. Background Art

[0002] In a mobile communication network, the application layer needs to authenticate the user equipment (UE). Only UEs authenticated by the application provider can access the (Network) Application Function (AF / NAF). In order to ensure the communication security between the UE and the AF / NAF, the authentication between the AF / NAF and the UE is usually based on credentials known only to the communicating parties, such as session keys.

[0003] In the Generic Bootstrapping Architecture (GBA) technology and the Authentication and Key Management for Applications (AKMA) technology, when the UE establishes a new secure connection with the AF / NAF, the AF / NAF needs to interact with the core network to obtain the secure connection key between the UE and the AF / NAF. Therefore, when the UE and the AF establish a secure connection, how to reduce the complexity of the interaction between the AF and the core network is an urgent problem to be solved. Summary of the invention

[0004] The present application provides a session establishment method and related devices, which can reduce the complexity of the interaction between the AF network element and the core network when the terminal device and the application function network element establish a secure connection for the first time.

[0005] In the first aspect, the present application provides a session establishment method, which can be applied to an application function network element or a device related to the application function network element, or to a device related to executing part or all of the functions of the application function network element. The present application uses the application function network element as an example to illustrate the method. In the method, the application function network element can receive a connection establishment request message from a terminal device, the connection establishment request message is used to request the establishment of an end-to-end secure connection, and the connection establishment request message includes a ciphertext, which is the identity authentication and key management anchor function network element of the application using the public key PK of the application function network element. AF The identifier of the terminal device and the key K used when establishing the end-to-end secure connection CONN Encrypted; using its own private key SK AF Decrypt the ciphertext to obtain the key K CONN ; Send a connection establishment response message to the terminal device.

[0006] It can be seen that in this application, the connection establishment request message sent by the terminal device can carry the key K used when establishing the end-to-end secure connection. CONN When a terminal device and an application function network element establish a secure connection, there is no need for the application function network element to interact with the core network to obtain a secure connection key, thereby reducing the complexity of the interaction between the application function network element and the core network.

[0007] In an optional implementation manner, the connection establishment request message also includes signature content, and the signature content is the identity authentication and key management anchor function network element of the application using the private key SK AAnF The ciphertext is digitally signed; accordingly, the session establishment method also includes: the application function network element uses the public key PK of the application identity authentication and key management anchor function network element AAnF Verify the signature content; if the signature content is verified, execute the method using its own private key SK AF Decrypt the ciphertext to obtain the key K CONN steps.

[0008] Optionally, if the signature content verification fails, a connection establishment response message may be sent in advance, and the connection establishment response message may be used to inform the terminal device that the connection establishment failed, or to inform the terminal device of the connection establishment failure and the reason for the failure. AF The ciphertext is decrypted. If the decryption fails, a connection establishment response message may also be sent to the terminal device to inform the terminal device that the connection establishment failed, or the connection establishment failed and the reason for the failure.

[0009] Optionally, the public key PK of the authentication and key management anchor function network element of the application AAnF It is pre-stored.

[0010] In an optional implementation manner, the connection establishment request message also includes a public key PK AF The public key identifier used to identify the public key PK AAnF The public key identification and the timestamp of the terminal device initiating the end-to-end secure connection establishment are one or more. It can be seen that this implementation enables the method to be applied to scenarios of multi-application functional network elements and / or identity authentication and key management anchor functional network elements for multiple applications.

[0011] In an optional implementation manner, the connection establishment request message also includes a message verification code, and the message verification code is a message generated by the identity authentication and key management anchor function element of the application using a shared key K EEThe ciphertext is calculated; accordingly, the method further comprises: using the shared key K EE Verify the message authentication code; if the message authentication code is verified, execute the method using its own private key SK AF Decrypt the ciphertext to obtain the key K CONN steps.

[0012] Optionally, if the message verification code fails to be verified, a connection establishment response message may be sent in advance, and the connection establishment response message may be used to inform the terminal device that the connection establishment failed, or the connection establishment failed and the reason for the failure. AF The ciphertext is decrypted. If the decryption fails, a connection establishment response message may also be sent to the terminal device to inform the terminal device that the connection establishment failed, or the connection establishment failed and the reason for the failure.

[0013] Optionally, the connection establishment request message also includes a message for identifying the public key PK AF The public key identifier used to identify the shared key K EE The shared key identifier and the timestamp of the terminal device initiating the establishment of the end-to-end secure connection are one or more of them. It can be seen that this implementation method can be applied to the scenario of multi-application function network elements.

[0014] In the second aspect, the present application also provides a session establishment method, which can be applied to an application's identity authentication and key management anchor function network element or a related device in the application's identity authentication and key management anchor function network element, or can also be applied to a related device that performs some or all of the functions of the application's identity authentication and key management anchor function network element. The present application uses the application's identity authentication and key management anchor function network element as an example to illustrate the method. In this method, the application's identity authentication and key management anchor function network element can create a key K used when establishing an end-to-end secure connection between a terminal device and an application function network element. CONN ; Use the public key PK of the application function network element AF Identification of the terminal device, key K CONN Send a connection key message to the terminal device, the connection key message includes the key K CONN and the ciphertext.

[0015] It can be seen that in this application, the authentication and key management anchor function network element of the application can create and send to the terminal device the key K used when establishing an end-to-end secure connection between the terminal device and the application function network element. CONNThis is beneficial for establishing a secure connection between the terminal device and the application function network element, without the need for the application function network element to interact with the core network to obtain the secure connection key, thereby reducing the complexity of the interaction between the application function network element and the core network.

[0016] In an optional implementation, the application's identity authentication and key management anchor function network element can also use its own private key SK AAnF The ciphertext is digitally signed to obtain the signature content. Correspondingly, the connection key message also includes the signature content. It can be seen that this implementation method is conducive to enabling a third party, such as an application function network element, to determine the legitimacy of the terminal device based on the signature content.

[0017] In another optional implementation, the application's identity authentication and key management anchor function network element may also utilize a shared key K EE The ciphertext is calculated to obtain a message verification code, and the connection key message also includes the message verification code. It can be seen that this implementation method is conducive to enabling a third party, such as an application function network element, to determine the legitimacy of the terminal device based on the message verification code.

[0018] In an optional implementation, the application authentication and key management anchor function network element creates a key K used when establishing an end-to-end secure connection between the terminal device and the application function network element. CONN Previously, the method also includes: the identity authentication and key management anchor function network element of the application receives a connection key request message from the terminal device, the connection key request message is used to request the key K CONN It can be seen that in this implementation, the application's identity authentication and key management anchor function network element can respond to the connection key request message from the terminal device to create a key K used when establishing an end-to-end secure connection between the terminal device and the application function network element. CONN .

[0019] In an optional implementation, the application's identity authentication and key management anchor function network element checks whether the terminal device has the authority to use the end-to-end security protection service; if the terminal device has the authority to use the end-to-end security protection service, the key K used when establishing the end-to-end secure connection between the terminal device and the application function network element is executed. CONN steps.

[0020] In an optional implementation, the identity authentication and key management anchor function network element of the application checks whether the terminal device has the authority to use the end-to-end security protection service, including: sending a query request message to a unified data management network element, the query request message is used to request whether the terminal device has the authority to use the end-to-end security protection service; receiving a query response message from the unified data management network element, the query response message is used to indicate whether the terminal device has the authority to use the end-to-end security protection service.

[0021] In an optional implementation manner, the connection key request message includes an identifier of the application function network element and an identifier of the terminal device; the connection key message includes a public key PK for identifying the application function network element. AF It can be seen that this implementation method uses the public key PK of the application function network element AF Public key identification, distinguishing the public key PK of different application function network elements AF , so that the method can be applied to the scenario of multi-application function network elements.

[0022] In an optional implementation, the network element uses its own private key SK for the identity authentication and key management anchor function of the application AAnF The ciphertext is digitally signed to obtain the signature content, and the connection key message also includes a public key PK for identifying itself AAnF It can be seen that this implementation method can be implemented by the public key PK of the application's identity authentication and key management anchor function network element AAnF Public key identification, distinguishing the public key PK of the network element with different application authentication and key management anchor function AAnF , making this method applicable to scenarios of identity authentication and key management anchor function network elements for multiple applications.

[0023] In another optional implementation, the identity authentication and key management anchor function network element of the application uses a shared key K EE The ciphertext is calculated to obtain the message authentication code. The connection key message also includes a method for identifying the shared key K EE It can be seen that this implementation method can be implemented by identifying the shared key K EE Shared key identifier, distinguishing different shared keys K EE .

[0024] In an optional implementation, the public key PK of the application function network element AF is pre-stored. That is, the identity authentication and key management anchor function network element of the application identifies the terminal device, the key K CONN Encryption is performed using the public key PK of the application function network element AF It is pre-stored.

[0025] In the third aspect, the present application also provides a session establishment method, which can be applied to a terminal device or a related device of the terminal device, such as a chip or a chip module, etc. The present application takes the terminal device as an example for explanation. In this method, the terminal device can send a connection establishment request message to the application function network element, and the connection establishment request message is used to request to establish an end-to-end secure connection with the application function network element. The connection establishment request message includes a ciphertext, which is the identity authentication and key management anchor function network element of the application using the public key PK of the application function network element. AF The key K used to identify the terminal device and establish an end-to-end secure connection CONN The encrypted data is obtained; and a connection establishment response message is received from the application function network element.

[0026] It can be seen that in this application, the connection establishment request message sent by the terminal device already carries the key K used when establishing the end-to-end secure connection between the terminal device and the application function network element. CONN There is no need for the application function network elements to interact with the core network to obtain the security connection key, thereby reducing the complexity of the interaction between the application function network elements and the core network.

[0027] In an optional implementation manner, the connection establishment request message also includes signature content, which is a signature of the application's identity authentication and key management anchor function network element using a private key SK AAnF This implementation enables the application function network element to determine the legitimacy of the terminal device based on the signature content.

[0028] In another optional implementation, the connection establishment request message also includes a message verification code, which is a message verification code generated by the application's identity authentication and key management anchor function network element using a shared key K EE Obtained by calculating the ciphertext. It can be seen that this implementation enables the application function network element to determine the legitimacy of the terminal device according to the message authentication code.

[0029] In an optional implementation manner, before the terminal device sends a connection establishment request message to the application function network element, the method further includes: sending a connection key request message to the application identity authentication and key management anchor function network element, the connection key request message is used to request the key K CONN ; Then, the terminal device receives a connection key message from the application's identity authentication and key management anchor function network element, the connection key message includes the key K CONN Optionally, the connection key message may also include signature content or a message verification code.

[0030] In an optional implementation manner, the connection key request message includes the identification of the application function network element and the identification of the terminal device, and accordingly, the connection key message and the connection establishment request message also include a public key PK for identifying the public key PK. AF It can be seen that this implementation method uses the public key PK of the application function network element AF Public key identification, distinguishing the public key PK of different application function network elements AF , so that the method can be applied to the scenario of multi-application function network elements.

[0031] In an optional implementation, the network element uses its own private key SK for the identity authentication and key management anchor function of the application AAnF The ciphertext is digitally signed to obtain the signature content, and the connection key message and the connection establishment request message also include the public key PK used to identify the identity authentication and key management anchor function network element of the application AAnF It can be seen that this implementation method can be implemented by the public key PK of the application's identity authentication and key management anchor function network element AAnF Public key identification, distinguishing the public key PK of the network element with different application authentication and key management anchor function AAnF , making this method applicable to scenarios of identity authentication and key management anchor function network elements for multiple applications.

[0032] In another optional implementation, the identity authentication and key management anchor function network element of the application uses a shared key K EE The ciphertext is calculated to obtain the message authentication code. The connection key message and the connection establishment request message also include a message used to identify the shared key K EE It can be seen that this implementation method can be implemented by identifying the shared key K EE Shared key identifier, distinguishing different shared keys K EE .

[0033] In an optional implementation manner, the connection establishment request message also includes a timestamp when the terminal device initiates the establishment of the end-to-end secure connection.

[0034] In an optional implementation, the ciphertext is the identifier of the terminal device and the key K CONN In another optional implementation, the ciphertext is the terminal device identifier and the key K CONN The ciphertext is combined into two tuples and then encrypted.

[0035] In the fourth aspect, the present application also provides a session establishment method, which is explained from the perspective of the interaction between the application function network element, the terminal device, and the application's identity authentication and key management anchor function network element. In this method, the terminal device sends a connection establishment request message to the application function network element, and the connection establishment request message is used to request the establishment of an end-to-end secure connection with the application function network element. The connection establishment request message includes a ciphertext, which is the public key PK of the application's identity authentication and key management anchor function network element using the application function network element. AF The key K used to identify the terminal device and establish an end-to-end secure connection CONN The application function network element can receive the connection establishment request message and use its own private key SK AF Decrypt the ciphertext and obtain the key K CONN ; Furthermore, the application function network element can send a connection establishment response message to the terminal device, and correspondingly, the terminal device can receive the connection establishment response message.

[0036] It can be seen that in this application, the connection establishment request message sent by the terminal device already carries the key K used when establishing the end-to-end secure connection between the terminal device and the application function network element. CONN There is no need for the application function network elements to interact with the core network to obtain the security connection key, thereby reducing the complexity of the interaction between the application function network elements and the core network.

[0037] In an optional implementation, before the terminal device sends a connection establishment request message to the application function network element, the method further includes: the application identity authentication and key management anchor function network element creates a key K used when establishing an end-to-end secure connection between the terminal device and the application function network element. CONN ; and use the public key PK of the application function network element AF The identification of the terminal device, the key K CONN Encrypt to obtain ciphertext; send a connection key message to the terminal device, the connection key message includes the key K CONN It can be seen that in this implementation, the connection key message sent by the application identity authentication and key management anchor function network element to the terminal device may include the key K used when establishing an end-to-end secure connection between the terminal device and the application function network element. CONN and its ciphertext, so that the connection establishment request message sent by the terminal device can carry the key K CONN There is no need for interaction between the application function network element and the core network to obtain the security connection key.

[0038] In an optional implementation, the application's identity authentication and key management anchor function network element may use its own private key SK AAnFThe ciphertext is digitally signed to obtain the signature content. Correspondingly, the connection key message also includes the signature content, and the connection establishment request message sent by the terminal device also includes the signature content. Then, the application function network element can use the public key PK of the application's identity authentication and key management anchor function network element AAnF Verify the signature content; if the signature content is verified, the application function network element executes the above using its own private key SK AF Decrypt the ciphertext and obtain the key K CONN It can be seen that this implementation enables the application function network element to determine the legitimacy of the terminal device according to the signature content.

[0039] In an optional implementation, the public key PK of the identity authentication and key management anchor function element applied in the application function network element AAnF In an optional implementation, the public key PK of the application function network element in the application identity authentication and key management anchor function network element AF It is pre-stored.

[0040] In an optional implementation, the authentication and key management anchor function network element of the application may utilize a shared key K EE The ciphertext is calculated to obtain a message verification code, which is also included in the connection key message. Correspondingly, the connection key message also includes the message verification code, and the connection establishment request message sent by the terminal device also includes the message verification code. Then, the application function network element can use the shared key K EE Verify the message verification code; if the message verification code is verified, execute the above using its own private key SK AF Decrypt the ciphertext and obtain the key K CONN It can be seen that this implementation enables the application function network element to determine the legitimacy of the terminal device according to the message verification code.

[0041] In an optional implementation, the terminal device may send a connection key request message to the identity authentication and key management anchor function network element of the application, where the connection key request message is used to request the key K CONN ; Accordingly, the application's identity authentication and key management anchor function network element receives a connection key request message from the terminal device; further, the application's identity authentication and key management anchor function network element executes the key K used when establishing an end-to-end secure connection between the terminal device and the application function network element CONN .

[0042] In an optional implementation, the connection key request message includes the identification of the application function network element and the identification of the terminal device. Accordingly, the connection key message and the connection establishment request message also include a public key PK for identifying AFIt can be seen that this implementation method uses the public key PK of the application function network element AF Public key identification, distinguishing the public key PK of different application function network elements AF , so that the method can be applied to the scenario of multi-application function network elements.

[0043] In an optional implementation, the connection key message and the connection establishment request message also include a public key PK of an identity authentication and key management anchor function network element for identifying the application. AAnF It can be seen that this implementation method can be implemented by the public key PK of the application's identity authentication and key management anchor function network element AAnF Public key identification, distinguishing the public key PK of the network element with different application authentication and key management anchor function AAnF , so that the method can be applied to the scenario of identity authentication and key management anchor function network element of multiple applications. Or, in an optional implementation, the connection key message and the connection establishment request message also include a message for identifying the shared key K EE It can be seen that this implementation method can be implemented by identifying the shared key K EE Shared key identifier, distinguishing different shared keys K EE .

[0044] In an optional implementation, the connection establishment request message also includes a timestamp of when the terminal device initiates the establishment of an end-to-end secure connection.

[0045] In an optional implementation, after receiving the connection key request message from the terminal device, the application's identity authentication and key management anchor function network element may also check whether the terminal device has the authority to use the end-to-end security protection service; if the terminal device has the authority to use the end-to-end security protection service, the key K used when establishing the end-to-end secure connection between the terminal device and the application function network element is executed. CONN steps.

[0046] In an optional implementation, the application's identity authentication and key management anchor function network element checks whether the terminal device has the authority to use the end-to-end security protection service, including: sending a query request message to a unified data management network element, the query request message is used to request whether the terminal device has the authority to use the end-to-end security protection service; receiving a query response message from the unified data management network element, the query response message is used to indicate whether the terminal device has the authority to use the end-to-end security protection service.

[0047] Optional, public key PK of the application function element in the application authentication and key management anchor function element AF It is pre-stored; the public key PK of the authentication and key management anchor function element applied in the application function network element AAnFIt is pre-stored.

[0048] In a fifth aspect, the present application also provides a communication device, which may include a processor and an interface circuit, wherein the interface circuit is used to receive signals from other communication devices outside the communication device and transmit them to the processor or send signals from the processor to other communication devices outside the communication device, and the processor is used to implement the method shown in any one of the first to third aspects or any possible implementation manner thereof through a logic circuit or executing code instructions.

[0049] In a sixth aspect, the present application provides a computer-readable storage medium, wherein instructions are stored in the storage medium. When the computer program or instructions are executed by a communication device, the method shown in any one of the first to third aspects or any possible implementation manner thereof is implemented.

[0050] In a seventh aspect, the present application provides a computer program product comprising computer instructions, which, when read and executed by a computer, enables the computer to perform a method as shown in any one of the first to third aspects or any possible implementation manner thereof.

[0051] In an eighth aspect, the present application provides a communication system, comprising at least one communication device for executing the method described in the first aspect above, at least one communication device for executing the method described in the second aspect above, and at least one communication device for executing the method described in the third aspect above.

[0052] In a ninth aspect, the present application provides a circuit, which is coupled to a memory, and is used to execute a method as shown in any one of the first to third aspects or any possible implementation thereof. Optionally, the circuit may include a chip circuit.

[0053] In a tenth aspect, the present application provides a device comprising a module or unit for implementing a method as shown in any one of the first to third aspects or any possible implementation manner thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 This is a schematic diagram of the architecture of an AKMA introduced in an embodiment of the present application;

[0055] Figure 2 This is a simplified architecture diagram of a GBA introduced in an embodiment of the present application;

[0056] Figure 3 It is a flowchart of a session establishment method provided in an embodiment of the present application;

[0057] Figure 4It is a flowchart of another session establishment method provided in an embodiment of the present application;

[0058] Figure 5 It is a flowchart of another session establishment method provided in an embodiment of the present application;

[0059] Figure 6 is a structural diagram of a communication device provided in an embodiment of the present application;

[0060] Figure 7 It is a structural diagram of a communication device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0061] In the description of the embodiments of the present application, unless otherwise specified, “ / ” means or. For example, A / B can mean A or B. The “and / or” in the text is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, “multiple” refers to two or more than two.

[0062] In the following, the terms "first" and "second" are used for descriptive purposes only and are not to be understood as suggesting or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features, and in the description of the embodiments of the present application, unless otherwise specified, "plurality" means two or more.

[0063] The present application introduces a session establishment method, in which a connection establishment request message sent by a terminal device can carry a key K CONN , the key K CONN It can be used to establish a secure connection between a terminal device and an application function network element. In this way, the application function network element does not need to interact with the core network to obtain a secure connection key, thereby reducing the complexity of the interaction between the application function network element and the core network.

[0064] First, this application introduces an architecture diagram of authentication and key management for applications (AKMA), such as Figure 1As shown, the AKMA architecture introduces the AKMA Anchor Function (AAnF) into the fifth generation (5G) communication system. The role of AAnF is to generate and manage session keys provided to the application function network element, which is used to protect the communication between the terminal device and the application server. AKMA is an operator service that uses home network security materials. AAnF belongs to the home public land mobile network and maintains the context of AKMA services for each user equipment (UE).

[0065] The 5G communication system is divided into the access network and the core network. The access network implements wireless access-related functions through access network equipment. The network functions are based on modular disassembly, and the decoupled network functions (NF) can be independently expanded, independently evolved, and deployed on demand. The control plane uses service-oriented interfaces between all NFs. The same service can be called by multiple NFs, reducing the coupling degree of interface definitions between NFs, and ultimately achieving on-demand customization of the entire network functions, flexibly supporting different business scenarios and needs. Figure 1 The service-oriented NF network elements shown in the figure have service-oriented interfaces between them and the interactive messages are service-oriented messages. Optionally, the architecture may also include UE.

[0066] UE is a device with wireless transceiver function, which can be deployed on land, including indoors or outdoors, handheld, wearable or vehicle-mounted; it can also be deployed on the water (such as ships, etc.); it can also be deployed in the air (such as airplanes, balloons and satellites, etc.). UE can be a mobile phone, a tablet computer, a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a vehicle-mounted terminal device, a wireless terminal in self-driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, a wearable terminal device, etc. UE can also be sometimes called a terminal, a terminal device, an access terminal device, a vehicle-mounted terminal, an industrial control terminal, a UE unit, a UE station, a mobile station, a mobile station, a remote station, a remote terminal device, a mobile device, a UE agent or a UE device, etc. The UE may also be fixed or mobile.

[0067] The access network is used to implement access-related functions, and can provide network access functions for authorized users in a specific area, and can determine transmission tunnels of different qualities to transmit user data according to the user level, business requirements, etc. The access network forwards control signals and user data between the terminal device and the core network. The access network may include access network equipment. For example, in this application, the information exchanged between the tag device and the network element of the core network can be forwarded through the access network equipment.

[0068] Access network equipment can be equipment that provides access to UE, and can include radio access network (RAN) equipment and AN equipment. (R)AN equipment is mainly responsible for radio resource management, quality of service (QoS) management, data compression and encryption, etc. on the air interface side. RAN equipment can include various forms of base stations, such as macro base stations, micro base stations (also called small stations), relay stations, access points, balloon stations, etc. In systems using different wireless access technologies, the names of devices with base station functions may be different. For example, in long-term evolution (LTE) systems, fifth generation (5G), sixth generation (6G) and even seventh generation (7G) systems, network devices may be called: RAN or next-generation Node basestation (gNB), evolved NodeB (eNB or eNodeB), base station controller (BSC), base transceiverstation (BTS), home network equipment (for example, home evolved Node B, or home Node B, HNB), baseband unit (BBU), access point (AP) in wireless fidelity (WIFI) systems, wireless relay node, wireless backhaul node, transmission and reception point (TRP), transmission point (TP) and so on. point, TP), etc.; or one or a group of (including multiple antenna panels) antenna panels of a network device in a 5G system, or, it can also be a network node constituting a gNB or a transmission point, such as a baseband unit (BBU), or, a distributed unit (DU), or, a vehicle to everything (V2X) or a road side unit (RSU) in an intelligent driving scenario.

[0069] In some deployments, the gNB or transmission point may include a centralized unit (CU) and a DU, etc. The gNB or transmission point may also include a radio unit (RU). The CU implements some functions of the gNB or transmission point, and the DU implements some functions of the gNB or transmission point, for example, the CU implements the functions of the radio resource control (RRC) and packet data convergence protocol (PDCP) layers, and the DU implements the functions of the radio link control (RLC), media access control (MAC) and physical (PHY) layers. Since the information of the RRC layer will eventually become the information of the physical layer, or be converted from the information of the physical layer, under this architecture, high-level signaling, such as RRC layer signaling or PDCP layer signaling, can also be considered to be sent by the DU, or by the DU+RU. It can be understood that the network device can be a CU node, a DU node, or a device including a CU node and a DU node. Optionally, the network device can also be an auxiliary communication device, such as a satellite.

[0070] The core network is responsible for maintaining the subscription data of the mobile network and providing functions such as session management, mobility management, policy management, and security authentication for terminal devices. Figure 1 As shown, the core network may include the following network elements: authentication server function (AUSF) network element, access and mobility management function (AMF) network element, unified data management (UDM) network element and application function (AF) network element.

[0071] AUSF network element, used to perform security authentication of UE. NSSF network element, used to select network slice for UE. NEF network element, mainly used to support the opening of capabilities and events. AMF network element, mainly responsible for mobility management in mobile networks, such as user location update, user registration network, user switching, etc. UDM network element, used to store user data, such as subscription data, authentication / authorization data, etc. AF network element or application server (NAF, Network Application Function), mainly supports interaction with 3GPP core network to provide services, such as affecting data routing decisions, policy control functions or providing some third-party services to the network side.

[0072] in addition, Figure 1 As shown, the UE and AMF network elements can interact through the N1 interface. The interactions between other network function network elements are similar. For example, the AN and AMF network elements can interact through the N2 interface. All NF network elements in the control plane can interact through the service-based interface. The UDM network element and the AUSF network element can interact through the service-based interface N13. The AF network element and the AAnf network element can interact through the service-based interface N62. The AUSF network element and the AMF network element can interact through the service-based interface N12. The AAnf network element and the AUSF network element can interact through the service-based interface N61.

[0073] The Ua* reference point transports the protocol of the application, similar to the Ua* reference point defined by the Generic Bootstrapping Architecture (GBA), which supports the interaction between the UE and the AF in the AKMA process and is subsequently protected by the AKMA application key according to the specific application protocol on Ua*. The Ua* reference point defined by GBA represents the application protocol protected by the key material (where the key material is the parameter used to create the key) agreed between the UE and the AF network elements under the support of the Bootstrapping Server Function (BSF).

[0074] In mobile communication systems, authentication and key negotiation use the AKA protocol, which is an authentication and key negotiation process defined by the Third Generation Partnership Project (3GPP). The AKA protocol uses the symmetric key shared by the operator network and the (Universal) Subscriber Identity Module (U) SIM card to implement access authentication and session key protocol for mobile communication systems. After the UE successfully runs the AKA protocol and successfully accesses the operator network (also known as the successful implementation of primary authentication between the UE and the 3GPP network element), the UE shares security keys with the operator, and these shared keys are further used to establish a secure communication channel between the UE and the application server.

[0075] In the Authentication and Key Management for Applications (AKMA) technology and the GBA technology, when the UE establishes a new secure connection with the AF / NAF, the AF / NAF needs to interact with the core network to obtain the secure connection key between the UE and the AF / NAF.

[0076] For example, in Figure 1In the AKMA architecture shown in the figure, the process of establishing a connection between the UE and the AF network element may include: (1) before the UE initiates communication with the AF network element, the UE uses the key K of the AUSF network element AUSF Generate AKMA anchor key K AKMA and AKMA anchor key identifier A-KID; when the UE initiates communication with the AF network element, the UE sends a session establishment request message to the AF network element, wherein the session establishment request message includes the derived A-KID; the UE may derive the security connection key K before or after sending the session establishment request message AF (2) If the AF network element does not have an active context associated with the A-KID, the AF network element selects the AAnF network element with the A-KID and sends an AKMA application key acquisition request (Naanf_AKMA_ApplicationKey_Get) request to the AAnF network element to request the UE's security connection key K AF ; (3) If the AAnF network element does not have K AF , then AAnF network element from K AKMA Export AKMA application key K AF ; (4) AAnF network element sends Naanf_AKMA_ApplicationKey_Get response to AF network element, including K AF and K AF (5) The AF network element sends an application session establishment response to the UE. If the information in the Naanf_AKMA_ApplicationKey_Get response in step (4) indicates that the AKMA key request failed, the AF network element in step (5) may reject the UE's application session establishment by including the failure reason in the application session establishment response.

[0077] For example, Figure 2 As shown, Figure 2This is a simplified architecture diagram of GBA. BSF is defined as an independent network element for authenticating UE, maintaining security context, and deriving keys for subsequent use by UE. In the execution process of GBA, the authentication between UE and BSF is achieved by executing a separate AKA process different from the main authentication process. This separate AKA process allows UE to access the operator network. GBA can be accessed independently (without relying on the main authentication), which means that cellular connection is not required. GBA can also work in wireless network communication technology (WiFi) access and wired access environments. In this architecture diagram, the Ub reference point between UE and BSF is based on the HTTP protocol to support the bootstrapping process. The Ua reference point between UE and AF network element or NAF represents the application protocol protected by the key material agreed between UE and AF network element or NAF under the support of BSF. The Zh reference point between BSF and Home Subscriber Server (HSS) is used to access the authentication vector and subscription credentials used for the bootstrapping process. The Zn reference point between BSF and AF network element or NAF is used by AF network element or NAF to request key material from BSF to ensure communication between UE and NAF.

[0078] for Figure 2 In the GBA architecture shown, the process of establishing a connection between the UE and the AF network element may include: (1) the UE communicates with the NAF via the reference point Ua, and the communication request carries the UE identifier B-TID; (2) the NAF communicates with the BSF via the reference point Zn, and the communication request carries the identifier NAF-ID of the AF network element and the UE identifier B-TID; (3) the BSF derives the key required to protect the protocol used on the reference point Ua from the key Ks and the key derivation parameter, and provides the NAF with the requested key Ks_NAF and the boot time and life of the key Ks_NAF. In addition, if the key identified by the UE identifier B-TID provided by the NAF is not available at the BSF, the BSF may indicate this in the reply to the NAF, and then the NAF may indicate the bootstrap renegotiation request to the UE; (4) the NAF responds to the UE, at which point the secure connection establishment between the UE and the AF network element is completed. It can be seen that when the UE establishes a secure connection with the AF / NAF, the NAF needs to interact with the core network to obtain the security connection key Ks_NAF between the UE and the AF network element.

[0079] It should be noted that the above only lists the 5G communication systems to which the session establishment method provided in the embodiment of the present application is applicable. The session establishment method provided in the embodiment of the present application can also be applied to future communication systems such as 4G, sixth generation (6th generation, 6G) and even seventh generation (7th generation, 7G) systems, wherein the functions of the core network control plane network element and the core network user plane network element in the 4G communication system are similar to those in the 5G communication system, and the present application will not list them one by one here. The network architecture and business scenarios described in the embodiment of the present application are intended to more clearly illustrate the technical solutions of the embodiment of the present application, and do not constitute a limitation on the technical solutions provided in the embodiment of the present application. It is known to those skilled in the art that with the evolution of the communication network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiment of the present application are also applicable to similar technical problems.

[0080] The session establishment method is described below in conjunction with the accompanying drawings.

[0081] See also Figure 3 , Figure 3 It is a flow chart of a session establishment method provided in an embodiment of the present application, which is described from the perspective of interaction between UE, AAnF network element and AF network element as an example, wherein some or all of the steps executed by the AAnF network element may be executed by other network elements of the core network, Figure 3 The following is an example of how to implement AAnF network element. Figure 3 As shown, the method may include but is not limited to the following steps:

[0082] S101. AAnF network element creates a key K used when establishing an end-to-end secure connection between UE and AF network element CONN , AAnF network element uses the public key PK of AF network element AF The UE's identity and the key K CONN Encrypt and obtain ciphertext.

[0083] Optional, the public key PK of the AF network element in the AAnF network element AF is pre-stored. Optionally, during the encryption process, the AAnF network element can store the key K CONN and the UE identifier separately to obtain the corresponding ciphertext; or, the AAnF network element can use the key K CONN and the UE identifier into a two-tuple. For example, if the UE identifier is UE_ID, then the two-tuple can be (K CONN , UE_ID), and then the AAnF network element encrypts the two-tuple to obtain the ciphertext.

[0084] In an optional implementation manner, the method further includes: the UE may send a connection key request message to the AAnF network element, the connection key request message being used to request the key K CONN Correspondingly, the AAnF network element receives a connection key request message from the terminal device and executes the key K used when establishing an end-to-end secure connection between the UE and the AF network element. CONN Optionally, the UE may send a connection key request message to the AAnF network element via the AMF network element and the AUSF network element. Optionally, the connection key message sent by the AAnF network element to the UE may be referred to as a connection key response message. In an optional implementation, after the AAnF network element receives the connection key request message from the UE, the method further includes: the AAnF network element may check whether the UE has the authority to use the end-to-end security protection service; if the UE has the authority to use the end-to-end security protection service, the key K used when establishing the end-to-end security connection between the UE and the AF network element is created. CONN Optionally, the AAnF network element checks whether the UE has the right to use the end-to-end security protection service, including: the AAnF network element sends a query request message to the UDM network element, where the query request message is used to request (or query) whether the UE has the right to use the end-to-end security protection service; the AAnF network element receives a query response message from the UDM network element, where the query response message is used to indicate whether the UE has the right to use the end-to-end security protection service.

[0085] S102. The AAnF network element sends a connection key message to the UE. The connection key message includes a key K CONN and the ciphertext; accordingly, the UE receives the connection key message.

[0086] S103, the UE sends a connection establishment request message to the AF network element, the connection establishment request message is used to request to establish an end-to-end secure connection with the AF network element, the connection establishment request message includes a ciphertext, the ciphertext is the AF network element using the public key PK of the AF network element AF The key K used to identify the UE and establish an end-to-end secure connection CONN correspondingly, the AF network element can receive the connection establishment request message.

[0087] The AAnF network element encrypts the UE's identity to prevent attackers from identifying the UE initiating the connection after intercepting the connection establishment request message, thereby protecting the confidentiality of data or information during transmission. Optionally, the connection establishment request message sent by the UE to the AF network element also includes a timestamp when the UE initiates the end-to-end secure connection establishment.

[0088] S104, AF network element uses its own private key SK AFDecrypt the ciphertext and obtain the key K CONN .

[0089] S105. The AF network element may send a connection establishment response message to the UE, and correspondingly, the UE may receive the connection establishment response message.

[0090] Optionally, if the AF network element cannot decrypt the ciphertext, obtain the key K CONN , the UE may be informed of the connection establishment failure, or the connection establishment failure and the reason for the failure, etc., through a connection establishment response message. Optionally, the UE may initiate a connection establishment request message again.

[0091] visible, Figure 3 In the session establishment method shown in the figure, the connection establishment request message sent by the UE may carry the key K used when establishing the end-to-end secure connection. CONN , when the UE and the AF network element first establish a secure connection, or when the key K on the UE side CONN In the event of failure or update, there is no need for the AF network element to interact with the core network to obtain the security connection key K CONN , thereby reducing the complexity of the interaction between the AF network element and the core network.

[0092] An optional implementation of the session establishment method is described below.

[0093] In an optional implementation manner, the method further includes: the AAnF network element uses its own private key SK AAnF The ciphertext is digitally signed to obtain the signature content. Correspondingly, the connection key message sent by the AAnF network element to the UE also includes the signature content. In this way, the connection establishment request message sent by the UE to the AF network element also includes the signature content; the AF network element uses the public key PK of the AAnF network element to AAnF Verify the signature content. If the signature content is verified, execute the above using its own private key SK AF It can be seen that this implementation enables the AF network element to determine the legitimacy of the UE based on the signature content, that is, if the signature content is verified, it means that the core network believes that the UE is a legitimate UE and the UE has the right to use the end-to-end secure connection between the UE and the AF network element to establish services.

[0094] Optionally, the AF network element uses the public key PK of the AAnF network element AAnF Verify the signature content. If the signature content verification fails, the AF network element may send a connection establishment response message in advance. The connection establishment response message may be used to inform the UE that the connection establishment failed, or to inform the UE of the connection establishment failure and the reason for the failure. Optionally, the AF network element uses the public key PK of the AAnF network element.AAnF is pre-stored. Optional, if the AAnF network element stores the key K CONN The AAnF network element uses its own private key SK AAnF The ciphertext can be digitally signed by signing each ciphertext separately. If the AAnF network element encrypts the above two-tuple, then the AAnF network element uses its own private key SK AAnF The ciphertext may be digitally signed by signing the ciphertext after the binary tuple is encrypted.

[0095] In another optional implementation, the method further includes: the AAnF network element can use the shared key K EE The ciphertext is calculated to obtain the message authentication code. Accordingly, the connection key message sent by the AAnF network element to the UE also includes the message authentication code. In this way, the connection establishment request message sent by the UE to the AF network element also includes the message authentication code. Then, the AF network element can use the shared key K EE Verify the message verification code. If the message verification code passes the verification, execute the above-mentioned method using its own private key SK AF Decrypt the ciphertext and obtain the key K CONN It can be seen that this implementation enables the application function network element to determine the legitimacy of the terminal device based on the message verification code. In other words, if the message verification code is verified, it means that the core network believes that the UE is a legitimate UE and the UE has the right to use the end-to-end secure connection between the UE and the AF network element to establish a service.

[0096] Optionally, the AF network element uses a shared key K EE Verify the message authentication code. If the message authentication code fails to be verified, the AF network element may send a connection establishment response message in advance. The connection establishment response message may be used to inform the UE that the connection establishment failed, or to inform the UE of the connection establishment failure and the reason for the failure. Optionally, the shared key K used by the AF network element EE is pre-stored. Optional, if the AAnF network element stores the key K CONN The AAnF network element uses the shared key K EE The process of calculating the ciphertext to obtain the message authentication code may be to calculate the message authentication code separately. If the AAnF network element encrypts the above two-tuple, then the AAnF network element uses the shared key K EE The process of calculating the ciphertext to obtain the message verification code may be to calculate the message verification code together with the ciphertext encrypted by the binary.

[0097] Optionally, the connection key request message sent by the UE to the AAnF network element includes or carries the identifier of the AF network element, such as AF_ID, and the identifier of the UE. In this way, after receiving the connection key request message, the AAnF network element can use the identifier of the AF network element, such as AF_ID, to find the public key PK of the AF network element from the stored keys. AF , thus, executing step S101 using the public key PK AF The UE's identity and the key K CONN In addition, the connection key response message sent by the AAnF network element to the UE may include the public key PK AF The public key identifier PK AF _ID, the connection establishment request message sent by the UE to the AF network element may also include the public key PK AF The public key identifier PK AF _ID, so that the AF network element can identify PK according to the public key AF _ID, find the corresponding private key SK AF , to perform the decryption of the ciphertext and obtain the key K CONN It can be seen that this implementation method uses the public key PK of the AF network element AF The public key identifier PK AF _ID, distinguishing the public key PK of different AF network elements AF , so that the method can be applied to the scenario of multi-application function network elements.

[0098] Optionally, the AAnF network element uses its own private key to SK AAnF In the implementation method of digitally signing the ciphertext, the connection key message sent by the AAnF network element to the UE and the connection establishment request message sent by the UE to the AF network element also include the public key PK of the AAnF network element. AAnF In this way, the AF network element can identify the public key PK AAnF _ID, retrieve the pre-stored public key PK of the AAnF network element AAnF , to verify the signature content. It can be seen that this implementation method can be implemented by the public key PK of the AAnF network element AAnF The public key identifier PK AAnF _ID, distinguishing the public key PK of different AAnF network elements AAnF , making this method applicable to scenarios of identity authentication and key management anchor function network elements for multiple applications.

[0099] Optionally, for AAnF network elements, use the shared key K EE In the implementation method of calculating the message authentication code of the ciphertext, the connection key message sent by the AAnF network element to the UE and the connection establishment request message sent by the UE to the AF network element also include the shared key KEE The shared key identifier K EE _ID. Then, the AF network element can identify K based on the shared key EE _ID, retrieve the pre-stored shared key K EE , to use the shared key K EE Verify the message verification code.

[0100] Optional, the public key PK of the AF network element in the AAnF network element AF It is pre-stored. Optional, the public key PK of the AAnF network element in the AF network element AAnF It is pre-stored. Optionally, the shared key K in the AAnF network element and the AF network element EE Optionally, these pre-stored public keys or shared keys may also be interactively obtained in advance, which is not limited in the embodiments of the present application.

[0101] See also Figure 4 , Figure 4 is a flow chart of another session establishment method provided in an embodiment of the present application, which is mainly described from the perspective of interaction among AAnF network element, UE and AF network element, and Figure 4 The session establishment method shown is described by taking the method of verifying the legitimacy of the UE by using the signature content as an example. Figure 4 As shown, the session establishment method may include but is not limited to the following steps:

[0102] S201a, AAnF network element pre-stores the public key PK of AF network element AF , S201b, AF network element pre-stores the public key PK of AAnF network element AAnF .

[0103] S202: UE accesses the network and completes the main authentication process.

[0104] Optionally, the main authentication process can be defined in 6.1.3.1 or 6.1.3.2 of TS 33.501, for example, the UE initiates an authentication request, the UDM network element creates an authentication vector for the UE, and the UE creates a response message RES* based on the authentication parameters RAND and AUTH fields in the authentication vector. The AUSF verifies that the RES* returned by the UE is consistent with the locally pre-calculated expected response information XRES*. If the two are consistent, the verification passes. After the verification passes, the UE returns the authentication pass or authentication failure result to the AMF network element.

[0105] S203, UE sends a connection key request message to AAnF network element via AMF network element and AUSF network element. The connection key request message is used to request the key K used when establishing an end-to-end secure connection between UE and AF network element. CONNThe connection key request message carries the UE identifier and the AF network element identifier AF_ID.

[0106] S204. The AAnF network element checks whether the UE has the authority to use the end-to-end security protection service. If it has the authority to use the end-to-end security protection service, execute step S205. Otherwise, refuse to respond to the connection key request message of the UE, or send a connection key response message to inform the UE of the failure of the connection key request and the reason for the failure.

[0107] As mentioned above, the AAnF network element checks whether the UE has the authority to use the end-to-end security protection service by querying the subscription data from the UDM network element through the AAnF network element; or, the AAnF network element checks whether the UE has the authority to use the end-to-end security protection service by querying the local configuration policy through the AAnF network element.

[0108] S205. The AAnF network element creates a key K used when establishing an end-to-end secure connection between the UE and the AF network element. CONN ; The AAnF network element uses the AF network element's identifier AF_ID to retrieve the AF network element's public key PK from the pre-stored key AF Then, use the public key PK AF Encryption K CONN and UE's identity, obtain the ciphertext, and then use AAnF's private key SK AAnF Sign the ciphertext and obtain the signature content.

[0109] Among them, AAnF network element creates the key K CONN The method can be derived from the master authentication key (such as K AUSF ), or it can be obtained by the AAnF network element using a random number generated by itself.

[0110] S206. The AAnF network element sends a connection key response message to the UE. Correspondingly, the UE receives the connection key response message.

[0111] As described in the above optional implementation manners, optionally, the connection key response message may include the key K used when establishing an end-to-end secure connection between the UE and the AF network element. CONN , ciphertext, signature content, public key identifier PK of AAnF network element AAnF _ID and the public key identifier PK of the AF network element AF _ID. The AAnF network element may send the connection key response message to the UE via the AUSF network element and the AMF network element. For example, if the AAnF network element receives the UE's identifier and key K CONN Separate encryption and separate signing, the connection key response message can carry the key K CONN , Use public key PK AFEncryption K CONN The ciphertext (Enc(K CONN )PK AF ), using the private key SK AAnF For the ciphertext (Enc(K CONN )PK AF )Signature content obtained by signing (Sig(Enc(K CONN )PK AF )SK AAnF ), using public key PK AF Encrypted UE ID ciphertext (Enc(UE_ID)PK AF ), using the private key SK AAnF Encrypted text (Enc (UE_ID) PK AF )Signature content obtained by signing (Sig(Enc(UE_ID)PK AF )SK AAnF ), AAnF network element public key identifier PK AAnF _ID and the public key identifier PK of the AF network element AF _ID.

[0112] Among them, the relevant contents of the ciphertext and signature content can be referred to the implementation method described above and will not be described in detail here.

[0113] S207. When the UE needs to initiate communication with the AF network element, the UE initiates a secure connection establishment request, such as sending a connection establishment request message to the AF network element; correspondingly, the AF network element receives the connection establishment request message.

[0114] As described in the above optional implementations, optionally, the connection establishment request message carries the ciphertext, signature content, and the public key identifier PK of the AAnF network element. AAnF _ID, AF network element public key identifier PK AF _ID, and the timestamp of initiating the security connection establishment request. For example, if the AAnF network element has the UE's identity and key K CONN Separate encryption and separate signature, the connection establishment request message can carry Enc(K CONN )PK AF 、Sig(Enc(K CONN )PK AF )SK AAnF 、Enc(UE_ID)PK AF 、Sig(Enc(UE_ID)PK AF )SK AAnF ,PK AAnF _ID, PK AF _ID, and timestamp.

[0115] S208, the AF network element uses the pre-stored public key PK of the AAnF network element AAnF Verify the signature content. If the signature content is verified, use your own private key to decrypt the ciphertext and obtain the key K used by the UE to establish a secure connection with the AF network element. CONN .

[0116] S209: The AF network element replies to the UE with a connection establishment response message, completing the secure connection establishment process between the UE and the AF network element. The connection establishment response message is transmitted using the key K CONN Protect.

[0117] visible, Figure 4 The session establishment method shown in the figure pre-sets a key (such as their respective public keys PK) between the AAnF network element and the AF network element, so that the key K used by the UE and the AF network element for establishing a secure connection CONN Generated by the core network and sent to the UE, so that the UE can directly carry the security connection key K between the UE and the AF network element during the secure connection establishment request process. CONN , so that the AF network element no longer needs to communicate with the core network to obtain the security connection key between the UE and the AF network element, thereby reducing the complexity of the interaction between the AF network element and the core network.

[0118] See also Figure 5 , Figure 5 It is a flow chart of another session establishment method provided in an embodiment of the present application, which is mainly described from the perspective of interaction among AAnF network element, UE and AF network element, and Figure 5 The session establishment method shown is described by taking the method of verifying the legitimacy of the UE by using a message verification code as an example. Figure 5 As shown, the session establishment method may include but is not limited to the following steps:

[0119] S301a, AAnF network element pre-stores the public key PK of AF network element AF and the shared key K EE , S301b, AF network element pre-stores shared key K EE .

[0120] Optionally, the AAnF network element and the AF network element may also pre-store a shared key K EE The shared key identifier K EE _ID.

[0121] S302: UE accesses the network and completes the main authentication process.

[0122] Optionally, the main authentication process may be defined in 6.1.3.1 or 6.1.3.2 of TS 33.501, such as the relevant description of step S202 above, and will not be described in detail here.

[0123] S303, UE sends a connection key request message to AAnF network element via AMF network element and AUSF network element. The connection key request message is used to request the key K used when establishing an end-to-end secure connection between UE and AF network element. CONN The connection key request message carries the UE identifier and the AF network element identifier AF_ID.

[0124] S304. The AAnF network element checks whether the UE has the authority to use the end-to-end security protection service. If it has the authority to use the end-to-end security protection service, execute step S305. Otherwise, refuse to respond to the connection key request message of the UE, or send a connection key response message to inform the UE of the failure of the connection key request and the reason for the failure.

[0125] The manner in which the AAnF network element checks whether the UE has the authority to use the end-to-end security protection service is as described above and will not be described in detail here.

[0126] S305. The AAnF network element creates a key K used when establishing an end-to-end secure connection between the UE and the AF network element. CONN ; The AAnF network element uses the AF network element's identifier AF_ID to retrieve the AF network element's public key PK from the pre-stored key AF , and then use the public key PK AF Encryption K CONN and UE's identity to obtain the ciphertext; then use the shared key K EE Compute a message authentication code (MAC) / hash-based message authentication code (HMAC) on the ciphertext.

[0127] Among them, AAnF network element creates the key K CONN The method is as described above and will not be described in detail here.

[0128] S306. The AAnF network element sends a connection key response message to the UE. Correspondingly, the UE receives the connection key response message.

[0129] As described in the above optional implementation manners, optionally, the connection key response message may include the key K used when establishing an end-to-end secure connection between the UE and the AF network element. CONN , ciphertext, message authentication code, public key identifier PK of AF network element AF _ID, and the shared key K pre-stored by the AAnF network element and the AF network element EE The shared key identifier K EE_ID. The AAnF network element may send the connection key response message to the UE via the AUSF network element and the AMF network element.

[0130] Among them, the relevant contents of the ciphertext and the message verification code can refer to the implementation method described above, and will not be described in detail here.

[0131] S307. When the UE needs to initiate communication with the AF network element, the UE initiates a secure connection establishment request, such as sending a connection establishment request message to the AF network element; correspondingly, the AF network element receives the connection establishment request message.

[0132] As described in the above optional implementation modes, optionally, the connection establishment request message carries the ciphertext, the message verification code, and the public key identifier PK of the AF network element. AF _ID, shared key identifier K EE _ID and the timestamp of the request to establish the secure connection.

[0133] S308, AF network element uses shared key identification K EE _ID retrieves the pre-stored shared key K EE , verify the message verification code. If the verification passes, use your own private key to decrypt the ciphertext and obtain the key K used by the UE to establish a secure connection with the AF network element. CONN .

[0134] S309: The AF network element replies to the UE with a connection establishment response message, completing the secure connection establishment process between the UE and the AF network element. The AF network element uses the key K to send the connection establishment response message. CONN Protect.

[0135] visible, Figure 5 The session establishment method shown in the figure is to pre-set a key between the AAnF network element and the AF network element (such as the public key PK of the AF network element and the shared key K pre-stored by the AAnF network element and the AF network element). EE ) method, so that the key K when the UE and the AF network element establish a secure connection CONN Generated by the core network and sent to the UE, so that the UE can directly carry the security connection key K between the UE and the AF network element during the secure connection establishment request process. CONN , so that the AF network element no longer needs to communicate with the core network to obtain the security connection key between the UE and the AF network element, thereby reducing the complexity of the interaction between the AF network element and the core network.

[0136] In the embodiments provided in the present application, the scheme of the communication method provided in the embodiments of the present application is introduced from the perspective of each network element or device itself, and from the perspective of the interaction between each network element or device. It can be understood that each network element and device, such as the identity authentication and key management anchor function network element, application function network element and UE of the above-mentioned application, in order to implement the above-mentioned functions, includes hardware structures and / or software units corresponding to the execution of each function. Optionally, in the above-mentioned method embodiment, the information sent by the UE to the identity authentication and key management anchor function network element of the application can be sent to the access and mobility management function network element, the authentication service function network element, or the network capability opening function network element. It should be easy for those skilled in the art to realize that, in combination with the units and algorithm steps of each example described in the embodiments disclosed in the present application, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in a hardware or computer software driven hardware manner depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0137] See also Figure 6 , which is a structural diagram of a communication device provided in this application. Figure 6 The communication device shown includes a transceiver module 601 and a processing module 602 .

[0138] In one embodiment, in one design, the communication device is an application function network element or a device related to the application function network element:

[0139] Exemplarily, the transceiver module 601 is used to receive a connection establishment request message from a terminal device, the connection establishment request message is used to request to establish an end-to-end secure connection, the connection establishment request message includes a ciphertext, the ciphertext is the public key PK of the application function network element using the identity authentication and key management anchor function network element of the application AF The key K used to identify the terminal device and establish an end-to-end secure connection CONN Processing module 602 is used to use its own private key SK AF Decrypt the ciphertext to obtain the key K CONN ; The transceiver module 601 is also used to send a connection establishment response message to the terminal device.

[0140] Optionally, when the communication device is an application function network element or a device related to an application function network element, it is used to implement Figures 3 to 5 The functions of the application function network element in the illustrated embodiment and the optional implementation methods.

[0141] In one design, the communication device is an authentication and key management anchor function network element of an application or a related device in the authentication and key management anchor function network element of an application:

[0142] Exemplarily, the processing module 602 is used to create a key K used when establishing an end-to-end secure connection between the terminal device and the application function network element. CONN Processing module 602, also used to use the public key PK of the application function network element AF Identification of the terminal device, key K CONN Encrypt to obtain ciphertext; transceiver module 601, used to send a connection key message to the terminal device, the connection key message includes the key K CONN and the ciphertext.

[0143] Optionally, when the communication device is an access network device, it is used to implement Figures 3 to 5 The functions of the identity authentication and key management anchor function network element applied in the illustrated embodiment and optional implementation methods.

[0144] In one design, the communication device is a terminal device or a device related to the terminal device:

[0145] Exemplarily, the transceiver module 601 sends second information to the session management function network element, where the second information is used to indicate that one or more service flows share bandwidth.

[0146] Optionally, when the communication device is a policy control function network element, it is used to implement Figures 3 to 5 The functions of the policy control function network element in the illustrated embodiment.

[0147] In one design, the communication device is an application function network element:

[0148] Exemplarily, the transceiver module 601 is used to send a connection establishment request message to the application function network element, the connection establishment request message is used to request to establish an end-to-end secure connection with the application function network element, and the connection establishment request message includes a ciphertext, which is the public key PK of the application identity authentication and key management anchor function network element using the application function network element. AF The key K used to identify the terminal device and establish an end-to-end secure connection CONN The encrypted data is obtained; the transceiver module 601 is also used to receive a connection establishment response message from the application function network element.

[0149] Optionally, when the communication device is an application function network element, it is used to implement Figures 3 to 5 The functions of the application function network element in the illustrated embodiment.

[0150] See also Figure 7 , is a structural diagram of another communication device provided in this application. Figure 7 The communication device shown includes at least one processor 701 and a memory 702, and optionally, may further include a transceiver 703. The specific connection medium between the processor 701 and the memory 702 is not limited in the embodiment of the present application. Figure 7 In the figure, the memory 702 and the processor 701 are connected via a bus 704 as an example. The bus 704 is represented by a thick line in the figure. The connection between other components is only for schematic illustration and is not limited to this. The bus 704 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 7 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0151] The processor 701 may have a data transceiver function and may communicate with other devices. Figure 7 In the device shown, an independent data transceiver module, such as a transceiver 703, may also be provided for transmitting and receiving data; when the processor 701 communicates with other devices, data transmission may be performed through the transceiver 703.

[0152] In one example, when the application function network element adopts Figure 7 When the form shown is Figure 7 The processor 701 in the memory 702 can call the computer execution instruction stored in the memory 702 to make the application function network element execute Figures 3 to 5 A method executed by an application function network element in any of the embodiments.

[0153] In one example, when the authentication and key management anchor function element of the application adopts Figure 7 When the form shown is Figure 7 The processor 701 in the memory 702 can call the computer execution instructions stored in the memory 702 to enable the authentication and key management anchor function network element of the application to execute Figures 3 to 5 A method performed by an authentication and key management anchor function network element of an application in any of the embodiments.

[0154] In one example, when the terminal device uses Figure 7 When the form shown is Figure 7 The processor 701 in the embodiment can call the computer execution instruction stored in the memory 702 to make the terminal device execute Figures 3 to 5 A method executed by a terminal device in any of the embodiments.

[0155] The present application also provides a communication system, which may include Figures 3 to 5 The application function network elements, the application identity authentication and key management anchor function network elements, and part or all of the terminal equipment, for details, please refer to the method embodiments described above.

[0156] The scheme described in this application can be implemented in various ways. For example, these technologies can be implemented in hardware, software or a combination of hardware. For hardware implementation, the processing module used to perform these technologies at a communication device (e.g., a base station, a terminal, a network entity, a core network element or a chip) can be implemented in one or more general-purpose processors, digital signal processors (DSP), digital signal processing devices, application specific integrated circuits (ASIC), programmable logic devices, field programmable gate arrays (FPGA), or other programmable logic devices, discrete gates or transistor logic, discrete hardware components, or any combination thereof. The general-purpose processor can be a microprocessor, and optionally, the general-purpose processor can also be any conventional processor, controller, microcontroller or state machine. The processor can also be implemented by a combination of computing devices, such as a digital signal processor and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a digital signal processor core, or any other similar configuration.

[0157] It can be understood that the memory in the embodiments of the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct RAM (DR RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0158] The present application also provides a computer-readable medium on which instructions are stored, and when the instructions are executed by a computer, the functions of any of the above method embodiments are implemented.

[0159] The present application also provides a computer program product, which implements the functions of any of the above method embodiments when executed by a computer.

[0160] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a high-density digital video disc (DVD)), or a semiconductor medium (eg, a solid state disk (SSD)).

[0161] It is understandable that some optional features in the embodiments of the present application may be implemented independently in certain scenarios without relying on other features, such as the solution on which they are currently based, to solve corresponding technical problems and achieve corresponding effects, or may be combined with other features according to needs in certain scenarios. Accordingly, the devices provided in the embodiments of the present application may also realize these features or functions accordingly, which will not be elaborated here.

[0162] Those skilled in the art can also understand that the various illustrative logical blocks and steps listed in the embodiments of the present application can be implemented by electronic hardware, computer software, or a combination of the two. Whether such functions are implemented by hardware or software depends on the specific application and the design requirements of the entire system. Those skilled in the art can use various methods to implement the functions for corresponding applications, but such implementation should not be understood as exceeding the scope of protection of the embodiments of the present application.

[0163] It is understood that the "embodiment" mentioned throughout the specification means that the specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, the various embodiments in the entire specification do not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It is understood that in various embodiments of the present application, the size of the sequence number of the above-mentioned processes does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

[0164] It can be understood that in the present application, "when", "if" and "if" all mean that the device will take corresponding actions under certain objective circumstances, but do not limit the time, nor do they require the device to make judgments when implementing it, nor do they mean that there are other limitations.

[0165] In this application, elements expressed in the singular are intended to mean "one or more" rather than "one and only one", unless otherwise specified. In this application, "at least one" is intended to mean "one or more", and "more than one" is intended to mean "two or more", unless otherwise specified.

[0166] In addition, the terms "system" and "network" are often used interchangeably in this article. The term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. A can be singular or plural, and B can be singular or plural.

[0167] The predefined in the present application may be understood as defined, predefined, stored, pre-stored, pre-negotiated, pre-configured, solidified, or pre-burned.

[0168] Those skilled in the art will appreciate that, for the sake of convenience and brevity of description, the specific working processes of the systems, devices and units described above may refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0169] The same or similar parts between the various embodiments in this application can refer to each other. In the various embodiments in this application, and the various implementation methods / implementation methods / implementation methods in each embodiment, if there is no special explanation and logical conflict, the terms and / or descriptions between different embodiments and the various implementation methods / implementation methods / implementation methods in each embodiment are consistent and can be referenced to each other. The technical features in different embodiments and the various implementation methods / implementation methods / implementation methods in each embodiment can be combined to form new embodiments, implementation methods, implementation methods, or implementation methods according to their inherent logical relationships. The above-described implementation methods of this application do not constitute a limitation on the scope of protection of this application.

[0170] The above description is only a specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application.

Claims

1. A session establishment method, characterized in that: The method comprises: receiving a connection establishment request message from a terminal device, wherein the connection establishment request message is used to request to establish an end-to-end secure connection, and the connection establishment request message includes a ciphertext, The ciphertext is the public key PK of the application function network element using the identity authentication and key management anchor function network element AF The identifier of the terminal device and the key K used when establishing the end-to-end secure connection CONN Encrypted; Using your own private key SK AF Decrypt the ciphertext to obtain the key K CONN ; Send a connection establishment response message to the terminal device.

2. The method according to claim 1, characterized in that The connection establishment request message also includes signature content, and the signature content is the identity authentication and key management anchor function network element of the application using the private key SK AAnF Obtained by digitally signing the ciphertext; The method further comprises: Utilize the public key PK of the authentication and key management anchor function network element of the application AAnF Verifying the signature content; If the signature content is verified, the private key SK is used to execute AF Decrypt the ciphertext to obtain the key K CONN steps.

3. The method according to claim 2, characterized in that The public key PK of the authentication and key management anchor function network element of the application AAnF It is pre-stored.

4. The method according to any one of claims 1 to 3, characterized in that: The connection establishment request message also includes a message for identifying the public key PK AF The public key identifier used to identify the public key PK AAnF One or more of the public key identifier and the timestamp of the terminal device initiating the establishment of the end-to-end secure connection.

5. The method according to claim 1, characterized in that The connection establishment request message also includes a message verification code, which is a message verification code obtained by the identity authentication and key management anchor function network element of the application using a shared key K EE Obtained by calculating the ciphertext; The method further comprises: Using the shared key K EE Verifying the message verification code; If the message verification code is verified, the private key SK is used to execute the AF Decrypt the ciphertext to obtain the key K CONN steps.

6. The method according to claim 5, characterized in that The connection establishment request message also includes a message for identifying the public key PK AF The public key identifier used to identify the shared key K EE One or more of the shared key identifier and the timestamp of the terminal device initiating the establishment of the end-to-end secure connection.

7. A session establishment method, characterized in that: The method comprises: The key K used to establish an end-to-end secure connection between the terminal device and the application function network element CONN ; Using the public key PK of the application function network element AF , the identification of the terminal device, the key K CONN Encrypt and obtain ciphertext; Send a connection key message to the terminal device, the connection key message including the key K CONN and the ciphertext.

8. The method according to claim 7, characterized in that The method further comprises: Using your own private key SK AAnF The ciphertext is digitally signed to obtain the signature content, and the connection key message also includes the signature content.

9. The method according to claim 7, characterized in that: The method further comprises: Using the shared key K EE The ciphertext is calculated to obtain a message verification code, and the connection key message also includes the message verification code.

10. The method according to any one of claims 7 to 9, characterized in that: The key K used to establish an end-to-end secure connection between the terminal device and the application function network element CONN Previously, the method also included: Receive a connection key request message from a terminal device, wherein the connection key request message is used to request the key K CONN .

11. The method according to any one of claims 7 to 10, characterized in that: The method further comprises: Checking whether the terminal device has the authority to use the end-to-end security protection service; If the terminal device has the right to use the end-to-end security protection service, the key K used to establish the end-to-end secure connection between the terminal device and the application function network element is executed. CONN steps.

12. The method according to claim 11, characterized in that The checking whether the terminal device has the authority to use the end-to-end security protection service includes: Sending a query request message to a unified data management network element, wherein the query request message is used to request whether the terminal device has the authority to use the end-to-end security protection service; A query response message is received from the unified data management network element, where the query response message is used to indicate whether the terminal device has the authority to use the end-to-end security protection service.

13. The method according to claim 10, characterized in that The connection key request message includes the identification of the application function network element and the identification of the terminal device; the connection key message includes the public key PK used to identify the application function network element AF The public key identifier of the .

14. The method according to claim 8, 9 or 13, characterized in that The connection key message also includes a public key PK for identifying itself AAnF The public key identifier, or, for identifying the shared key K EE The shared key identifier of the 15. The method according to any one of claims 7 to 14, characterized in that The public key PK of the application function network element AF It is pre-stored.

16. A session establishment method, characterized in that: The method comprises: Sending a connection establishment request message to an application function network element, wherein the connection establishment request message is used to request to establish an end-to-end secure connection with the application function network element, and the connection establishment request message includes ciphertext, The ciphertext is the public key PK of the application function network element using the identity authentication and key management anchor function network element AF The identifier of the terminal device and the key K used when establishing the end-to-end secure connection CONN Encrypted; Receive a connection establishment response message from the application function network element.

17. The method according to claim 16, characterized in that The connection establishment request message also includes signature content, and the signature content is the identity authentication and key management anchor function network element of the application using the private key SK AAnF The ciphertext is digitally signed.

18. The method according to claim 16, characterized in that The connection establishment request message also includes a message verification code, which is a message verification code obtained by the identity authentication and key management anchor function network element of the application using a shared key K EE The ciphertext is obtained by calculation.

19. The method according to any one of claims 16 to 18, characterized in that Before sending the connection establishment request message to the application function network element, the method further includes: Send a connection key request message to the identity authentication and key management anchor function network element of the application, the connection key request message is used to request the key K CONN ; Receive a connection key message from the authentication and key management anchor function network element of the application, the connection key message including the key K CONN and the ciphertext; or, the connection key message includes the key K CONN , the ciphertext and the signature content; or, the connection key message includes the key K CONN , the ciphertext and the message verification code.

20. The method according to claim 19, characterized in that The connection key request message includes the identifier of the application function network element and the identifier of the terminal device; The connection key message and the connection establishment request message also include a message for identifying the public key PK AF and / or, The connection key message and the connection establishment request message also include a public key PK used to identify the identity authentication and key management anchor function network element of the application AAnF The public key identifier, or also includes a public key for identifying the shared key K EE and / or, The connection establishment request message also includes a timestamp when the terminal device initiates the establishment of the end-to-end secure connection.

21. A communication device, characterized in that: The method comprises a module for executing the method as claimed in any one of claims 1 to 6, or comprises a module for executing the method as claimed in any one of claims 7 to 14, or comprises a module for executing the method as claimed in any one of claims 16 to 20.

22. A communication device, characterized in that: The method comprises a processor and an interface circuit, wherein the interface circuit is used to receive signals from other communication devices other than the communication device and transmit them to the processor or send signals from the processor to other communication devices other than the communication device, and the processor is used to implement the method according to claims 1 to 6 through a logic circuit or executes code instructions, or includes the method for implementing any one of claims 7 to 14, or includes the method for implementing any one of claims 16 to 20.

23. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program or instruction. When the computer program or instruction is executed by the communication device, it implements a module of the method according to any one of claims 1 to 6, or implements the method according to any one of claims 7 to 14, or implements the method according to any one of claims 16 to 20.

24. A communication device, characterized in that: The communication device includes a processor and a transceiver; The transceiver is used to communicate with other communication devices, and the processor is used to run a computer program so that the communication device implements the method as described in any one of claims 1 to 6, or implements the method as described in any one of claims 7 to 14, or implements the method as described in any one of claims 16 to 20.

25. A communication device, characterized in that: The communication device includes a memory, a processor and a transceiver; The transceiver is used to receive signals or send signals, the memory is used to store instructions or computer programs, and the processor is used to execute the computer programs or instructions stored in the memory, so that the communication device performs the method as described in any one of claims 1 to 6, or implements the method as described in any one of claims 7 to 14, or implements the method as described in any one of claims 15 to 19.

26. A computer program product, characterized in that The method comprises computer instructions, which, when executed on a computer, enable the computer to execute the method according to any one of claims 1 to 6, or the method according to any one of claims 7 to 14, or the method according to any one of claims 16 to 20.

Images