Wireless physical layer secure communication method and communication device

Abstract

Provided in an embodiment of the present application are a wireless physical layer secure communication method and communication device, the method comprising: a first device pre-processes first data based on an error rate of a third device, the pre-processing being used to make communication between the first device and a second device reach a security level; and the first device sends second data to the second device, wherein the second data is data obtained after the first data is preprocessed. According to the scheme, before the sending end sends the data, the to-be-sent data is preprocessed, the bit error rate of the third device is introduced in preprocessing, communication between the first device and the second device can reach the security level, and therefore communication security can be improved.

Description

Wireless physical layer secure communication method and communication device Technical Field

[0001] The embodiments of the present application relate to the field of communications, and more specifically, to a method and a communication device for secure wireless physical layer communications. Background Art

[0002] Secure transmission is the foundation of communication. Traditional secure transmission solutions are all key-based, and key encryption can be categorized as symmetric or asymmetric. Symmetric encryption involves a shared key between two parties, while asymmetric encryption requires one party to pass a public key to the other. The sender uses the public key for encryption, and the receiver uses the private key for decryption. Both methods require key maintenance and management, which requires complex protocols. Vulnerabilities in these protocols are often vulnerable to attack, leading to key leaks and posing certain risks. Furthermore, complex protocols incur additional communication overhead and latency, making them unsuitable for the highly dynamic nature of future communication networks.

[0003] Compared with traditional secure transmission solutions, physical layer secure transmission technology utilizes the physical characteristics of wireless channels and adopts signal processing, coding and modulation technologies to achieve keyless secure transmission with relatively low communication overhead.

[0004] Therefore, improving the security performance of physical layer security transmission technology is crucial to the security of wireless communications.

[0005] Summary of the Invention

[0006] The embodiments of the present application provide a method and a communication device for wireless physical layer secure communication, which can improve the security performance of communication in a keyless transmission scenario.

[0007] In a first aspect, a method for secure wireless physical layer communication is provided. This method can be performed by a first apparatus, which can be a terminal device or a network device, a chip or circuit within the terminal device or network device, or a logic module or software capable of implementing all or part of the functions of the terminal device or network device, although this application does not limit this.

[0008] The method includes: a first device preprocesses first data based on a bit error rate of a third device, the preprocessing being used to ensure that the communication between the first device and the second device reaches a security level; the first device sends second data to the second device, the second data being data obtained after preprocessing the first data.

[0009] Based on the above solution, the transmitting end preprocesses the data to be sent before sending the data. The preprocessing introduces the bit error rate of the third device, which can make the communication between the first device and the second device reach a security level, thereby improving communication security.

[0010] On the other hand, this solution can customize security levels, providing differentiated security services for different legitimate recipients. For example, Internet of Things (IoT) terminals, which have limited computing power and lower security requirements, can use this solution to customize a lower security level. Therefore, it has greater flexibility.

[0011] In combination with the first aspect, in certain implementations of the first aspect, the first device preprocesses the first data based on the bit error rate of the third device, including: the first device groups the first data based on the bit error rate of the third device; or, the first device groups the first data based on the bit error rate of the third device and generates a first random string.

[0012] Based on the above solution, the first data is grouped and processed so that each group of the first data can obtain provable security strength, which helps to improve communication security.

[0013] In combination with the first aspect, in certain implementations of the first aspect, the first device groups the first data based on the bit error rate of the third device, including: the first device determines the packet length of the first data based on the bit error rate and the security level; the first device divides the first data in units of packet length.

[0014] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device performs an operation on the grouped first data based on the first random string.

[0015] Based on the above solution, when preprocessing the first data, the transmission security of the first data can be improved by introducing the first random string.

[0016] In combination with the first aspect, in certain implementations of the first aspect, the first device performs operations on the grouped first data based on the first random string, including: the first device obtains a first bit string based on the first random string and the second random string; the first device performs operations on the grouped first data based on the first bit string.

[0017] Based on the above solution, when pre-processing and post-processing the first data, the first bit string can be used as an equivalent key, so that each group of the first data can obtain provable security strength, which helps to improve communication security.

[0018] In combination with the first aspect, in some implementations of the first aspect, the length of the first random string is greater than or equal to the packet length, and the length of the second random vector is equal to the length of the first random string.

[0019] Based on the above solution, since the length of the first random string is greater than or equal to the packet length, it is only necessary to use the physical layer security transmission technology for the first random string, and the solution is simple to implement.

[0020] In combination with the first aspect, in some implementations of the first aspect, the length of the first random string is less than the packet length, and the length of the second random vector is equal to the packet length.

[0021] Based on the above solution, since the length of the first random string can be smaller than the packet length, the transmission rate loss is small and the code rate is high.

[0022] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device sending a second random string to the second device.

[0023] In combination with the first aspect, in some implementations of the first aspect, the packet length is a channel coded packet size.

[0024] Based on the above solution, the packet length is the packet size of the channel coding, which can reduce the complexity of the channel coding and facilitate implementation.

[0025] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device sending first information to the second device; or the first device receiving first information from the second device; wherein the first information is used to indicate a security level.

[0026] Based on the above solution, the sending and receiving ends align the security levels through signaling, and the security level can be customized according to needs, which is more flexible.

[0027] In combination with the first aspect, in some implementations of the first aspect, the first information is indication information.

[0028] In combination with the first aspect, in certain implementations of the first aspect, the indication information is used to indicate the type of the terminal device, and there is a corresponding relationship between the type of the terminal device and the communication security level.

[0029] Based on the above approach, the security level is indicated by the type of the terminal device, so that the security level is more closely matched with the computing capability of the terminal device, thereby reducing the implementation complexity of the terminal.

[0030] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device receives second information from the second device; or the first device sends second information to the second device; wherein the second information is used to indicate a bit error rate.

[0031] Based on the above solution, the transmitting and receiving ends align the bit error rates through signaling, which facilitates the implementation of pre-processing and post-processing.

[0032] In combination with the first aspect, in some implementations of the first aspect, the second information is indication information.

[0033] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the first device determines a bit error rate.

[0034] Based on the above solution, the first device can determine the bit error rate so that the determined bit error rate is more consistent with the actual scenario. When preprocessing is performed according to the determined bit error rate, the communication security in the current environment can be improved.

[0035] In combination with the first aspect, in certain implementations of the first aspect, the first device determines a bit error rate, including: the first device determines a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; the first device determines an optimal communication position outside the controlled area, and the third device has the best receiving performance at the optimal communication position; the first device determines the bit error rate based on the optimal communication position.

[0036] Based on the above scheme, the bit error rate is estimated at the optimal communication position outside the controlled area. When preprocessing is performed according to the determined bit error rate, the preprocessing result still has reliable safety performance when the conditions of the third device are optimal.

[0037] In a second aspect, a method for secure wireless physical layer communication is provided. This method can be performed by a second device, which can be a terminal device or network device, a chip or circuit in the terminal device or network device, or a logic module or software that implements all or part of the functions of the terminal device or network device, although this application does not limit this.

[0038] The method includes: a second device receives second data from a first device; the second device post-processes the second data to obtain first data, the second data being data obtained after pre-processing the first data based on a bit error rate of a third device, and the pre-processing is used to ensure that the communication between the first device and the second device reaches a security level.

[0039] Based on the above solution, the transmitting end preprocesses the data to be sent before sending the data. The preprocessing introduces the bit error rate of the third device, which can make the communication between the first device and the second device reach a security level, thereby improving communication security.

[0040] On the other hand, this solution can customize security levels, providing differentiated security services for different legitimate recipients. For example, Internet of Things (IoT) terminals, which have limited computing power and lower security requirements, can use this solution to customize a lower security level. Therefore, it has greater flexibility.

[0041] In combination with the second aspect, in some implementations of the second aspect, the second device post-processes the second data, including: the second device groups the second data; and the second device processes the grouped second data according to the second random string.

[0042] In combination with the second aspect, in certain implementations of the second aspect, the second data includes a first random string, and the second device processes the second data after grouping according to the second random string, including: the second device obtains a first bit string based on the first random string and the second random string; the second device performs operations on the second data after grouping based on the first bit string.

[0043] Based on the above solution, when pre-processing and post-processing the first data, the first bit string can be used as an equivalent key, so that each group of the first data can obtain provable security strength, which helps to improve communication security.

[0044] In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device receiving a second random string from the first device.

[0045] In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device receiving first information from the first device; or the second device sending first information to the first device; wherein the first information is used to indicate a security level.

[0046] Based on the above solution, the sending and receiving ends align the security levels through signaling, and the security level can be customized according to needs, which is more flexible.

[0047] In combination with the second aspect, in some implementations of the second aspect, the first information is indication information.

[0048] In combination with the second aspect, in certain implementations of the second aspect, the indication information is used to indicate the type of the terminal device, and there is a corresponding relationship between the type of the terminal device and the communication security level.

[0049] Based on the above approach, the security level is indicated by the type of the terminal device, so that the security level is more closely matched with the computing capability of the terminal device, thereby reducing the implementation complexity of the terminal.

[0050] In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device receiving second information from the first device; or the second device sending second information to the first device, wherein the second information is used to indicate a bit error rate.

[0051] Based on the above solution, the transmitting and receiving ends align the bit error rates through signaling, which facilitates the implementation of pre-processing and post-processing.

[0052] In combination with the second aspect, in some implementations of the second aspect, the second information is indication information.

[0053] In combination with the second aspect, in some implementations of the second aspect, the method further includes: the second device determines a bit error rate.

[0054] Based on the above solution, the second device can also determine the bit error rate, so that the determined bit error rate is more consistent with the actual scenario. When preprocessing is performed according to the determined bit error rate, the communication security in the current environment can be improved.

[0055] In combination with the second aspect, in certain implementations of the second aspect, the second device determines the bit error rate, including: the second device determines a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; the second device determines the best communication position outside the controlled area, and the third device has the best receiving performance at the best communication position; the second device determines the bit error rate based on the best communication position.

[0056] Based on the above scheme, the bit error rate is estimated at the optimal communication position outside the controlled area. When preprocessing is performed according to the determined bit error rate, the preprocessing result still has reliable safety performance when the conditions of the third device are optimal.

[0057] In a third aspect, a communication device is provided. The communication device is a first device, which may be a terminal device or a network device, a chip or circuit in the terminal device or network device, or a logic module or software capable of implementing all or part of the functions of the terminal device or network device, although this application does not limit this.

[0058] The first device may include a transceiver unit and a processing unit, the processing unit being used to: pre-process the first data based on the bit error rate of the third device, the pre-processing being used to ensure that the communication between the first device and the second device reaches a security level; the transceiver unit being used to send second data to the second device, the second data being data obtained after pre-processing the first data.

[0059] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is specifically used to: group the first data based on the bit error rate of the third device; or group the first data based on the bit error rate of the third device and generate a first random string.

[0060] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is specifically used to: determine the packet length of the first data according to the bit error rate and the security level; and divide the first data in units of packet length.

[0061] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is further configured to: perform operations on the grouped first data based on the first random string.

[0062] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is specifically used to: obtain a first bit string based on the first random string and the second random string; and perform operations on the grouped first data based on the first bit string.

[0063] In combination with the third aspect, in certain implementations of the third aspect, the length of the first random string is greater than or equal to the packet length, and the length of the second random vector is equal to the length of the first random string.

[0064] In combination with the third aspect, in certain implementations of the third aspect, the length of the first random string is less than the packet length, and the length of the second random vector is equal to the packet length.

[0065] In combination with the third aspect, in certain implementations of the third aspect, the transceiver unit is further configured to: send a second random string to the second device.

[0066] In combination with the third aspect, in certain implementations of the third aspect, the packet length is a channel coded packet size.

[0067] In combination with the third aspect, in certain implementations of the third aspect, the transceiver unit is further used to: send first information to the second device; or receive first information from the second device; wherein the first information is used to indicate a security level.

[0068] In combination with the third aspect, in some implementations of the third aspect, the first information is indication information.

[0069] In combination with the third aspect, in certain implementations of the third aspect, the indication information is used to indicate the type of the terminal device, and there is a corresponding relationship between the type of the terminal device and the communication security level.

[0070] In combination with the third aspect, in certain implementations of the third aspect, the transceiver unit is further used to: receive second information from the second device; or send second information to the second device; wherein the second information is used to indicate a bit error rate.

[0071] In combination with the third aspect, in some implementations of the third aspect, the second information is indication information.

[0072] In combination with the third aspect, in some implementations of the third aspect, the processing unit is further used to: determine a bit error rate.

[0073] In combination with the third aspect, in certain implementations of the third aspect, the processing unit is specifically used to: determine a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; determine the best communication position outside the controlled area, the third device has the best receiving performance at the best communication position; determine the bit error rate according to the best communication position.

[0074] In a fourth aspect, a communication device is provided. The communication device is a second device, which may be a terminal device or a network device, a chip or circuit in the terminal device or network device, or a logic module or software capable of implementing all or part of the functions of the terminal device or network device, although this application does not limit this.

[0075] The second device may include a transceiver unit and a processing unit: the transceiver unit is used to: receive second data from the first device; the processing unit is used to: post-process the second data to obtain first data, the second data is data obtained after pre-processing the first data based on the bit error rate of the third device, and the pre-processing is used to ensure that the communication between the first device and the second device reaches a security level.

[0076] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is specifically used to: group the second data; and process the grouped second data according to the second random string.

[0077] In combination with the fourth aspect, in certain implementations of the fourth aspect, the second data includes a first random string, and the processing unit is further used to: obtain a first bit string based on the first random string and the second random string; and perform operations on the grouped second data based on the first bit string.

[0078] In combination with the fourth aspect, in certain implementations of the fourth aspect, the transceiver unit is further configured to: receive a second random string from the first device.

[0079] In combination with the fourth aspect, in certain implementations of the fourth aspect, the transceiver unit is further used to: receive first information from the first device; or send first information to the first device; wherein the first information is used to indicate a security level.

[0080] In combination with the fourth aspect, in some implementations of the fourth aspect, the first information is indication information.

[0081] In combination with the fourth aspect, in certain implementations of the fourth aspect, the indication information is used to indicate the type of the terminal device, and there is a corresponding relationship between the type of the terminal device and the communication security level.

[0082] In combination with the fourth aspect, in certain implementations of the fourth aspect, the transceiver unit is further used to: receive second information from the first device; or send second information to the first device, wherein the second information is used to indicate a bit error rate.

[0083] In combination with the fourth aspect, in some implementations of the fourth aspect, the second information is indication information.

[0084] In combination with the fourth aspect, in some implementations of the fourth aspect, the processing unit is further used to: determine a bit error rate.

[0085] In combination with the fourth aspect, in certain implementations of the fourth aspect, the processing unit is specifically used to: determine a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; determine the optimal communication position outside the controlled area, the third device has the best receiving performance at the optimal communication position; determine the bit error rate based on the optimal communication position.

[0086] In a fifth aspect, a communication device is provided, comprising a processor coupled to a memory and configured to execute instructions in the memory to implement the method described above in any one of the first to second aspects, and any possible implementation of the first to second aspects. Optionally, the device further comprises a memory, which may be deployed separately from the processor or may be deployed centrally. Optionally, the device further comprises a communication interface, the processor being coupled to the communication interface. In one implementation, the communication interface may be a transceiver, or an input / output interface.

[0087] When the device is a chip, the communication interface may be an input / output interface, interface circuit, output circuit, input circuit, pin or related circuit on the chip or chip system, etc. The processor may also be embodied as a processing circuit or a logic circuit.

[0088] Optionally, the transceiver may be a transceiver circuit. Optionally, the input / output interface may be an input / output circuit.

[0089] In a specific implementation, the processor may be one or more chips, the input circuit may be an input pin, the output circuit may be an output pin, and the processing circuit may be a transistor, a gate circuit, a trigger, or various logic circuits. The input signal received by the input circuit may be, but is not limited to, received and input by a receiver, and the signal output by the output circuit may be, but is not limited to, output to and transmitted by a transmitter. The input circuit and the output circuit may be the same circuit, which functions as an input circuit and an output circuit at different times. The embodiments of the present application do not limit the specific implementation of the processor and various circuits.

[0090] In a sixth aspect, a communication device is provided, which includes a logic circuit and an input / output interface, wherein the logic circuit is used to couple with the input / output interface and transmit data through the input / output interface to execute any aspect of the above-mentioned first to second aspects, and any possible implementation method of the first to second aspects.

[0091] In the seventh aspect, a communication system is provided, which includes the first device in the third aspect or any possible implementation of the third aspect, and the second device in the fourth aspect or any possible implementation of the fourth aspect.

[0092] In an eighth aspect, a computer-readable storage medium is provided, which stores a computer program (also referred to as code, or instructions). When the computer-readable storage medium is run on a computer, the computer executes any one of the above-mentioned first to second aspects, and any possible implementation of the first to second aspects.

[0093] In the ninth aspect, a computer program product is provided, which includes: a computer program (also referred to as code, or instructions), which, when executed, enables a computer to execute any one of the above-mentioned first to second aspects, and any possible implementation of the first to second aspects.

[0094] The beneficial effects brought about by the third to ninth aspects mentioned above can be referred to the description of the beneficial effects in the first to second aspects, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0095] FIG1 is a schematic diagram of a communication system 100 applicable to a communication method according to an embodiment of the present application.

[0096] FIG2 is a schematic diagram of the structure of the device provided in an embodiment of the present application.

[0097] FIG3 is a schematic diagram of using artificial noise to achieve physical layer security transmission.

[0098] FIG4 is a schematic diagram showing the bit error rates of UE#2 and UE#3 caused by artificial noise.

[0099] FIG5 is a flow chart of a method 200 for wireless physical layer secure communication provided by an embodiment of the present application.

[0100] FIG6 is a schematic diagram of the preprocessing process provided in an embodiment of the present application.

[0101] FIG7 is a schematic diagram of the post-processing process provided in an embodiment of the present application.

[0102] FIG8 is a flowchart of data transmission of the present application.

[0103] FIG9 shows a schematic diagram of a controlled area.

[0104] FIG10 shows a method 300 for wireless physical layer secure communication provided by the present application.

[0105] FIG11 shows a method 400 for wireless physical layer secure communication provided by the present application.

[0106] FIG12 is a schematic block diagram of a communication device provided in an embodiment of the present application.

[0107] FIG13 shows a communication device 600 provided in an embodiment of the present application.

[0108] FIG14 shows a communication device 700 provided in an embodiment of the present application. DETAILED DESCRIPTION

[0109] The technical solution in this application will be described below with reference to the accompanying drawings.

[0110] The technical solutions of the embodiments of the present application can be applied to various communication systems, such as: Global System of Mobile communication (GSM) system, Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, General Packet Radio Service (GPRS), Long Term Evolution (LTE) system, LTE frequency division duplex (FDD) system, LTE time division duplex (TDD) system, Universal Mobile Telecommunications System (UMTS), Worldwide Interoperability for Microwave Access (WiMAX) communication system, Fifth Generation (5G) mobile communication system or new radio (NR), wireless local area network (WLAN) system, wireless fidelity (WiFi) system. Among them, the 5G mobile communication system can be a non-standalone (NSA) or standalone (SA) network.

[0111] The technical solution provided in this application can also be applied to machine type communication (MTC), long term evolution-machine (LTE-M), device-to-device (D2D) network, machine-to-machine (M2M) network, Internet of Things (IoT) network or other networks. Among them, the IoT network can include, for example, the Internet of Vehicles. Among them, the communication mode in the Internet of Vehicles system is collectively referred to as vehicle to other devices (vehicle to X, V2X, X can represent anything), for example, the V2X can include: vehicle to vehicle (V2V) communication, vehicle to infrastructure (V2I) communication, vehicle to pedestrian (V2P) communication or vehicle to network (V2N) communication, etc.

[0112] The technical solution provided in this application can also be applied to future communication systems, such as the sixth generation (6G) mobile communication system, etc. This application does not limit this.

[0113] In an embodiment of the present application, the terminal device may also be referred to as user equipment (UE), access terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user device.

[0114] A terminal device may be a device that provides voice / data connectivity to a user, such as a handheld device or vehicle-mounted device with wireless connection capabilities. Currently, some examples of terminals include: mobile phones, tablet computers, computers with wireless transceiver capabilities (such as laptops, PDAs, etc.), mobile internet devices (MIDs), virtual reality (VR) devices, augmented reality (AR) devices, wireless terminals in industrial control, wireless terminals in self-driving, wireless terminals in remote medical, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, wireless terminals in smart homes (such as home appliances such as televisions, smart boxes, and game consoles), cellular phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDAs), and so on. Assistant (PDA), handheld devices with wireless communication capabilities, computing devices or other processing devices connected to a wireless modem, vehicle-mounted devices, wearable devices, terminal devices in 5G networks, or terminal devices in future-evolved public land mobile networks (PLMNs). The terminal device can also be a non-access point station (STA) in a wireless fidelity (WiFi) system.

[0115] Wearable devices, also known as wearable smart devices, are a general term for wearable devices that use wearable technology to intelligently design and develop wearable devices for daily wear, such as glasses, gloves, watches, clothing, and shoes. Wearable devices are portable devices that are worn directly on the body or integrated into the user's clothing or accessories. Wearable devices are not just hardware devices, but also achieve powerful functions through software support, data interaction, and cloud interaction. In a broad sense, wearable smart devices include those that are fully functional, large in size, and can achieve full or partial functions without relying on smartphones, such as smart watches or smart glasses, as well as those that only focus on a certain type of application function and need to be used in conjunction with other devices such as smartphones, such as various smart bracelets and smart jewelry for vital sign monitoring.

[0116] Furthermore, terminal devices can also be end devices in the Internet of Things (IoT) system. IoT is a crucial component of future information technology development. Its primary technical feature is connecting objects to the Internet through communications technology, thereby enabling intelligent networks that interconnect humans and machines, and objects and things. IoT technology, for example, utilizes narrowband (NB) technology to achieve massive connectivity, deep coverage, and power-saving terminals.

[0117] In an embodiment of the present application, the terminal device can also be a vehicle or a whole vehicle, which can achieve communication through the Internet of Vehicles, or it can be a component located in the vehicle (for example, placed in the vehicle or installed in the vehicle), that is, a vehicle-mounted terminal device, a vehicle-mounted module or an on-board unit (OBU).

[0118] In addition, terminal devices can also include sensors such as smart printers, train detectors, and gas stations. Their main functions include collecting data (part of the terminal devices), receiving control information and downlink data from network devices, and sending electromagnetic waves to transmit uplink data to network devices.

[0119] In the embodiment of the present application, the network device can be any device with wireless transceiver function. The device includes but is not limited to: an evolved Node B (eNB), a radio network controller (RNC), a Node B (NB), a base station controller (BSC), a base transceiver station (BTS), a home base station (e.g., a home evolved NodeB, or a home Node B, HNB), a baseband unit (BBU), an access point (AP) in a wireless fidelity (WiFi) system, a wireless relay node, a wireless backhaul node, a transmission point (TP) or a transmission and reception point (TRP), etc. It can also be a gNB in ​​a 5G, such as NR, system, or a transmission point (TRP or TP), one or a group of antenna panels (including multiple antenna panels) of a base station in a 5G system, or a network node constituting a gNB or a transmission point, such as a baseband unit (BBU) or a distributed unit (DU), or a base station in a next-generation communication 6G system, etc.

[0120] In some deployments, a gNB may include a centralized unit (CU) and a DU. The gNB may also include an active antenna unit (AAU). The CU implements some gNB functions, while the DU implements some gNB functions. For example, the CU is responsible for processing non-real-time protocols and services, implementing the functions of the radio resource control (RRC) and packet data convergence protocol (PDCP) layers. The DU is responsible for processing physical layer protocols and real-time services, implementing the functions of the radio link control (RLC), medium access control (MAC), and physical (PHY) layers. The AAU implements some physical layer processing functions, RF processing, and active antenna-related functions. Because RRC layer information ultimately becomes PHY layer information, or is converted from PHY layer information, in this architecture, higher-layer signaling, such as RRC layer signaling, can also be considered to be sent by the DU, or by both the DU and the CU. It is understood that a network device can be a device that includes one or more of a CU node, a DU node, or an AAU node. In addition, the CU may be classified as a network device in an access network (radio access network, RAN), or may be classified as a network device in a core network (core network, CN), which is not limited in this application.

[0121] Network equipment provides services for cells, and terminal devices communicate with cells through transmission resources allocated by the network equipment (for example, frequency domain resources, or spectrum resources). The cell can belong to a macro base station (for example, a macro eNB or macro gNB), or to a base station corresponding to a small cell. Small cells here can include: metro cells, micro cells, pico cells, femto cells, etc. These small cells have the characteristics of small coverage and low transmission power, and are suitable for providing high-speed data transmission services.

[0122] Figure 1 is a schematic diagram of a communication system 100 applicable to the communication method of an embodiment of the present application. As shown in Figure 1, the communication system 100 may include at least one network device, such as the network device 110 shown in Figure 1; the communication system 100 may also include at least one terminal device, such as the terminal device 120 shown in Figure 1. The network device 110 and the terminal device 120 can communicate via a wireless link. Each communication device, such as the network device 110 or the terminal device 120, can be configured with multiple antennas. For each communication device in the communication system, the configured multiple antennas may include at least one transmitting antenna for sending signals and at least one receiving antenna for receiving signals. Therefore, communication between the communication devices in the communication system and between the network device 110 and the terminal device 120 can be achieved through multi-antenna technology.

[0123] It should be understood that FIG1 is only a simplified schematic diagram for ease of understanding, and the communication system may further include other network devices or other terminal devices, which are not shown in FIG1 .

[0124] It should also be understood that the communication system 100 shown in Figure 1 is only an example of an application scenario of an embodiment of the present application. The present application can also be applied to communication between any two devices, for example, communication between terminal devices, and communication between network devices.

[0125] Figure 2 is a schematic diagram of the structure of the device provided in an embodiment of the present application. The device can be a terminal device or a network device, and the internal functional modules of the device include a pre-processing / post-processing module, a physical layer (PHY) processing module, an antenna, etc. The pre-processing / post-processing module can be located in any layer above the physical layer, for example, it can be located in the media access control (MAC) layer. For the transmitting end, the pre-processing / post-processing module can pre-process the data to be transmitted before channel coding, and for the receiving end, the pre-processing / post-processing module can post-process the received data after channel decoding. It can be understood that the schematic diagram of the device provided in Figure 2 is an example and does not constitute a limitation of the device of the present application. For the specific process of pre-processing and post-processing, please refer to method 200.

[0126] Secure transmission is the foundation of communication. Traditional secure transmission solutions are key-based and are categorized as either symmetric or asymmetric. Symmetric encryption involves sharing a key between two parties, while asymmetric encryption requires one party to pass a public key to the other. The sender uses the public key for encryption, while the receiver uses the private key for decryption. Both methods require key maintenance and management, which requires complex protocols. Vulnerabilities in these protocols are often vulnerable to attack, leading to key leaks and posing security risks. Furthermore, complex protocols incur additional communication overhead and latency, making them unsuitable for the highly dynamic nature of future communication networks.

[0127] In current wireless communication protocols, control signaling at the physical and MAC layers is not encrypted with a key. For example, some signaling occurs before key negotiation, making key-based secure communication impossible. Compared to traditional secure transmission schemes, physical layer secure transmission technology leverages the physical characteristics of wireless channels and employs signal processing, coding, and modulation techniques to achieve keyless secure transmission with minimal communication overhead.

[0128] Specifically, physical layer security is a keyless secure transmission scheme. It leverages signal processing at the physical layer to achieve channel superiority, making legitimate channels superior to illicit ones. This allows legitimate parties to communicate confidentially without sharing a key. Physical layer security technologies, for example, include channel coding, artificial noise, precoding, and waveform modulation. Physical layer security can be summarized as techniques that create an error channel at the illicit receiver.

[0129] Figure 3 illustrates a method for achieving secure physical layer transmission using artificial noise. As shown in Figure 3, a gNB (an example of a first device) needs to establish secure communication with UE#1 (an example of a second device) so that UE#2 (an example of a third device) and UE#3 (another example of a third device) cannot obtain information transmitted between the gNB and UE#1. Therefore, the channel between the gNB and UE#1 is a legitimate channel, while the channels between the gNB and UE#2 and between the gNB and UE#3 are both illegal channels. One implementation method is to interfere with UE#2 and UE#3 using artificial noise. Artificial noise is achieved by injecting a noise signal into the null space of the legitimate channel using multi-antenna precoding. This causes an error floor for the receivers on the illegal channel (referred to as illegal receivers, e.g., UE#2 and UE#3 in Figure 3) while preventing interference with the receivers on the legitimate channel (referred to as legitimate receivers, e.g., UE#1 in Figure 3). See Figure 4 for details.

[0130] Figure 4 is a schematic diagram of the bit error rate of UE#2 and UE#3. As shown in Figure 4, the z-axis represents the bit error rate (BER) Pe The X-axis and Y-axis represent two mutually perpendicular directions on the horizontal plane. For example, the X-axis represents the north-south direction, and the Y-axis represents the east-west direction. (X, Y) can be used to determine a position on the horizontal plane. The coordinate origin (0, 0) is the location of the legitimate receiver UE#1. The illegal receivers UE#2 and UE#3 can be located anywhere except the coordinate origin. Figure 4 shows that at most locations outside the coordinate origin, the bit error rate of UE#2 and UE#3 reaches 0.2, which creates an error floor, which increases the difficulty of decryption.

[0131] However, based solely on the aforementioned physical layer security transmission technology, the error floor of illegal receivers has limited room for improvement, making communication security unreliable. Therefore, improving the security performance of physical layer security transmission technology is crucial to wireless communication security.

[0132] In view of this, the present application provides a method and a communication device for wireless physical layer secure communication, which can improve the security performance of communication by establishing an association between bit error rate and security level.

[0133] Figure 5 is a flowchart of a method for wireless physical layer secure communication provided by an embodiment of the present application. The method 200 shown in Figure 5 can be applied to the systems or devices shown in Figures 1 to 3. The method 200 includes the following steps.

[0134] S210: The first device preprocesses the first data.

[0135] The first data is data to be sent, for example, the first data may be MAC layer data or a message to be sent, which may be control signaling.

[0136] The preprocessing is based on the bit error rate of the third device, and the preprocessing is used to make the communication between the first device and the second device reach a security level. In other words, there is a correspondence between the bit error rate and the security level, and the first device can perform preprocessing based on the correspondence, the bit error rate is the bit error rate of the third device, and the security level is the security level required for the communication between the first device and the second device. In other words, the preprocessing is achieved by a random extractor. It should be understood that the physical layer security transmission technology introduces random entropy on the illegal channel, so that the illegal receiving end generates a bit error rate platform. The random extractor can extract and diffuse the random entropy introduced by the physical layer security transmission technology on the illegal channel to obtain an equivalent key with an approximately uniform distribution. The equivalent key can enable each bit of the first data to obtain a provable security strength.

[0137] Specifically, the bit error rate of the third device can be understood as the bit error rate generated by the third device's analysis of the physical layer data.

[0138] Specifically, the security level of the communication between the first device and the second device can be understood as the computational complexity of the third device's brute force attack to obtain the first data. For example, if the security level of the communication between the first device and the second device is 128, it means that the number of brute force attacks required by the third device is 2 128 .

[0139] The first device is the transmitter of the first data, the second device is the receiver of the first data, and the channel between the first and second devices is a legitimate channel. The second device can also be called the legitimate receiver or intended receiver of the first data. The channel between the first and third devices is an illegitimate channel. In other words, the third device is the illegitimate receiver or non-intended receiver of the first data. It should be understood that the third device can be a real device or a hypothetical device.

[0140] Optionally, in one implementation scenario, the first device is network device #1, the second device is terminal device #1, and the third device may be terminal device #2 or network device #2. In another implementation scenario, the first device is terminal device #1, the second device is network device #1, and the third device may be network device #2 or terminal device #2. In another implementation scenario, the first device is terminal device #1, the second device is terminal device #2, and the third device may be terminal device #3. In yet another implementation scenario, the first device is network device #1, the second device is network device #2, and the third device may be network device #3. The above implementation scenarios are merely examples and do not constitute limitations of this application.

[0141] In the field of secure communication, the first device can be understood as Alice, the second device can be understood as Bob, and the third device can be understood as Eve.

[0142] S220: The first device sends second data to the second device, and correspondingly, the second device receives the second data.

[0143] The second data is data obtained after preprocessing the first data, and the preprocessing can be understood as encrypting the first data. It should be understood that the second data is physical layer data.

[0144] Optionally, the first device may transmit all bits of the second data using a physical layer security transmission technology, or may transmit a portion of the bits of the second data using a physical layer security transmission technology and transmit the remaining bits of the second data using a traditional physical layer transmission technology. The traditional physical layer transmission technology may be understood as a technology that does not cause an illegal receiving end to generate an error platform.

[0145] Based on the above solution, the transmitting end preprocesses the data before sending it. This preprocessing not only takes into account the bit error rate of the third device, but also ensures that the communication between the first and second devices reaches a secure level, thereby improving communication security. In contrast, existing technologies only consider the bit error rate and cannot prove that physical layer security transmission technology can guarantee security.

[0146] Specifically, in the existing physical layer security transmission technology, the bit error rate is taken into consideration so that the bit error rate of the third device can reach a certain level, but the bit error rate is not equivalent to security. For example, a bit error rate of 0.3 only means that 30 of 100 bits may be erroneous, but from a security perspective, these 30 bits can be recovered to 100 bits. In this application, through preprocessing, on the one hand, the bit error rate can be improved. For example, the bit error rate can be increased from 0.3 to 0.5. On the other hand, the improved bit error rate can be proved to reach a certain security level. For example, the security level is 128, which means that the number of brute force attacks required by the third device is 2^128, thereby improving communication security.

[0147] Furthermore, this solution allows for customized security levels, providing differentiated security services for different legitimate recipients. For example, IoT terminals, which have limited computing power and lower security requirements, can use this solution to customize a lower security level. This provides greater flexibility.

[0148] Optionally, the method further includes: S230, the second device post-processes the second data to obtain the first data.

[0149] Specifically, the second device can obtain the second data after performing physical layer security transmission technologies such as modulation and demodulation, channel decoding, etc. The second device can further post-process the second data to obtain the first data.

[0150] The post-processing can be understood as the inverse operation of the pre-processing, that is, decrypting the second data to obtain the first data.

[0151] As an implementation of S210, the first device preprocesses the first data based on the bit error rate of the third device, including: the first device groups the first data based on the bit error rate of the third device and generates a first random string.

[0152] The first device groups the first data based on the bit error rate of the third device, including: the first device determines the packet length of the first data based on the bit error rate and the security level, and divides the first data into units of the packet length. The first device generates a first random string based on the bit error rate of the third device, including: the first device determines the length r of the random string based on the bit error rate and the security level, and generates the first random string with the length r.

[0153] Specifically, there is a corresponding relationship between the bit error rate, security level, packet length b and random string length r. After determining the bit error rate and security level, the value of the random string length r and the packet length b can be given one and then the other can be calculated.

[0154] Optionally, the packet length is a channel coding packet size. In other words, when the first device groups the first data, the channel coding packet size may be used as the packet length of the first data. Channel coding also groups a bit stream, and the number of bits in each group after grouping is the channel coding packet size or the channel coding packet length.

[0155] Optionally, after determining the bit error rate, security level and packet length b, the length r of the random string can be an integer multiple of b, provided that the correspondence between the bit error rate, security level, packet length b and the length r of the random string is satisfied.

[0156] Optionally, in this implementation, the first device pre-processes the first data based on the bit error rate of the third device, and further includes: the first device performs operations on the grouped first data based on the first random string.

[0157] Specifically, the first device may be configured to generate a random string according to the first random string (r i ) and the second random string (S) to obtain the first bit string (k i ), and based on the first bit string (k i ) for the first data after grouping (m i ) to obtain the third data (c i ).

[0158] The second random string (S) can be public. It can be a known random number generated by both the sender and receiver using a synchronization mechanism. The synchronization mechanism can also be public. For example, the second random string can be determined by the sender and then sent to the receiver in a message. Alternatively, the second random string can be determined by the receiver and then sent to the sender in a message.

[0159] Specifically, the first device generates a random string according to the first random string (r i ) and the second random string (S) to obtain the first bit string (k i ) can be divided into the following two situations:

[0160] Case 1: The length r of the random string is greater than or equal to the packet length b.

[0161] In this case, the length of the second random string (S) can be the same as the length of the first random string (r i ) are of the same length, and according to the first random string (r i) and the second random string (S) to obtain the first bit string (k i ), the first random string (r i ) and the second random string (S), the first b bits of the result of the operation are taken as the first bit string. In other words, the length of the first bit string is equal to the packet length b.

[0162] Case 2: The length r of the random string is less than the packet length b.

[0163] In this case, the length of the second random string (S) can be the same as the packet length b, and the first random string (r i ) and the second random string (S) to obtain the first bit string (k i ), you can first add the first random string (r i ) so that the length of the first random string after supplementation is the same as the packet length b. The supplementation can be performed by concatenating (br) zeros to the first random string. The result of the operation on the supplemented first random string and the second random string (S) is the first bit string. In other words, the length of the first bit string is equal to the packet length b.

[0164] In this way, since the third data is based on the first bit string (k i ) for the first data after grouping (m i ), and the first bit string is obtained according to the first random string and the second random string. In this way, the first bit string can be understood as an equivalent key. The first bit string can be used to spread random entropy and improve the bit error rate of the third device.

[0165] It should be understood that the so-called improvement of the bit error rate of the third device means that the bit error rate of the third device used in preprocessing is a. When the illegal receiving end decodes the preprocessed second data, the resulting bit error rate will be greater than a.

[0166] Optionally, in this implementation, the second data includes a first random string (r i ) and third data.

[0167] Specifically, the first random string (r i ) and the third data. The so-called concatenation operation can be understood as concatenating the first random string and the third data in any order. For example, if the first random string r = 010 and the third data c = 110, the bit string obtained by the concatenation operation can be 010110 or 110010. The concatenation order can be consistent between the two, and can be pre-configured.

[0168] As an implementation of S230, the second device performs post-processing on the second data, including: the first device groups the second data to obtain a first random string and third data.

[0169] Specifically, grouping the second data can be understood as an inverse operation of the cascade operation. The second device knows the order of the cascade, so it can split the second data by grouping to obtain the first random string and the third data.

[0170] Optionally, in this implementation, the second device post-processes the second data, further comprising: the second device processes the second data after grouping according to the second random string.

[0171] Specifically, since the second data includes the first random string and the second device knows the second random string, the second device can also obtain the first bit string (k i ). Further, the second device can be based on the first bit string (k i ) performs operation on the third data to obtain the grouped first data. Further, the second device performs cascading on the grouped first data to obtain the first data.

[0172] Among them, according to the size relationship between the length r of the random string and the packet length b, the second device determines that the first bit string is also divided into two cases, namely, the case where the length r of the random string is greater than or equal to the packet length b, and the case where the length r of the random string is less than the packet length b. The specific process can refer to the above case 1 and case 2, which will not be repeated here.

[0173] The following examples illustrate the pre-processing and post-processing processes in detail.

[0174] As a first example of this implementation, the corresponding relationship between the bit error rate and the security level is:

[0175]

[0176] Among them, b represents the packet length, r represents the length of the random string, and p e represents the bit error rate of the third device, and λ represents the security level. For example, the value of λ can be 128 or 256.

[0177] According to formula (1), the packet length can be customized according to the security level and the bit error rate of the third device. e =0.2, the maximum value of b is 67.

[0178] Specifically, the preprocessing process is as follows:

[0179] 1. Input the message to be sent M∈{0,1} l , the length of the message M to be sent is l, which is divided according to the message group length b to obtain message groups, denoted as m i , i is an integer, and the value of i is 1, 2, ..., q.

[0180] 2. Generate q random bit strings, denoted as r i , r i ∈{0,1} r , the length is r, and the generation method can be any random number generator.

[0181] 3. Extraction operation H:k i =(S⊙r i )| b , where ⊙ represents the finite field GF(2 r ),| b Indicates taking the first b bits of the bit string. S∈{0,1} r , that is, S is a random bit string of length r.

[0182] 4. Calculation in, Represents the exclusive OR operation.

[0183] 5. Cascade operation: r1||c1||…||r q ||c q The "||" indicates a cascade operation. The order is not required and can be determined by both the sender and the receiver. The preprocessor outputs the cascaded bit string.

[0184] Accordingly, the post-processing process is as follows:

[0185] 1. After error correction code, group division is obtained i and c i , and S is known.

[0186] 2. Extractor operation:

[0187] 3. Calculation in, Represents the exclusive OR operation.

[0188] 4. Get the message M = m1||m2||…||m q .

[0189] In this example, the message M to be sent is an example of the first data, c i is an example of the third data, r i is an example of the first random string, S is an example of the second random string, k i An example of the first bit string, r i and c iThe concatenated data is an example of the second data. When sending the second data, since the length of the random string r is greater than the packet length b, the implementation is simple and the physical layer security transmission technology can be used to send the random string r. i , for the third data c i Traditional physical layer transmission technology can still be used.

[0190] As a second example of this implementation, the corresponding relationship between the bit error rate and the security level is:

[0191]

[0192] Among them, b, r, p e The meanings of λ and r are the same as those in formula (1). According to formula (2), the packet length can be customized based on the security level and the bit error rate of the third device. As can be seen from formula (2), there are two cases: r ≥ b and r < b.

[0193] Among them, for the case of r≥b, the preprocessing and postprocessing processes of the second example are basically similar to those of the first example. The preprocessing and postprocessing processes of the second example can refer to the first example and will not be repeated here.

[0194] The following describes the case where r<b in the second example.

[0195] Specifically, the preprocessing process is as follows:

[0196] 1. Input the message to be sent M∈{0,1} l , the length of the message M to be sent is l, which is divided according to the message group length b to obtain message groups, denoted as m i , i is an integer, and the value of i is 1, 2, ..., q.

[0197] 2. Generate q random bit strings, denoted as r i ∈{0,1} r , the length is r, and the generation method can be any random number generator.

[0198] 3. Extraction operation H:k i =S⊙(r i ||0 b-r ), where ⊙ represents the finite field GF(2 r ). S∈{0,1} b , that is, S is a random bit string of length b, || 0 b-r Indicates a series of (br) 0s.

[0199] 4. Calculation in, Represents the exclusive OR operation.

[0200] 5. Cascade operation: r1||1||…|| q || q ,“||” indicates a cascade operation. The order is not required, as long as both parties agree on it. ,Preprocessing outputs the cascaded bit string.

[0201] Accordingly, the post-processing process is as follows:

[0202] 1. After error correction code, group division is obtained i and c i , and S is known.

[0203] 2. Extractor operation: k i =S⊙(r i ||0 b-r ).

[0204] 3. Calculation in, Represents the exclusive OR operation.

[0205] 4. Get the message M = m1||m2||…||m q .

[0206] In this example, the message M to be sent is an example of the first data, c i is an example of the third data, r i and c i The concatenated data is an example of the second data. In addition, in the case of r < b, when sending the second data, since the length of the random string r is less than the packet length b, the rate loss is small and the code rate is higher. The physical layer security transmission technology can be used to send the random string r. i and the third data c i .

[0207] As an implementation of S210, the first device pre-processes the first data based on the bit error rate of the third device, including: the first device grouping the first data based on the bit error rate of the third device.

[0208] As an example of this implementation, the corresponding relationship between the bit error rate and the security level is:

[0209]

[0210] Among them, b, p eThe meanings of , λ are the same as those in formula (1). According to formula (3), the packet length can be customized according to the security level and the bit error rate of the third device. The specific pre-processing and post-processing methods can refer to the pre-processing and post-processing methods corresponding to formulas (1) and (2) above. The difference is that when using formula (3) for pre-processing, the first random string can be omitted. After pre-processing, only the third data c can be sent. i , that is, there is no need to send the first random string r i , and the third data c i Traditional physical layer transmission technology can still be used.

[0211] The following describes the pre-processing and post-processing processes with reference to FIG6 and FIG7.

[0212] FIG6 is a schematic diagram of the preprocessing process provided by the embodiment of the present application. As shown in FIG6, the first data after the first device is grouped is recorded as m i , the generated random string r i (An example of the first random string) The bit string k can be obtained by the extraction operation (operation H in Figure 6) i (An example of the first bit string), through k i To m i Perform the operation and record the obtained data as c i , that is, physical layer data, can be c i and r i Perform physical layer processing, including but not limited to channel coding, and then send it to the receiving end.

[0213] FIG7 is a schematic diagram of the post-processing process provided by the embodiment of the present application. As shown in FIG7, the data received by the receiving end is processed by the physical layer to obtain a random string r i and c i , wherein the physical layer processing includes but is not limited to channel decoding, in addition, the random string r i The bit string k can be obtained by the extraction operation (H operation in Figure 7) i , through k i C i Perform the operation to get the first data m after grouping i .

[0214] It should be understood that k in FIG6 and FIG7 i It can be understood as an equivalent key, through the random string r i , can extract and diffuse the random entropy introduced by physical layer security transmission technology on illegal channels, and obtain the equivalent key k with approximately uniform distribution i , through the equivalent key k i Preprocessing the grouped first data can ensure that each bit of the first data obtains provable security strength.

[0215] Figure 8 is a schematic diagram of the data transmission process of the present application. As shown in Figure 8, after pre-processing, the first data to be transmitted enters the channel coding process, waveform modulation process, and multiple input multiple output (MIMO) process in sequence, and is then transmitted to the receiving end through the wireless channel. The data received by the receiving end passes through the MIMO process, waveform modulation process, and channel coding process in sequence, and is then post-processed to obtain the first data to be transmitted. In the pre-processing process, the bit error rate of the third device is taken into account.

[0216] Optionally, in any of the above implementations, the method 200 further includes: the first device sending first information to the second device, or the first device receiving first information from the second device, wherein the first information is used to indicate a security level.

[0217] Specifically, the first information may be indication information. As an example, the indication information is an index of the security level, and there is a correspondence between the first information and the security level. As another example, the indication information is an index of the type of terminal device, or in other words, the indication information can be used to indicate the type of terminal device, and there is a correspondence between the type of terminal device and the communication security level. The type of terminal device may be a mobile phone, a wearable device, or an IoT terminal, etc. After the sender sends the first information, the receiver can obtain the security level through the first information. The sender may be the first device or the second device.

[0218] Optionally, in any of the above implementations, the method 200 further includes: the first device receiving second information from the second device, or the first device sending second information to the second device, wherein the second information is used to indicate a bit error rate.

[0219] Specifically, the first information may be indication information. As an example, the indication information is an index of a security level. There is a corresponding relationship between the first information and the security level. After the sender sends the first information, the receiver can obtain the security level through the first information. The sender may be the first device or the second device.

[0220] Optionally, in any of the above implementations, the method 200 further includes: the first device determines a bit error rate.

[0221] The bit error rate of the third device and the physical layer security transmission technology are related, and there can be a coupling relationship between the two. Both are affected by the third device's receiver model. One method is to estimate the bit error rate that the physical layer security transmission technology can introduce at the third device end, given the physical layer security transmission technology and assuming the third device's receiver model. Another method is to determine the physical layer security transmission technology based on the desired bit error rate of the third device and assuming the third device's receiver model.

[0222] As an example, the first device determines a bit error rate, including: the first device determines a controlled area, the second device is located in the controlled area, the third device is located outside the controlled area, the first device determines the best communication position outside the controlled area, the third device has the best receiving performance at the best communication position, and the first device determines the bit error rate based on the best communication position.

[0223] Specifically, taking the example of the first device being a network device, the second device being a terminal device, and the third device being a hypothetical eavesdropper, a controlled area (confined region) refers to an area where there are no eavesdroppers for a specific legitimate terminal. For example, FIG9 shows a schematic diagram of a controlled area. As shown in FIG9 , legitimate terminal #1 is in a room. Generally, there are no eavesdroppers in the room, so this room can be identified as a controlled area. For another example, a controlled area can also be a car, a factory, etc. These areas are closed and controlled, so it can be assumed that there are no eavesdroppers. For another example, if the terminal is carried by the user, it can be assumed that there are no eavesdroppers within a certain range, such as within 1m. The controlled area can refer to the range centered on the terminal. After the controlled area is determined, it is necessary to determine the optimal point of the eavesdropper, at which point the eavesdropper's performance will be the best. The determination method can be based on physical layer security transmission technology, network topology, and parameters of network equipment. For example, physical layer security transmission technology uses an artificial noise scheme. During the network planning phase, a rough estimate can be made of the point outside the controlled area where the noise energy is lowest, and therefore the signal-to-interference-and-noise ratio (SINR) is highest. This point is the optimal listening point for the listener. Once the optimal listening point is determined, the listener's bit error rate (BER) can be estimated. This BER estimation requires consideration of the listener's receiver model. In the security field, it is often assumed that the listener's receiving capability exceeds that of legitimate terminals. Therefore, the estimation process generally assumes that the listener uses an optimized receiver algorithm and has sufficient computing power.

[0224] It should be understood that the above takes the example of the first device determining the bit error rate of the third device, and the present application is not limited to this. The bit error rate of the third device can also be determined by the receiving device (i.e., the second device) and sent to the sending device (i.e., the first device). The determination method of the second device can refer to the determination method of the first device and will not be repeated here.

[0225] It should also be understood that in actual applications, it is extremely difficult to obtain the true bit error rate of the third device. Therefore, determining the bit error rate of the third device can also be understood as the first device or the second device estimating the bit error rate of the third device.

[0226] The wireless physical layer secure communication method 200 provided in this application is described in detail below with reference to FIG. 10 and FIG. 11 .

[0227] Figure 10 illustrates a method 300 for wireless physical layer secure communication provided herein. Method 300 is a specific implementation of method 200. In method 300, the first device is network device #A, and the second device is terminal device #A. As shown in Figure 10, method 300 includes the following steps.

[0228] S301, terminal device #A sends wireless frame #1 to network device #A.

[0229] Wireless frame #1 carries a first parameter, which can be understood as a parameter of a pre-processing and post-processing module. The first parameter may include a security level requirement and a bit error rate of a third device. Based on the first parameter, network device #A can pre-process data #1 (an example of first data) to be transmitted that has security requirements. Optionally, data #1 is also physical layer data.

[0230] Optionally, if network device #A cannot meet the security level requirement of terminal device #A, network device #A may send a security level to terminal device #A, which may be lower than the security level requirement of terminal device #A. Network device #A may perform pre-processing based on the sent security level, and terminal device #A may perform post-processing based on the received security level.

[0231] Terminal device #A receives and demodulates wireless frame #1 and can obtain the first parameter.

[0232] S302, network device #A sends wireless frame #2, and wireless frame #2 carries a random vector (an example of a second random string).

[0233] S302 and S301 may be executed simultaneously, that is, the random vector and the first parameter may be carried in the same radio frame.

[0234] Optionally, S302 is not executed, the random vector is defined in the protocol, and the sending and receiving ends do not need to be synchronized through signaling interaction.

[0235] S303, network device #A pre-processes data #1 according to the first parameter to obtain data #2 (an example of second data).

[0236] S304, network device #A sends wireless frame #3 to terminal device #A.

[0237] Radio frame #3 is a signal modulated with the pre-processed data #1, that is, radio frame #3 includes data #2.

[0238] S305: Terminal device #A demodulates wireless frame #3 to obtain data #2. Terminal device #A performs post-processing on data #2 to obtain data #1, where the post-processing is performed according to the first parameter.

[0239] FIG11 illustrates a method 400 for wireless physical layer secure communication provided herein. This method 400 is a specific implementation of method 200. In method 400, the first device is network device #B, and the second device is terminal device #B. As shown in FIG11 , method 400 includes the following steps.

[0240] S401, network device #B sends wireless frame #1 to terminal device #B.

[0241] Wireless frame #1 carries a first parameter, which can be understood as a parameter of a pre-processing and post-processing module. The first parameter may include a security level and a bit error rate of a third device. It should be understood that, unlike method 300, network devices can uniformly configure data to be transmitted with security requirements, thereby allowing network device #B to indicate the pre-processing security level to terminal device #B.

[0242] Terminal device #B receives and demodulates wireless frame #1 and can obtain the first parameter.

[0243] S402, network device #B sends wireless frame #2, wireless frame #2 carries a random vector (an example of a second random string).

[0244] S402 and S401 may be executed simultaneously, that is, the random vector and the first parameter may be carried in the same radio frame.

[0245] Optionally, S402 is not executed, the random vector is defined in the protocol, and the transmitting and receiving ends do not need to be synchronized through signaling interaction.

[0246] S403: Network device #B pre-processes data #3 (an example of first data) according to the first parameter to obtain data #4 (an example of second data).

[0247] S404, network device #B sends wireless frame #3 to terminal device #B.

[0248] Radio frame #3 is a signal modulated with pre-processed data #3, that is, radio frame #2 includes data #4.

[0249] S405: Terminal device #B demodulates wireless frame #3 to obtain data #4. Terminal device #B performs post-processing on data #4 to obtain data #3, where the post-processing is performed according to the first parameter.

[0250] The dotted steps in the above flowchart are optional steps, and the order of each step is determined according to the internal logic of the method. The serial numbers shown in the above flowchart are only examples and do not limit the order of the steps of this application.

[0251] It should be understood that the methods provided in the embodiments of the present application can be used alone or in combination, and the present application does not limit this. The various implementation methods provided in the embodiments of the present application can be used alone or in combination, and the present application does not limit this. The various examples provided in the embodiments of the present application can be used alone or in combination, and the present application does not limit this.

[0252] It should also be understood that the term "and / or" in this application simply describes an association relationship between associated objects, indicating that three possible relationships exist. For example, "A and / or B" can represent: A alone, A and B together, or B alone. A and B can be singular or plural. Furthermore, the character " / " in this document generally indicates an "or" relationship between the associated objects, but it may also indicate an "and / or" relationship. For specific understanding, please refer to the context.

[0253] In the embodiments of the present application, unless otherwise specified, a plurality refers to two or more.

[0254] In the embodiments of the present application, "at least one item" refers to one item or multiple items, "at least two items" and "multiple items" refer to two items or more. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or multiple items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0255] It should be noted that the execution entities shown in Figures 5, 10, and 11 are only examples. The execution entity can also be a chip, chip system, or processor that supports the execution entity to implement the method shown in Figures 5, 10, and 11. This application does not impose any restrictions on this.

[0256] The method embodiment of the present application is described above in conjunction with the accompanying drawings. The device embodiment of the present application is described below. It can be understood that the description of the method embodiment and the description of the device embodiment can correspond to each other. Therefore, for parts not described, reference can be made to the previous method embodiment.

[0257] It can be understood that in the above-mentioned method embodiments, the methods and operations implemented by the first device can also be implemented by components in the first device (such as chips or circuits), and the methods and operations implemented by the second device can also be implemented by components in the second device (such as chips or circuits).

[0258] The above mainly introduces the solution provided by the embodiment of the present application from the perspective of interaction between various devices. It is understandable that each device, such as a transmitting end device or a receiving end device, includes a hardware structure and / or software module corresponding to the execution of each function in order to implement the above functions. Those skilled in the art should be aware that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in a hardware or computer software driven hardware manner depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0259] In the embodiment of the present application, the functional modules of the transmitting device or the receiving device can be divided according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical functional division. There may be other division methods in actual implementation. The following is an example of dividing each functional module according to each function.

[0260] Figure 12 is a schematic block diagram of a communication device provided in an embodiment of the present application. The communication device 500 shown in Figure 12 includes a transceiver unit 510 and a processing unit 520. The transceiver unit 510 can communicate with the outside world, and the processing unit 520 is used to process data. The transceiver unit 510 can also be referred to as a communication interface or a communication unit.

[0261] Optionally, the transceiver unit 510 may include a sending unit and a receiving unit. The sending unit is configured to perform the sending operation in the above method embodiment. The receiving unit is configured to perform the receiving operation in the above method embodiment.

[0262] It should be noted that the communication device 500 may include a sending unit but not a receiving unit. Alternatively, the communication device 500 may include a receiving unit but not a sending unit. The specific implementation depends on whether the above solution executed by the communication device 500 includes a sending action and a receiving action.

[0263] Optionally, the communication device 500 may further include a storage unit, which may be used to store instructions and / or data, and the processing unit 520 may read the instructions and / or data in the storage unit.

[0264] In one design, the communication device 500 may be used to perform the actions performed by the first device in the above method embodiment.

[0265] Optionally, the communication device 500 can perform the actions performed by the first device in the above method embodiment. The first device can be a terminal device or a network device, or a chip or circuit in the terminal device or network device, or a logic module or software that can implement all or part of the functions of the terminal device or network device, which is not limited in this application.

[0266] Optionally, the communication device 500 may be a first device, the transceiver unit 510 is used to perform the receiving or sending operations of the first device in the above method embodiment, and the processing unit 520 is used to perform the internal processing operations of the first device in the above method embodiment.

[0267] Alternatively, the communication device 500 may be a device comprising the first device. Alternatively, the communication device 500 may be a component configured within the first device, such as a chip within the first device. In this case, the transceiver unit 510 may be an interface circuit, a pin, etc. Specifically, the interface circuit may include an input circuit and an output circuit, and the processing unit 520 may include a processing circuit.

[0268] In one possible implementation, the processing unit 520 is used to: pre-process the first data based on the bit error rate of the third device, and the pre-processing is used to ensure that the communication between the first device and the second device reaches a security level; the transceiver unit 510 is used to send second data to the second device, and the second data is data obtained after pre-processing the first data.

[0269] In a possible implementation, the processing unit 520 is specifically configured to: group the first data based on a bit error rate of the third device; or group the first data based on the bit error rate of the third device and generate a first random string.

[0270] In a possible implementation, the processing unit 520 is specifically configured to: determine a packet length of the first data according to a bit error rate and a security level; and divide the first data using the packet length as a unit.

[0271] In a possible implementation, the processing unit 520 is further configured to perform an operation on the grouped first data based on the first random string.

[0272] In a possible implementation, the processing unit 520 is specifically configured to: obtain a first bit string according to the first random string and the second random string; and perform an operation on the grouped first data based on the first bit string.

[0273] In a possible implementation, the length of the first random string is greater than or equal to the packet length, and the length of the second random vector is equal to the length of the first random string.

[0274] In a possible implementation, the length of the first random string is less than the packet length, and the length of the second random vector is equal to the packet length.

[0275] In a possible implementation, the transceiver unit 510 is further configured to send a second random string to the second device.

[0276] In a possible implementation, the packet length is the packet size of the channel coding.

[0277] In a possible implementation, the transceiver unit 510 is further configured to: send first information to the second device; or receive first information from the second device; wherein the first information is used to indicate a security level.

[0278] In a possible implementation manner, the first information is indication information.

[0279] In a possible implementation, the indication information is used to indicate the type of the terminal device, and there is a corresponding relationship between the type of the terminal device and the communication security level.

[0280] In a possible implementation, the transceiver unit 510 is further configured to: receive second information from the second device; or send second information to the second device; wherein the second information is used to indicate a bit error rate.

[0281] In a possible implementation manner, the second information is indication information.

[0282] In a possible implementation, the processing unit 520 is further configured to determine a bit error rate.

[0283] In one possible implementation, the processing unit 520 is specifically used to: determine a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; determine the best communication position outside the controlled area, the third device has the best receiving performance at the best communication position; determine the bit error rate according to the best communication position.

[0284] In one design, the communication device 500 may be used to perform the actions performed by the second device in the above method embodiment.

[0285] Optionally, the communication device 500 can perform the actions performed by the second device in the above method embodiment. The second device can be a terminal device or a network device, or a chip or circuit in the terminal device or network device, or a logic module or software that can implement all or part of the functions of the terminal device or network device, which is not limited in this application.

[0286] Optionally, the communication device 500 may be a second device, the transceiver unit 510 is used to perform the receiving or sending operations of the second device in the above method embodiment, and the processing unit 520 is used to perform the internal processing operations of the second device in the above method embodiment.

[0287] Alternatively, the communication device 500 may be a device that includes a second device. Alternatively, the communication device 500 may be a component configured in the second device, such as a chip in the second device. In this case, the transceiver unit 510 may be an interface circuit, a pin, etc. Specifically, the interface circuit may include an input circuit and an output circuit, and the processing unit 520 may include a processing circuit.

[0288] In one possible implementation, the transceiver unit 510 is used to: receive second data from the first device; the processing unit 520 is used to: post-process the second data to obtain first data, the second data is data obtained after pre-processing the first data based on the bit error rate of the third device, and the pre-processing is used to ensure that the communication between the first device and the second device reaches a security level.

[0289] In a possible implementation, the processing unit 520 is specifically configured to: divide the second data into groups; and process the divided second data according to the second random string.

[0290] In a possible implementation, the second data includes a first random string, and the processing unit 520 is further configured to: obtain a first bit string according to the first random string and the second random string; and perform operations on the grouped second data based on the first bit string.

[0291] In a possible implementation, the transceiver unit 510 is further configured to receive a second random string from the first device.

[0292] In a possible implementation, the transceiver unit 510 is further configured to: receive first information from the first device; or send first information to the first device; wherein the first information is used to indicate a security level.

[0293] In a possible implementation manner, the first information is indication information.

[0294] In a possible implementation, the indication information is used to indicate the type of the terminal device, and there is a corresponding relationship between the type of the terminal device and the communication security level.

[0295] In a possible implementation, the transceiver unit 510 is further configured to: receive second information from the first device; or send second information to the first device, where the second information is used to indicate a bit error rate.

[0296] In a possible implementation manner, the second information is indication information.

[0297] In a possible implementation, the processing unit 520 is further configured to determine a bit error rate.

[0298] In one possible implementation, the processing unit 520 is specifically used to: determine a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; determine the best communication position outside the controlled area, the third device has the best receiving performance at the best communication position; determine the bit error rate according to the best communication position.

[0299] As shown in Figure 13, an embodiment of the present application further provides a communication device 600. The communication device 600 includes a processor 610, which is coupled to a memory 620. The memory 620 is used to store computer programs or instructions and / or data. The processor 610 is used to execute the computer programs or instructions and / or data stored in the memory 620, so that the method in the above method embodiment is executed.

[0300] Optionally, the communication device 600 includes one or more processors 610.

[0301] Optionally, as shown in FIG13 , the communication device 600 may further include a memory 620 .

[0302] Optionally, the communication device 600 may include one or more memories 620 .

[0303] Optionally, the memory 620 may be integrated with the processor 610 or provided separately.

[0304] Optionally, as shown in Figure 13, the communication device 600 may further include a transceiver 630 and / or a communication interface, where the transceiver 630 and / or the communication interface are used to receive and / or send signals. For example, the processor 610 is used to control the transceiver 630 and / or the communication interface to receive and / or send signals.

[0305] Alternatively, the device in transceiver 630 that implements the receiving function may be considered a receiving module, and the device in transceiver 630 that implements the transmitting function may be considered a transmitting module. That is, transceiver 630 includes a receiver and a transmitter. A transceiver may also be sometimes referred to as a transceiver, a transceiver module, or a transceiver circuit. A receiver may also be sometimes referred to as a receiver, a receiving module, or a receiving circuit. A transmitter may also be sometimes referred to as a transmitter, a transmitter, a transmitting module, or a transmitting circuit.

[0306] As a solution, the communication device 600 is used to implement the operations performed by the first device in the above method embodiment. For example, the processor 610 is used to implement the operations performed by the first device in the above method embodiment (e.g., the operation in S210), and the transceiver 630 is used to implement the receiving or sending operations performed by the first device in the above method embodiment (e.g., the operation in S220).

[0307] As another solution, the communication device 600 is used to implement the operations performed by the second device in the above method embodiment. For example, the processor 610 is used to implement the operations performed internally by the second device in the above method embodiment (e.g., the operation in S230), and the transceiver 630 is used to implement the receiving or sending operations performed by the second device in the above method embodiment (e.g., the operation in S220).

[0308] As shown in FIG14 , the embodiment of the present application further provides a communication device 700 . The communication device 700 includes a logic circuit 710 and an input / output interface 720 .

[0309] Logic circuit 710 may be a processing circuit within communication device 700. Logic circuit 710 may be coupled to a storage unit and invoke instructions within the storage unit, enabling communication device 700 to implement the methods and functions of various embodiments of the present application. Input / output interface 720 may be an input / output circuit within communication device 700, outputting information processed by communication device 700 or inputting data or signaling information to be processed into communication device 700 for processing.

[0310] As a solution, the communication device 700 is used to implement the operations performed by the data processing device in each of the above method embodiments.

[0311] For example, the logic circuit 710 is used to implement the processing-related operations performed by the first device in the above method embodiment, such as S210. The input / output interface 720 is used to implement the sending and / or receiving-related operations performed by the first device in the above method embodiment, such as S220. The operations performed by the logic circuit 710 can be found in the above description of the processing unit 520, and the operations performed by the input / output interface 720 can be found in the above description of the transceiver unit 510, and will not be repeated here.

[0312] As another solution, the communication device 700 is used to implement the operations performed by the data arrangement device in each of the above method embodiments.

[0313] For example, the logic circuit 710 is used to implement the processing-related operations performed by the second device in the above method embodiments, such as the processing-related operations performed by the second device in the method embodiments, such as S230. The input / output interface 720 is used to implement the sending and / or receiving-related operations performed by the second device in the above method embodiments, such as S220. For details on the operations performed by the logic circuit 710, please refer to the above description of the processing unit 720. For details on the operations performed by the logic circuit 710, please refer to the above description of the processing unit 520. For details on the operations performed by the input / output interface 720, please refer to the above description of the transceiver unit 510, and will not be repeated here.

[0314] It should be understood that the above-mentioned communication device may be one or more chips. For example, the communication device may be a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a system on chip (SoC), a central processor unit (CPU), a network processor (NP), a digital signal processor (DSP), a microcontroller unit (MCU), a programmable logic device (PLD), or other integrated chips.

[0315] During implementation, each step of the above method can be completed by an integrated logic circuit of the hardware in the processor or by instructions in the form of software. The steps of the method disclosed in conjunction with the embodiments of the present application can be directly embodied as being executed by a hardware processor, or can be executed by a combination of hardware and software modules in the processor. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in conjunction with its hardware. To avoid repetition, it will not be described in detail here.

[0316] It should be noted that the processor in the embodiments of the present application can be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method embodiment can be completed by an integrated logic circuit of the hardware in the processor or by instructions in the form of software. The above processor can be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component. The various methods, steps, and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in the embodiments of the present application can be directly embodied as being executed by a hardware decoding processor, or can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium mature in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, or electrically erasable programmable memory, registers, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0317] It is understood that the memory in the embodiments of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchronous link DRAM (SLDRAM), and direct RAM bus RAM (DR RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0318] In accordance with the methods provided in the embodiments of the present application, the present application further provides a computer-readable medium storing program code. When the program code is executed on a computer, the computer is enabled to perform the methods described in the method embodiments. For example, when the computer program is executed by a computer, the computer is enabled to implement the method performed by the first device or the method performed by the second device in the above method embodiments.

[0319] An embodiment of the present application also provides a computer program product comprising instructions, which, when executed by a computer, enables the computer to implement the method executed by the first device or the method executed by the second device in the above method embodiment.

[0320] An embodiment of the present application also provides a communication system, including a first device and a second device.

[0321] The explanation of the relevant contents and beneficial effects of any of the communication devices provided above can be referred to the corresponding method embodiments provided above, and will not be repeated here.

[0322] In the above embodiments, all or part of the embodiments may be implemented by software, hardware, firmware, or any combination thereof. When implemented using software, all or part of the embodiments may be implemented in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present application are generated. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via a wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) method. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated therein. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a high-density digital video disc (DVD)), or a semiconductor medium (eg, a solid state drive (SSD)).

[0323] The data arrangement device and data processing device in each of the above-mentioned device embodiments correspond to the data arrangement device and data processing device in the method embodiments, and the corresponding modules or units perform the corresponding steps. For example, the communication unit (transceiver) performs the receiving or sending steps in the method embodiments, and other steps besides sending and receiving can be performed by the processing unit (processor). The functions of the specific units can be referred to in the corresponding method embodiments. There can be one or more processors.

[0324] As used in this specification, the terms "component," "module," "system," and the like are used to refer to computer-related entities, hardware, firmware, a combination of hardware and software, software, or software in execution. For example, a component can be, but is not limited to, a process running on a processor, a processor, an object, an executable file, an execution thread, a program, and / or a computer. By way of illustration, both an application running on a computing device and a computing device can be a component. One or more components can reside in a process and / or an execution thread, and a component can be located on one computer and / or distributed between two or more computers. In addition, these components can be executed from various computer-readable media having various data structures stored thereon. Components can communicate, for example, via local and / or remote processes based on signals having one or more data packets (e.g., data from two components interacting with another component across a local system, a distributed system, and / or a network, such as the Internet interacting with other systems via signals).

[0325] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0326] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0327] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0328] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0329] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0330] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0331] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A method for wireless physical layer secure communication, characterized in that: include: The first device pre-processes the first data based on a bit error rate of the third device, wherein the pre-processing is used to ensure that the communication between the first device and the second device reaches a security level; The first device sends second data to the second device, where the second data is data obtained after performing the preprocessing on the first data.

2. The method according to claim 1, characterized in that The first device pre-processes the first data based on the bit error rate of the third device, including: The first device groups the first data based on a bit error rate of a third device; or The first device groups the first data based on a bit error rate of a third device and generates a first random string.

3. The method according to claim 2, characterized in that The first device groups the first data based on a bit error rate of a third device, including: The first device determines the packet length of the first data according to the bit error rate and the security level; The first device divides the first data using the packet length as a unit.

4. The method according to claim 3, characterized in that The method further comprises: The first device performs an operation on the grouped first data based on the first random string.

5. The method according to claim 4, characterized in that The first device performs an operation on the grouped first data based on the first random string, including: The first device obtains a first bit string based on the first random string and the second random string; The first device performs an operation on the grouped first data based on a first bit string.

6. The method according to claim 5, characterized in that The length of the first random string is greater than or equal to the packet length, and the length of the second random vector is equal to the length of the first random string.

7. The method according to claim 5, characterized in that The length of the first random string is less than the packet length, and the length of the second random vector is equal to the packet length.

8. The method according to any one of claims 5 to 7, characterized in that The method further comprises: The first device sends the second random string to the second device.

9. The method according to any one of claims 3 to 8, characterized in that The packet length is the packet size of channel coding.

10. The method according to any one of claims 1 to 9, characterized in that The method further comprises: The first device sends first information to the second device; or The first device receives first information from the second device; The first information is used to indicate the security level.

11. The method according to claim 10, characterized in that The first information is indication information, and the indication information is used to indicate the type of the terminal device. There is a corresponding relationship between the type of the terminal device and the communication security level.

12. The method according to any one of claims 1 to 11, characterized in that The method further comprises: The first device receives second information from the second device; or The first device sends second information to the second device; The second information is used to indicate the bit error rate.

13. The method according to any one of claims 1 to 12, characterized in that The method further comprises: The first device determines the bit error rate.

14. The method according to claim 13, characterized in that The first device determines the bit error rate, including: The first device determines a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; The first device determines an optimal communication position outside the controlled area, and the third device has the best reception performance at the optimal communication position; The first device determines the bit error rate according to the optimal communication position.

15. A method for wireless physical layer secure communication, characterized in that: include: The second device receives second data from the first device; The second device post-processes the second data to obtain first data, where the second data is obtained after pre-processing the first data based on the bit error rate of the third device, and the pre-processing is used to ensure that the communication between the first device and the second device reaches a security level.

16. The method according to claim 15, characterized in that The second device performs post-processing on the second data, including: The second device divides the second data into groups; The second device processes the second data after grouping according to the second random string.

17. The method according to claim 16, characterized in that The second data includes a first random string, and the second device processes the second data after grouping according to the second random string, including: The second device obtains a first bit string according to the first random string and the second random string; The second device performs an operation on the second data divided into groups based on the first bit string.

18. The method according to claim 16 or 17, characterized in that The method further comprises: The second device receives the second random string from the first device.

19. The method according to any one of claims 15 to 18, characterized in that The method further comprises: The second device receives the first information from the first device; or The second device sends first information to the first device; The first information is used to indicate the security level.

20. The method according to claim 19, characterized in that The first information is indication information, and the indication information is used to indicate the type of the terminal device. There is a corresponding relationship between the type of the terminal device and the communication security level.

21. The method according to any one of claims 15 to 20, characterized in that The method further comprises: The second device receives second information from the first device; or, The second device sends second information to the first device; The second information is used to indicate the bit error rate.

22. The method according to any one of claims 15 to 21, characterized in that The method further comprises: The second device determines the bit error rate.

23. The method according to claim 22, characterized in that The second device determines the bit error rate, including: The second device determines a controlled area, the second device is located in the controlled area, and the third device is located outside the controlled area; The second device determines an optimal communication position outside the controlled area, and the third device has the best reception performance at the optimal communication position; The second device determines the bit error rate according to the optimal communication position.

24. A communication device, characterized in that: The apparatus comprises means for performing the steps of the method according to any one of claims 1 to 14, or the apparatus comprises means for performing the steps of the method according to any one of claims 15 to 23.

25. A communication device, characterized in that: The apparatus includes a processor coupled to a memory, wherein the memory stores instructions. When the instructions are executed by the processor, the processor executes the method according to any one of claims 1 to 14 or the method according to any one of claims 15 to 23.

26. A communication device, characterized in that: The device includes a logic circuit, which is configured to be coupled to an input / output interface and transmit data through the input / output interface to execute the method according to any one of claims 1 to 14 or the method according to any one of claims 15 to 23.

27. A communication system, characterized in that: The system includes a first device and a third device, the first device being configured to execute the method according to any one of claims 1 to 14, and the third device being configured to execute the method according to any one of claims 15 to 23.

28. A computer-readable storage medium, characterized in that The computer-readable storage medium is used to store a computer program, and when the computer program is run on a computer, the computer is caused to execute the method according to any one of claims 1 to 14, or execute the method according to any one of claims 15 to 23.

29. A computer program product, characterized in that The computer program product comprises: a computer program code, and when the computer program code is executed, the method according to any one of claims 1 to 14 is realized, or the method according to any one of claims 15 to 23 is performed.

Images