Data transmission method and device

Abstract

The invention provides a data transmission method and device, which are applied to the fields of environmental Internet of Things (Ambient IoT) and the like, and the method comprises the following steps: receiving at least one of first information and second information; the second information comprises a selection signaling or a paging signaling; determining third information according to at least one of the first information and the second information; sending the third information and uplink data; the third information is used for authenticating the uplink data. Through the above process, when the terminal device sends the uplink data, the third information used for authenticating the uplink data is carried, so that the network side can authenticate the uplink data according to the third information, and the security of data transmission can be improved through the method.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a data transmission method and device. Background Art

[0002] The Internet of Things (IoT) technology has been introduced into the wireless communication system. Tags in the IoT can be used as terminal devices, base stations can be used as readers, and tags can communicate with base stations. In scenarios such as tag inventory, the reader can page the tag through paging signaling. After the tag receives the paging signaling, the reader indicates an inventory cycle through query signaling, and the tag initiates random access within the inventory cycle. After the tag successfully accesses the random access, it can send data to the reader.

[0003] If an illegal attacker obtains the data sent by the tag and sends the data to the base station, it may cause a collision with the data sent by other tags, causing the data of other tags to fail to send; or, if the attacker sends the data to other base stations, it will cause the tags to be incorrectly inventoried in the area where the other base stations are located. Therefore, how to improve the security of data transmission between tags and readers is an urgent problem to be solved. Summary of the invention

[0004] The present application provides a data transmission method and device to improve the security of data transmission.

[0005] In the first aspect, the present application provides a data transmission method, which is applicable to scenarios such as environmental Internet of Things. The execution subject of the method is a terminal device or a module or chip in the terminal device, and the terminal device is used as an example for description. In the method, at least one of the first information and the second information is received; the second information is included in the selection signaling or the paging signaling; the third information is determined according to at least one of the first information and the second information; the third information and uplink data are sent; the third information is used to authenticate the uplink data.

[0006] Through the above process, when sending uplink data, the terminal device carries the third information for authenticating the uplink data, so that the network side can authenticate the uplink data according to the third information. Therefore, through this method, the security of data transmission can be improved.

[0007] In a possible implementation manner, the first information is a first random number, or the first information is an identifier of a cell of the access network device, or the first information is determined according to the identifier of the cell.

[0008] In the above method, since the first information is a random number or is determined according to the cell identifier, the third information determined by the terminal devices in different cells based on the first information is different. In this way, even if an illegal device obtains uplink data, the uplink data reported by the illegal device in other cells or to other access network devices will be considered as invalid data, thereby improving the security of data transmission.

[0009] In a possible implementation manner, the first information is configured according to the granularity of a cell, and the first information corresponding to different cells is different.

[0010] In the above method, if the first information corresponding to the same cell is different, then the third information determined by the terminal devices in different cells of the access network device based on the first information is different. In this way, even if the illegal device reports the uplink data of the terminal device again in other cells or to other access network devices, it will be regarded as invalid data, thereby improving the security of data transmission.

[0011] In a possible implementation manner, the second information is a second random number.

[0012] In the above method, the second information is a second random number, so the second information obtained by different access network devices is different, and the third information determined by the terminal devices under different access network devices based on the second information is different. In this way, even if the illegal device reports the uplink data of the terminal device to other access network devices again, it will be regarded as invalid data, thereby improving the security of data transmission.

[0013] In a possible implementation manner, the second information is valid within an inventory service process corresponding to the uplink data.

[0014] In the above method, the second information in different inventory business processes is different, which can further improve the security of data transmission.

[0015] In a possible implementation manner, the second information is configured according to the granularity of the access network device, and different access network devices correspond to different second information.

[0016] In the above method, the core network device configures different second information for different access network devices. Then the terminal devices under different access network devices determine different third information based on the second information. In this way, even if an illegal device reports the uplink data of the terminal device to other access network devices again, it will be regarded as invalid data, thereby improving the security of data transmission.

[0017] In a possible implementation manner, the first information is included in selection signaling or query signaling or query repetition signaling.

[0018] In a possible implementation, the terminal device is an environmental Internet of Things terminal.

[0019] In the second aspect, the present application provides a data transmission method, which is applicable to scenarios such as environmental Internet of Things. The execution subject of the method is a core network device or a module or chip in the core network device, and the core network device is used as an example for description. In the method, third information and uplink data are received from a terminal device; at least one of the first information and the second information is received from the terminal device or the access network device; the first information is configured for the access network device; the second information is configured for the core network device; the fourth information is determined based on at least one of the first information and the second information, and if the fourth information matches the third information, the uplink data is saved.

[0020] In a possible implementation, the method further includes: if the fourth information does not match the third information, discarding the uplink data, and / or sending fifth information to the terminal device, the fifth information indicating that the uplink data is invalid.

[0021] In a possible implementation, before saving the uplink data, the method further includes: determining the first time the third information and the uplink data are received; or determining the first time the third information and the uplink data are received within a preset time period.

[0022] In a possible implementation manner, the first information is a first random number, or the first information is an identifier of a cell of the access network device, or the first information is determined according to the identifier of the cell.

[0023] In a possible implementation, the first information is valid in the cell where the terminal device is located.

[0024] In a possible implementation manner, the second information is a second random number.

[0025] In a possible implementation manner, the second information is valid within an inventory service process corresponding to the uplink data.

[0026] In a possible implementation manner, the second information is configured according to the granularity of the access network device, and different access network devices correspond to different second information.

[0027] In a possible implementation, the terminal device is an environmental Internet of Things terminal.

[0028] On the third aspect, the present application provides a data transmission method, which is applicable to scenarios such as environmental Internet of Things. The executor of the method is an access network device or a module or chip in the access network device, and the access network device is used as an example for description here. In this method, the terminal device sends at least one of the first information and the second information; the first information is configured by the access network device; the second information is configured by the core network device; the third information and uplink data from the terminal device are received, and the third information and the uplink data are sent to the core network device; the third information is determined based on at least one of the first information and the second information, and the third information is used to authenticate the uplink data.

[0029] In a possible implementation, before sending the first signaling to the terminal device, the method further includes: receiving the second information from a core network device.

[0030] In a possible implementation manner, the method further includes: sending at least one of the first information and the second information to the core network device.

[0031] In a fourth aspect, the present application provides a data transmission method, which is applicable to scenarios such as environmental Internet of Things. The execution subject of the method is a terminal device or a module or chip in the terminal device, and the terminal device is used as an example for description. In the method, a first signaling from the access network device is received; the first signaling is a query duplicate signaling or a contention resolution message; a third information and uplink data are sent to the access network device; the third information is used to authenticate the uplink data, the third information is determined according to the first information, and the first information is determined according to the first signaling.

[0032] Through the above process, when sending uplink data, the terminal device carries the third information for authenticating the uplink data, so that the network side can authenticate the uplink data according to the third information. Therefore, through this method, the security of data transmission can be improved.

[0033] In one possible implementation, the first information is determined based on the first signaling, including: the first information is the number of transmissions of the first signaling; or, the first information is the time unit index included in the first signaling; or, the first information is a random number included in the first signaling.

[0034] In the above method, the first information is determined according to the first signaling, so the first information determined according to different first signaling is different. If the time of sending the uplink data after the illegal device obtains the uplink data and the time of sending the uplink data by the terminal device correspond to different first signalings, then the network side can determine whether the obtained uplink data is valid based on the third information, thereby improving the security of data transmission.

[0035] In the fifth aspect, the present application provides a data transmission method, which is applicable to scenarios such as environmental Internet of Things. The executor of the method is an access network device or a module or chip in the access network device, and the access network device is used as an example for description. In the method, a first signaling is sent; the first signaling is a query duplicate signaling or a contention resolution message; third information and uplink data are received from a terminal device; the third information is used to authenticate the uplink data, the third information is determined based on the first information, and the first information is determined based on the first signaling; the third information and the uplink data are sent to the core network device.

[0036] In a possible implementation manner, the method further includes: sending the first information to the core network device.

[0037] In one possible implementation, the first information is determined based on the first signaling, including: the first information is the number of transmissions of the first signaling; or, the first information is the time unit index included in the first signaling; or, the first information is a random number included in the first signaling.

[0038] In a possible implementation, the terminal device is an environmental Internet of Things terminal.

[0039] In a sixth aspect, the present application provides a data transmission method, which is applicable to scenarios such as environmental Internet of Things. The execution subject of the method is a core network device or a module or chip in the core network device, and the core network device is used as an example for description. In the method, third information and uplink data are received; the third information is used to authenticate the uplink data; first information is received from an access network device, and fourth information is determined based on the first information; if the fourth information matches the third information, the uplink data is saved.

[0040] In a possible implementation, the method further includes: if the fourth information does not match the third information, discarding the uplink data, and / or sending fifth information to the terminal device, the fifth information indicating that the uplink data is invalid.

[0041] In a possible implementation, before saving the uplink data, the method further includes: determining the first time the third information and the uplink data are received; or determining the first time the third information and the uplink data are received within a preset time period.

[0042] In a possible implementation, the terminal device is an environmental Internet of Things terminal.

[0043] In a seventh aspect, the present application further provides a communication device, which can implement any of the methods provided in any of the first to sixth aspects above. The communication device can be implemented by hardware, or by hardware executing corresponding software implementation. The hardware or software includes one or more units or modules corresponding to the above functions.

[0044] In a possible implementation, the communication device includes: a processor, the processor is configured to support the communication device to perform the corresponding functions of the terminal device or access network device or core network device in the method shown above. The communication device may also include a memory, which may be coupled to the processor and stores the necessary program instructions and data of the communication device. Optionally, the communication device also includes an interface circuit, which is used to support communication between the communication device and a device such as a terminal device.

[0045] In a possible implementation, the communication device includes corresponding functional modules, which are respectively used to implement the steps in the above method. The functions can be implemented by hardware, or by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the above functions.

[0046] In a possible implementation, the structure of the communication device includes a processing unit and a communication unit, which can perform corresponding functions in the above method examples. For details, please refer to the description of the method provided in any one of the first to sixth aspects, which will not be repeated here.

[0047] In an eighth aspect, a communication device is provided, comprising a processor and an interface circuit, the interface circuit being used to receive signals from other communication devices outside the communication device and transmit them to the processor or to send signals from the processor to other communication devices outside the communication device, the processor implementing the functional modules of the method in any possible implementation of any one of the first to sixth aspects through a logic circuit or executing a computer program or instruction. Optionally, the communication device also includes a memory, the memory being used to store computer programs or instructions.

[0048] In the ninth aspect, a computer-readable storage medium is provided, in which a computer program or instruction is stored. When the computer program or instruction is executed by a processor, the method in any possible implementation manner of any one of the first to sixth aspects is implemented.

[0049] In a tenth aspect, a computer program product storing instructions is provided, and when a computer reads and executes the computer program product, the method in any possible implementation of any one of the first to sixth aspects is implemented.

[0050] In an eleventh aspect, a circuit is provided, the circuit being used to execute the method in any possible implementation of any one of the first to sixth aspects, the circuit may include a chip circuit. Optionally, the circuit may also be coupled to a memory.

[0051] In a twelfth aspect, a chip is provided, the chip comprising a processor, and when the processor executes a computer program or instruction, it is used to implement the method in any possible implementation of any one of the first to sixth aspects. Optionally, the chip may also include a memory, and the chip may be composed of a chip, or may include a chip and other discrete devices.

[0052] In a thirteenth aspect, a communication device is provided, comprising a processor, which implements a method in any possible implementation of any one of the first to sixth aspects through a logic circuit or by executing a computer program or instruction.

[0053] In a fourteenth aspect, a communication device is provided, comprising a unit or module for executing the method in any possible implementation of any one of the first to sixth aspects above.

[0054] In a fifteenth aspect, an embodiment of the present application further provides a communication system. The communication system includes: a terminal device for implementing the method in the aforementioned first aspect and any possible implementation of the first aspect; a core network device for implementing the method in the aforementioned second aspect and any possible implementation of the second aspect; and an access network device for implementing the method in the aforementioned third aspect and any possible implementation of the third aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] Figure 1 A schematic diagram of an access network device architecture provided in an embodiment of the present application;

[0056] Figure 2 A schematic diagram of an environmental Internet of Things architecture provided in an embodiment of the present application;

[0057] Figure 3 A schematic diagram of a network architecture provided in an embodiment of the present application;

[0058] Figure 4 A schematic diagram of a network architecture provided in an embodiment of the present application;

[0059] Figure 5 A schematic diagram of a network architecture provided in an embodiment of the present application;

[0060] Figure 6 A schematic diagram of a network architecture provided in an embodiment of the present application;

[0061] Figure 7 A schematic diagram of an inventory process provided in an embodiment of the present application;

[0062] Figure 8 A schematic diagram of a data transmission method flow chart provided in an embodiment of the present application;

[0063] Fig. 9 A schematic diagram of a data transmission method flow chart provided in an embodiment of the present application;

[0064] Fig.10 A schematic diagram of a data transmission method flow chart provided in an embodiment of the present application;

[0065] Fig.11 A schematic diagram of a data transmission method flow chart provided in an embodiment of the present application;

[0066] Fig.12 A schematic diagram of the structure of a communication device provided in an embodiment of the present application;

[0067] Fig.13 A schematic diagram of the structure of a communication device provided in an embodiment of the present application;

[0068] Fig.14 A schematic diagram of the structure of a communication device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0069] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. The terms "first", "second" and corresponding terminology labels in the present application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable where appropriate, and this is merely a way of distinguishing objects with the same attributes when describing the embodiments of the present application. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, so that a process, method, system, product or device that includes a series of units is not necessarily limited to those units, but may include other units that are not clearly listed or inherent to these processes, methods, products or devices.

[0070] The method provided in the embodiment of the present application can be applied to various types of mobile communication systems, for example, it can be the Internet of Things (IoT), narrowband Internet of Things (NB-IoT), the fourth generation (4G) communication system (such as long term evolution (LTE)), the fifth generation (5G) communication system (such as 5G new radio (NR)), the hybrid architecture of LTE and NR, or the new communication system that will appear in 6G or future communication development. The communication system may also include a machine to machine (M2M) network, a machine type communication (MTC) or other networks. Exemplarily, the method provided in the embodiment of the present application can be applied to a communication system that supports ambient IoT (AIoT) technology.

[0071] The method and device provided in the embodiments of the present application are based on the same or similar technical concepts. Since the principles of solving problems by the method and the device are similar, the implementation of the device and the method can refer to each other, and the repeated parts will not be repeated.

[0072] Below, some terms in the embodiments of the present application are first explained to facilitate understanding by those skilled in the art.

[0073] In the embodiment of the present application, the access network device is a device in a wireless network, and the access network device may also be referred to as a network device or a wireless access network device. For example, the access network device may be a radio access network (RAN) node that connects a terminal device to a wireless network, and may also be referred to as an access network device. The access network equipment includes, but is not limited to: base station, evolved NodeB (eNodeB), transmission reception point (TRP), next generation NodeB (gNB) in the fifth generation (5G) mobile communication system, access network equipment in the open radio access network (O-RAN), next generation base station in the sixth generation (6G) mobile communication system, base station in the future mobile communication system or access node in the wireless fidelity (WiFi) system, etc.; or it may be a module or unit that completes part of the functions of the base station, for example, it may be a centralized unit (CU), a distributed unit (DU), a centralized unit control plane (CU control plane, CU-CP) module, or a centralized unit user plane (CU user plane, CU-UP) module. The access network equipment may be a macro base station, a micro base station or an indoor station, a relay node or a donor node, etc. The specific technology and specific equipment form adopted by the access network equipment are not limited in this application.

[0074] like Figure 1As shown, in some implementations, the access network device may include a centralized unit (CU) and a distributed unit (DU). The RAN device including the CU node and the DU node splits the protocol layer of the gNB in ​​the NR system, places the functions of some protocol layers in the CU for centralized control, and distributes the functions of the remaining part or all of the protocol layers in the DU, which is centrally controlled by the CU. Furthermore, the CU can also be divided into a control plane (CU-CP) and a user plane (CU-UP). Among them, the CU-CP is responsible for the control plane function, mainly including the radio resource control (RRC) and the packet data convergence protocol (PDCP) (i.e., PDCP-C) corresponding to the control plane. PDCP-C is mainly responsible for encryption and decryption, integrity protection, data transmission, etc. of the control plane data. CU-UP is responsible for the user plane function, mainly including the service data adaptation protocol (SDAP) and the PDCP (i.e., PDCP-U) corresponding to the user plane. Among them, SDAP is mainly responsible for processing the data of the core network and mapping the flow to the bearer. PDCP-U is mainly responsible for encryption and decryption, integrity protection, header compression, sequence number maintenance, data transmission, etc. of the data plane. CU-CP and CU-UP are connected through the E1 interface. CU-CP represents that gNB is connected to the core network through the NG interface and is connected to DU through the F1 interface control plane (i.e. F1-C). CU-UP is connected to DU through the F1 interface user plane (i.e. F1-U). Of course, another possible implementation is that PDCP-C is also in CU-UP.

[0075] It can be understood that in different systems, CU (including CU-CP or CU-UP) or DU may have different names, but those skilled in the art can understand their meanings. For example, in an open radio access network (O-RAN) system, CU may also be called O-CU (open CU), DU may also be called O-DU, CU-CP may also be called O-CU-CP, and CU-UP may also be called O-CU-UP. For the convenience of description, this application takes CU, CU-CP, CU-UP and DU as examples for description. The access network device may also include an active antenna unit (AAU). CU implements some functions of gNB, and DU implements some functions of gNB. For example, CU is responsible for processing non-real-time protocols and services, and implementing the functions of the RRC layer. DU is responsible for processing physical layer protocols and real-time services, and implementing the functions of the radio link control (RLC) layer, the media access control (MAC) layer and the physical (PHY) layer. In some deployments, the CU may also be divided into a centralized unit control plane (CU-CP) node and a centralized unit user plane (CU-UP) node, wherein the CU-CP is responsible for control plane functions and the CU-UP is responsible for user plane functions.

[0076] The terminal device involved in the embodiments of the present application may be a wireless terminal device capable of receiving access network device scheduling and indication information. The terminal device may be referred to as a terminal device, and may also be referred to as a user equipment (UE), a mobile station (MS), a mobile terminal (MT), etc. The terminal device may be a device including a wireless communication function (providing voice / data connectivity to the user). For example, a handheld device with a wireless connection function, or a vehicle-mounted device, a vehicle-mounted module, etc. At present, some examples of terminal devices are: mobile phones, tablet computers, laptop computers, PDAs, mobile internet devices (MID), wearable devices, virtual reality (VR) devices, augmented reality (AR) devices, wireless terminals in industrial control, wireless terminals in Internet of Vehicles, wireless terminals in self-driving, wireless terminals in remote medical surgery, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, or wireless terminals in smart homes, device-to-device (D2D) communication terminal devices, vehicle to everything (V2X) communication terminal devices, smart vehicles, telematics boxes (T-box), machine-to-machine / machine-type communications (M2M / MTC) terminal devices, Internet of Things (IoT) The terminal device may be an on-board device, a vehicle-mounted device, an on-board module, a vehicle, an on-board unit (OBU), a roadside unit (RSU), a T-box, a chip or a system on chip (SOC), etc. The above chip or SOC may be installed in a vehicle, an OBU, an RSU or a T-box. The wireless terminal in industrial control may be a camera, a robot, etc. The wireless terminal in a smart home may be a TV, an air conditioner, a sweeper, a speaker, a set-top box, etc.The terminal device can also be a V2X device, for example, a smart car (or intelligent car), a digital car, an unmanned car (or driverless car or pilotless car or automobile), a self-driving car or autonomous car, a pure electric vehicle (or Battery EV), a hybrid electric vehicle (HEV), a range extended EV (REEV), a plug-in hybrid electric vehicle (PHEV), a new energy vehicle (new energy vehicle), and a roadside unit (RSU). The terminal device can also be a device in device-to-device (D2D) communication, such as an electric meter, a water meter, etc. In addition, in an embodiment of the present application, the terminal device can also be a tag in an IoT system. IoT is an important part of the future development of information technology. Its main technical feature is to connect objects to the network through communication technology, thereby realizing an intelligent network of human-machine interconnection and object-to-object interconnection.

[0077] A tag can also be called an electronic tag or an RFID tag or a tag device. Alternatively, a tag can also be called an AIoT terminal device or an AIoT device. In this application, a tag can also be regarded as a terminal device.

[0078] In one classification method, the types of tags can be divided into passive tags, semi-passive tags and active tags. Among them, passive tags and semi-passive tags can use a communication method based on backscatter, and active tags use a communication method that actively generates a carrier.

[0079] In another classification method, tags can be divided into the following three types of devices:

[0080] Device A: has no energy storage, cannot generate signals independently, and uses backscattering to transmit signals;

[0081] Device B: It has energy storage but cannot generate signals independently. It uses backscattering to transmit signals. Its stored energy can amplify the reflected signal.

[0082] Device C: has energy storage, can generate signals independently, and has active RF components for transmission.

[0083] The tag uses a low-precision, low-power medium-low frequency ring oscillator or no local oscillator to receive downlink signals. When the tag is working, the communication energy and carrier are supplied by the reader, and communication is based on the reflected carrier.

[0084] The reader / writer involved in this embodiment can be a handheld or fixed device for reading or writing tag information, or a device that communicates with tags. The reader / writer can be a terminal device, an access network device, or a device with reading and writing functions. The reader / writer can also be an IAB node or a relay node.

[0085] For example, Figure 2 As shown in the figure, the reader can send a carrier signal to the tag, and the tag receives the carrier signal through the antenna. The solid line in the figure is the carrier signal sent by the reader, and the dotted line represents the reflected signal transmitted by the tag based on the reflection of the carrier signal. The tag can adjust the information to be transmitted in the reflected signal. In the above manner, the tag uses a low-precision, low-power medium-low frequency ring oscillator or a completely local oscillator-free method to receive the downlink signal, which can further reduce the power consumption of the tag downlink reception.

[0086] A tag is a miniature wireless transceiver, which mainly includes a built-in tag device antenna, a coupling element and a chip. The tag chip has a storage space that can support the reader to read or write tag data. After the tag receives the radio frequency signal sent by the reader through the antenna, it can couple the radio frequency signal through the coupling element, and then provide energy to the tag chip in the coupling channel, and feed back the data stored in the chip to the reader through the antenna. A communication network based on cellular network infrastructure, consisting of readers and tags, can be called a passive Internet of Things (IOT) network, or an ambient Internet of Things (ambient IoT), in which the tag device can also be regarded as a terminal device, which can be an active tag device, a passive tag device or a semi-active tag device.

[0087] The environmental Internet of Things system can be applied to passive or semi-passive IoT scenarios. For example, in logistics and warehousing scenarios, tags can be used to inventory and track goods, and the status of goods can be monitored during transportation. For example, in industrial manufacturing scenarios, tags can be used to monitor the environment and equipment status.

[0088] In the environmental IoT system, the following operations can be performed between tags and readers:

[0089] Inventory operation: Inventory operation can also be called inventory operation. This operation can obtain the identification information of the tag. For example, the reader can obtain the identification information of the tag through commands such as query and acknowledgement (ACK). In order to facilitate the inventory of tags, the tag includes a total of 4 session identifiers S0-S3, and each session identifier corresponds to two inventory states: A and B. The inventory state is indicated by the inventory flag (sessInventoried flag). When the reader selects a tag, the select command sent to it will carry a session identifier, and the tag will store the session identifier. When the reader performs an inventory operation on the tag, the query command sent to it will include the session identifier. At this time, the tag can flip the inventory state corresponding to the session identifier from A to B. If the reader sends a query command to perform an inventory operation again, since the inventory state in the tag is B, the tag will not respond to the reader, thereby avoiding the same tag being inventoried multiple times in one inventory cycle.

[0090] Read operation: The read operation can read the electronic product code (EPC) in the tag's storage area, the tag identifier (TID), the content stored in the tag's reserved area, or the content stored in the user storage area.

[0091] Write operation: The write operation can write to the storage area of ​​the tag.

[0092] Kill operation: The kill operation can make the tag unable to work forever.

[0093] Lock operation: A lock operation can lock the information of a tag, preventing the tag from being read or written. Alternatively, a lock operation can lock a storage area, preventing or allowing the storage area to be read or written.

[0094] The above are just examples. Other operations can be performed between the tag and the reader / writer, which will not be explained one by one here.

[0095] Figure 3 FIG. 1 is a schematic diagram of a communication system applicable to an embodiment of the present application. Figure 3As shown, the communication system includes an access network device and a tag. The tag can be an independent device, or it can be integrated with the terminal device, that is, the tag is a part of the terminal device. In the communication system, the access network device can have the function of a reader in a radio frequency identification (RFID) system, that is, the access network device can communicate with the tag as a reader.

[0096] Figure 4 FIG. 2 shows a schematic diagram of another communication system applicable to an embodiment of the present application. Figure 4 As shown, the communication system includes a terminal device and a tag. The tag can be an independent device or integrated with the terminal device. In the communication system, the terminal device can have the function of a reader / writer in an RFID system, that is, the terminal device can communicate with the tag as a reader / writer.

[0097] Figure 5 FIG. 2 shows a schematic diagram of another communication system applicable to an embodiment of the present application. Figure 5 As shown, the communication system includes an access network device, an integrated access and backhaul (IAB) node and a tag. The communication system may also include other devices, such as terminal devices. In the communication system, the access network device may have the function of a reader / writer in an RFID system, and the IAB node may serve as a relay node between the access network device and the tag. The tag transmits information to the IAB node, and the IAB node forwards the information to the access network device through the uu interface.

[0098] In the present application, the communication system including the access network device, the terminal device and the tag may also be a system of a separate architecture. Figure 6 As shown, the access network device and the terminal device can communicate directly. The access network device can also have the function of a reader in the RFID system. There is an uplink connection between the tag and the access network device, and a downlink connection between the tag and the terminal device. The terminal device can transmit information to the tag, and the tag then forwards the information to the access network device. Alternatively, there is a downlink connection between the tag and the access network device, and an uplink connection between the tag and the terminal device. The access network device can transmit information to the tag, and the tag then forwards the information to the terminal network device. The energy required for the tag to send information can be provided by an excitation signal, and the excitation signal can come from the access network device or from the terminal device.

[0099] In AIoT, before the reader performs an inventory operation on the tag, the tag needs to be connected to the reader through random access. After the tag is randomly connected to the reader, the tag's identity can be reported to the reader so that the reader can determine the existence of tags within the coverage area. For example, Figure 7 As shown, a schematic diagram of an inventory process is shown, including the following steps.

[0100] Step 701: The reader sends a paging or selection signaling to select or page one or a group of tags for access.

[0101] The paging or select signaling includes mask information or group identifier, and one mask information or group identifier can match multiple tags. If the mask information included in the tag matches the mask information included in the paging or select signaling, it indicates that the tag is selected, or if the group identifier included in the tag matches the group identifier included in the paging or select signaling, it indicates that the tag is selected.

[0102] For example, the mask information included in the paging or select command is an inventory flag, such as a value of the inventory flag is state A; if the inventory flag of the tag is state A, it is determined to be selected.

[0103] Step 702: The reader sends a query signaling, which is used to initiate an inventory cycle.

[0104] For example, the query signaling includes the value of a parameter Q, and the parameter Q is used to calculate the total number of time slots allocated to the reader / writer.

[0105] Step 703: The tag selects a time slot to send a random access request message;

[0106] The random access request message is used to initiate random access. For example, the random access request message may be a 16-bit random number (random number 16, RN16) generated by a tag.

[0107] Here, RN16 is taken as an example. The tag can also send random numbers of other lengths, such as 8-bit random numbers.

[0108] Specifically, the tag can calculate the access time slot range according to the Q value to be [0,2 Q -1], the label generates a [0,2 Q -1], and use the random number as the initial value of the counter. For example, if Q=4, the random number generated by the tag is one of [0,15]. For example, if the random number generated by the tag is 10, the initial value of the counter is 10.

[0109] Each time the tag receives a query repetition (QueryRep) signaling, the counter value is reduced by one. When the counter value is equal to 0, the tag can send RN16, which can be used to trigger the random access process and can be used as a random access request message. Among them, the first time slot after the query signaling is time slot 0. If the random number generated by the tag is 0, RN16 can be sent immediately after receiving the query signaling.

[0110] Step 704: If the reader receives RN16 successfully, it will feedback an acknowledgement (ACK) message, and the ACK message includes RN16 from the tag.

[0111] The ACK message may also be referred to as a random access response message.

[0112] Step 705: When the tag receives the ACK message including its own RN16, it sends uplink data to the reader.

[0113] When the tag receives the ACK message including its own RN16, it determines that the random access is successful, so that the uplink data can be sent. For example, the uplink data can be the electronic product code (EPC) of the tag. The tag can also flip the inventory flag, for example, from state A to state B.

[0114] If the ACK message received by the tag does not include its own RN16, the tag ignores the ACK message and determines that the random access fails.

[0115] After the reader receives the uplink data from the tag, it can send a query repeat signal to trigger the next time slot.

[0116] In the above inventory process, if an illegal device intercepts the uplink data of the tag. If the illegal device sends the uplink data to other readers (such as the second reader), the second reader mistakenly believes that the inventory of the tag is completed. If the illegal device replays the uplink data, that is, sends it repeatedly, it may cause the uplink data of other tags to be interfered, resulting in the uplink data of other tags cannot be received by the reader. To this end, the present application provides a method that can ensure the security of data transmission.

[0117] The network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0118] The method provided in this application is applied to Figures 3 to 6 When the system is in Figures 3 to 6 The terminal device or the module in the terminal device implements the method executed by the terminal device in the embodiment of the present application, which can be Figures 3 to 6 The access network device or the module in the access network device implements the method executed by the access network device in the embodiment of the present application.

[0119] It can be understood that the present application does not specifically limit the specific structure of the execution subject of the method provided in the embodiments of the present application. The method executed by the terminal device in the present application can be applied to the terminal device or a module or chip in the terminal device. The method executed by the network device can be applied to the access network device or a module or chip in the access network device, and can also be applied to the terminal device or a module or chip in the terminal device. As long as it is possible to communicate according to the method provided in the embodiments of the present application by running a program that records the code of the method provided in the embodiments of the present application, the interaction between the terminal device and the access network device is used as an example for explanation below.

[0120] In the present application, the first information can be configured by the access network device, and the second information can be configured by the core network device. When the terminal device transmits uplink data, it carries the third information determined according to at least one of the first information and the second information. The access network device or the core network device can authenticate the uplink data according to the third information. If the authentication is successful, the uplink data is considered valid and the terminal device is a legal device, so the uplink data can be saved. If the authentication fails, the uplink data is considered invalid and the terminal device is an illegal device, so the uplink data can be discarded or ignored. Through this method, even if an illegal device receives the uplink data of the terminal device and uploads the uplink data to the network again, the network side can determine whether the uplink data is valid according to the third information, thereby improving the security of data transmission, which is described in detail below through specific embodiments.

[0121] like Figure 8 As shown, it is a schematic diagram of a data transmission method flow provided by an embodiment of the present application. In the method flow, the terminal device can also be replaced by a tag, the access network device can also be replaced by a reader / writer, and the core network device can also be replaced by an access and mobility management function (AMF) network element. The method includes:

[0122] Step 801: The core network device sends second information to the access network device.

[0123] Correspondingly, the access network device receives the second information.

[0124] The specific form of the second information is not limited, for example, the second information is a second random number generated by the core network device, or the second information is a string of bit sequences. Optionally, the second information is valid within an inventory service process, that is, the second information in different service request messages sent by the core network device is different. Among them, from the perspective of the core network device, an inventory service process starts from the core network device sending a service request message and ends with the sending of a service response message; or from the perspective of the access network device, an inventory service process starts from the access network device sending a selection signaling and ends after sending X or X-1 query repetition signaling, wherein the selection signaling indicates X time units, and a query repetition signaling is used to trigger a time unit update; or, an inventory service process is a preset time length starting from the access network device sending a selection signaling. The second information can also be periodically updated, related to the service trigger (updated once each time it is triggered), etc., or the core network device can directly send an update command to update the second information, or the update command can also come from the application layer, which is not limited in this application.

[0125] In one implementation, the second information is configured according to the granularity of the access network device, that is, different access network devices correspond to different second information, and the core network device configures different second information for different access network devices.

[0126] This application does not limit how the core network device sends the second information. For example, the core network device sends the second information via a service request message. The service request message can be replaced by an inventory service request message, or a paging message, or a positioning request message, or a read request message, or a write request message, etc. This application does not limit the name of the service request message.

[0127] Step 802: The access network device sends at least one of the first information and the second information to the terminal device.

[0128] Accordingly, the terminal device receives at least one of the first information and the second information. The first information and the second information can be used to perform security operations on the terminal device or uplink data, for example, the security operations can include but are not limited to authentication, anti-replay, encryption, integrity protection and other operations.

[0129] For example, the first information is a first random number generated by the access network device, or the first information is an identifier of a cell of the access network device, or the first information can also be determined according to the identifier of the cell of the access network device, where the cell is the cell where the terminal device is located. This application does not limit how the first information is determined.

[0130] In one implementation, the first information is configured according to the granularity of the cell, that is, the first information corresponding to different cells is different, and the access network device configures different first information for different cells.

[0131] If the access network device sends the first information and the second information, the access network device may send the first information and the second information through one message, or send the first information and the second information through two messages respectively. For example, the access network device sends the first information and the second information through selection signaling or paging signaling. The access network device may also send the second information through selection signaling or paging signaling, and send the first information through query signaling, query repetition signaling, or random access response message.

[0132] Step 803: The terminal device sends uplink data and third information to the access network device.

[0133] Correspondingly, the access network device receives the uplink data and the third information.

[0134] The uplink data may be the EPC of the terminal device, the sensor data collected by the terminal device, the storage area data of the terminal device, etc., which is not limited in this application. The terminal device is a passive device or a semi-passive device or an active device, or the terminal device is an environmental Internet of Things terminal device, for example, the terminal device is a tag.

[0135] The third information can be used to perform security operations on the terminal device or uplink data. For example, the security operations may include but are not limited to authentication, anti-replay, encryption, integrity protection and other operations. The third information can be determined based on at least one of the first information and the second information. Specifically, the terminal device can use at least one of the first information and the second information as an input parameter of the encryption algorithm or the integrity protection algorithm, and use the output result of the encryption algorithm or the integrity protection algorithm as the third information. The encryption algorithm or the integrity protection algorithm is pre-configured on the network side, and the access network device and the core network device can determine the encryption algorithm or the integrity protection algorithm in advance. When determining the third information, the encryption algorithm or the integrity protection algorithm may also include other input parameters, such as a key, which is not limited in the present application, and the key may be pre-configured on the network side.

[0136] For example, the encryption algorithm or integrity protection algorithm can be any of the following algorithms: 128-NEA1 (for example, 128-bit SNOW 3G encryption algorithm); 128-NEA2 (for example, 128-bit AES algorithm); 128-NEA3 (for example, 128-bit Zu Chongzhi algorithm); 128-EEA1 (for example, 128-bit SNOW 3G algorithm); 128-EEA2 (for example, 128-bit AES algorithm); 128-EEA3 (for example, 128-bit Zu Chongzhi algorithm).

[0137] Among them, NEA refers to the NR encryption algorithm (NR encryption algorithm), and EEA stands for the Evolved Packet System encryption algorithm (EPS encryption algorithm).

[0138] In the above method, if the core network device configures different second information for different access network devices, then the third information determined by the terminal devices under different access network devices based on the second information is different; if the access network device configures different first information for different cells, then the third information determined by the terminal devices in different cells of the access network device based on the first information is different; in this way, even if an illegal device obtains uplink data, the uplink data reported by the illegal device in other cells or to other access network devices will be regarded as invalid data, thereby improving the security of data transmission.

[0139] Step 804: The access network device forwards the uplink data and the third information to the core network device.

[0140] Correspondingly, the core network device receives the uplink data and the third information.

[0141] Step 805: The core network device determines fourth information according to at least one of the first information and the second information. If the fourth information matches the third information, the core network device saves the uplink data.

[0142] The core network device may use at least one of the first information and the second information as an input parameter of an authentication or authorization or encryption algorithm or an integrity protection algorithm, and use the output result of the encryption algorithm or the integrity protection algorithm as the fourth information. The encryption algorithm or integrity protection algorithm used by the core network device is the same as the encryption algorithm or integrity protection algorithm used by the terminal device when generating the third information. The parameters of the encryption algorithm or integrity protection algorithm input by the core network device when generating the fourth information are the same as the parameters of the encryption algorithm or integrity protection algorithm input by the terminal device when generating the third information.

[0143] In one implementation, the input parameters used by the core network device are pre-agreed with the terminal device. For example, it is pre-agreed to use the first information as the input parameter of the encryption algorithm or the integrity protection algorithm, then the terminal device only uses the first information to generate the third information, and the core network device also only uses the first information to generate the fourth information. For another example, it is pre-agreed to use the first information and the second information as the input parameters of the encryption algorithm or the integrity protection algorithm, then the terminal device uses the first information and the second information to generate the third information, and the core network device also uses the first information and the second information to generate the fourth information.

[0144] In another implementation, the terminal device or access network device may also send at least one of the first information and the second information to the core network device, and the core network device may determine that the parameter required to generate the fourth information is at least one of the first information and the second information.

[0145] Among them, the terminal device can send at least one of the first information and the second information to the access network device, and the access network device can forward it to the core network device; the access network device can also send at least one of the first information and the second information to the core network device; the access network device can also transparently forward at least one of the first information and the second information sent by the terminal device to the core network device, and the specific process will not be repeated.

[0146] In the present application, the fourth information matches the third information, which may mean that the fourth information is the same as the third information. The fourth information matches the third information, indicating that the terminal device is a legal device and the uplink data reported by the terminal device is valid.

[0147] In one implementation, if the fourth information matches the third information, and the third information and the uplink data are received by the core network device for the first time, the core network device saves the uplink data; if the fourth information matches the third information, but the third information and the uplink data are not received by the core network device for the first time, the core network device discards or ignores the uplink data. Through this method, when the uplink data is repeatedly sent by an illegal device for multiple times, it can be determined based on the third information that the uplink data has been received, and the uplink data can no longer be saved, thereby improving data transmission security.

[0148] In another implementation, if the fourth information matches the third information, and the third information and the uplink data are received by the core network device for the first time within a preset time period, the core network device saves the uplink data; if the fourth information matches the third information, but the third information and the uplink data are not received by the core network device for the first time within the preset time period, the core network device discards or ignores the uplink data; the preset time period is preset or preconfigured or determined by the core network device. Through this method, when the uplink data is repeatedly sent by an illegal device for multiple times within the preset time period, it can be determined based on the third information that the uplink data has been received within the preset time period, and the uplink data can no longer be saved, thereby improving data transmission security.

[0149] In the above method, if an illegal device obtains uplink data of a terminal device from a cell of other access network devices and sends it to the core network device through another access network device, since the core network device configures different second information for different access network devices, the terminal devices under different access network devices determine different third information based on the second information. In this way, the fourth information determined by the core network device is different from the obtained third information. Therefore, the core network device can determine whether the obtained uplink data is valid based on the third information, thereby improving the security of data transmission.

[0150] If an illegal device obtains uplink data of a terminal device in a cell of an access network device and sends it to a core network device through the access network device in another cell, since the terminal devices in different cells determine different third information based on the first information, the fourth information determined by the core network device is different from the obtained third information. Therefore, the core network device can determine whether the obtained uplink data is valid based on the third information, thereby improving the security of data transmission.

[0151] After the core network device determines to save the uplink data, it can also send the uplink data to other devices, such as a network exposure function (NEF) network element or an application function (AF) network element.

[0152] In another implementation, if the fourth information does not match the third information, the core network device discards or ignores the uplink data.

[0153] The fourth information does not match the third information, which may mean that the fourth information is different from the third information. The fourth information does not match the third information, which indicates that the terminal device is an illegal device and the uplink data reported by the terminal device is invalid.

[0154] Optionally, the fourth information does not match the third information, and the core network device may also send fifth information to the terminal device or the access network device, where the fifth information indicates that the uplink data is invalid, or the fifth information indicates that the terminal device authentication fails.

[0155] In the above process, the core network device determines whether the uplink data is valid according to the third information as an example. In another implementation, the access network device may also determine whether the uplink data is valid according to the third information. Specifically, the execution subject of step 805 may be replaced by the access network device. After the access network device determines that the uplink data is valid, the uplink data may be sent to the core network device, and the specific process will not be described in detail.

[0156] Through the above process, the core network device can authenticate the uplink data according to the third information. If the authentication is successful, the uplink data is considered valid and the terminal device is a legal device, so the uplink data can be saved. If the authentication is not successful, the uplink data is considered invalid and the terminal device is an illegal device, so the uplink data can be discarded or ignored. Therefore, this method can improve the security of data transmission.

[0157] The following takes the inventory process of this application in the AIoT scenario as an example. Other application scenarios can refer to the following process, which will not be repeated here.

[0158] like Fig. 9 As shown, it is a schematic diagram of a data transmission method flow provided by an embodiment of the present application. In the method flow, taking the terminal device as a tag, the access network device as a gNB, and the core network device as an AMF network element as an example, the core network device can also be a tag management function (Tag management function, TMF) network element, or an inventory network element, an external server, etc. The method includes:

[0159] Step 901: The AMF network element sends a service request message to the gNB.

[0160] The service request message is used to trigger the gNB to initiate A-IoT related processes (inventory, read, write, authentication, etc.). It can be N2 interface signaling or a newly defined interface (for example, between TMF network elements and base stations) message; A-IoT related processes include but are not limited to inventory processes, read processes, write processes, authentication processes, etc.

[0161] The service request message includes the second information. The service request message may also include mask information or identification information, where the mask information or identification information is used to select at least one tag for inventory.

[0162] Optionally, the second information is valid within an inventory service process, that is, the second information in different service request messages sent by the AMF network element is different. From the perspective of the AMF network element, an inventory service process starts with the AMF sending a service request message and ends with the sending of a service response message; or from the perspective of the gNB, an inventory service process starts with the gNB sending a selection signaling and ends with the sending of X or X-1 query repetition signalings, wherein the selection signaling indicates X time units, and one query repetition signaling is used to trigger the update of one time unit; or, an inventory service process is a preset duration starting from the gNB sending the selection signaling.

[0163] Optionally, the second information configured by the AMF network element to different gNBs is different.

[0164] Step 902: gNB sends selection signaling.

[0165] The selection signaling is used to select at least one terminal device, and the selection signaling includes second information, mask information or identification information, the mask information or identification information comes from the service request message, and the mask information or identification information is used to select at least one terminal device. The selection signaling may also include some transmission control indication information (such as cyclic redundancy check (CRC) rule indication, frequency domain resource allocation, coding rate, etc.). The selection signaling may also be replaced by a paging message, and the present application does not limit the name of the selection signaling.

[0166] For example, if the mask information included in the tag matches the mask information included in the selection signaling, it indicates that the tag is selected, or if the identification information included in the tag matches the identification information included in the selection signaling, it indicates that the tag is selected.

[0167] For example, the mask information included in the selection signaling is 0000. If the mask information in the tag is 00001111, since the first bit of "00001111" in the tag is the same as the mask information included in the selection signaling, the tag is determined to match and can respond to the selection signaling.

[0168] The selection signaling may also include first information. Optionally, the first information included in the selection signaling sent by the gNB in ​​different cells is different.

[0169] Step 903: gNB sends query signaling.

[0170] The query signaling may be a message for allocating access resources (such as time resources, etc.) to the terminal device to be accessed. For example, the query signaling indicates X time units, where X is an integer greater than 0. The query signaling may also trigger the first time unit of the X time units. The time unit may be a time slot or a subframe, etc.

[0171] This application does not limit how the query signaling indicates X time units. For example, the query signaling includes the value of a parameter Q, and the parameter Q is used to determine X time units. For example, Q = 4, then X = 2 Q -1=16, that is, the query signaling indicates 16 time units.

[0172] In addition, if the selection signaling does not include the first information or the second information, the query signaling may also include the first information or the second information. The query signaling may also include some transmission control indication information (such as frequency domain resource allocation, coding rate, etc.), and the present application does not limit the information included in the query signaling.

[0173] In the present application, the lengths of any two time units in the time domain may be the same or different. A time unit is triggered by a trigger message (for example, a query message or a query repetition message), and the length of a time unit in the time domain may be the interval between two adjacent trigger messages. The tag determines the specific number of time slots based on the number of received trigger messages or the time unit index carried in the trigger message.

[0174] Step 904: The tag sends a random access request message.

[0175] The random access request message is used to initiate random access. In the ambient IoT, the type of random access may be RFID-based ALOHA asynchronous random access. Alternatively, the type of random access may be 4-step random access or 2-step random access in NR or NB-IoT. The random access request message may be a 16-bit random number RN16 or a random number of other lengths, which is not limited in this application.

[0176] Step 905: gNB sends a random access response message.

[0177] The random access response message may also be referred to as a contention resolution identifier. If the random access response message includes part or all of the content of the random access request message, such as part or all of RN16, the terminal device may determine that the random access is successful and may send uplink data to the gNB.

[0178] If the selection signaling does not include the first information or the second information, the random access response message may also include the first information or the second information.

[0179] Step 904 and step 905 are optional steps. Step 904 and step 905 may not be performed and step 906 may be performed directly.

[0180] Step 906: The tag sends the third information and uplink data.

[0181] The tag may use at least one of the first information and the second information as an input parameter of an encryption algorithm or an integrity protection algorithm, and use an output result of the encryption algorithm or the integrity protection algorithm as the third information.

[0182] The uplink data may be an identifier or EPC of the tag, or data in a storage area of ​​the tag, which is not limited in the present application.

[0183] In this step, the tag may also send parameters for generating the third information to the gNB. For example, if the third information is determined based on the first information, the first information is also sent; if the third information is determined based on the first information and the second information, the first information and the second information are also sent.

[0184] Step 907: gNB sends the third information and uplink data to the AMF network element.

[0185] In one implementation, if the third information and uplink data are not transparently transmitted to the AMF network element through the gNB, for example, the tag transmits the third information and uplink data through an access stratum (AS) message, after the gNB obtains the third information and uplink data, it can also send at least one of the first information and the second information to the AMF network element.

[0186] Step 908: The AMF network element determines that the fourth information matches the third information, and the AMF network element saves the uplink data.

[0187] The AMF network element may use at least one of the first information and the second information as an input parameter of an encryption algorithm or an integrity protection algorithm, and use the output result of the encryption algorithm or the integrity protection algorithm as the fourth information. The encryption algorithm or integrity protection algorithm used by the AMF network element to generate the fourth information is the same as the encryption algorithm or integrity protection algorithm used by the tag to generate the third information, and the algorithm is pre-agreed or configured.

[0188] Optionally, if the fourth information matches the third information, and the third information and the uplink data are received by the AMF network element for the first time, the AMF network element saves the uplink data; if the fourth information matches the third information, but the third information and the uplink data are not received by the AMF network element for the first time, the uplink data is discarded or ignored. At this time, the core network device can also send the fifth information, the fifth information indicates that the uplink data is invalid, or the fifth information indicates that the terminal device authentication fails. The fifth information can also be called an authentication failure message or the like.

[0189] Optionally, if the fourth information matches the third information, and the third information and the uplink data are received by the AMF network element for the first time within a preset time period, the AMF network element saves the uplink data; if the fourth information matches the third information, but the third information and the uplink data are not received by the AMF network element for the first time within the preset time period, the uplink data is discarded or ignored.

[0190] In another implementation, if the fourth information does not match the third information, the AMF network element discards or ignores the uplink data.

[0191] After the AMF network element saves the uplink data, it can also send the uplink data to the NEF network element or the AF network element. For example, the AMF network element sends a service response message to the NEF network element or the AF network element, and the service response message includes the uplink data. The specific process is not repeated here.

[0192] In the above process, the gNB may also determine whether the uplink data is valid. Specifically, step 907 and step 908 may be replaced by the following steps:

[0193] The gNB determines that the fourth information matches the third information and sends uplink data to the core network device.

[0194] The gNB can use the same method as the AMF network element to determine the fourth information, and the specific process will not be repeated here.

[0195] Through the above process, in the inventory process, the second information configured by the AMF network element to different gNBs is different, and the first information configured by the gNB to different cells is different. Therefore, even if an illegal device obtains the uplink data of the label and sends it repeatedly to the network side. If the illegal device sends the uplink data of the label to other gNBs, the AMF network element or gNB determines the third information based on the second information, and can determine that the uplink data of the illegal device is invalid based on the third information; if the illegal device sends the uplink data of the label to the gNB in ​​other cells, the AMF network element or gNB determines the third information based on the first information, and can determine that the uplink data of the illegal device is invalid based on the third information; therefore, the method provided in this application can improve data transmission security.

[0196] The present application also provides a method that may not require the core network device to configure the second information, and may not require the access network device to configure the first information, which will be described in detail below.

[0197] like Fig.10 As shown, it is a schematic diagram of a data transmission method flow provided by an embodiment of the present application. In the method flow, the terminal device can also be replaced by a tag, the access network device can also be replaced by a reader / writer, and the core network device can also be replaced by an AMF network element. The method includes:

[0198] Step 1001: The access network device sends a first signaling to the terminal device.

[0199] Correspondingly, the terminal device receives the first signaling.

[0200] The first signaling is a query repetition signaling or a contention resolution message, and the first signaling may also be other messages, which are not limited in the present application. The contention resolution message may also be called a random access response message or the like.

[0201] Step 1002: The terminal device sends third information and uplink data to the access network device.

[0202] Among them, the third information can be used to perform security operations on the terminal device or uplink data. For example, the security operations may include but are not limited to authentication, anti-replay, encryption, integrity protection and other operations.

[0203] The terminal device can determine the first information based on the first signaling, and then determine the third information based on the first information.

[0204] For example, in implementation method 1, the terminal device determines the first information according to the number of transmissions of the first signaling. In this case, the first information may be the number of transmissions of the first signaling.

[0205] In this implementation, the number of transmissions of the first signaling may refer to the cumulative number of receptions in an inventory process. For example, if the terminal device receives the first signaling five times in an inventory process, the terminal device may determine that the first information is five.

[0206] In this implementation manner, the first signaling may be a query repetition signaling or a contention resolution message.

[0207] In implementation mode 2, the first signaling is used to trigger the update of the time unit, and a time unit may refer to a time slot or a subframe, etc. Each time the access network device sends a first signaling, it indicates a new time unit, that is, one time unit ends and another time unit begins. The first signaling may include a time unit index, and the time unit index may be an index of the time unit triggered by the first signaling.

[0208] In this implementation manner, the first information is a time unit index included in the first signaling.

[0209] In this implementation manner, the first signaling may be a query repetition signaling.

[0210] In implementation mode three, the first signaling includes a random number, and the random number may be configured by the access network device. The first information may be the random number included in the first signaling. Optionally, before the network device sends the first signaling each time, it generates a random number and carries it through the first signaling, so that the random numbers in different first signalings are different, thereby improving the security of data transmission.

[0211] In this implementation, the first signaling may be a query repetition signaling or a contention resolution message or a query signaling.

[0212] In the above implementations 1 to 3, each time the access network device sends the first first signaling, the first information in the first signaling also changes, that is, different first signalings include different first information. This can increase the update frequency of the first information, making the validity period of the first information shorter, thereby further improving the security of the third information determined based on the first information.

[0213] This application does not limit how the terminal device determines the third information based on the first information. For example, the terminal device can use the first information as an input parameter of an encryption algorithm or an integrity protection algorithm, and use the output result of the encryption algorithm or the integrity protection algorithm as the third information. The encryption algorithm or the integrity protection algorithm is preset or pre-configured on the network side, and the access network device and the core network device can determine the encryption algorithm or the integrity protection algorithm in advance. The encryption algorithm or the integrity protection algorithm may also include other input parameters, such as a key, which may be pre-configured on the network side.

[0214] Optionally, when the terminal device sends the third information and uplink data, it may also send the first information, so that the access network device or the core network device can determine that the third information is determined based on the first information.

[0215] Step 1003: The access network device forwards the uplink data and the third information to the core network device.

[0216] Correspondingly, the core network device receives the uplink data and the third information.

[0217] Optionally, the access network device may also send the first information to the core network device.

[0218] Step 1004: The core network device determines fourth information based on the first information. If the fourth information matches the third information, the core network device saves the uplink data.

[0219] The core network device may use the first information as an input parameter of an encryption algorithm or an integrity protection algorithm, and use the output result of the encryption algorithm or the integrity protection algorithm as the fourth information. The encryption algorithm or integrity protection algorithm used by the core network device is the same as the encryption algorithm or integrity protection algorithm used by the terminal device when generating the third information.

[0220] Among them, the terminal device can send the first information to the access network device, which will be forwarded to the core network device by the access network device; the access network device can also send the first information to the core network device; the access network device can also transparently forward the first information sent by the terminal device to the core network device, and the specific process will not be repeated.

[0221] In the present application, the fourth information matches the third information, which may mean that the fourth information is the same as the third information. The fourth information matches the third information, indicating that the terminal device is a legal device and the uplink data reported by the terminal device is valid.

[0222] In one implementation, if the fourth information matches the third information, and the third information and the uplink data are received by the core network device for the first time, the core network device saves the uplink data; if the fourth information matches the third information, but the third information and the uplink data are not received by the core network device for the first time, the core network device discards or ignores the uplink data.

[0223] In another implementation, if the fourth information matches the third information, and the third information and the uplink data are received by the core network device for the first time within a preset time period, the core network device saves the uplink data; if the fourth information matches the third information, but the third information and the uplink data are not received by the core network device for the first time within the preset time period, the core network device discards or ignores the uplink data.

[0224] In the above method, even if an illegal device obtains the uplink data of a terminal device and sends it to the core network device through the access network device, since the first information included in different first signaling is different, if the time when the illegal device sends the uplink data and the time when the terminal device sends the uplink data correspond to different first signalings, then the fourth information determined by the core network device is different from the third information reported by the illegal device. Therefore, the core network device can determine whether the acquired uplink data is valid based on the third information, thereby improving the security of data transmission.

[0225] After the core network device determines to save the uplink data, it can also send the uplink data to other devices, such as NEF network elements or AF network elements.

[0226] In the present application, if the fourth information does not match the third information, the uplink data is discarded or ignored. The fourth information does not match the third information, which may mean that the fourth information is different from the third information. The fourth information does not match the third information, indicating that the terminal device is an illegal device, and the uplink data reported by the terminal device is invalid.

[0227] Optionally, if the fourth information does not match the third information, the core network device may also send fifth information to the terminal device or the access network device, where the fifth information indicates that the uplink data is invalid, or the fifth information indicates that the terminal device authentication fails.

[0228] In the above process, the core network device determines whether the uplink data is valid according to the third information as an example. In another implementation, the access network device may also determine whether the uplink data is valid according to the third information. Specifically, the execution subject of step 1004 may be replaced by the access network device. After the access network device determines that the uplink data is valid, the uplink data may be sent to the core network device, and the specific process will not be repeated.

[0229] Through the above process, the core network device or the access network device can authenticate the uplink data according to the third information. If the authentication is successful, the uplink data is considered valid and the terminal device is a legal device, so the uplink data can be saved. If the authentication is not successful, the uplink data is considered invalid and the terminal device is an illegal device, so the uplink data can be discarded or ignored. Therefore, this method can improve the security of data transmission.

[0230] The following takes the inventory process of this application in the AIoT scenario as an example. Other application scenarios can refer to the following process, which will not be repeated here.

[0231] like Fig.11 As shown, it is a schematic diagram of a data transmission method flow provided by an embodiment of the present application. In the method flow, taking the terminal device as a tag, the access network device as a gNB, and the core network device as an AMF network element as an example, the method includes:

[0232] Step 1101: The AMF network element sends a service request message to the gNB.

[0233] The service request message is a message used to trigger the gNB to initiate A-IoT related processes (inventory, read, write, authentication, etc.). The service request message may also have other names, which are not limited in this application. The service request message may include mask information or identification information, which is used to select at least one tag for inventory.

[0234] Step 1102: gNB sends selection signaling.

[0235] The selection signaling is used to select at least one terminal device, and the selection signaling includes mask information or identification information, and the mask information or identification information comes from the service request message.

[0236] For example, if the mask information included in the tag matches the mask information included in the selection signaling, it indicates that the tag is selected, or if the identification information included in the tag matches the identification information included in the selection signaling, it indicates that the tag is selected.

[0237] For example, the mask information included in the selection signaling is 0000. If the mask information in the tag is 00001111, since the first bit of "00001111" in the tag is the same as the mask information included in the selection signaling, the tag is determined to match and can respond to the selection signaling.

[0238] Step 1103: gNB sends query signaling.

[0239] The query signaling may be a message used to allocate access resources (such as time resources, etc.) to the terminal device to be accessed. For example, the query signaling indicates X time units, where X is an integer greater than 0.

[0240] This application does not limit how the query signaling indicates X time units. For example, the query signaling includes the value of a parameter Q, and the parameter Q is used to determine X time units. For example, Q = 4, then X = 2 Q -1=16, that is, the query signaling indicates 16 time units.

[0241] Step 1104: gNB sends query repetition signaling.

[0242] Query repetition signaling is used to trigger the update of one time unit.

[0243] Optionally, the query repetition signaling includes a random number, or the query repetition signaling includes a time unit index, where the time unit index is an index of a time unit triggered by the query repetition signaling.

[0244] Step 1105: The tag sends a random access request message.

[0245] The random access request message is used to initiate random access. In the ambient IoT, the type of random access may be RFID-based ALOHA asynchronous random access. Alternatively, the type of random access may be 4-step random access or 2-step random access in NR or NB-IoT.

[0246] The random access request message may be a 16-bit random number RN16, or a random number of other lengths, which is not limited in the present application.

[0247] Step 1106: gNB sends a random access response message.

[0248] If the random access response message includes part or all of the content of the random access request message, for example, part or all of RN16, the terminal device can determine that the random access is successful and can send uplink data to the gNB.

[0249] If the query repetition signaling does not include a random number, the random access response message may also include a random number.

[0250] Step 1105 and step 1106 are optional steps. Step 1105 and step 1106 may not be performed and step 1107 may be performed directly.

[0251] Step 1107: The tag sends the third information and uplink data.

[0252] The tag may use the first information as an input parameter of an encryption algorithm or an integrity protection algorithm, and use the output result of the encryption algorithm or the integrity protection algorithm as the third information.

[0253] For example, if the query repetition signaling or random access request message includes a random number, the terminal device may use the random number as the first information; if the query repetition signaling includes a time unit index, the first information may be the time unit index. Alternatively, the terminal device may also use the number of times the query repetition signaling or random access request message is received in the inventory process as the first information, which is not limited in the present application.

[0254] The uplink data may be an identifier or EPC of the tag, or data in a storage area of ​​the tag, which is not limited in the present application.

[0255] In this step, the tag can also send the first information to the gNB.

[0256] Step 1108: gNB sends the third information and uplink data to the AMF network element.

[0257] In one implementation, if the third information and uplink data are not transparently transmitted to the AMF network element through the gNB, for example, the tag transmits the third information and uplink data through an access stratum (AS) message, after the gNB obtains the third information and uplink data, it can also send the first information to the AMF network element.

[0258] Step 1109: The AMF network element determines that the fourth information matches the third information, and the AMF network element saves the uplink data.

[0259] The AMF network element can use the first information as an input parameter of an encryption algorithm or an integrity protection algorithm, and use the output result of the encryption algorithm or the integrity protection algorithm as the fourth information. The encryption algorithm or integrity protection algorithm used by the AMF network element to generate the fourth information is the same as the encryption algorithm or integrity protection algorithm used by the tag to generate the third information, and the algorithm is pre-agreed or configured. At this time, the core network device can also send the fifth information, and the fifth information indicates that the uplink data is invalid, or the fifth information indicates that the terminal device authentication fails. The fifth information may also be called an authentication failure message or the like.

[0260] In another implementation, if the fourth information does not match the third information, the AMF network element discards or ignores the uplink data.

[0261] After the AMF network element saves the uplink data, it can also send the uplink data to the NEF network element or the AF network element. For example, the AMF network element sends a service response message to the NEF network element or the AF network element, and the service response message includes the uplink data. The specific process is not repeated here.

[0262] In the above process, the gNB can also determine whether the uplink data is valid. Specifically, step 1108 and step 1109 can be replaced by the following steps: the gNB determines that the fourth information matches the third information and sends the uplink data to the core network device.

[0263] The gNB can use the same method as the AMF network element to determine the fourth information, and the specific process will not be repeated here.

[0264] Through the above process, in the inventory process, each query repetition signaling is used to update a time unit, and each random access response message corresponds to a time unit. Therefore, the tag determines the first information according to the query repetition signaling or the random access response message, and can use different first information to determine the third information in different time units. In this way, after the illegal device obtains the uplink data of the tag, when it sends the uplink data to the network side in a different time unit from the time unit in which the tag sends the uplink data, the network side can determine that the uplink data is reported by the illegal device according to the third information, thereby discarding the uplink data and improving the security of data transmission.

[0265] It is understandable that in order to implement the functions in the above embodiments, the terminal device or access network device or core network device includes a hardware structure and / or software module corresponding to each function. Those skilled in the art should easily realize that, in combination with the units and method steps of each example described in the embodiments disclosed in this application, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application scenario and design constraints of the technical solution.

[0266] The following is a schematic diagram of the structure of possible communication devices provided in the embodiments of the present application. These communication devices can be used to implement the functions of the terminal device or access network device or core network device in the above method embodiments, and thus can also achieve the beneficial effects possessed by the above method embodiments.

[0267] like Fig.12 As shown, the communication device 1200 includes a processing unit 1210 and a communication unit 1220. The communication device 1200 is used to implement the functions of the terminal device or the access network device or the core network device in each of the above-mentioned method embodiments.

[0268] In one implementation, the communication device 1200 is used to implement the following functions:

[0269] A communication unit, configured to receive at least one of first information and second information; wherein the second information is included in selection signaling or paging signaling;

[0270] a processing unit, configured to determine third information according to at least one of the first information and the second information;

[0271] The communication unit is used to send the third information and uplink data; the third information is used to authenticate the uplink data.

[0272] In one implementation, the communication device 1200 is used to implement the following functions:

[0273] A communication unit, configured to receive third information and uplink data from a terminal device; receive at least one of first information and second information from the terminal device or an access network device; the first information is configured for the access network device; the second information is configured for a core network device;

[0274] A processing unit is used to determine fourth information based on at least one of the first information and the second information, and if the fourth information matches the third information, save the uplink data.

[0275] In one implementation, the communication device 1200 is used to implement the following functions:

[0276] A processing unit, configured to send at least one of first information and second information to a terminal device through a communication unit; the first information is configured by an access network device; and the second information is configured by a core network device;

[0277] The processing unit is used to receive the third information and uplink data from the terminal device through the communication unit, and send the third information and the uplink data to the core network device; the third information is determined based on at least one of the first information and the second information, and the third information is used to authenticate the uplink data.

[0278] In one implementation, the communication device 1200 is used to implement the following functions:

[0279] A processing unit, configured to receive a first signaling from the access network device through a communication unit; the first signaling is a query duplicate signaling or a contention resolution message;

[0280] The processing unit is used to send third information and uplink data to the access network device through the communication unit; the third information is used to authenticate the uplink data, the third information is determined according to the first information, and the first information is determined according to the first signaling.

[0281] In one implementation, the communication device 1200 is used to implement the following functions:

[0282] A processing unit, configured to send a first signaling through a communication unit; the first signaling is a query duplication signaling or a contention resolution message;

[0283] The processing unit is used to receive third information and uplink data from the terminal device through the communication unit; the third information is used to authenticate the uplink data, the third information is determined according to the first information, and the first information is determined according to the first signaling; and the third information and the uplink data are sent to the core network device.

[0284] In one implementation, the communication device 1200 is used to implement the following functions:

[0285] A communication unit, configured to receive third information and uplink data; the third information being used to authenticate the uplink data; receiving first information from an access network device, and determining fourth information based on the first information;

[0286] A processing unit is used to save the uplink data when the fourth information matches the third information.

[0287] A more detailed description of the processing unit 1210 and the communication unit 1220 can be directly obtained by referring to the relevant descriptions in the above-mentioned method embodiments, and will not be repeated here.

[0288] It should be understood that the division of the units in the above device is only a division of logical functions. In actual implementation, they can be fully or partially integrated into one physical entity, or they can be physically separated. And the units in the device can all be implemented in the form of software calling through processing elements; they can also be all implemented in the form of hardware; some units can also be implemented in the form of software calling through processing elements, and some units can be implemented in the form of hardware. For example, each unit can be a separately established processing element, or it can be integrated in a certain chip of the device. In addition, it can also be stored in the memory in the form of a program, and called and executed by a certain processing element of the device. The function of the unit. In addition, all or part of these units can be integrated together, or they can be implemented independently. The processing element here can also be a processor, which can be an integrated circuit with signal processing capabilities. In the implementation process, each operation of the above method or each unit above can be implemented by an integrated logic circuit of hardware in the processor element or in the form of software calling through a processing element.

[0289] In one example, the unit in any of the above devices may be one or more integrated circuits configured to implement the above method, such as one or more application specific integrated circuits (ASIC), or one or more digital singnal processors (DSP), or one or more field programmable gate arrays (FPGA), or a combination of at least two of these integrated circuit forms. For another example, when the unit in the device can be implemented in the form of a processing element scheduler, the processing element can be a processor, such as a general-purpose central processing unit (CPU), or other processors that can call programs. For another example, these units can be integrated together and implemented in the form of a system-on-a-chip (SOC).

[0290] The above unit for receiving is an interface circuit of the device, which is used to receive signals from other devices. For example, when the device is implemented in the form of a chip, the receiving unit is an interface circuit of the chip used to receive signals from other chips or devices. The above unit for sending is an interface circuit of the device, which is used to send signals to other devices. For example, when the device is implemented in the form of a chip, the sending unit is an interface circuit of the chip used to send signals to other chips or devices.

[0291] As another possible product form, the terminal device or access network device or core network device of the embodiment of the present application can be implemented by a general bus architecture. Fig.13 , Fig.13 1 is a schematic diagram of the structure of a communication device 1300 provided in an embodiment of the present application, and the communication device 1300 includes a processor 1301 and a transceiver 1302. The communication device 1300 may be a terminal device, or a chip or chip system therein; or, the communication device 1300 may be an access network device, or a chip or module therein; or, the communication device 1300 may be a core network device, or a chip or module therein. Fig.13 Only the main components of the communication device 1300 are shown. In addition to the processor 1301 and the transceiver 1302, the communication device 1300 may further include a memory 1303 and an input and output device (not shown).

[0292] Optionally, the processor 1301 is mainly used to process the communication protocol and communication data, and to control the entire communication device, execute the software program, and process the data of the software program. The memory 1303 is mainly used to store the software program and data. The transceiver 1302 may include a radio frequency circuit and an antenna. The radio frequency circuit is mainly used for converting baseband signals and radio frequency signals and processing radio frequency signals. The antenna is mainly used to transmit and receive radio frequency signals in the form of electromagnetic waves. The input and output devices, such as a touch screen, a display screen, a keyboard, etc., are mainly used to receive data input by the user and output data to the user.

[0293] Optionally, the processor 1301, the transceiver 1302, and the memory 1303 may be connected via a communication bus.

[0294] When the communication device is turned on, the processor 1301 can read the software program in the memory 1303, interpret and execute the instructions of the software program, and process the data of the software program. When data needs to be sent wirelessly, the processor 1301 performs baseband processing on the data to be sent, and outputs the baseband signal to the RF circuit. The RF circuit performs RF processing on the baseband signal and then sends the RF signal outward in the form of electromagnetic waves through the antenna. When data is sent to the communication device, the RF circuit receives the RF signal through the antenna, converts the RF signal into a baseband signal, and outputs the baseband signal to the processor 1301. The processor 1301 converts the baseband signal into data and processes the data.

[0295] In another implementation, the RF circuit and antenna may be arranged independently of the processor performing baseband processing. For example, in a distributed scenario, the RF circuit and antenna may be arranged independently of the communication device in a remote manner.

[0296] In some embodiments, in terms of hardware implementation, those skilled in the art may imagine that the communication device 1200 may be implemented as Fig.13 The form of the communication device 1300 is shown.

[0297] As an example, Fig.12 The function / implementation process of the processing unit 1210 can be achieved by Fig.13 The processor 1301 in the communication device 1300 shown calls the computer execution instructions stored in the memory 1303 to implement. Fig.12 The function / implementation process of the communication unit 1220 can be achieved by Fig.13 The transceiver 1302 in the communication device 1300 is shown to be implemented.

[0298] As another possible product form, the terminal device or access network device or core network device in this application can adopt Fig.14 The structure shown, or including Fig.14 Parts shown. Fig.14 A schematic diagram of the composition of a communication device 1400 provided in this application.

[0299] like Fig.14 As shown, the communication device 1400 includes at least one processor 1401. Optionally, the communication device also includes a communication interface 1402.

[0300] When the program instructions involved are executed in the at least one processor 1401, the device 2200 can implement the method provided by any of the aforementioned embodiments and any possible designs thereof. Alternatively, the processor 1401 is used to implement the method provided by any of the aforementioned embodiments and any possible designs thereof through a logic circuit or execution code instructions.

[0301] The communication interface 1402 may be used to receive program instructions and transmit them to the processor, or the communication interface 1402 may be used for the communication device 1400 to communicate and interact with other communication devices, such as interactive control signaling and / or business data, etc. Exemplarily, the communication interface 1402 may be used to receive signals from other devices outside the communication device 1400 and transmit them to the processor 1401, or to send signals from the processor 1401 to other communication devices outside the communication device 1400.

[0302] Optionally, the communication interface 1402 may be a code and / or data read / write interface circuit, or the communication interface 1402 may be a signal transmission interface circuit between a communication processor and a transceiver, or may be a pin of a chip.

[0303] Optionally, the communication device 1400 may further include at least one memory 1403, which may be used to store required program instructions and / or data involved. It should be noted that the memory 1403 may exist independently of the processor 1401, or may be integrated with the processor 1401. The memory 1403 may be located inside the communication device 1400, or may be located outside the communication device 1400, without limitation.

[0304] Optionally, the communication device 1400 may further include a power supply circuit 1404, which may be used to supply power to the processor 1401. The power supply circuit 1404 may be located in the same chip as the processor 1401, or in another chip other than the chip where the processor 1401 is located.

[0305] Optionally, the communication device 1400 may further include a bus, and various parts of the communication device 1400 may be interconnected via the bus.

[0306] In some embodiments, in terms of hardware implementation, those skilled in the art may think of the above Fig.12 The communication device 1200 shown may be used Fig.14 The form of the communication device 1400 is shown.

[0307] As an example, Fig.12 The function / implementation process of the processing unit 1210 can be achieved by Fig.14 The processor 1401 in the communication device 1400 shown calls the computer execution instructions stored in the memory 1403 to implement. Fig.12 The function / implementation process of the communication unit 1220 can be achieved by Fig.14 The communication interface 1402 in the communication device 1400 is shown to be implemented.

[0308] It should be pointed out that Fig.14 The structure shown does not constitute a specific limitation on the terminal device, access network device, or core network device. For example, in other embodiments of the present application, the terminal device, access network device, or core network device may include more or fewer components than shown in the figure, or combine some components, or split some components, or arrange the components differently. The components shown in the figure may be implemented in hardware, software, or a combination of software and hardware.

[0309] When the above communication device is a chip applied to a terminal, the terminal chip implements the functions of the terminal in the above method embodiment. The terminal chip receives information from other modules in the terminal (such as a radio frequency module or an antenna), and the information is sent by the base station to the terminal; or the terminal chip sends information to other modules in the terminal (such as a radio frequency module or an antenna), and the information is sent by the terminal to the base station.

[0310] When the above-mentioned communication device is a module applied to a base station, the base station module implements the functions of the base station in the above-mentioned method embodiment. The base station module receives information from other modules in the base station (such as a radio frequency module or an antenna), and the information is sent by the terminal to the base station; or, the base station module sends information to other modules in the base station (such as a radio frequency module or an antenna), and the information is sent by the base station to the terminal. The base station module here can be a baseband chip of a base station, or it can be a DU or other module, and the DU here can be a DU under an open radio access network (O-RAN) architecture.

[0311] It is understandable that the processor in the embodiments of the present application may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. The general-purpose processor may be a microprocessor or any conventional processor.

[0312] The method steps in the embodiments of the present application can be implemented by hardware, or by a processor executing software instructions. The software instructions can be composed of corresponding software modules, and the software modules can be stored in a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an erasable programmable read-only memory, an electrically erasable programmable read-only memory, a register, a hard disk, a mobile hard disk, a CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an ASIC. In addition, the ASIC can be located in a base station or a terminal. Of course, the processor and the storage medium can also be present in a base station or a terminal as discrete components.

[0313] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the process or function described in the embodiment of the present application is executed in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device or other programmable device. The computer program or instruction may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instruction may be transmitted from one website site, computer, server or data center to another website site, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server, data center, etc. that integrates one or more available media. The available medium may be a magnetic medium, for example, a floppy disk, a hard disk, a tape; it may also be an optical medium, for example, a digital video disc; it may also be a semiconductor medium, for example, a solid-state hard disk. The computer-readable storage medium may be a volatile or nonvolatile storage medium, or may include both volatile and nonvolatile types of storage media.

[0314] In the various embodiments of the present application, unless otherwise specified or provided for in any logical conflict, the terms and / or descriptions between the different embodiments are consistent and may be referenced to each other, and the technical features in the different embodiments may be combined to form new embodiments according to their inherent logical relationships.

[0315] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, optical storage, etc.) that contain computer-usable program code.

[0316] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0317] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0318] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A data transmission method, characterized in that: include: receiving at least one of first information and second information; The second information is included in the selection signaling or the paging signaling; determining third information according to at least one of the first information and the second information; Sending the third information and uplink data; The third information is used to authenticate the uplink data.

2. The method according to claim 1, characterized in that The first information is a first random number, or the first information is an identifier of a cell of the access network device, or the first information is determined according to the identifier of the cell.

3. The method according to claim 1 or 2, characterized in that: The first information is configured according to the granularity of the cell, and the first information corresponding to different cells is different.

4. The method according to any one of claims 1 to 3, characterized in that: The second information is a second random number.

5. The method according to any one of claims 1 to 4, characterized in that: The second information is valid within the inventory service process corresponding to the uplink data.

6. The method according to any one of claims 1 to 5, characterized in that: The second information is configured according to the granularity of the access network device, and different access network devices correspond to different second information.

7. The method according to any one of claims 1 to 6, characterized in that: The first information is included in selection signaling or query signaling or query repetition signaling.

8. A data transmission method, characterized in that: include: receiving third information and uplink data from a terminal device; Receiving at least one of the first information and the second information from the terminal device or the access network device; The first information is configured for the access network device; the second information is configured for the core network device; Determine fourth information according to at least one of the first information and the second information, and if the fourth information matches the third information, save the uplink data.

9. The method according to claim 8, characterized in that The method further comprises: If the fourth information does not match the third information, the uplink data is discarded, and / or, fifth information is sent to the terminal device, where the fifth information indicates that the uplink data is invalid.

10. The method according to claim 8 or 9, characterized in that: Before saving the uplink data, the method further includes: Determining that the third information and the uplink data are received for the first time; Alternatively, it is determined that the third information and the uplink data are received for the first time within a preset time period.

11. The method according to any one of claims 8 to 10, characterized in that: The first information is a first random number, or the first information is an identifier of a cell of the access network device, or the first information is determined according to the identifier of the cell.

12. The method according to claim 11, characterized in that The first information is valid within the cell where the terminal device is located.

13. The method according to any one of claims 8 to 12, characterized in that: The second information is a second random number.

14. The method according to any one of claims 8 to 13, characterized in that: The second information is valid within the inventory service process corresponding to the uplink data.

15. The method according to any one of claims 8 to 14, characterized in that: The second information is configured according to the granularity of the access network device, and different access network devices correspond to different second information.

16. The method according to any one of claims 8 to 15, characterized in that: The terminal device is an environmental Internet of Things terminal.

17. A data transmission method, characterized in that: include: Sending at least one of the first information and the second information to the terminal device; The first information is configured by the access network device; The second information is configured by the core network device; Receiving third information and uplink data from the terminal device, and sending the third information and the uplink data to a core network device; The third information is determined according to at least one of the first information and the second information, and the third information is used to authenticate the uplink data.

18. A data transmission method, characterized in that: include: Receiving a first signaling from the access network device; The first signaling is a query duplication signaling or a contention resolution message; Sending third information and uplink data to the access network device; The third information is used to authenticate the uplink data, the third information is determined according to the first information, and the first information is determined according to the first signaling.

19. The method according to claim 18, characterized in that The first information is determined according to the first signaling, including: The first information is the number of transmissions of the first signaling; Alternatively, the first information is a time unit index included in the first signaling; Alternatively, the first information is a random number included in the first signaling.

20. A data transmission method, characterized in that: include: Sending a first signaling; The first signaling is a query duplication signaling or a contention resolution message; receiving third information and uplink data from a terminal device; The third information is used to authenticate the uplink data, the third information is determined according to the first information, and the first information is determined according to the first signaling; The third information and the uplink data are sent to a core network device.

21. The method according to claim 20, characterized in that The first information is determined according to the first signaling, including: The first information is the number of transmissions of the first signaling; Alternatively, the first information is a time unit index included in the first signaling; Alternatively, the first information is a random number included in the first signaling.

22. A data transmission method, characterized in that: include: receiving third information and uplink data; The third information is used to authenticate the uplink data; receiving first information from an access network device, and determining fourth information according to the first information; If the fourth information matches the third information, the uplink data is saved.

23. A communication device, characterized in that: include: A communication unit, configured to receive at least one of the first information and the second information; The second information is included in the selection signaling or the paging signaling; a processing unit, configured to determine third information according to at least one of the first information and the second information; The communication unit is used to send the third information and uplink data; The third information is used to authenticate the uplink data.

24. A communication device, characterized in that: include: A communication unit, configured to receive third information and uplink data from a terminal device; Receiving at least one of the first information and the second information from the terminal device or the access network device; The first information is configured for the access network device; the second information is configured for the core network device; A processing unit is used to determine fourth information based on at least one of the first information and the second information, and if the fourth information matches the third information, save the uplink data.

25. A communication device, characterized in that: include: a processing unit, configured to send at least one of the first information and the second information to the terminal device through the communication unit; The first information is configured by the access network device; the second information is configured by the core network device; The processing unit is configured to receive the third information and the uplink data from the terminal device through the communication unit, and send the third information and the uplink data to the core network device; The third information is determined according to at least one of the first information and the second information, and the third information is used to authenticate the uplink data.

26. A communication device, characterized in that: include: A processing unit, configured to receive a first signaling from the access network device through a communication unit; The first signaling is a query duplication signaling or a contention resolution message; The processing unit is configured to send third information and uplink data to the access network device through the communication unit; The third information is used to authenticate the uplink data, the third information is determined according to the first information, and the first information is determined according to the first signaling.

27. A communication device, characterized in that: include: A processing unit, configured to send a first signaling through a communication unit; The first signaling is a query duplication signaling or a contention resolution message; The processing unit is configured to receive third information and uplink data from the terminal device through the communication unit; The third information is used to authenticate the uplink data, the third information is determined according to the first information, and the first information is determined according to the first signaling; The third information and the uplink data are sent to a core network device.

28. A communication device, characterized in that: include: A communication unit, configured to receive third information and uplink data; The third information is used to authenticate the uplink data; receiving first information from an access network device, and determining fourth information according to the first information; A processing unit is used to save the uplink data when the fourth information matches the third information.

29. A communication device, characterized in that: including a processor and a memory; The processor is used to execute the computer program or instructions stored in the memory, so that the communication device implements the method described in any one of claims 1 to 22.

30. A computer-readable storage medium, characterized in that: A computer program or instruction is stored, and when the computer program or instruction is executed on a computer, the computer is caused to implement the method according to any one of claims 1 to 22.

31. A chip, characterized in that: It includes a processor, which is coupled to a memory and is used to execute a computer program or instruction stored in the memory, so that the chip implements the method described in any one of claims 1 to 22.

Images