Secure ranging service system and method

Abstract

A secure ranging service method is performed by a secondary user equipment (UE). A first sidewalk ranging session between the first UE and the secondary UE and a second sidewalk ranging session between the secondary UE and the second UE are bound using a binding key. A first sidewalk ranging operation is performed on the first UE and the secondary UE, and a second sidewalk ranging operation is performed on the second UE and the secondary UE. A second intermediate ranging result of the second sidewalk ranging operation is sent to the first UE over the first sidewalk ranging session bound to the second sidewalk ranging session. The second intermediate ranging result and the first intermediate ranging result of the first sidewalk ranging operation are used to derive final ranging results of the first UE and the second UE.

Description

Cross - Reference to Related Applications

[0001] This application claims the priority of U.S. Provisional Application No. 63 / 434,429, filed on December 21, 2022, which is incorporated herein by reference in its entirety. Technical Field 1. Field of Disclosure

[0002] This disclosure relates to the field of communication systems, and more particularly, to a method for secure ranging services. Background Art 2. Description of Related Art

[0003] Ranging and sidelink positioning are two new services in 5G. The ranging service is used to determine the distance between two or more UEs and / or the direction of one UE relative to another UE (i.e., the reference UE) using the sidelink interface (i.e., the PC5 interface). The reference UE supports positioning the target UE, for example, by transmitting and / or receiving reference signals for positioning via the sidelink, providing positioning - related information, etc. On the other hand, the sidelink positioning service is used to position a UE to obtain its absolute position, relative position, or ranging information. In some cases, when direct sidelink ranging or positioning operations cannot be performed due to, for example, the distance between two UEs exceeding the sidelink reachable area or other reasons that prevent ranging between the two UEs, an assisting UE is used to perform the ranging or sidelink positioning between the two UEs. Technical Problem

[0004] According to the "3GPP Technical Report on Study of Architecture Enhancements for Supporting Ranging - Based Services and Sidelink Positioning (Release 18)" (3GPP TR 23.700 - 86), the current solution for using an assisting UE to support the ranging service is to establish two separate ranging operations and combine the results at the end.

[0005] The current architecture has several drawbacks. The solution relies on two independent and separate ranging operations between the first UE and the assisting UE and between the second UE and the assisting UE. If the ranging results of the assisting UE and the second UE are incorrect, for example, if the assisting UE provides ranging information (e.g., measurement data) from another ranging session (e.g., a ranging session between the assisting UE and UE3), the final ranging calculation of the first UE will be incorrect. If it cannot be ensured that the intermediate (or temporary) ranging results between the assisting UE and the second UE come from the same ranging session between the first UE and the second UE, the final ranging calculation is useless to the first UE.

[0006] In the current solution, the intermediate ranging result between the assisting UE and the second UE may or may not be protected. One of the reasons for the need of the assisting UE in the ranging operation between the first UE and the second UE is that the first UE and the second UE cannot directly perform the ranging operation. This may be due to the distance between the first UE and the second UE, resulting in the sidelink interface between them being inaccessible or unreliable. In this case, UE-to-UE relay is required to send the intermediate ranging result from the second UE to the first UE. However, according to the protection profile or security policy, it cannot be ensured that the intermediate ranging result sent from the second UE to the first UE is valid or protected. Summary of the Invention

[0007] The purpose of the present disclosure is to propose a secure ranging service method.

[0008] In a first aspect, an embodiment of the present invention provides a secure ranging service method executed by a UE serving as an assisting user equipment (UE), including: In response to the initiation of a sidelink ranging session between a first UE and a second UE, establish a first sidelink between the first UE and the assisting UE and a second sidelink between the assisting UE and the second UE, where the first sidelink and the second sidelink are protected by credentials respectively configured in the first UE, the assisting UE, and the second UE; Initiate a first sidelink ranging session between the first UE and the assisting UE and a second sidelink ranging session between the assisting UE and the second UE; Generate a binding key; Bind the first sidelink ranging session and the second sidelink ranging session using the binding key; Send the binding key to the first UE and the second UE; Perform a first sidelink ranging operation on the first UE and the assisting UE, and perform a second sidelink ranging operation on the second UE and the assisting UE; Obtain a second intermediate ranging result of the second sidelink ranging operation; and Send the second intermediate ranging result to the first UE through the first sidelink ranging session bound to the second sidelink ranging session, where the second intermediate ranging result of the second sidelink ranging operation and the first intermediate ranging result of the first sidelink ranging operation are used to derive the final ranging result between the first UE and the second UE.

[0009] In a second aspect, an embodiment of the present invention provides a user equipment (UE). The UE includes a processor, and the processor is used to call and run a computer program stored in a memory, so that a device equipped with a chip executes any combination of the disclosed method and embodiments of the disclosed method.

[0010] In a third aspect, an embodiment of the present invention provides a secure ranging service system, including: A first user equipment (UE) for requesting the initiation of a sidelink ranging session for the first UE; A second UE for serving as the target UE of the sidelink ranging session; and An assisting UE for establishing a first sidelink between the first UE and the assisting UE and a second sidelink between the assisting UE and the second UE in response to the initiation of the sidelink ranging session between the first UE and the second UE, wherein the first sidelink is protected by a credential configured in the first UE and the assisting UE, and the second sidelink is protected by a credential configured in the assisting UE and the second UE; Wherein, the first UE or the assisting UE initiates a first sidelink ranging session between the first UE and the assisting UE; The assisting UE initiates a second sidelink ranging session between the assisting UE and the second UE; The assisting UE generates a binding key; The assisting UE binds the first sidelink ranging session and the second sidelink ranging session using the binding key; The assisting UE sends the binding key to the first UE and the second UE; The first UE or the assisting UE performs a first sidelink ranging operation on the first UE and the assisting UE; The second UE or the assisting UE performs a second sidelink ranging operation on the second UE and the assisting UE; The assisting UE obtains a second intermediate ranging result of the second sidelink ranging operation; The assisting UE generates a message authentication code (MAC) of the second intermediate ranging result using the binding key and the second intermediate ranging result; and The assisting UE sends the message authentication code and the second intermediate ranging result to the first UE, wherein the second intermediate ranging result of the second sidelink ranging operation and the first intermediate ranging result of the first sidelink ranging operation are used to derive the final ranging result between the first UE and the second UE; The first UE receives the message authentication code and the second intermediate ranging result, and verifies the second intermediate ranging result using the message authentication code; and When the second intermediate ranging result passes the verification, the first UE derives the final ranging result between the first UE and the second UE using the first intermediate ranging result and the second intermediate ranging result.

[0011] The disclosed method can be programmed as computer-executable instructions stored in a non-transitory computer-readable medium. When the non-transitory computer-readable medium is loaded into a computer, it instructs the processor of the computer to execute the disclosed method.

[0012] A non-transitory computer-readable medium may include at least one of the group consisting of: a hard disk, a CD-ROM, an optical storage device, a magnetic storage device, a read-only memory, a programmable read-only memory, an erasable programmable read-only memory, an EPROM, an electrically erasable programmable read-only memory, and a flash memory.

[0013] The disclosed method can be programmed as a computer program product that causes a computer to execute the disclosed method.

[0014] The disclosed method can be programmed as a computer program that causes a computer to execute the disclosed method. Advantageous Effects

[0015] The present invention provides a security method for using an auxiliary UE to protect ranging or sidelink positioning services between two UEs. The method includes generating a binding key, binding a ranging session between the two UEs using the binding key through the auxiliary UE, and protecting intermediate ranging results of the ranging session using the binding key. This ensures the security of the ranging or sidelink positioning service between the two UEs and prevents any unauthorized access. Brief Description of the Drawings

[0016] To more clearly illustrate the embodiments of the present disclosure or related technologies, the following will briefly introduce the drawings in combination with the embodiments. Obviously, the drawings are only some embodiments of the present disclosure, and those of ordinary skill in the art can obtain other drawings based on these drawings without paying any cost.

[0017] Figure 1 A schematic diagram of a telecommunication system is shown.

[0018] Figure 2 A schematic diagram showing UEs involved in a sidelink ranging service is shown.

[0019] Figure 3 A schematic diagram showing an embodiment of the disclosed secure ranging service method is shown.

[0020] Figure 4 A schematic diagram showing an embodiment of the disclosed secure ranging service method is shown.

[0021] Figure 5 A schematic diagram showing an embodiment of the disclosed secure ranging service method is shown.

[0022] Figure 6 A schematic diagram showing an embodiment of the disclosed secure ranging service method is shown.

[0023] Figure 7 A schematic diagram showing an example of the topology of a UE is shown.

[0024] Figure 8A schematic diagram showing an example of the topology of a UE is shown.

[0025] Figure 9 A schematic diagram showing an example of the topology of a UE is shown.

[0026] Figure 10 A schematic diagram showing an example of the topology of a UE is shown.

[0027] Figure 11 A schematic diagram showing an example of the topology of a UE is shown.

[0028] Figure 12 A schematic diagram showing a chip in a UE for performing the disclosed method is shown.

[0029] Figure 13 A schematic diagram showing a wireless communication system according to an embodiment of the present disclosure is shown. Detailed implementation manners

[0030] The following describes in detail the technical problems, structural features, achieved purposes, and effects of the embodiments of the present disclosure with reference to the accompanying drawings. Specifically, the terms in the embodiments of the present disclosure are only used for the purpose of describing specific embodiments and do not limit the present disclosure.

[0031] The present invention proposes a method for associating two independent ranging sessions between a first UE and a secondary UE and between the secondary UE and a second UE. To prevent the intermediate ranging results between the secondary UE and the second UE from being modified or changed, security protection is provided for the intermediate ranging results sent to the first UE.

[0032] To ensure that the intermediate ranging results come from the same ranging session involving the first UE, the second UE, and the secondary UE, the intermediate ranging results are also cryptographically bound to a session identifier that is bound to the ranging session identifier between the first UE and the second UE, the ranging session identifier between the first UE and the secondary UE, and the ranging session identifier between the secondary UE and the second UE.

[0033] After the first UE determines that the intermediate ranging results sent by the second UE come from the same ranging session between the first UE and the second UE and the intermediate ranging results have been protected, the first UE uses the intermediate ranging results between the second UE and the secondary UE and the ranging results between the first UE and the secondary UE for the final ranging calculation.

[0034] The embodiments of the present disclosure relate to the field of new radio (NR) sidelink resource allocation processes in authorized and unauthorized frequency bands and solve the problem of semi-static channel access related to SL-U.

[0035] Reference Figure 1, a telecommunications system including user equipment (UE) 10a - 10n, a base station (BS) 20a, and a network entity device 30 performs the disclosed method according to an embodiment of the present disclosure. It is shown Figure 1 by way of illustration and not limitation, and the system may include more UEs, BSs, and core network (CN) entities. Connections between devices and device components are shown as lines and arrows in the figure.

[0036] UE 10a may include a processor 11a, a memory 12a, and a transceiver 13a. UE 10b may include a processor 11b, a memory 12b, and a transceiver 13b. UE 10c may include a processor 11c, a memory 12c, and a transceiver 13c. UE 10n may include a processor 11n, a memory 12n, and a transceiver 13n. Base station 20a may include a processor 21a, a memory 22a, and a transceiver 23a. Network entity device 30 may include a processor 31, a memory 32, and a transceiver 33. Each of the processors 11a - 11n, 21a, and 31 can be used to implement the proposed functions, processes, and / or methods described in the specification. Layers of the radio interface protocol may be implemented in the processors 11a - 11n, 21a, and 31. Each of the memories 12a - 12n, 22a, and 32 operably stores various programs and information to operate the connected processor. Each of the transceivers 13a - 13n, 23a, and 33 is operably coupled to the connected processor and transmits and / or receives wireless signals or wired signals. One of the UEs 10a - 10n may communicate with another UE via a sidelink. Base station 20a may be one of an eNB, a gNB, or other types of radio nodes, and may configure radio resources for UEs 10a and 10b.

[0037] Each of processors 11a - 11n, 21a, and 31 may include an application - specific integrated circuit (ASIC), other chip sets, logic circuits, and / or data processing devices. Each of memories 12a - 12n, 22a, and 32 may include a read - only memory (ROM), a random access memory (RAM), a flash memory, a memory card, a storage medium, and / or other storage devices. Each of transceivers 13a - 13n, 23a, and 33 may include a baseband circuit and a radio frequency (RF) circuit to process RF signals. When an embodiment is implemented in software, the techniques described herein may be implemented by modules, procedures, functions, entities, etc. that perform the functions described herein. The modules may be stored in a memory and executed by a processor. The memory may be implemented within the processor or outside the processor, and these memories may be communicatively coupled to the processor in various ways known in the art.

[0038] The network entity device 30 may be a node in the CN. The CN may include an LTE CN or a 5G core (5GC), and the 5GC includes a location management function (LMF), a location retrieval function (LRF), a gateway mobile location center (GMLC), a user plane function (UPF), a session management function (SMF), an access and mobility management function (AMF), a unified data management (UDM), a policy control function (PCF), a control plane (CP) / user plane (UP) separation (CP / UP separation, CUPS), an authentication server (AUSF), a network slice selection function (NSSF), and a network exposure function (NEF).

[0039] Examples of the UE in the specification may include one of UEs 10a - 10n. An example of the base station in the specification may include base station 20a. The sidelink (SL) transmission of control signals or data may be a transmission operation from one UE to another UE through a sidelink interface (e.g., ProSe PC5). The uplink (UL) transmission of control signals or data may be a transmission operation from the UE to the base station. The downlink (DL) transmission of control signals or data may be a transmission operation from the base station to the UE. The DL control signals may include downlink control information (DCI) or radio resource control (RRC) signals from the base station to the UE.

[0040] Reference Figure 2 , the first UE 10 - 1 wants to use a ranging service to determine the distance between the first UE 10 - 1 and the second UE 10 - 2. Examples of the first UE 10 - 1 and the second UE 10 - 2 may include UE 10a and UE 10n. Assume that the first UE 10 - 1, the second UE 10 - 2, and the assisting UE 10 - A are capable of sidelink communication, which allows them to communicate with other UEs via PC5 to support V2X, ProSe, and ranging / sidelink positioning services. An example of the assisting UE 10 - A may include a UE between UE 10a and UE 10n (e.g., UE 10b).

[0041] In this example, the first UE 10 - 1 serves as the initiator of the ranging / sidelink positioning service, and the second UE 10 - 2 serves as the target UE. The target UE is a UE that uses the sidelink in ranging - based services and sidelink positioning to measure distance, direction, and / or position with the support of one or more SL reference UEs. The first UE 10 - 1 may serve as a reference UE. Note that the present disclosure is not limited to this example, and the second UE 10 - 2 or another UE may serve as the initiator of the ranging / sidelink positioning service, and the first UE 10 - 1 or another UE may serve as the target UE.

[0042] When direct ranging / sidelink positioning between the SL reference UE and the target UE cannot be supported, the assisting UE 10 - A supports ranging / sidelink positioning between the SL reference UE and the target UE via PC5. The measurements / results of ranging / sidelink positioning between the assisting UE 10 - A and the SL reference UE and between the assisting UE 10 - A and the target UE are determined and used to derive the ranging / sidelink positioning result between the target UE and the SL reference UE.

[0043] The initiator can be a sidelink (SL) positioning client UE. In an alternative embodiment, the SL positioning client UE can be a third-party UE other than the SL reference UE and the target UE, which initiates a ranging / sidelink positioning service request on behalf of an application residing on the client UE.

[0044] Note that the SL positioning client UE does not have to support ranging / sidelink positioning capabilities, but needs to establish communication between the SL positioning client UE and the SL reference UE / target UE via PC5 or 5GC to transmit service requests and the results of ranging / sidelink positioning services.

[0045] The secure ranging service system includes a first UE 10-1, a second UE 10-2, and an auxiliary UE 10-A. In some embodiments of the present disclosure, the auxiliary UE is equipped with parameters required for ranging / sidelink positioning services. In some embodiments of the present disclosure, these parameters include parameters required to discover other UEs capable of ranging and authorized to perform ranging services. In some embodiments of the present disclosure, these parameters include security parameters for protecting the PC5 links of the first UE, the second UE, and the auxiliary UE.

[0046] The auxiliary UE 10-A, the first UE 10-1, and the second UE 10-2 perform sidelink device discovery. For example, the first UE 10-1 and the second UE 10-2 discover the auxiliary UE 10-A, and the auxiliary UE 10-A discovers the first UE 10-1 and the second UE 10-2. In some embodiments of the present disclosure, at least one of the auxiliary UE 10-A, the first UE 10-1, and the second UE 10-2 performs sidelink device discovery via UE-to-UE relay.

[0047] The first UE 10-1 is used to request the initiation of a sidelink ranging session for the first UE 10-1. The second UE 10-2 is used as the target UE of the sidelink ranging session. The auxiliary UE 10-A is used to establish a first sidelink between the first UE 10-1 and the auxiliary UE 10-A and a second sidelink between the auxiliary UE 10-A and the second UE 10-2 in response to the initiation of the sidelink ranging session between the first UE 10-1 and the second UE 10-2. The first sidelink and the second sidelink are protected by credentials configured in the first UE 10-1, the auxiliary UE 10-A, and the second UE 10-2, respectively. The content (e.g., payload) transmitted in the first sidelink and the second sidelink can be encrypted using the credentials or the first sidelink and the second sidelink can be signed to protect the first sidelink and the second sidelink. SR5 is a reference point between the sidelink (SL) positioning and ranging functions in the UE. In the description, the sidelink ranging session can be carried out through the SR5 reference point. PC5 is a reference point between UEs. PC5 also supports sidelink positioning and ranging operations. SR5 can be carried by the PC5 reference point.

[0048] In some embodiments of the present disclosure, security is established for a first PC5 link between the first UE and the UE-to-UE relay and a second PC5 link between the UE-to-UE relay and the second UE.

[0049] The first UE 10-1 or the auxiliary UE 10-A initiates a first sidelink ranging session between the first UE 10-1 and the auxiliary UE 10-A. The auxiliary UE 10-A initiates a second sidelink ranging session between the auxiliary UE 10-A and the second UE 10-2. In some embodiments of the present disclosure, the first UE and the auxiliary UE use a first encryption key to protect the first sidelink between the first UE and the auxiliary UE. The second UE and the auxiliary UE use a second encryption key to protect the second sidelink between the auxiliary UE and the second UE.

[0050] The auxiliary UE 10-A generates a binding key. The auxiliary UE 10-A uses the binding key to bind the first sidelink ranging session and the second sidelink ranging session. The auxiliary UE 10-A sends the binding key to the first UE and the second UE. In some embodiments of the present disclosure, the binding key is a random number or an encrypted hash of the first encryption key and the second encryption key. In some embodiments of the present disclosure, the binding includes: encrypting the content of the first sidelink ranging session and the content of the second sidelink ranging session using the binding key; or signing the first sidelink ranging session and the second sidelink ranging session using the binding key and an encrypted hash.

[0051] In some embodiments of the present disclosure, the encrypted hash is the encrypted hash of the session identifier (ID) of the first sidelink ranging session between the first UE and the auxiliary UE, the session ID of the second sidelink ranging session between the auxiliary UE and the second UE, and the session ID of the primary sidelink ranging session between the first UE and the second UE.

[0052] The first UE 10-1 or the auxiliary UE 10-A performs a first sidelink ranging operation on the first UE 10-1 and the auxiliary UE 10-A. The second UE 10-2 or the auxiliary UE 10-A performs a second sidelink ranging operation on the second UE 10-2 and the auxiliary UE 10-A.

[0053] The auxiliary UE 10-A obtains a second intermediate ranging result of the second sidelink ranging operation. The auxiliary UE 10-A uses the binding key and the second intermediate ranging result to generate a message authentication code (MAC) of the second intermediate ranging result.

[0054] The auxiliary UE 10-A sends the message authentication code and the second intermediate ranging result to the first UE 10-1. The second intermediate ranging result of the second sidelink ranging operation and the first intermediate ranging result of the first sidelink ranging operation are used to derive the final ranging result of the first UE 10-1 and the second UE 10-2.

[0055] The first UE 10-1 receives the message authentication code and the second intermediate ranging result and verifies the second intermediate ranging result using the message authentication code.

[0056] When the second intermediate ranging result passes the verification, the first UE 10-1 uses the first intermediate ranging result and the second intermediate ranging result to derive the final ranging result of the first UE 10-1 and the second UE 10-2.

[0057] Embodiments of the disclosed secure ranging service method include operations of the auxiliary UE 10-A.

[0058] Reference Figure 3 , in response to the initiation of a sidelink ranging session between the first UE 10-1 and the second UE 10-2, the auxiliary UE 10-A establishes a first sidelink between the first UE 10-1 and the auxiliary UE 10-A and a second sidelink between the auxiliary UE 10-A and the second UE 10-2 (A101). The first sidelink and the second sidelink are protected by credentials configured in the first UE 10-1, the auxiliary UE 10-A, and the second UE 10-2, respectively.

[0059] The assisting UE 10-A initiates a first sidelink ranging session between the first UE 10-1 and the assisting UE 10-A, and a second sidelink ranging session between the assisting UE 10-A and the second UE 10-2 (A102). The assisting UE 10-A generates a binding key (A103), and binds the first sidelink ranging session and the second sidelink ranging session using the binding key (A104). The assisting UE 10-A sends the binding key to the first UE and the second UE (B105).

[0060] The assisting UE 10-A performs a first sidelink ranging operation on the first UE 10-1 and the assisting UE 10-A, and a second sidelink ranging operation on the second UE 10-2 and the assisting UE 10-A (A106).

[0061] The assisting UE 10-A obtains a second intermediate ranging result of the second sidelink ranging operation (A107), and generates a message authentication code (MAC) of the second intermediate ranging result using the binding key and the second intermediate ranging result (A108).

[0062] The assisting UE 10-A sends the message authentication code and the second intermediate ranging result to the first UE 10-1, where the second intermediate ranging result of the second sidelink ranging operation and the first intermediate ranging result of the first sidelink ranging operation are used to derive the final ranging result of the first UE 10-1 and the second UE 10-2 (A109).

[0063] Note that the secure ranging service method employs multiple protection schemes, including security or PC5 link, ranging session binding, and data integrity protection of intermediate ranging results. The UE can utilize all or part of the protection schemes. For example, the MAC of the second intermediate ranging result can be optional.

[0064] The following refers to Figure 4 Embodiments of the disclosed secure ranging service method are provided.

[0065] The assisting UE 10-A executes the secure ranging service method. In response to the initiation of a sidelink ranging session between the first UE 10-1 and the second UE 10-2, the assisting UE 10-A establishes a first sidelink between the first UE 10-1 and the assisting UE 10-A, and a second sidelink between the assisting UE 10-A and the second UE 10-2 (B101). The first sidelink and the second sidelink are protected by credentials configured in the first UE 10-1, the assisting UE 10-A, and the second UE 10-2, respectively.

[0066] The assisting UE 10-A initiates a first sidelink ranging session between the first UE 10-1 and the assisting UE 10-A and a second sidelink ranging session between the assisting UE 10-A and the second UE 10-2 (B102). The assisting UE 10-A generates a binding key (B103). The assisting UE 10-A binds the first sidelink ranging session and the second sidelink ranging session using the binding key (B104), and sends the binding key to the first UE and the second UE (B105).

[0067] The assisting UE 10-A performs a first sidelink ranging operation on the first UE 10-1 and the assisting UE 10-A, and performs a second sidelink ranging operation on the second UE 10-2 and the assisting UE 10-A (B106). The assisting UE 10-A obtains a second intermediate ranging result of the second sidelink ranging operation (B107), and sends the second intermediate ranging result to the first UE 10-1 through the first sidelink ranging session bound to the second sidelink ranging session (B108). The second intermediate ranging result of the second sidelink ranging operation and the first intermediate ranging result of the first sidelink ranging operation are used to derive the final ranging results of the first UE 10-1 and the second UE 10-2.

[0068] The following refers to Figure 5 and Figure 6 embodiments of a method for providing a public secure ranging service.

[0069] Step S1: When still within the 5G network coverage, the first UE 10-1, the second UE 10-2, and the assisting UE 10-A are equipped with the parameters required for ranging / sidelink positioning services. For example, the gNB 20 (e.g., base station 20b) provides these parameters. These parameters include the parameters required to discover other UEs capable of ranging and authorized for ranging services. Depending on the security policy for PC5 interface protection, these parameters may also include security parameters for protecting the PC5 link of the UE.

[0070] Step S2: The first UE 10-1, the second UE 10-2, and the assisting UE 10-A discover each other using the discovery parameters equipped in Step S1. It is also assumed that the first UE 10-1, the second UE 10-2, and the assisting UE 10-A have been authenticated with each other and verified as authorized to perform ranging operations. At this time, the assisting UE 10-A does not know that it will be used as the assisting UE 10-A.

[0071] If the first UE 10-1 and the second UE 10-2 cannot directly discover each other, the discovery process may involve UE-to-UE relay 10-R (e.g., UE 10c). When using UE-to-UE relay 10-R, the UE-to-UE relay 10-R is also discovered by the first UE 10-1, the second UE 10-2, and the assisting UE 10-A.

[0072] Steps S3a, S3b: The first UE 10-1 and the second UE 10-2 initiate a PC5 link. If the first UE 10-1 and the second UE 10-2 cannot reach each other via a direct sidelink (e.g., PC5), UE-to-UE relay 10-R is used. The PC5 link establishment procedure is performed separately between the first UE 10-1 and the UE-to-UE relay 10-R and between the UE-to-UE relay 10-R and the second UE 10-2. During the PC5 link establishment procedure, security is established for the PC5 link between the first UE 10-1 and the UE-to-UE relay 10-R and for the PC5 link between the UE-to-UE relay 10-R and the second UE 10-2, where both connections can be protected.

[0073] Step S4: The first UE 10-1 and the second UE 10-2 initiate a ranging session. If the distance between the first UE 10-1 and the second UE 10-2 is not within the range where a direct sidelink (e.g., PC5 connection) can be established, UE-to-UE relay 10-R is used. If the first UE 10-1 and the second UE 10-2 determine that they cannot directly perform ranging operations (e.g., due to distance), the first UE 10-1 and the second UE 10-2 use the assisting UE 10-A to establish separate ranging sessions between the first UE 10-1 and the assisting UE 10-A and between the assisting UE 10-A and the second UE 10-2, respectively. The ranging session is identified by a ranging identifier (e.g., Ranging_Session_ID).

[0074] Steps S5a, S5b: Perform the PC5 link establishment process between the first UE 10-1 and the auxiliary UE 10-A, and between the auxiliary UE 10-A and the second UE 10-2 respectively. During the PC5 link establishment process, security is established between the first UE 10-1 and the auxiliary UE 10-A, and between the auxiliary UE 10-A and the second UE 10-2 respectively, where both connections can be protected. During the PC5 link establishment process, security is established between the first UE 10-1 and the UE-to-UE relay 10-R, and between the UE-to-UE relay 10-R and the second UE 10-2 respectively, where both connections can be protected. For example, the first UE 10-1 and the auxiliary UE 10-A generate and use the encryption key first UE 10-1_AssistantUE_key to protect the connection (i.e., the PC5 link) between the first UE 10-1 and the auxiliary UE 10-A, and the second UE 10-2 and the auxiliary UE 10-A generate and use the encryption key second UE 10-2_AssistantUE_key to protect the connection (i.e., the PC5 link) between the second UE 10-2 and the auxiliary UE 10-A.

[0075] Reference Figure 7 , in the embodiment, the auxiliary UE 10-A and the UE-to-UE relay 10-R can be the same UE. Note that the auxiliary UE 10-A and the UE-to-UE relay 10-R can be two separate UEs. The first UE 10-1 and / or the second UE 10-2 can access the auxiliary UE 10-A through the UE-to-UE relay 10-R. If at least one of the first UE 10-1 and the second UE 10-2 accesses the auxiliary UE 10-A through the UE-to-UE relay 10-R, then the PC5 link establishment process is performed between the auxiliary UE 10-A and the UE-to-UE relay 10-R. During the PC5 link establishment process, security is established between the auxiliary UE 10-A and the UE-to-UE relay 10-R. The UE-to-UE relay 10-R and the auxiliary UE 10-A generate and use the encryption key Relay_AssistantUE_key to protect the connection between the UE-to-UE relay 10-R and the auxiliary UE 10-A.

[0076] Step S6: The assisting UE 10-A creates a binding key (e.g., Binding_Key), which will be used to bind the ranging sessions between the first UE 10-1 and the assisting UE 10-A, between the assisting UE 10-A and the second UE 10-2, and between the first UE 10-1 and the second UE 10-2. The binding key can be an encryption key and will also be used to protect the intermediate ranging results between the assisting UE 10-A and the second UE 10-2, which will be sent from the second UE 10-2 to the first UE 10-1. Multiple different methods can be used to create the binding key. For example, the binding key can be an encrypted hash of the keys generated previously in steps S5a and S5b, Hash(UE1_AssistantUE_key and AssistantUE_UE2_key), a key generated by the assisting UE 10-A (e.g., a random number), or others. The assisting UE 10-A sends the binding key to the first UE 10-1 and the second UE 10-2 respectively.

[0077] Steps S7a, S7b: Establish ranging sessions between the first UE 10-1 and the assisting UE 10-A, and between the assisting UE 10-A and the second UE 10-2 respectively. Each ranging session is identified by a ranging identifier (e.g., Ranging_Session_ID).

[0078] Step S8: The assisting UE 10-A binds the ranging session of the first UE 10-1.

[0079] Reference Figure 7 , in the embodiment, the assisting UE 10-A and the UE-to-UE relay 10-R can be the same UE. L1 represents the first sidelink ranging session, and L2 represents the second sidelink ranging session. The first UE 10-1 establishes a PC5 link with the second UE 10-2 through the UE-to-UE relay 10-R. The second UE 10-2 establishes a PC5 link with the first UE 10-1 through the UE-to-UE relay 10-R. The first UE 10-1 initiates the first sidelink ranging session L1 with the assisting UE 10-A. The second UE 10-2 initiates the second sidelink ranging session L2 with the assisting UE 10-A. The assisting UE 10-A uses the binding key to bind the first sidelink ranging session L1 and the second sidelink ranging session L2.

[0080] Reference Figure 8, in an embodiment, L1 represents the first sidelink ranging session, and L2 represents the second sidelink ranging session. The first UE 10-1 establishes a PC5 link with the assisting UE 10-A through the UE-to-UE relay 10-R. The second UE 10-2 establishes a PC5 link with the assisting UE 10-A through the UE-to-UE relay 10-R. The first UE 10-1 initiates the first sidelink ranging session L1 with the assisting UE 10-A. The second UE 10-2 initiates the second sidelink ranging session L2 with the assisting UE 10-A. The assisting UE 10-A binds the first sidelink ranging session L1 and the second sidelink ranging session L2 using a binding key.

[0081] Reference Figure 9 , in an embodiment, L1 represents the first sidelink ranging session, and L2 represents the second sidelink ranging session. The first UE 10-1 establishes a PC5 link with the assisting UE 10-A. The second UE 10-2 establishes a PC5 link with the assisting UE 10-A. The first UE 10-1 initiates the first sidelink ranging session L1 with the assisting UE 10-A. The second UE 10-2 initiates the second sidelink ranging session L2 with the assisting UE 10-A. The assisting UE 10-A binds the first sidelink ranging session L1 and the second sidelink ranging session L2 using a binding key.

[0082] Reference Figure 10 , in an embodiment, L1 represents the first sidelink ranging session, and L2 represents the second sidelink ranging session. The first UE 10-1 establishes a PC5 link with the assisting UE 10-A. The second UE 10-2 establishes a PC5 link with the assisting UE 10-A through the UE-to-UE relay 10-R. The first UE 10-1 initiates the first sidelink ranging session L1 with the assisting UE 10-A. The second UE 10-2 initiates the second sidelink ranging session L2 with the assisting UE 10-A. The assisting UE 10-A binds the first sidelink ranging session L1 and the second sidelink ranging session L2 using a binding key.

[0083] Reference Figure 11 , in an embodiment, L1 represents the first sidelink ranging session, and L2 represents the second sidelink ranging session. The first UE 10-1 establishes a PC5 link with the assisting UE 10-A through the UE-to-UE relay 10-R1. The second UE 10-2 establishes a PC5 link with the assisting UE 10-A through the UE-to-UE relay 10-R2. The first UE 10-1 initiates the first sidelink ranging session L1 with the assisting UE 10-A. The second UE 10-2 initiates the second sidelink ranging session L2 with the assisting UE 10-A. The assisting UE 10-A binds the first sidelink ranging session L1 and the second sidelink ranging session L2 using a binding key.

[0084] Since there may be multiple ranging sessions between the first UE 10-1 and the auxiliary UE 10-A. For example, in the case where there is an ongoing ranging session between the first UE 10-1 and another UE (e.g., UE3 not shown in the exemplary call flow), in order to avoid data corruption between two ongoing ranging sessions (e.g., the ranging sessions between the first UE 10-1 and the second UE 10-2 and between the first UE 10-1 and UE3), binding the specific ranging session between the first UE 10-1 and the auxiliary UE 10-A and the ranging session between the second UE 10-2 and the auxiliary UE 10-A under it creates a primary ranging session of the ranging session between the first UE 10-1 and the auxiliary UE 10-A.

[0085] The binding of the ranging session can be completed using the binding key created in step S6 and shared between the first UE 10-1 and the second UE 10-2. The auxiliary UE 10-A can use at least one of two schemes to bind the ranging session of the first UE 10-1 using the binding key. The first scheme is to encrypt the content (e.g., payload) of the first sidelink ranging session between the first UE 10-1 and the auxiliary UE 10-A and the second sidelink ranging session between the auxiliary UE 10-A and the second UE 10-2. The encryption can include either symmetric encryption or asymmetric encryption.

[0086] The first scheme involves using an encryption algorithm and a key (i.e., the binding key) to convert (i.e., encrypt) the content in the ranging session into an unreadable format. Only the receiving UE with the correct key can decrypt and access the original content.

[0087] The second scheme is to sign the first sidelink ranging session between the first UE 10-1 and the auxiliary UE 10-A and the second sidelink ranging session between the auxiliary UE 10-A and the second UE 10-2. This second scheme involves using an encryption hash function and a private key (e.g., the binding key) to attach a digital signature to the ranging session. The signature is like a fingerprint, verifying the authenticity and integrity of the ranging session and its content. Any tampering with the link or content will invalidate the signature.

[0088] For example, a binding key may be used to create encrypted hashes of UE1_AssistantUE_SessionID, AssistantUE_UE2_SessionID, and UE1_UE2_SessionID to bind ranging sessions. The first UE 10-1_AssistantUE_SessionID is the session ID of the first sidelink ranging session between the first UE 10-1 and the assistant UE 10-A. The AssistantUE_UE2_SessionID is the session ID of the second sidelink ranging session between the assistant UE 10-A and the second UE. The UE1_UE2_SessionID is the session ID of the primary sidelink ranging session between the first UE 10-1 and the second UE 10-2.

[0089] Steps S9a, S9b: The first UE 10-1 and the assistant UE 10-A perform ranging operations, and the assistant UE 10-A and the second UE 10-2 perform ranging operations.

[0090] Steps S10a and S10b: Based on the ranging operations in steps S9a and S9b, the first UE 10-1 and the second UE 10-2 respectively derive intermediate ranging results.

[0091] Step S11: The second UE 10-2 uses the binding key to create a message authentication code (MAC) using the intermediate ranging result and session binding (i.e., the session binding created in step S8), and sends the intermediate ranging result and the message authentication code to the first UE 10-1. The message authentication code is used to protect the intermediate ranging result regardless of whether there is security protection on the PC5 link between the first UE 10-1 and the second UE 10-2 (and in the case of using the UE-to-UE relay 10-R between the first UE 10-1 and the second UE 10-2, the PC5 links between the first UE 10-1 and the UE-to-UE relay 10-R and between the UE-to-UE relay 10-R and the PC5). Since the security policy for protecting the ranging service may be different from the security policy for protecting the PC5 interface or other services on the PC5 interface, it is not possible to ensure that PC5 security is applied in every case.

[0092] Step S12: The first UE 10-1 receives the intermediate ranging result and the message authentication code from the second UE 10-2. The first UE 10-1 verifies the message authentication code using its own binding key to ensure that the intermediate ranging result has not been tampered with and that the intermediate ranging result is from the current ranging session involving the first UE 10-1, the second UE 10-2, and the auxiliary UE 10-A. Finally, the first UE 10-1 calculates the final ranging result using the intermediate ranging result from the second UE 10-2 and from the ranging session between the first UE 10-1 and the auxiliary UE 10-A. The final ranging result represents the distance measurement between the first UE 10-1 and the second UE 10-2.

[0093] To encrypt the intermediate ranging result, a MAC algorithm using a symmetric key (such as the binding key) and the plaintext intermediate ranging result can be used. Then, the MAC algorithm generates an authentication tag of a fixed length by processing the intermediate ranging result. The calculated result is the MAC of the intermediate ranging result.

[0094] The auxiliary UE 10-A attaches the MAC to the intermediate ranging result and sends the MAC and the intermediate ranging result to the receiver (such as the first UE 10-1). The receiver (such as the first UE 10-1) calculates the MAC using the same algorithm. If the MAC result obtained by the receiver (such as the first UE 10-1) through MAC calculation is equal to the MAC sent by the sender (such as the second UE 10-2), the intermediate ranging result is verified as genuine, legal, and not tampered with.

[0095] In fact, the MAC uses a security key known only to the sender (such as the second UE 10-2) and the receiver (such as the first UE 10-1). Without this information, the receiver (such as the first UE 10-1) will not be able to open, use, read, or even receive the data being sent. If the data is changed between the time the sender (such as the second UE 10-2) initiates the transmission and the receiver (such as the first UE 10-1) receives the data, the MAC information will also be affected.

[0096] Therefore, when the receiver attempts to verify the authenticity of the data, the key will not work and the final result will not match the result of the sender (such as the second UE 10-2). When such a difference is detected, the data packet can be discarded, thus protecting the receiver (such as the first UE 10-1). Examples of MAC algorithms can include one-time MAC, Carter-Wegman MAC, and keyed-hash message authentication code (HMAC).

[0097] By implementing a security mechanism to protect the intermediate ranging results during the ranging service between two UEs using the auxiliary UE 10-A, the accuracy, reliability, and security of the ranging results of the UEs using the ranging service can be ensured. The intermediate ranging results are encrypted and bound to the session and protection is provided against any potential corruption of the intermediate ranging results. This is particularly important when the auxiliary UE 10-A conducts multiple ranging sessions with multiple UEs.

[0098] Reference Figure 12 , embodiments of the present disclosure also provide a chip 70, and the chip 70 can correspond to the UE in the embodiments of the present disclosure. The chip 70 can implement the corresponding processes implemented by the UE in various methods of the embodiments of the present disclosure. The chip 70 includes a processor 71, and the processor 71 can call and run a computer program in a memory to implement the method of the embodiments of the present disclosure.

[0099] Optionally, the chip 70 may further include a memory 72. Specifically, the processor 71 can call and run a computer program in the memory 72 to implement the method of the embodiments of the present application.

[0100] In addition, the memory 72 can be a device separate from the processor 71, or can be integrated into the processor 71.

[0101] Optionally, the chip 70 may further include an input interface 73. Note that the processor 71 can control the input interface 73 to communicate with other devices or chips, specifically, to obtain messages or data sent by other devices or chips.

[0102] Optionally, the chip 70 may further include an output interface 74. Note that the processor 71 can control the output interface 74 to communicate with other devices or chips, specifically, to output messages or data to other devices or chips.

[0103] Figure 13 is a block diagram of an exemplary wireless communication system 700 according to an embodiment of the present disclosure. The embodiments described herein can be implemented into the system using any appropriately configured hardware and / or software. Figure 13 Illustrates the system 700, and the system 700 includes a radio frequency (RF) circuit 710, a baseband circuit 720, a processing unit 730, a memory / storage device 740, a display 750, a camera 760, sensors 770, and an input / output (I / O) interface 780 that are coupled to each other as shown.

[0104] The processing unit 730 may include circuitry, such as but not limited to one or more single-core or multi-core processors. The processor may include any combination of a general-purpose processor and a dedicated processor (such as a graphics processor and an application processor). The processor may be coupled to the memory / storage and is configured to execute instructions stored in the memory / storage device to enable various applications and / or operating systems to run on the system.

[0105] The baseband circuitry 720 may include circuitry, such as but not limited to one or more single-core or multi-core processors. The processor may include a baseband processor. The baseband circuitry may handle various wireless control functions that enable communication with one or more wireless networks via the RF circuitry. The wireless control functions may include but are not limited to signal modulation, encoding, decoding, radio frequency offset, etc. In some embodiments, the baseband circuitry may provide communication compatible with one or more wireless technologies. For example, in some embodiments, the baseband circuitry may support communication with 5G NR, LTE, evolved universal terrestrial radio access network (EUTRAN), and / or other wireless metropolitan area network (WMAN), wireless local area network (WLAN), wireless personal area network (WPAN). Embodiments where the baseband circuitry is used to support wireless communication of multiple wireless protocols may be referred to as multi-mode baseband circuitry. In various embodiments, the baseband circuitry 720 may include circuitry for processing signals that are not strictly considered to be at baseband frequencies. For example, in some embodiments, the baseband circuitry may include circuitry for processing intermediate frequency (between baseband frequency and radio frequency) signals.

[0106] The RF circuitry 710 may communicate with a wireless network using modulated electromagnetic radiation through a non-solid medium. In various embodiments, the RF circuitry may include switches, filters, amplifiers, etc. to facilitate communication with the wireless network. In various embodiments, the RF circuitry 710 may include circuitry for processing signals that are not strictly considered to be at radio frequencies. For example, in some embodiments, the RF circuitry may include circuitry for processing intermediate frequency (between baseband frequency and radio frequency) signals.

[0107] In various embodiments, the transmitter circuitry, control circuitry, or receiver circuitry discussed above with respect to the UE, eNB, or gNB (e.g., BS20a) 20 may be embodied, in whole or in part, in one or more of the RF circuitry, baseband circuitry, and / or processing unit. As used herein, "circuitry" may refer to, be part of, or include: an application specific integrated circuit (ASIC), an electronic circuit, a processor (shared, dedicated, or group), and / or a memory (shared, dedicated, or group) that executes one or more software or firmware programs, combinational logic circuitry, and / or other suitable hardware components that provide the described functionality. In some embodiments, the electronic device circuitry may be implemented in one or more software or firmware modules, or the functionality associated with the circuitry may be implemented by one or more software or firmware modules. In some embodiments, some or all of the constituent components of the baseband circuitry, processing unit, and / or memory / storage device may be implemented together on a system on a chip (SOC).

[0108] The memory / storage device 740 may be used to load and store, for example, system data and / or instructions. The memory / storage device of one embodiment may include any combination of suitable volatile memory (e.g., dynamic random access memory (DRAM)) and / or non-volatile memory (e.g., flash memory). In various embodiments, the I / O interface 780 may include one or more user interfaces for enabling a user to interact with the system and / or a peripheral component interface for enabling peripheral components to interact with the system. The user interface may include, but is not limited to, a physical keyboard or keypad, a touchpad, speakers, a microphone, etc. The peripheral component interface may include, but is not limited to, a non-volatile memory port, a universal serial bus (USB) port, an audio jack, and a power interface.

[0109] In various embodiments, sensor 770 may include one or more sensing devices to determine environmental conditions and / or location information related to the system. In some embodiments, the sensor may include, but is not limited to, a gyroscope sensor, an accelerometer, a proximity sensor, an ambient light sensor, and a positioning unit. The positioning unit may also be part of or interact with the baseband circuit and / or RF circuit to communicate with components of a positioning network (such as global positioning system (GPS) satellites). In various embodiments, display 750 may include a display, such as a liquid crystal display and a touch screen display. In various embodiments, system 700 may be a mobile computing device, such as, but not limited to, a laptop computing device, a tablet computing device, a netbook, an ultrabook, a smart phone, etc. In various embodiments, the system may have more or fewer components and / or a different architecture. Where appropriate, the methods described herein may be implemented as a computer program. The computer program may be stored on a storage medium, such as a non-transitory storage medium.

[0110] Embodiments of the present disclosure are combinations of technologies / processes that may be adopted in 3GPP specifications to create end products.

[0111] Those of ordinary skill in the art can understand that each of the units, algorithms, and steps described and disclosed in the embodiments of the present disclosure is implemented using electronic hardware or a combination of computer software and electronic hardware. Whether these functions run in hardware or software depends on the conditions of the application and the design requirements of the technical solution. Those of ordinary skill in the art can implement the functions of each specific application in different ways, but such implementation should not exceed the scope of the present disclosure. Those of ordinary skill in the art can understand that since the working processes of the above systems, devices, and units are basically the same, the working processes of the systems, devices, and units in the above embodiments can be referred to. For the convenience and brevity of description, these working processes will not be described in detail.

[0112] It should be understood that the systems, devices, and methods disclosed in the embodiments of the present disclosure may be implemented in other ways. The above embodiments are merely exemplary, and the division of units is only based on logical functions, and there are other divisions in implementation. Multiple units or components may be combined or integrated into another system. Some features may also be omitted or skipped. On the other hand, the mutual coupling, direct coupling, or communication coupling shown or discussed is realized indirectly or communicatively in some form, such as electrically, mechanically, or otherwise, through some ports, devices, or units.

[0113] The units that are used for illustration and are separate components are physically separated or not physically separated. The units for display are physical units or not physical units, i.e., located in one place or distributed over multiple network units. Part or all of the units are used according to the purpose of the embodiment. In addition, each functional unit in each embodiment can be integrated in one processing unit, physically independent, or integrated with two or more units in one processing unit.

[0114] If a software functional unit is implemented, used, and sold as a product, it can be stored in a readable storage medium in a computer. Based on this understanding, the technical solutions proposed in this disclosure can be implemented in whole or in part in the form of a software product. Alternatively, a part of the technical solutions that are beneficial to traditional technologies can be implemented in the form of a software product. The software product in the computer is stored in a storage medium, which includes a plurality of commands for a computing device (such as a personal computer, server 41, or network device) to run all or part of the steps disclosed in the embodiments of this disclosure. The storage medium includes a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a floppy disk, or other media that can store program codes.

[0115] Although this disclosure has been described in connection with the embodiments that are considered to be the most practical and the most preferred, it should be understood that this disclosure is not limited to the disclosed embodiments, but is intended to cover various arrangements made without departing from the scope of the broadest interpretation of the appended claims.

Claims

1. A method for a secure ranging service performed by a UE acting as an assisting user equipment (UE), comprising: In response to the initiation of a sidelink ranging session between a first UE and a second UE, establishing a first sidelink between the first UE and the assisting UE and a second sidelink between the assisting UE and the second UE, wherein the first sidelink and the second sidelink are protected; Initiating a first sidelink ranging session between the first UE and the assisting UE and a second sidelink ranging session between the assisting UE and the second UE; Generating a binding key; Binding the first sidelink ranging session and the second sidelink ranging session using the binding key; Sending the binding key to the first UE and the second UE; Performing a first sidelink ranging operation on the first UE and the assisting UE, and performing a second sidelink ranging operation on the second UE and the assisting UE; Obtaining a second intermediate ranging result of the second sidelink ranging operation; and Sending the second intermediate ranging result to the first UE via the first sidelink ranging session bound to the second sidelink ranging session, wherein the second intermediate ranging result of the second sidelink ranging operation and the first intermediate ranging result of the first sidelink ranging operation are used to derive the final ranging result between the first UE and the second UE.

2. The secure ranging service method according to claim 1, further comprising: Generating a message authentication code (MAC) of the second intermediate ranging result using the binding key and the second intermediate ranging result; And Sending the message authentication code to the first UE.

3. The safety ranging service method according to claim 1, wherein The first sidelink and the second sidelink are protected by credentials configured in the first UE, the assisting UE, and the second UE.

4. The safety ranging service method according to claim 1, wherein, The assisting UE is equipped with parameters required for ranging / sidelink positioning services.

5. The safety ranging service method according to claim 4, wherein The parameters include parameters required to discover other UEs capable of ranging and authorized for ranging services.

6. The safety ranging service method according to claim 4, wherein, The parameters include security parameters for protecting the PC5 links of the first UE, the second UE, and the assisting UE.

7. The safety ranging service method according to claim 1, wherein, Before the establishing, the method includes: Discovering the first UE and the second UE.

8. The safety ranging service method according to claim 7, wherein, The assisting UE discovers at least one of the first UE or the second UE through UE-to-UE relay.

9. The safety ranging service method according to claim 8, wherein, Establishing security for a first PC5 link between the first UE and the UE-to-UE relay and a second PC5 link between the UE-to-UE relay and the second UE.

10. The secure ranging service method according to claim 1, further comprising: Protecting the first sidelink between the first UE and the assisting UE using a first encryption key; And Protecting the second sidelink between the assisting UE and the second UE using a second encryption key.

11. The safety ranging service method according to claim 10, wherein, The binding key is a random number or an encrypted hash of the first encryption key and the second encryption key.

12. The safety ranging service method according to claim 1, wherein, The binding includes: Encrypting the content of the first sidelink ranging session and the content of the second sidelink ranging session using the binding key; or Sign the first sidelink ranging session and the second sidelink ranging session using the binding key and the cryptographic hash.

13. The safety ranging service method according to claim 12, wherein, The cryptographic hash is a cryptographic hash of the session identifier (ID) of the first sidelink ranging session between the first UE and the auxiliary UE, the session ID of the second sidelink ranging session between the auxiliary UE and the second UE, and the session ID of the primary sidelink ranging session between the first UE and the second UE.

14. A user equipment (UE) comprising: A processor for invoking and running a computer program stored in a memory to cause the device equipped with the processor to execute the method according to any one of claims 1 to 13.

15. A secure ranging service system comprising: A first user equipment (UE) for requesting the initiation of a sidelink ranging session of the first UE; A second UE for serving as the target UE of the sidelink ranging session; And An auxiliary UE for establishing a first sidelink between the first UE and the auxiliary UE and a second sidelink between the auxiliary UE and the second UE in response to the initiation of the sidelink ranging session between the first UE and the second UE, wherein the first sidelink and the second sidelink are protected; Wherein the first UE or the auxiliary UE initiates a first sidelink ranging session between the first UE and the auxiliary UE; The auxiliary UE initiates a second sidelink ranging session between the auxiliary UE and the second UE; The auxiliary UE generates a binding key; The auxiliary UE binds the first sidelink ranging session and the second sidelink ranging session using the binding key; The auxiliary UE sends the binding key to the first UE and the second UE; The first UE or the auxiliary UE performs a first sidelink ranging operation on the first UE and the auxiliary UE; The second UE or the auxiliary UE performs a second sidelink ranging operation on the second UE and the auxiliary UE; The auxiliary UE obtains a second intermediate ranging result of the second sidelink ranging operation; The auxiliary UE generates a message authentication code (MAC) of the second intermediate ranging result using the binding key and the second intermediate ranging result; and The auxiliary UE sends the message authentication code and the second intermediate ranging result to the first UE, wherein the second intermediate ranging result of the second sidelink ranging operation and the first intermediate ranging result of the first sidelink ranging operation are used to derive the final ranging result of the first UE and the second UE; The first UE receives the message authentication code and the second intermediate ranging result, and verifies the second intermediate ranging result using the message authentication code; and When the second intermediate ranging result passes the verification, the first UE uses the first intermediate ranging result and the second intermediate ranging result to derive the final ranging result of the first UE and the second UE.

16. The safety ranging service system according to claim 15, wherein, The first sidelink and the second sidelink are protected by credentials configured in the first UE, the assisting UE, and the second UE.

17. The safety ranging service system according to claim 15, wherein, The assisting UE is equipped with parameters required for ranging / sidelink positioning services.

18. The safety ranging service system according to claim 17, wherein, The parameters include parameters required to discover other UEs capable of ranging and authorized for ranging services.

19. The safety ranging service system according to claim 17, wherein, The parameters include security parameters for protecting the PC5 links of the first UE, the second UE, and the assisting UE.

20. The safety ranging service system according to claim 15, wherein Before the establishment, the assisting UE discovers the first UE and the second UE.

21. The safety ranging service system according to claim 20, wherein The assisting UE discovers at least one of the first UE or the second UE through UE-to-UE relay.

22. The safety ranging service system according to claim 21, wherein Security is established for a first PC5 link between the first UE and the UE-to-UE relay and a second PC5 link between the UE-to-UE relay and the second UE.

23. The safety ranging service system according to claim 15, wherein, The first UE and the assisting UE use a first encryption key to protect the first sidelink between the first UE and the assisting UE; and The second UE and the assisting UE use a second encryption key to protect the second sidelink between the assisting UE and the second UE.

24. The safety ranging service system according to claim 23, wherein, The binding key is a random number or an encrypted hash of the first encryption key and the second encryption key.

25. The safety ranging service system according to claim 15, wherein, The binding includes: encrypting the content of the first sidelink ranging session and the content of the second sidelink ranging session using the binding key; or signing the first sidelink ranging session and the second sidelink ranging session using the binding key and an encrypted hash.

26. The safety ranging service system according to claim 25, wherein, The encrypted hash is an encrypted hash of the session identifier (ID) of the first sidelink ranging session between the first UE and the assisting UE, the session ID of the second sidelink ranging session between the assisting UE and the second UE, and the session ID of the primary sidelink ranging session between the first UE and the second UE.

Images