Information processing method, device and system

Abstract

The embodiment of the invention provides an information processing method, device and system, applied to a first network element, the method comprises the following steps: encrypting first information to obtain a first ciphertext of the first information, the first information comprising a first keyword; and sending second information to a second network element, wherein the second information comprises the first ciphertext of the first information, the type of the first keyword and the public key identifier. By adopting the means, the privacy protection intensity can be improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to an information processing method, device, and system. Background Art

[0002] Data is a key factor in the digital world. As communications converge with capabilities beyond connectivity, such as sensing and computing, massive amounts of data will be generated. These capabilities not only serve the network or device itself but also provide services outside the network. Consequently, they may be vulnerable to various security and privacy attacks from both internal and external entities.

[0003] How to fully explore and realize the value of data while meeting high security and privacy requirements, and how to improve privacy protection while realizing new network capabilities and new services are issues that need to be urgently addressed. Summary of the Invention

[0004] This application discloses an information processing method, device, and system that can achieve privacy protection.

[0005] In a first aspect, an embodiment of the present application provides an information processing method, applied to a first network element, the method comprising: the first network element encrypting first information to obtain first ciphertext of the first information, where the first information includes a first keyword. The first network element further sends second information to a second network element, where the second information includes the first ciphertext of the first information, a type of the first keyword, and a public key identifier.

[0006] In the embodiment of the present application, the second information sent by the first network element to the second network element includes the first ciphertext of the first information. The second network element cannot obtain the plaintext of the first information, thereby protecting privacy. In addition, the second information also includes the type and public key identifier of the first keyword, allowing the second network element to perform ciphertext retrieval based on the type and public key identifier of the first keyword and further perform ciphertext calculations. In other words, information or data can be exchanged and used while protecting privacy.

[0007] In one possible implementation, the type of the first keyword may be an identification type. The identification type may be, for example, a Subscription Permanent Identifier (SUPI) type. Based on the type of the first keyword in the second information, the second network element can retrieve the ciphertext corresponding to the type of the first keyword when performing a ciphertext search.

[0008] In a possible implementation, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station (or location area, etc.) identifier, and a serial number. The network identifier may be, for example, a Public Land Mobile Network (PLMN) identifier (ID), a core network (CN)-ID, or a Network Identifier (NID); the network element identifier may be, for example, an Access and Mobility management Function (AMF) ID or a Radio Network Controller (RNC) ID; the user identifier may be, for example, a permanent identifier or a temporary identifier, such as a SUPI or a self-control identity (scID); the location area or base station identifier may be, for example, a Location Area Identification (LAI), a Routing Area Identification (RAI), a Cell Global Identification (CGI), or a Base Station Identify Code (BSIC); the serial number may be, for example, an incrementing sequence used to identify key updates.

[0009] The public key identifier in the second information can be used to determine the index information of the computing key required for ciphertext retrieval. For example, a PLMN-level computing key or a user-level computing key can be selected.

[0010] In a possible implementation, the second information further includes at least one of the following: a data category, home network identifier information, routing indication information, and protection scheme identifier information.

[0011] Among them, the data category can be used to determine a preset database. The home network identifier information can be used to find a computing key in the ciphertext area. The routing indication information can be used to route network signaling carrying the first ciphertext to a network element that can serve the user. The protection scheme identifier information can represent the type of encryption algorithm.

[0012] In a possible implementation, at least one of the first network element and the second network element is a network element in a wireless network.

[0013] In a possible implementation, the first keyword may be globally unique identification information in the first information. Exemplarily, the first keyword is at least one of a user identification and a device identification.

[0014] In a possible implementation, the first information includes at least one of the following: user identity information, user subscription information, perception information, authentication and / or key information.

[0015] The user identity information may be, for example, at least one of the following: (1) User identifier. The user identifier may be a permanent identifier, such as a user permanent identifier SUPI (International Mobile Subscription Identity (IMSI), Network Specific Identifier (NSI), Global Line Identifier (GLI), Global Cable Identifier (GCI), etc.), Generic Public Subscription Identifier (GPSI) (Mobile Subscriber International ISDN Number (MSISDN), external identifier, etc.), self-controlled identity identifier scID, etc.; or, the user identifier may also be a temporary identifier, such as a Globally Unique Temporary UE Identity (GUTI), Temporary Mobile Subscriber Identity (TMSI), SUPI hash value, random id, etc. (2) Device identifier. The device identifier may be a permanent identifier, such as a Permanent Equipment Identifier (PEI) (International Mobile station Equipment Identity (IMEI), Mobile station Equipment Identity and Software Version number (IMEISV), IEEE Extended Unique Identifier (EUI-64), etc.), media access control (MAC) address, etc.; or, the device identifier may also be a temporary identifier, such as an IP address (IPv4, IPv6) assigned to the device, etc. (3) User physiological characteristics. The user physiological characteristics may be, for example, heartbeat, breathing, voice characteristics, portrait, fingerprint, iris, etc. (4) User digital assets, etc. The user digital assets may be a digital avatar, such as a virtual portrait; or, the user digital assets may also be digital items in the virtual world.

[0016] The user subscription information may be general service data, such as user type, access type, access area, quality of service (QoS), roaming restrictions, etc.; the user subscription information may also be a Service Profile, such as subscribed mobility management (MM) / session management (SM), slice service parameters, user-specific configurations and parameters (such as charging).

[0017] The perception information may be, for example, location information, such as accurate information like E-UTRAN Cell Global Identifier (ECGI) of the access network, Tracking Area Identity (TAI), longitude and latitude, etc.; or, the perception information may also be historical information, such as signaling history, data access history, etc. Of course, it may also be other perception data (such as characteristics of the environment and / or objects in the environment, distance (range), angle, or instantaneous linear velocity of the object, etc.).

[0018] The authentication information may be, for example, Operator Variant Algorithm Configuration Field (OP), authentication key (Key identifier, KI), cipher key K4, operator code (Opc), etc. The key information may be, for example, the user plane UP key.

[0019] In a possible implementation, the first network element also encrypts the first information based on an encryption key to obtain the first ciphertext of the first information.

[0020] In a possible implementation, the encryption key is determined based on at least one of a home network key, a serving network name, a sequence number, an encryption algorithm identifier, and a common reference quantity. Exemplarily, the encryption key is a PLMN-level key.

[0021] In another possible implementation, the encryption key is determined based on at least one of a user key, a serving network name, a sequence number, a user identifier, an algorithm identifier, and a common reference quantity. Exemplarily, the encryption key is a UE-level key.

[0022] In a possible implementation, the first network element performs initial encryption on the first information based on the encryption key to obtain the initial ciphertext of the first information. The first network element also performs blinding processing on the initial ciphertext of the first information to obtain the first ciphertext of the first information.

[0023] This blinding process can be understood as re - adding noise to the initial ciphertext. Without the need for re - encryption, this blinding process can make the ciphertexts corresponding to the same plaintext information different, and can prevent the second network element from obtaining associated information by directly comparing the received different ciphertexts.

[0024] In a possible implementation, the first network element receives third information from the third network element, and the third information includes at least one of the encryption key, encryption parameters, and decryption key.

[0025] In a possible implementation, the first network element is a network element in the home public land mobile network (HPLMN), and the second network element is a network element in the visited public land mobile network (VPLMN).

[0026] Or, the first network element is a network element with a high trust level that stores at least one of important data such as subscription data, authentication parameters, permanent identity identifiers, and user root keys in the home network, such as at least one of network elements such as AUSF, UDM, ARPF, and SIDF in a 5G network; the second network element is a network element with a low trust level that provides at least one of functions such as user plane function, session management, storage, and access management, such as at least one of network elements such as UPF, SMF, PCF, NRF, NSSF, and AMF in a 5G network.

[0027] Or, the first network element is a management plane network element of a network element with a subscription data management function, and the second network element is a control plane network element, such as the management plane network element and the control plane network element of UDM in a 5G network.

[0028] Or, at least one of the first network element and the second network element is a virtual network element, and the trust area of the first information of the first network element does not include the second network element, that is, the first network element cannot send the plaintext of the first information to the second network element.

[0029] Or, at least one of the first network element and the second network element is a radio access network (RAN) node, and the trust area of the first information of the first network element does not include the second network element.

[0030] Or, the first network element is a user equipment (UE), and the second network element is a RAN node and / or network function (NF).

[0031] Or, the first network element is a network element in a third - party server or application layer, and the second network element is a network element in a wireless network.

[0032] Or, the first network element is a network element in a wireless network, and the second network element is a network element in a third - party server or application layer.

[0033] Alternatively, the first network element is a UE or an application program (APP) server, and the second network element is a RAN node and / or an NF.

[0034] The first network element is the trusted domain of the first information, and the second network element is the untrusted domain of the first information. Limited by specific high privacy protection requirements, the untrusted domain second network element cannot obtain the plaintext of the first information. Based on the information processing method provided in the embodiments of the present application, the untrusted domain second network element can process based on the ciphertext of the first information, such as ciphertext retrieval or ciphertext calculation, etc. By adopting this method, information can be interacted with and used while protecting privacy.

[0035] In a second aspect, an embodiment of the present application provides an information processing method, which is applied to a second network element. The method includes: the second network element receives second information from the first network element, where the second information includes the first ciphertext of the first information, the type of the first keyword, and the public key identifier, and the first information includes the first keyword. The second network element further determines the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

[0036] In the embodiments of the present application, the second information received by the second network element includes the first ciphertext of the first information. The second network element cannot know the plaintext of the first information, which can protect privacy. In addition, the second information further includes the type of the first keyword and the public key identifier. The second network element can perform ciphertext retrieval based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to determine the association information between the second ciphertext and the first ciphertext of the first information. Further, ciphertext calculation can also be performed. By adopting this means, information or data can be interacted with and used while protecting privacy.

[0037] This association information can be understood as that both the second ciphertext and the first ciphertext of the first information are ciphertexts containing the same keyword (the first keyword). That is, there is a correlation between the first ciphertext and the second ciphertext. For example, when the keyword is the user permanent identifier, both the first ciphertext and the second ciphertext are the ciphertexts corresponding to the user permanent identifier, that is, both the first ciphertext and the second ciphertext are related to the user permanent identifier.

[0038] In a possible implementation manner, the second network element retrieves in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain the second ciphertext, where the second ciphertext is the ciphertext corresponding to the fourth information in the preset database, and the fourth information includes the first keyword. The second network element determines the association information between the second ciphertext of the fourth information and the first ciphertext of the first information.

[0039] In a possible implementation, the first ciphertext of the first information is the same (i.e., equal) to the second ciphertext of the fourth information. It can be understood that the plaintexts of the first information and the fourth information are the same, and the ciphertexts are also the same.

[0040] In another possible implementation, the first information is the same as the fourth information, but the first ciphertext of the first information is not equal to the second ciphertext of the fourth information. That is, the first ciphertext of the first information and the second ciphertext of the fourth information are generated based on different encryption keys or different encryption parameters. That is to say, the plaintexts of the first information and the fourth information are the same, but the ciphertexts are different.

[0041] In yet another possible implementation, the first information is not equal to the fourth information and only contains the same first keyword. In this example, the plaintexts of the two are different, and the ciphertexts are also different.

[0042] Exemplarily, after the second network element determines the association information between the second ciphertext and the first ciphertext of the first information, it can perform classified storage and other processing. For example, after determining that both the first ciphertext and the second ciphertext are the ciphertexts of UE1, the first ciphertext and the second ciphertext are both stored in the information corresponding to UE1.

[0043] In a possible implementation, the second network element determines a target key from one or more computing keys according to the public key identifier. The second network element also performs a search in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain the second ciphertext.

[0044] In a possible implementation, the second network element receives fifth information from the fourth network element, and the fifth information includes at least one of the one or more computing keys and computing parameters.

[0045] In a possible implementation, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

[0046] In a possible implementation, at least one of the first network element and the second network element is a network element in a wireless network.

[0047] In a possible implementation, the first keyword is at least one of a user identifier and a device identifier.

[0048] In a possible implementation, the second information further includes at least one of the following: data category, home network identification information, routing indication information, and protection scheme identification information.

[0049] In a possible implementation, the first information includes at least one of the following: user identity information, user subscription information, perception information, authentication and / or key information.

[0050] In a possible implementation, the first network element is a network element in the home public land mobile network (HPLMN), and the second network element is a network element in the visited public land mobile network (VPLMN).

[0051] Alternatively, the first network element is a high-trust-level network element in the home network that stores at least one of important data such as subscription data, authentication parameters, permanent identity identifiers, and user root keys, such as at least one of network elements such as the authentication server function (AUSF), unified data management (UDM), access and mobility management function (ARPF), and security identifier de-concealment function (SIDF) in a 5G network; the second network element is a low-trust-level network element that provides at least one of functions such as user plane function, session management, storage, and access management, such as at least one of network elements such as the user plane function (UPF), session management function (SMF), policy control function (PCF), network repository function (NRF), network slice selection function (NSSF), and access and mobility management function (AMF) in a 5G network.

[0052] Alternatively, the first network element is a management plane network element of a network element with a subscription data management function, and the second network element is a control plane network element, such as the management plane network element and the control plane network element of the UDM in a 5G network.

[0053] Alternatively, at least one of the first network element and the second network element is a virtual network element, and the trusted area of the first information of the first network element does not include the second network element, that is, the first network element cannot send the plaintext of the first information to the second network element.

[0054] Alternatively, at least one of the first network element and the second network element is a radio access network (RAN) node, and the trusted area of the first information of the first network element does not include the second network element.

[0055] Alternatively, the first network element is a user equipment (UE), and the second network element is a RAN node and / or a network function (NF).

[0056] Alternatively, the first network element is a third-party server or a network element in the application layer, and the second network element is a network element in the wireless network.

[0057] Alternatively, the first network element is a network element in the wireless network, and the second network element is a third-party server or a network element in the application layer.

[0058] Alternatively, the first network element is a UE or an application server (APP), and the second network element is a RAN node and / or an NF.

[0059] In a third aspect, an embodiment of the present application provides an information processing device. This device can be used for the first network element in the first aspect. This device can be the first network element, or a device within the first network element (such as a chip, or a chip system, or a circuit), or a device that can be used in combination with the first network element, or a logical module or software that can implement all or part of the functions of the first network element.

[0060] In a possible implementation, the device may include modules or units corresponding one by one to the methods / operations / steps / actions described in the first aspect. These modules or units can be hardware circuits, software, or a combination of hardware circuits and software.

[0061] In a possible implementation manner, the device includes: a processing module, configured to encrypt the first information to obtain a first ciphertext of the first information, where the first information includes a first keyword; a communication module, configured to send second information to a second network element, where the second information includes the first ciphertext of the first information, the type of the first keyword, and a public key identifier.

[0062] In a possible implementation manner, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

[0063] In a possible implementation manner, at least one of the first network element and the second network element is a network element in a wireless network.

[0064] In a possible implementation manner, the first keyword is at least one of a user identifier and a device identifier.

[0065] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identifier information, routing indication information, and protection scheme identifier information.

[0066] In a possible implementation manner, the first information includes at least one of the following: user identity information, user subscription information, perception information, and authentication and / or key information.

[0067] In a possible implementation manner, the processing module is further configured to:

[0068] Encrypt the first information based on an encryption key to obtain a first ciphertext of the first information.

[0069] In a possible implementation manner, the encryption key is determined based on at least one of a home network key, a service network name, a serial number, an encryption algorithm identifier, and a common reference quantity.

[0070] In another possible implementation, the encryption key is determined based on at least one of a user key, a service network name, a serial number, a user identifier, an algorithm identifier, and a common reference quantity.

[0071] In one possible implementation, the processing module is further configured to:

[0072] Perform initial encryption on the first information based on the encryption key to obtain an initial ciphertext of the first information;

[0073] Perform blinding processing on the initial ciphertext of the first information to obtain a first ciphertext of the first information.

[0074] In one possible implementation, the communication module is further configured to:

[0075] Receive third information from a third network element, where the third information includes at least one of the encryption key, encryption parameters, and decryption key.

[0076] In one possible implementation, the device is a network element in a home network HPLMN, and the second network element is a network element in a visited network VPLMN.

[0077] Alternatively, the device is a high-trust-level network element in the home network that stores at least one of important data such as subscribed data, authentication parameters, permanent identity identifiers, and user root keys, such as at least one of network elements AUSF, UDM, ARPF, and SIDF in a 5G network; the second network element is a low-trust-level network element that provides at least one of functions such as user plane function, session management, storage, and access management, such as at least one of network elements UPF, SMF, PCF, NRF, NSSF, and AMF in a 5G network.

[0078] Alternatively, the device is a management plane network element of a network element with a subscribed data management function, and the second network element is a control plane network element, such as the management plane network element and the control plane network element of UDM in a 5G network.

[0079] Alternatively, at least one of the device and the second network element is a virtual network element, and the trust area of the first information of the device does not include the second network element, that is, the device cannot send the plaintext of the first information to the second network element.

[0080] Alternatively, at least one of the device and the second network element is a radio access network RAN node, and the trust area of the first information of the device does not include the second network element.

[0081] Alternatively, the device is a UE, and the second network element is a RAN node and / or NF.

[0082] Alternatively, the device is a third-party server or a network element in the application layer, and the second network element is a network element in the wireless network.

[0083] Alternatively, the device is a network element in the wireless network, and the second network element is a third-party server or a network element in the application layer.

[0084] Alternatively, the device is a UE or an application program APP server, and the second network element is a RAN node and / or NF.

[0085] In a fourth aspect, an information processing device is provided in an embodiment of the present application. The device can be used for the second network element in the second aspect. The device can be the second network element, or a device in the second network element (for example, a chip, or a chip system, or a circuit), or a device that can be used in combination with the second network element, or a logical module or software that can implement all or part of the functions of the second network element.

[0086] In a possible implementation, the device may include modules or units corresponding one by one to the methods / operations / steps / actions described in the second aspect. The modules or units can be hardware circuits, software, or a combination of hardware circuits and software.

[0087] In a possible implementation manner, the device includes: a communication module, configured to receive second information from a first network element, where the second information includes a first ciphertext of first information, a type of a first keyword, and a public key identifier, and where the first information includes the first keyword;

[0088] a processing module, configured to determine association information between a second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

[0089] In a possible implementation manner, the processing module is configured to:

[0090] retrieve in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain a second ciphertext, where the second ciphertext is a ciphertext corresponding to fourth information in the preset database, and the fourth information includes the first keyword;

[0091] determine the association information between the second ciphertext and the first ciphertext of the first information.

[0092] In a possible implementation manner, the processing module is further configured to: determine a target key from one or more calculated keys according to the public key identifier;

[0093] Retrieve in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain a second ciphertext.

[0094] In a possible implementation manner, the communication module is further configured to: receive fifth information from a fourth network element, where the fifth information includes at least one of the one or more computing keys and computing parameters.

[0095] In a possible implementation manner, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

[0096] In a possible implementation manner, at least one of the first network element and the second network element is a network element in a wireless network.

[0097] In a possible implementation manner, the first keyword is at least one of a user identifier and a device identifier.

[0098] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identifier information, routing indication information, and protection scheme identifier information.

[0099] In a possible implementation manner, the first information includes at least one of the following: user identity information, user subscription information, perception information, and authentication and / or key information.

[0100] In a possible implementation manner, the first network element is a network element in a home public land mobile network (HPLMN), and the device is a network element in a visited public land mobile network (VPLMN).

[0101] Alternatively, the first network element is a high-trust-level network element in the home network that stores at least one of important data such as subscription data, authentication parameters, permanent identity identifiers, and user root keys, such as at least one of network elements such as the authentication server function (AUSF), the unified data management (UDM), the access and mobility management function (ARPF), and the security identifier de-concealer function (SIDF) in a 5G network; the device is a low-trust-level network element that provides at least one of functions such as user plane function, session management, storage, and access management, such as at least one of network elements such as the user plane function (UPF), the session management function (SMF), the policy control function (PCF), the network repository function (NRF), the network slice selection function (NSSF), and the authentication management field (AMF) in a 5G network.

[0102] Alternatively, the first network element is a management plane network element of a network element with a subscription data management function, and the device is a control plane network element, such as the management plane network element and the control plane network element of the UDM in a 5G network.

[0103] Alternatively, at least one of the first network element and the device is a virtual network element, and the trust area of the first information of the first network element does not include the device, that is, the first network element cannot send the plaintext of the first information to the device.

[0104] Alternatively, at least one of the first network element and the device is a radio access network (RAN) node, and the trust area of the first information of the first network element does not include the device.

[0105] Alternatively, the first network element is a UE, and the device is a RAN node and / or NF.

[0106] Alternatively, the first network element is a third-party server or a network element in the application layer, and the device is a network element in the wireless network.

[0107] Alternatively, the first network element is a network element in the wireless network, and the device is a third-party server or a network element in the application layer.

[0108] Alternatively, the first network element is a UE or an application (APP) server, and the device is a RAN node and / or NF.

[0109] In a fifth aspect, an embodiment of the present application provides an information processing method, which is applied to a third network element. The method includes: receiving a first request for obtaining an encryption key, where the first request further includes the privacy computing capability of the first network element; and sending third information including at least one of an encryption key, encryption parameters, and a decryption key.

[0110] Exemplarily, the first network element may be a network element in a home public land mobile network (HPLMN), or the first network element is a UE or the like.

[0111] In a possible implementation manner, the encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a common reference quantity.

[0112] In another possible implementation manner, the encryption key is determined based on at least one of a user key, a serving network name, a serial number, a user identifier, an algorithm identifier, and a common reference quantity.

[0113] In a possible implementation manner, the method further includes: receiving a second request for obtaining a computing key, where the second request further includes the privacy computing capability of the second network element; and sending sixth information including at least one of a computing key and computing parameters.

[0114] Exemplarily, the second network element may be a network element in a visited public land mobile network (VPLMN), or the second network element is a RAN node or the like.

[0115] In a possible implementation, the method further includes: receiving a first request from a first network element, where the first request is used to obtain an encryption key, and the first request further includes the privacy computing capability of the first network element; and sending the above-mentioned third information to the first network element, where the third information includes at least one of an encryption key, encryption parameters, and a decryption key.

[0116] In a possible implementation, the method further includes: receiving a second request from a fourth network element, where the second request is used to obtain a computing key, and the second request further includes the privacy computing capability of a second network element; and sending sixth information, where the sixth information includes at least one of a computing key and computing parameters.

[0117] Exemplarily, the fourth network element may be a Privacy Computing Management Unit (PCM). For example, the fourth network element is the PCM corresponding to the ciphertext area.

[0118] In a sixth aspect, an embodiment of the present application provides an information processing method, which is applied to a fourth network element. The method includes: receiving a third request, where the third request is used to obtain a computing key, and the third request further includes the privacy computing capability of a second network element; and sending a second request, where the second request is used to obtain a computing key, and the request further includes the privacy computing capability of the second network element; and receiving seventh information, where the seventh information includes at least one of a computing key and computing parameters; and sending fifth information, where the fifth information includes at least one of the computing key and computing parameters.

[0119] Exemplarily, the second network element may be a network element in a visited network VPLMN, or the second network element is a RAN node, etc.

[0120] In a possible implementation, the method further includes: receiving a third request from a second network element, where the third request is used to obtain a computing key, and the request further includes the privacy computing capability of the second network element; and sending a second request to a third network element, where the second request is used to obtain a computing key, and the second request further includes the privacy computing capability of the second network element; and receiving seventh information from the third network element, where the seventh information includes at least one of a computing key and computing parameters; and sending fifth information to the second network element, where the fifth information includes at least one of the computing key and computing parameters.

[0121] Exemplarily, the third network element may be a Privacy Computing Management Unit PCM. For example, the third network element is the PCM corresponding to the plaintext area.

[0122] In a seventh aspect, an embodiment of the present application provides an information processing device. This device can be used for the third network element in the fifth aspect. This device can be the third network element, or a device in the third network element (such as a chip, or a chip system, or a circuit), or a device that can be used in combination with the third network element, or a logic module or software that can implement all or part of the functions of the third network element.

[0123] In a possible implementation, the device may include modules or units corresponding one by one to the methods / operations / steps / actions described in the fifth aspect. These modules or units can be hardware circuits, or software, or a combination of hardware circuits and software.

[0124] In a possible implementation manner, the device includes: a communication module, configured to receive a first request for obtaining an encryption key, where the first request further includes the privacy computing capability of a first network element; and the communication module is further configured to send third information, where the third information includes at least one of an encryption key, an encryption parameter, and a decryption key.

[0125] In a possible implementation manner, the encryption key is determined based on at least one of a home network key, a service network name, a serial number, an encryption algorithm identifier, and a common reference quantity.

[0126] In another possible implementation manner, the encryption key is determined based on at least one of a user key, a service network name, a serial number, a user identifier, an algorithm identifier, and a common reference quantity.

[0127] In a possible implementation manner, the communication module is further configured to receive a second request for obtaining a computing key, where the second request further includes the privacy computing capability of a second network element; and the communication module is further configured to send sixth information, where the sixth information includes at least one of a computing key and a computing parameter.

[0128] In a possible implementation manner, the communication module is further configured to: receive a first request from a first network element for obtaining an encryption key, where the first request further includes the privacy computing capability of the first network element; and the communication module is further configured to send the above-mentioned third information to the first network element, where the third information includes at least one of an encryption key, an encryption parameter, and a decryption key.

[0129] In a possible implementation manner, the communication module is further configured to receive a second request from a fourth network element for obtaining a computing key, where the second request further includes the privacy computing capability of a second network element; and the communication module is further configured to send sixth information, where the sixth information includes at least one of a computing key and a computing parameter.

[0130] In an eighth aspect, an information processing apparatus provided in an embodiment of the present application can be used for the fourth network element in the sixth aspect. The apparatus can be the fourth network element, or a device in the fourth network element (for example, a chip, or a chip system, or a circuit), or a device that can be used in combination with the fourth network element, or a logic module or software that can implement all or part of the functions of the fourth network element.

[0131] In a possible implementation, the apparatus may include modules or units corresponding one by one to the methods / operations / steps / actions described in the sixth aspect. The modules or units can be hardware circuits, software, or a combination of hardware circuits and software.

[0132] In a possible implementation manner, the apparatus includes: a communication module, configured to receive a third request for obtaining a calculation key, where the third request further includes the privacy calculation ability of a second network element; and the communication module is further configured to send a second request for obtaining a calculation key, where the request further includes the privacy calculation ability of the second network element; and the communication module is further configured to receive seventh information including at least one of a calculation key and calculation parameters; and the communication module is further configured to send fifth information including at least one of the calculation key and calculation parameters.

[0133] In a possible implementation manner, the communication module is further configured to: receive a third request from a second network element for obtaining a calculation key, where the request further includes the privacy calculation ability of the second network element; and the communication module is further configured to send a second request to a third network element for obtaining a calculation key, where the second request further includes the privacy calculation ability of the second network element; and the communication module is further configured to receive seventh information from the third network element including at least one of a calculation key and calculation parameters; and the communication module is further configured to send fifth information to the second network element including at least one of the calculation key and calculation parameters.

[0134] In a ninth aspect, the present application provides an information processing apparatus including a processor configured to cause the apparatus to execute the methods in the first aspect and all possible implementations of the first aspect, or execute the methods provided in the second aspect and any possible implementation manner of the second aspect, or execute the methods provided in the fifth aspect and any possible implementation manner of the fifth aspect, or execute the methods provided in the sixth aspect and any possible implementation manner of the sixth aspect by executing computer programs (or computer-executable instructions) stored in a memory, and / or by means of a logic circuit.

[0135] In a possible implementation, the apparatus further includes a memory.

[0136] In a possible implementation, the processor and the memory are integrated together.

[0137] In another possible implementation, the above-mentioned memory is located outside the device.

[0138] The device further includes a communication interface, which is used for the device to communicate with other devices, such as sending or receiving data and / or signals. Exemplarily, the communication interface can be a transceiver, a circuit, a bus, a module or other types of communication interfaces.

[0139] In a tenth aspect, the present application provides an information processing system, which includes an information processing device provided in any possible implementation manner of the third aspect, and an information processing device provided in any possible implementation manner of the fourth aspect.

[0140] In a possible implementation manner, the system further includes an information processing device provided in any possible implementation manner of the seventh aspect, and an information processing device provided in any possible implementation manner of the eighth aspect.

[0141] In an eleventh aspect, the present application provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the method provided in any possible implementation manner of the first aspect, or the method provided in any possible implementation manner of the second aspect, or the method provided in any possible implementation manner of the fifth aspect, or the method provided in any possible implementation manner of the sixth aspect is implemented.

[0142] In a twelfth aspect, the present application provides a computer program product containing instructions, characterized in that when the computer program product runs on a computer, the method provided in any possible implementation manner of the first aspect, or the method provided in any possible implementation manner of the second aspect, or the method provided in any possible implementation manner of the fifth aspect, or the method provided in any possible implementation manner of the sixth aspect is implemented.

[0143] It can be understood that the devices described in the third aspect, the devices described in the fourth aspect, the devices described in the seventh aspect, the devices described in the eighth aspect, the devices described in the ninth aspect, the systems described in the tenth aspect, the computer-readable storage media described in the eleventh aspect, or the computer program products described in the twelfth aspect provided above are all used to execute the methods provided in any one of the first aspect, the methods provided in any one of the second aspect, the methods provided in any one of the fifth aspect, or the methods provided in any one of the sixth aspect. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding methods, which will not be elaborated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0144] The accompanying drawings used in the embodiments of the present application will be introduced below.

[0145] Figure 1 It is a schematic diagram of a communication system provided by an embodiment of the present application;

[0146] Figure 2 It is a schematic diagram of a non-roaming architecture based on service-based interfaces for the fifth-generation mobile communication network;

[0147] Figure 3 It is a schematic flowchart of an information processing method provided by an embodiment of the present application;

[0148] Figures 4a to 4c They are respectively schematic diagrams of scenarios provided by an embodiment of the present application;

[0149] Figures 4d to 4f They are respectively schematic diagrams of a ciphertext format provided by an embodiment of the present application;

[0150] Figure 5a It is a schematic flowchart of a key derivation and distribution provided by an embodiment of the present application;

[0151] Figure 5b It is a schematic diagram of key generation provided by an embodiment of the present application;

[0152] Figure 5c It is a schematic flowchart of another key derivation and distribution provided by an embodiment of the present application;

[0153] Figure 5d It is a schematic diagram of another key generation provided by an embodiment of the present application;

[0154] Figure 6 It is a schematic flowchart of an authentication and key negotiation method provided by an embodiment of the present application;

[0155] Figure 7 It is a schematic flowchart of another information processing method provided by an embodiment of the present application;

[0156] Figure 8 It is a schematic flowchart of yet another information processing method provided by an embodiment of the present application;

[0157] Figure 9 It is a schematic diagram of the structure of an information processing device provided by an embodiment of the present application;

[0158] Figure 10 It is a schematic diagram of the structure of another information processing device provided by an embodiment of the present application. Detailed implementation manners

[0159] The embodiments of the present application will be described below with reference to the accompanying drawings in the embodiments of the present application. The terms used in the implementation part of the embodiments of the present application are only used to explain the specific embodiments of the present application, and are not intended to limit the present application.

[0160] Figure 1 A possible and non-limiting system schematic diagram is shown. As Figure 1 shown, the communication system 1000 includes a radio access network (RAN) 100 and a core network (CN) 200. Optionally, the Internet 300 is also included. The RAN 100 includes at least one RAN node (such as Figure 1 110a and 110b in Figure 1 , collectively referred to as 110) and at least one terminal (such as Figure 1 120a - 120j in

[0161] The RAN 100 may be a cellular system related to the 3rd generation partnership project (3GPP), for example, a 4G, 5G mobile communication system, or an evolved system after 5G (such as the 6th generation (6G) mobile communication system). The RAN 100 may also be an open RAN (O-RAN or ORAN), a cloud radio access network (CRAN), or a wireless local area network (Wi-Fi) system based on the IEEE 802.11 standard. The RAN 100 may also be a communication system that integrates two or more of the above systems.

[0162] The RAN node 110, sometimes also referred to as an access network device, a RAN entity, or an access node, etc., forms part of the communication system and is used to help the terminal achieve wireless access. The multiple RAN nodes 110 in the communication system 1000 may be of the same type of node or different types of nodes. In some scenarios, the roles of the RAN node 110 and the terminal 120 are relative. For example, Figure 1The intermediate network element 120i can be a helicopter or a drone, which can be configured as a mobile base station. For the terminals 120j accessing the RAN 100 through the network element 120i, the network element 120i is a base station; but for the base station 110a, the network element 120i is a terminal. The RAN nodes 110 and the terminals 120 are sometimes both referred to as communication devices, such as Figure 1 The intermediate network elements 110a and 110b in the figure can be understood as communication devices with base station functions, and the network elements 120a - 120j can be understood as communication devices with terminal functions.

[0163] In a possible scenario, the RAN node can be a base station, an evolved NodeB (eNodeB), an access point (AP), a transmission reception point (TRP), a next generation NodeB (gNB), a next generation base station in a 6G mobile communication system, a base station in a future mobile communication system, or an access node in a WiFi system, etc. The RAN node can be a macro base station (such as Figure 1 110a in the figure), a micro base station or an indoor station (such as Figure 1 110b in the figure), a relay node or a donor node, or a radio controller in a CRAN scenario. Optionally, the RAN node can also be a server, a wearable device, a vehicle or an in-vehicle device, etc. For example, the access network device in vehicle to everything (V2X) technology can be a road side unit (RSU).

[0164] In another possible scenario, multiple RAN nodes assist the terminal to achieve wireless access, and different RAN nodes respectively implement some functions of the base station. For example, the RAN node can be a central unit (CU), a distributed unit (DU), a CU - control plane (CP), a CU - user plane (UP), or a radio unit (RU), etc. The CU and the DU can be set separately, or can also be included in the same network element, such as a baseband unit (BBU). The RU can be included in a radio frequency device or a radio frequency unit, such as included in a remote radio unit (RRU), an active antenna unit (AAU), or a remote radio head (RRH).

[0165] In different systems, the CU (or CU-CP and CU-UP), DU, or RU may also have different names, but those skilled in the art can understand their meanings. For example, in the ORAN system, the CU may also be referred to as O-CU (Open CU), the DU may also be referred to as O-DU, the CU-CP may also be referred to as O-CU-CP, the CU-UP may also be referred to as O-CU-UP, and the RU may also be referred to as O-RU. For the convenience of description, the CU, CU-CP, CU-UP, DU, and RU are used as examples in this application. Any one of the CU (or CU-CP, CU-UP), DU, and RU in this application may be implemented by a software module, a hardware module, or a combination of a software module and a hardware module.

[0166] The terminal may also be referred to as a terminal device, user equipment (UE), mobile station, mobile terminal, etc. The terminal can be widely applied to various scenarios, such as device-to-device (D2D), vehicle-to-everything (V2X) communication, machine-type communication (MTC), Internet of Things (IoT), virtual reality (VR) devices, augmented reality (AR) devices, industrial control, autonomous driving, remote healthcare, smart grid, smart furniture, smart office, smart wearables, smart transportation, smart city, etc. The terminal can be a mobile phone, a tablet computer, a computer with wireless transceiver function, a wearable device, a vehicle, a drone, a helicopter, an airplane, a ship, a robot, a robotic arm, a smart home device, a light UE, a reduced capability UE (REDCAP UE), a smart point of sale (POS) machine, a customer-premises equipment (CPE), etc. The terminal can also be a vehicle device, such as a vehicle device, an in-vehicle module, an in-vehicle chip, an on-board unit (OBU), or a telematics box (T-BOX) of a vehicle-to-everything terminal. The embodiments of this application do not limit the device form of the terminal.

[0167] The communication between the access network device and the terminal device follows a certain protocol layer structure. The protocol layer may include a control plane protocol layer and a user plane protocol layer. The control plane protocol layer may include at least one of the following: Radio Resource Control (RRC) layer, Packet Data Convergence Protocol (PDCP) layer, Radio Link Control (RLC) layer, Media Access Control (MAC) layer, or Physical (PHY) layer, etc. The user plane protocol layer may include at least one of the following: Service Data Adaptation Protocol (SDAP) layer, PDCP layer, RLC layer, MAC layer, or Physical layer, etc.

[0168] For the network elements in the ORAN system, the corresponding relationship between the protocol layer functions they can implement can be referred to Table 1:

[0169] Table 1

[0170] ORAN Network Element 3GPP Protocol Layer Function O-CU-CP RRC+PDCP-C O-CU-UP SDAP+PDCP-U O-DU RLC+MAC+PHY-high O-RU PHY-low

[0171] The base station and the terminal can be in fixed positions or movable. The base station and the terminal can be deployed on land, including indoor or outdoor, handheld or vehicle-mounted; they can also be deployed on water; they can also be deployed on airplanes, balloons, and artificial satellites. The embodiments of the present application do not limit the application scenarios of the base station and the terminal.

[0172] The roles of the base station and the terminal can be relative. For example, Figure 1 the helicopter or drone 120i in can be configured as a mobile base station. For the terminals 120j that access the radio access network 100 through 120i, the terminal 120i is the base station; but for the base station 110a, 120i is the terminal, that is, the communication between 110a and 120i is through the radio air interface protocol. Of course, the communication between 110a and 120i can also be through the interface protocol between base stations. At this time, relative to 110a, 120i is also the base station. Therefore, both the base station and the terminal can be uniformly referred to as communication devices. Figure 1 the 110a and 110b in can be referred to as communication devices with base station functions. Figure 1 the 120a - 120j in can be referred to as communication devices with terminal functions.

[0173] In the embodiments of this application, a base station is also referred to as an access network device. The device for implementing the functions of the access network device can be an access network device; it can also be a device that can support the access network device to implement this function, such as a chip system, a hardware circuit, a software module, or a combination of a hardware circuit and a software module. This device can be installed in the access network device or used in matching with the access network device. In the embodiments of this application, only the case where the device for implementing the functions of the access network device is an access network device is taken as an example for illustration, which does not limit the solutions of the embodiments of this application.

[0174] It can be understood that this application can be applied between an access network device and a terminal.

[0175] It should be understood that Figure 1 The number and type of each device in the shown communication system are only for illustration, and this application is not limited thereto. In actual applications, the communication system may further include more terminals, more access network devices, and may also include other network elements, such as core network devices, and / or network elements for implementing artificial intelligence functions.

[0176] It can be understood that all or part of the functions implemented by one or more of a terminal, an access network device, a core network device, or a network element for implementing artificial intelligence functions can be virtualized, that is, implemented by one or more of a dedicated processor or a general-purpose processor and corresponding software modules. Among them, since the terminal and the access network device involve the interface of air interface transmission, the transceiver functions of this interface can be implemented by hardware. Core network devices, such as operation administration and maintenance (OAM) network elements, can all be virtualized. Optionally, one or more functions of the virtualized terminal, access network device, core network device, or network element for implementing artificial intelligence functions can be implemented by a cloud device, such as a cloud device in an over the top (OTT) system.

[0177] The following explains several terms involved in the embodiments of this application:

[0178] 1. Privacy computing

[0179] For example, privacy computing technologies centered on homomorphic encryption, secure multi-party computing, federated learning, etc. follow the principle of "data can be used but not seen, data does not move but the model moves", and use cryptography and trusted hardware to achieve the purpose of interactive computing without sensitive data leaving the library, ensuring that participants cannot directly obtain or infer the original data through intermediate information, thereby protecting data privacy and security when promoting the release of data value.

[0180] Privacy computing refers to a class of information technologies that enable data analysis and computing while protecting the data itself from external leakage, encompassing the cross-integration of numerous technical systems such as data science, cryptography, and artificial intelligence. The underlying technologies of privacy computing cover various technologies including cryptography, distributed machine learning, and trusted hardware. Currently, the common technical routes mainly include Homomorphic Encryption (HE), Secure Multi-Party Computation (MPC), Federated Learning (FL), and trusted hardware. Among them, secure multi-party computation and federated learning mainly rely on rich cryptographic primitives to construct computing or modeling protocols to address the privacy protection issues of data among participants; trusted hardware mainly relies on the secure domain of the hardware processor to solve the trusted computing problems of multi-source data; and the privacy computing all-in-one machine provides a series of solutions such as data privacy and security protection and hardware acceleration through a combination of software and hardware.

[0181] II. Homomorphic Encryption HE

[0182] It aims to complete the computational processing of ciphertext without exposing the plaintext of the data and focuses on privacy-preserving computing. It can realize the mining of data value under the premise of providing privacy protection.

[0183] Homomorphic Encryption HE is an encryption scheme that can directly operate on ciphertext. The plaintext data is encrypted by homomorphic encryption to obtain ciphertext data, and then the ciphertext data is computationally processed to obtain an output. Decrypting this output homomorphically results in the same output as that obtained by computationally processing the unencrypted plaintext data using the same method.

[0184] III. Encryption Key

[0185] Key encryption is an encryption method in which both the sender and receiver of data use the same or symmetric key to encrypt and decrypt the plaintext.

[0186] IV. Subscription Permanent Identifier (SUPI)

[0187] The SUPI is globally unique and can be understood as the identifier of the Subscriber Identity Module (SIM) card. It is assigned to each user, globally unique, and issued in the Unified Data Management (UDM) / Unified Data Repository (UDR). It is used within the 3GPP system.

[0188] The SUPI types include the following: It can indicate the International Mobile Subscription Identity (IMSI), Network Specific Identifier (NSI), Global Cable Identifier (GCI), and Global Line Identifier (GLI). Exemplarily, IMSI is used for 3GPP access, and the Network Access Identifier (NAI) form is used for Non-3GPP access.

[0189] For example, 0: IMSI. It is a number uniquely assigned internationally to identify a mobile user. 1: NSI, in the form of NAI. 2: GLI, in the form of NAI. 3: GCI, in the form of NAI.

[0190] V. Permanent Equipment Identifier (PEI)

[0191] The PEI types include the following:

[0192] 0: International Mobile station Equipment Identity (IMEI). IMEI is a mark to distinguish mobile devices and is stored in mobile devices.

[0193] Type Allocation Code (TAC) + Serial Number (SNR) + Check Digit / Spare Digit (CD / SD).

[0194] 1: International Mobile station Equipment Identity and Software Version number (IMEISV). It is an extended version of the International Mobile station Equipment Identity IMEI.

[0195] 2: Media Access Control Address (MAC).

[0196] 3: IEEE Extended Unique Identifier (EUI-64), which is used for UEs that do not support any 3GPP access technology.

[0197] VI. Generic Public Subscription Identifier (GPSI)

[0198] GPSI is required to address 3GPP subscriptions in different data networks outside the 3GPP system. The 3GPP system stores the association between GPSI and SUPI in the subscribed data.

[0199] GPSI types include:

[0200] 0: Mobile Subscriber ISDN number (MSISDN).

[0201] 1: External identifier.

[0202] Specifically, below Figure 2 taking the non-roaming architecture based on service-based interfaces in the fifth-generation mobile communication network shown as an example, the communication system applicable to this application will be introduced. This communication system mainly includes an Access and Mobility management Function (AMF), a Session Management Function (SMF), a user plane function (UPF), a network exposure function (NEF), and an application function (AF). It may also include a policy control function (PCF) entity, a Unified Data Repository function UDR entity (not shown in the figure), and a Unified Data Management UDM function entity.

[0203] Among them, Figure 2 the functions of each functional entity are as follows:

[0204] AMF: Mainly responsible for signaling processing, such as functions like access control, mobility management, attachment and detachment, and gateway selection. When AMF provides services for a session in a terminal, it will provide control plane storage resources for the session to store session identifiers, SMF entity identifiers associated with the session identifiers, etc.

[0205] SMF: It is mainly responsible for session management, specifically for the selection of user plane function entities, the redirection of user plane function entities, the allocation of Internet Protocol (IP) addresses, the establishment, modification, and release of bearers, and the control of quality of service (QoS).

[0206] UPF: It is responsible for the forwarding and reception of user data in the terminal. It can receive user data from the data network and transmit it to the terminal through the access network device; it can also receive user data from the terminal through the access network device and forward it to the data network. The transmission resources and scheduling functions provided for the terminal in the UPF entity are managed and controlled by the SMF entity.

[0207] NEF: It mainly supports the secure interaction between the 3GPP network and third-party applications. The NEF can securely open network capabilities and events to third-party applications to enhance or improve application service quality. The 3GPP network can also securely obtain relevant data from third-party applications to enhance network intelligent decision-making. At the same time, this functional entity supports the recovery of structured data from the UDR or the storage of structured data in the UDR.

[0208] AF: It mainly supports interacting with the 3GPP network to provide services, such as influencing data routing decisions, policy control functions, or providing some service services to the network side (these services can be third-party or non-third-party).

[0209] PCF: It mainly supports providing a unified policy framework to control network behavior, providing policy rules to the control layer network functions, and is also responsible for obtaining user subscription information related to policy decisions.

[0210] UDR: It is mainly responsible for storing structured data, including subscription data and policy data, externally exposed structured data, and application-related data.

[0211] UDM: It is mainly used to manage user subscription information.

[0212] It should be noted that the above functional entities are only names, and the names themselves do not limit the entities. For example, this session management functional entity may also be replaced by "session management function" or other names. Moreover, this session management functional entity may also correspond to an entity that includes other functions in addition to the session management function. The user plane functional entity may also be replaced by "user plane function" or other names, and this user plane functional entity may also correspond to an entity that includes other functions in addition to the user plane function. This is uniformly explained here and will not be elaborated further below.

[0213] The user equipment accesses the network through a RAN node or an access network (AN) node. The RAN node is mainly a wireless network device in a 3GPP network, and the AN can be an access network device defined by non-3GPP.

[0214] In the embodiments of this application, the related functions of the first network element, the third network element, etc. can be implemented by one device, can be jointly implemented by multiple devices, or can be implemented by one or more functional modules in one device. The embodiments of this application do not make specific limitations in this regard. The related functions of the second network element, the fourth network element, etc. in the embodiments of this application can be implemented by one device, can be jointly implemented by multiple devices, or can be implemented by one or more functional modules in one device. The embodiments of this application do not make specific limitations in this regard. It can be understood that the above functions can be either network elements in hardware devices, software functions running on dedicated hardware, or a combination of hardware and software, or virtualized functions instantiated on a platform (such as a cloud platform).

[0215] The functions of 5G network elements are introduced below.

[0216] (1) Exemplarily, first, the functions of security-related network elements (root keys) are introduced.

[0217] 1. UDM, which includes all the capabilities of the home subscriber server (HSS). It includes the following functions:

[0218] a. Subscription data management.

[0219] b. User service NF registration management: In 4G, the HSS will save the Host Name of the mobility management entity (MME). That is, when the user registers for the network, the MME will have a tracking area update (TAU) process, and the HSS saves the information of the MME. The same is true for 5G. The UDM will save the information of the AMF and the SMF and inform the UDM which AMF or SMF is currently providing services to the UE.

[0220] c. Generate 3GPP Authentication and Key Agreement (AKA) authentication parameters: Generate four-tuple or five-tuple authentication parameters according to different authentication types.

[0221] d. Access authorization based on subscription data (such as roaming restrictions): Prohibit roaming or accessing the network in a certain area.

[0222] e. Ensure service / session continuity: This is generally ensured by the UPF. However, the scenario described here refers to the process of 4G / 5G interworking. Assuming moving from a 5G coverage area to a 4G coverage area, how to select a converged gateway (GW) (a convergence of UPF and GW-U). Generally, between the AMF and the MME, user context information is mutually transmitted through the N26 interface when the UE moves, and a converged GW is selected based on the information of the converged network element carried in the context information. However, if the N26 interface does not exist, at this time, only by addressing the converged UDM+HSS, obtaining the information of the converged GW reported and saved by the AMF or the MME from the converged UDM+HSS, and then addressing the corresponding converged GW, so as to ensure service continuity.

[0223] 2. Authentication Server Function (AUSF):

[0224] It is integrated into the same product as the UDM. It is an independent NF function and is deployed in the home network in the roaming scenario (5G phase1).

[0225] It is an Extensible Authentication Protocol (EAP) authentication server (the authentication server is in the home domain) for EAP authentication. 5G AKA authentication completes home domain confirmation. Calculate the authentication vectors (RAND / AUTH / HXRES*) according to the 5G HE AV and send them to the SEAF. Deduce the anchor key and send it to the SEAF.

[0226] It supports a unified authentication service function, including 3GPP access authentication and non-3GPP access authentication. In non-3GPP access authentication, it will first access the non-3GPP interworking function (N3IWF), and then the N3IWF will access the AMF and send a message to the AUSF for authentication.

[0227] 3. Security Anchor function (SEAF):

[0228] It is co-deployed with the AMF. It is deployed in the visited network in the roaming scenario. It deduces the lower-layer non-access stratum (NAS) and access stratum (AS) keys based on the anchor key. 5G AKA completes the authentication result comparison function.

[0229] 4. Access and Mobility Management Function AMF:

[0230] The AMF is a network element that can directly interact with the terminal. Other network elements need to interact with the terminal through the AMF.

[0231] a. Registration management function: connection management, reachability management, mobility management, access authentication, access authorization. The AMF retains the access authentication and access authorization functions of the MME, and the AMF performs authentication and authorization at the visited location.

[0232] b. Forward SM messages between the UE and the SMF: The interaction messages between the terminal and other network elements are encapsulated into the messages sent to the AMF, and the AMF de-encapsulates and then forwards them.

[0233] c. Forward SMS messages between the UE and the short message service function (SMSF).

[0234] (2) The functions of the data type network elements are introduced below.

[0235] Unified Data Repository UDR

[0236] The UDR can be deployed in each PLMN, and the PLMN where it is located is related to the NF of the stored data. The UDR can store application data for roaming users. The NF accessing the UDR through Nudr can add, delete, modify, and update the data according to its permissions.

[0237] (3) The functions of other types of network elements are introduced below.

[0238] 1. Session Management Function SMF, a network element that interacts with the core network user plane. Other network elements need to pass through the SMF to interact with the user plane. Its functions include:

[0239] a. Session management.

[0240] b. UE IP address allocation and management.

[0241] c. Select and control the UPF, configure the traffic orientation of the UPF, and forward it to the appropriate destination network.

[0242] 2. User Plane Function (UPF), the user plane network element on the core network side. Its functions include:

[0243] a. Data plane anchor point: When the UE moves during a service, in order to ensure service continuity, the UPF remains unchanged.

[0244] b. Connect to the packet data unit (PDU) session point of the data network.

[0245] 3. Policy Control Function (PCF), whose functions include:

[0246] a. Support unified policy management of network behavior.

[0247] b. Provide slice-based policies: Provide mobility, session, and user-related policies based on certain specific slices.

[0248] c. Provide session-related policies to the SMF (already available in 4G): Perform some rate limiting, gating (not allowing access to certain specific networks, or triggering some policies when the data volume reaches a certain upper limit), busy-hour policies, idle-hour policies, etc. on data packets according to the session policies.

[0249] d. Provide user-related policies to the UE: There is a UE Route Selection Policy (URSP). When the UE establishes a session, there are many session establishment conditions, such as slices, data network name (DNN), or other conditions. These conditions determine whether the data packets on the UE are routed to an already established PDU session, a newly created PDU session, or a third-party data session. There is also an access network discovery & selection policy (ANDSP), which is used in non-3GPP access networks.

[0250] 4. Network Exposure Function (NEF), whose functions include:

[0251] a. Provide a secure way to expose the services and capabilities of 3GPP network functions to the AF. Such as game acceleration packages, externally triggered QoS control.

[0252] b. Provide a secure way for the AF to provide information to 3GPP network functions.

[0253] The above describes the architecture of the embodiments of the present application. Next, the methods of the embodiments of the present application will be introduced in detail.

[0254] Refer to Figure 3 As shown, it is a schematic flowchart of an information processing method provided by the embodiments of the present application. Optionally, this method can be applied to the aforementioned communication system, such as Figure 1 the communication system shown. As Figure 3 shown, the information processing method can include steps 301-303. Steps 301-303 are specifically as follows:

[0255] 301. The first network element encrypts the first information to obtain the first ciphertext of the first information, and the first information includes a first keyword.

[0256] Among them, the first information includes a first keyword. The first keyword may be globally unique identification information in the first information.

[0257] Optionally, the first keyword is at least one of a user identifier and a device identifier. For the introduction of the user identifier and the device identifier, reference can be made to the following description and will not be elaborated here.

[0258] For example, if the first information includes SUPI, the first keyword may include SUPI. If the first information includes PEI, the first keyword may include PEI.

[0259] In a possible implementation, the first network element may be the data holder. For example, the first network element may be a network element in a home Public Land Mobile Network (HPLMN), simply referred to as a network element in the home network HPLMN, such as a network function (NF) in the core network, an Authentication Server Function (AUSF), or a UDM, etc. For the introduction of the first network element, reference can be made to the description in step 302 below and will not be elaborated here.

[0260] The following is an introduction to the first information. The first information may be sensitive information. In a possible implementation manner, the first information may include user identity information. The user identity information may be, for example, at least one of the following:

[0261] (1) User identifier. The user identifier may be a permanent identifier, such as a user permanent identifier SUPI (International Mobile Subscriber Identity IMSI, Network Specific Identifier NSI, Global Line Identifier GLI, Global Cable Identifier GCI, etc.), a General Public Subscription Identifier GPSI (Mobile Subscribed International ISDN Number MSISDN, External Identifier, etc.), a self-control identity (scID), etc.; or, the user identifier may also be a temporary identifier, such as a Globally Unique Temporary UE Identity (GUTI), a Temporary Mobile Subscriber Identity (TMSI), a SUPI hash value, a random id, etc.

[0262] (2) Device identifier. The device identifier may be a permanent identifier, such as a permanent device identifier PEI (International Mobile Station Equipment Identity IMEI, IMEISV, IEEE Extended Unique Identifier EUI-64, etc.), MAC address, etc.; alternatively, the device identifier may also be a temporary identifier, such as an IP address (Internet Protocol version 4 (IPv4), Internet Protocol version 6 (IPv6), etc.).

[0263] (3) User physiological characteristics. The user physiological characteristics may be, for example, heartbeat, breathing, voice characteristics, portrait, fingerprint, iris, etc.

[0264] (4) User digital assets, etc. The user digital assets may be digital avatars, such as virtual portraits; or the user digital assets may also be digital items in the virtual world.

[0265] In another possible implementation, the first information may include user subscription information. The user subscription information may be general service data, such as user type, access type, access area, quality of service QoS, roaming restrictions, etc.; the user subscription information may also be a Service Profile, such as subscribed mobility management (MM) / session management (SM), slice service parameters, user-specific configurations and parameters (billing, etc.).

[0266] In yet another possible implementation, the first information may include perception information. The perception information may be, for example, location information, such as access network E-UTRAN cell global identifier (E-UTRAN Cell Global Identifier, ECGI), tracking area identity (Tracking Area Identity, TAI), longitude and latitude, etc.; or the perception information may also be historical information, such as signaling history, data access history, etc. Of course, it may also be other perception data (such as characteristics of the environment and / or objects in the environment, distance (range), angle, or instantaneous linear velocity of the object, etc.), and this solution is not limited thereto.

[0267] In yet another possible implementation, the first information may include authentication and / or key-related information. The authentication-related information may be, for example, an operator root key (such as an Operator Variant Algorithm Configuration Field (OP)), an authentication key (Key identifier, KI), a cryptographic key K4, an operator code (Opc), etc. The key-related information may be, for example, a root key K of a Universal Subscriber Identity Module (USIM), a key for user plane (UP) confidentiality and integrity protection, a key of a network element (such as a key Kausf of network element AUSF, a key Kseaf of network element SEAF, a key Kamf of network element AMF, a root key Kgnb of a base station), a key Kn3iwf of a non-3GPP access point, etc.

[0268] It can be understood that the above first information may also include at least two of user identity-related information, user subscription-related information, perception-related information, authentication and / or key-related information, etc. This solution does not limit this.

[0269] The above examples introduce the first information, and it may also be other information such as device twin information, etc. This solution does not limit this.

[0270] Next, the first network element obtaining the first ciphertext is introduced. In one possible implementation, the first network element encrypts the first information based on an encryption key to obtain the first ciphertext of the first information.

[0271] For example, the first network element encrypts the first information based on an encryption key and encryption parameters to obtain the first ciphertext of the first information.

[0272] Among them, the encryption algorithm for the first network element to encrypt the first information may be a homomorphic encryption algorithm, or a symmetric searchable encryption algorithm constructed by the Advanced Encryption Standard (AES) symmetric cipher algorithm, or a searchable encryption algorithm based on public key encryption constructed by an asymmetric cipher algorithm (Rivest-Shamir-Adleman, RSA), etc. This solution does not limit this.

[0273] Exemplarily, the encryption key, encryption parameters, etc. corresponding to the homomorphic encryption algorithm may include at least one of the following:

[0274] Encryption parameters: the ciphertext modulus is q, the dimension d of the gadget decomposition, etc. Among them, the homomorphic ciphertext belongs to the integer set Zd or a polynomial ring Z d represents the set of integers of dimension d, represents the polynomial ring of dimension d with ciphertext modulus q.

[0275] Among them, the encryption key K enc can be expressed as: K enc = pk = (b, a), where b can be generated as follows: where a is a common reference quantity (CRS, Common reference string), such as a random polynomial vector s = HMAC - SHA - 256(Key, FC||P0||L0||Pl||L1||P2||L2||P3||L3), and e represents random noise.

[0276] Among them, HMAC - SHA - 256 refers to a specific key derivation algorithm that calculates a hash - based message authentication code (HMAC) through the hash function SHA256 (Secure Hash Algorithm with 256 bits).

[0277] FC = a value for distinguishing different examples of the algorithm;

[0278] P0 = service network name; L0 = service network name length;

[0279] P1 = serial number SQN; L1 = serial number SQN length.

[0280] P2 = encryption algorithm identifier; L2 = algorithm identifier length.

[0281] P3 = SUPI; L3 = SUPI length. If it is a UE - level key, this parameter exists; if it is a PLMN - level key, this parameter does not exist.

[0282] Key = K AUSF (UE - level key); Key = home network key (PLMN - level key).

[0283] For another example, the encryption parameters may further include homomorphic encryption algorithm identifiers: additive single-homomorphic Paillier, multiplicative single-homomorphic ElGamal, multiplicative single-homomorphic RSA, quasi-homomorphic BGN 05, BGV (Brakerski, Gentry, Vaikuntanathan) (without bootstrapping: hierarchical homomorphism, with bootstrapping: fully homomorphic), BFV (Brakerski, Fan, Vercauteren), CKKS (Cheon, Andrey Kim, Miran Kim, Yongsoo Song), TFHE (Fully Homomorphic Encryption scheme over the Torus, TFHE), and others.

[0284] For another example, the encryption parameters may further include at least one of the following:

[0285] Security level λ; decryption circuit depth p; ciphertext modulus Q; plaintext modulus t; upper bound B of the noise distribution, or noise standard deviation; number of decimal places corresponding to the calculation accuracy; dimension n of the ciphertext calculation vector.

[0286] Among them, the encrypting party (such as UDM, AUSF) encrypts the plaintext message m i and can be expressed as:

[0287] ct = (c0, c1) = (r·b + m i + e1, r·a + e2), randomly select

[0288] ct is the ciphertext of the plaintext message m i is a uniformly distributed random matrix, N > n; a is a random vector related to key derivation, the positive integer n is the vector dimension, q is the ciphertext modulus, the set the noise e ∈ χ N where the noise distribution χ = x(n) is a set of distributions on Z, and a discrete Gaussian distribution can be selected.

[0289] Among them represents the set of integers, represents the value range of The subscript q with the ciphertext modulus means that all numbers belonging to need to be modulo q. The superscript n represents the vector dimension. The superscript N×n represents the matrix dimension.

[0290] In a possible implementation, the encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a public reference quantity.

[0291] Exemplarily, a first network element receives third information from a third network element, where the third information includes the encryption key. Among them, the third network element can perform key management, including key derivation, distribution, use, update, storage, destruction, and other key management.

[0292] For example, the third network element is a Privacy Computing Management (PCM) unit. Exemplarily, the third network element is the PCM corresponding to the plaintext area.

[0293] Exemplarily, the PCM sets encryption parameters: the ciphertext modulus is q, the dimension d of the small number decomposition gadget decomposition, etc. Z d represents the set of integers with dimension d, represents the polynomial ring with ciphertext modulus q and dimension d.

[0294] The PCM generates a public reference quantity CRS: a random polynomial vector gadget decomposition vector g ∈ Z d .

[0295] Among them, the encryption key K enc can be expressed as: K enc = pk = (b, a), where b can be generated as follows: e represents random noise.

[0296] Based on the encryption key, the first network element can encrypt the first information.

[0297] In a possible implementation, the first network element performs initial encryption on the first information based on the encryption key to obtain the initial ciphertext of the first information. This initial ciphertext can be understood as the ciphertext obtained by encrypting the first information based on the encryption key.

[0298] Furthermore, the first network element also performs blinding processing on the initial ciphertext of the first information to obtain the first ciphertext of the first information.

[0299] This blinding processing can be understood as performing re-noising processing on the initial ciphertext.

[0300] Exemplarily, the home network sends the homomorphic ciphertext of the plaintext "0" to the visited network in advance. The home network or the visited network adds or subtracts the homomorphic ciphertext HE(m1) of the plaintext information m1 from the homomorphic ciphertext of "0" to obtain the blinded homomorphic ciphertext HE′(m1).

[0301] This blinding process can be expressed as: HE(m1)+HE(0) = HE′(m1). It can be understood that HE(m1) represents the ciphertext obtained by initially encrypting the plaintext information m1, that is, the initial ciphertext mentioned above. HE′(m1) represents the ciphertext obtained by blinding the homomorphic ciphertext HE(m1), that is, the first ciphertext mentioned above.

[0302] It can be understood that the plaintexts corresponding to the homomorphic ciphertext HE(m1) and the homomorphic ciphertext HE′(m1) are both m1, and the two homomorphic ciphertexts only have different noises.

[0303] Without the need for re-encryption, this blinding process can make the ciphertexts corresponding to the same plaintext information different, which can prevent the second network element from obtaining associated information by directly comparing the different ciphertexts received.

[0304] In a possible implementation, the first network element also decrypts the received ciphertext based on the decryption key to obtain the plaintext corresponding to the ciphertext. In this way, the first network element can directly process the plaintext, and the calculation efficiency is higher.

[0305] Exemplarily, the first network element obtains the decryption key from the third network element. For example, the third network element is a Privacy Computing Management Unit (PCM).

[0306] The derivation of the decryption key may include the following parameters:

[0307] s = HMAC-SHA-256(Key, FC||P0||L0||P1||L1||P2||L2||P3||L3);

[0308] The decryption key can be generated as above. For the introduction of the parameter s, reference can be made to the description of the encryption key mentioned above, and details will not be elaborated here.

[0309] Exemplarily, the decryption can be expressed as: where m is the plaintext information and e represents random noise.

[0310] Based on the above decryption, so that the first network element can obtain the plaintext of the first information through decryption, and the first network element can directly use the plaintext for calculation processing.

[0311] 302. The first network element sends the second information to the second network element. The second information includes the first ciphertext of the first information, the type of the first keyword, and the public key identifier. Correspondingly, the second network element receives the second information.

[0312] In a possible implementation, the second network element may be a data calculation party. In a possible implementation manner, at least one of the first network element and the second network element is a network element in a wireless network.

[0313] Exemplarily, a wireless network is deployed as cells, and each cell has thousands of terminals wirelessly accessing its serving cell. Terminals such as intelligent vehicles equipped with on-vehicle units (OBUs), smartphones, VR / AR, etc. may have privacy computing capabilities. When privacy protection is required, the generated data is encrypted and then transmitted to other terminal nodes, roadside units (RSUs), base stations, core network network elements (NFs), cloud providers, etc. in the communication network for privacy computing under ciphertext. Finally, the ciphertext data after calculation is transmitted to the data user for decryption and use.

[0314] In a possible implementation, the first network element may be a network element in the home public land mobile network (HPLMN) within the trusted area of the first information, and the second network element may be a network element in the visited public land mobile network (VPLMN) within the untrusted area of the first information, simply referred to as a network element in the visited network VPLMN.

[0315] It can be understood that the trusted area or privacy domain in this solution means that the network elements within this area can obtain the plaintext of the first information, and the untrusted area means that the network elements within this area can only obtain the ciphertext of the first information.

[0316] In a possible implementation, the first network element is a network element with a high trust level, and the second network element is a network element with a low trust level.

[0317] Exemplarily, the first network element is a high-trust-level network element in the home network that stores one or more important data such as subscription data, authentication parameters, permanent identity identifiers, user root keys, etc. For example, the first network element is at least one of network elements such as the AUSF, UDM, Authentication Credential Repository and Processing Function (ARPF), Subscription Identifier De-concealing Function (SIDF) in a 5G network.

[0318] Exemplarily, the second network element is a low-trust-level network element that provides one or more functions such as user plane function, session management, storage, access management, etc. For example, the second network element is at least one of network elements such as the UPF, SMF, PCF, Network Repository Function (NRF), Network Slice Selection Function (NSSF), AMF in a 5G network.

[0319] In a possible implementation, the first network element is a management plane network element, and the second network element is a control plane network element.

[0320] Exemplarily, the first network element is the management plane network element of a network element with subscription data management function, and the second network element is a control plane network element. For example, the management plane network element and the control plane network element of the UDM in a 5G network.

[0321] In a possible implementation, at least one of the first network element and the second network element is a virtual network element, and the trusted area of the first network element does not include the second network element. In other words, the first network element cannot send the plaintext of the first information to the second network element. For example, the first network element can be a virtual network element (Virtual Network Feature, VNF1) within the trusted area of the first information, and the second network element can be a virtual network element VNF2 outside the trusted area of the first information.

[0322] In a possible implementation, at least one of the first network element and the second network element is a radio access network RAN node, and the trusted area of the first network element does not include the second network element.

[0323] For example, the first network element can be a RAN node within the trusted area of the first information, and the second network element can be a RAN node outside the trusted area of the first information. As Figure 4a shown, node RAN1 and node RAN3 are within the trusted area of the first information, and node RAN2 is outside the trusted area of the first information. Exemplarily, a federated learning task is performed among nodes RAN1, RAN2, and RAN3. Nodes RAN1 and RAN3 perform local training, encrypt the model gradients and transmit them to node RAN2. After receiving the gradient ciphertext, node RAN2 performs an aggregation operation for federated learning based on the received ciphertext, such as executing the FedAvg aggregation algorithm. Node RAN2 then distributes the updated model parameters to nodes RAN1 and RAN3.

[0324] In a possible implementation, the first network element is a user equipment UE or an application program APP server, and the second network element is a RAN node or a core network element.

[0325] Exemplarily, the first network element can be UE1 and UE2 within the trusted area of the first information, and the second network element can be a RAN node and / or a core network element NF outside the trusted area of the first information. As Figure 4bAs shown, UE1 and UE2 encrypt sensitive data and transmit it to the RAN node and / or the core network element NF. After receiving the ciphertext, the RAN node and / or the core network element NF perform privacy computing. The Privacy Computing Management Unit (PCM) sends the encryption key, decryption key, encryption parameters, etc. to UE1 and UE2. The PCM sends the computing key, computing parameters, etc. to the RAN node and / or NF.

[0326] For another example, the first network element may be a UE or an application server (APP) within the trusted area of the first information; the second network element may be a network element in the wireless network within the untrusted area of the first information, such as a RAN node and / or NF. As Figure 4c As shown, the UE and the APP server encrypt sensitive data and transmit it to the RAN node and / or the core network element NF. After receiving the ciphertext, the RAN node and / or the core network element NF perform privacy computing. The Privacy Computing Management Unit (PCM) sends the encryption key, decryption key, encryption parameters, etc. to the UE and the APP server. The PCM sends the computing key, computing parameters, etc. to the RAN node and / or NF.

[0327] In a possible implementation, the first network element may be a third-party server or a network element in the application layer, and the second network element may be a network element in the wireless network.

[0328] In a possible implementation, the first network element may be a network element in the wireless network, and the second network element may be a third-party server or a network element in the application layer.

[0329] The above examples of the first network element and the second network element are introduced. They may also be other network elements, etc. This solution does not limit this.

[0330] Next, the second information is introduced. The second information includes the first ciphertext of the first information, the type of the first keyword, and the public key identifier.

[0331] Among them, the type of the first keyword may be an identification type. Optionally, the type of the first keyword may be represented in the following way: [type, subtype].

[0332] Among them, type is the first-level classification of the retrieval keyword. For example, type can take values of 0: SUPI; 1: PEI; 2: GPSI; etc. Subtype is the second-level classification of the retrieval keyword. Exemplarily, if type is of the SUPI type, the subtype refers to the subtype of SUPI, and the following can be selected: value 0: IMSI; 1: Network Specific Identifier (NSI); 2: Global Line Identifier (GLI); 3: Global Cable Identifier (GCI).

[0333] Among them, the type of the first keyword in the second information is used for the second network element to query the ciphertext corresponding to the type of the first keyword during ciphertext retrieval.

[0334] The public key identifier may include at least one of a network identifier, a network element identifier, a user identifier, a base station (or location area, etc.) identifier, and a serial number. The network identifier can be, for example, PLMNID, CN-ID, Network Identifier (NID); the network element identifier can be, for example, AMF ID, Radio Network Controller (RNC) ID; the user identifier can be, for example, the permanent identifier or temporary identifier described in step 301, such as SUPI, scID, etc.; the location area or base station identifier can be, for example, Location Area Identification (LAI), Routing Area Identification (RAI), Cell Global Identification (CGI), Base Station Identify Code (BSIC); the serial number can be, for example, an incrementing sequence used to identify key updates.

[0335] Based on the public key identifier in the second information, it can be used to determine the index information of the calculation key required for ciphertext retrieval. For example, a certain PLMN-level calculation key or a certain user-level calculation key can be selected, etc.

[0336] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identification information, routing indication information, and protection scheme identification information.

[0337] Among them, the data category may include at least one of the following: identity category, subscription category, location category, authentication / key category, and sensing category.

[0338] The home network identification information can be used to find the calculation key in the ciphertext area.

[0339] The routing indication information is assigned by the home network operator and is used to route network signaling or data with the first ciphertext to a network element instance that can serve the user.

[0340] The protection scheme identification information can represent the type of encryption algorithm and can be determined during cryptographic algorithm and key negotiation; for example, 0: empty scheme. 1: Additive homomorphic Paillier; 2: Multiplicative homomorphic ElGamal; 3: Fully homomorphic encryption BGV; 4: Fully homomorphic encryption BFV. 5: Fully homomorphic encryption CKKS; 6: Fully homomorphic encryption TFHE.

[0341] Exemplarily, as Figure 4d shown, the second information includes the type of the first keyword keyword Type1, the public key identifier public key ID, and the first ciphertext ciphertext value of the first information. The second information further includes the type of the second keyword keyword Type2, the home network identification Home Network Identifier information, the routing indication Routing Indicator information, and the protection scheme identification Protection Scheme Identifier information.

[0342] Among them, the type of the second keyword keyword Type2 can be a data category. For example, the bit value corresponding to keywordType2 is 0: identity category; 1: subscription category; 2: location category; 3: authentication / key category; 4: perception and other categories.

[0343] The type of the second keyword is used to determine the preset database. Exemplarily, one type of keyword corresponds to at least one preset database. Optionally, different types correspond to different preset databases. For example, when the type of the second keyword is 1, the second network element performs ciphertext retrieval in the subscription category database. For example, when the type of the second keyword is 4, the second network element performs ciphertext retrieval in the perception category database, etc.

[0344] Optionally, the second information may further include the MAC tag value MAC tag value. The MAC tag value can be used for integrity protection.

[0345] Exemplarily, as Figure 4e and Figure 4fAs shown, a ciphertext format of SUPI (subscription concealed format, SUCF) and a ciphertext format of PEI (equipment concealed format, ECF) provided by embodiments of the present application are respectively presented. Exemplarily, the ciphertext format of the SUPI includes the type of the first keyword (such as SUPI), home network identification information, routing indication information (optional), public key identification, and the first ciphertext ciphertext value of the SUPI. The ciphertext format of the PEI includes the type of the first keyword (such as PEI), home network identification information, routing indication information (optional), public key identification, and the first ciphertext ciphertext value of the PEI.

[0346] The above example introduces the second information, which may also include other information, etc., and this solution does not limit this.

[0347] 303. The second network element determines the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identification.

[0348] Among them, the association information can be understood as that both the second ciphertext and the first ciphertext of the first information are ciphertexts containing the same keyword (the first keyword). That is, there is a correlation between the first ciphertext and the second ciphertext. For example, when the keyword is the user permanent identifier, both the first ciphertext and the second ciphertext are ciphertexts corresponding to the user permanent identifier, that is, both the first ciphertext and the second ciphertext are related to the user permanent identifier.

[0349] Among them, the first ciphertext includes the ciphertext of the first keyword. The first ciphertext may also include the ciphertext of other information in the first information except the first keyword, etc.

[0350] In a possible implementation manner, the second network element retrieves in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identification to obtain the second ciphertext.

[0351] Exemplarily, the first information corresponding to the first ciphertext not only includes the first keyword but also includes perception information. And the first keyword in the first information is arranged in front of the perception information. In a possible implementation manner, the second network element intercepts the ciphertext of the first keyword from the front section of the first ciphertext. In another possible implementation manner, after the user accesses the network and the authentication is successful, the second network element obtains the ciphertext of the first keyword sent by the first network element.

[0352] Exemplarily, at least one ciphertext is stored in the preset database. Among them, the second ciphertext is the ciphertext corresponding to the fourth information in the preset database, and the fourth information includes the first keyword. The second network element can perform a ciphertext retrieval in the preset database to obtain the above-mentioned second ciphertext.

[0353] The following introduces this ciphertext retrieval. In one possible implementation, retrieving in the preset database specifically includes retrieving in the preset database based on a ciphertext retrieval function.

[0354] For example, the ciphertext retrieval function is ciphertext subtraction. If the subtraction of two ciphertexts is equal to the homomorphic ciphertext of "0", it is considered that the retrieval is successful. HE(m1) - HE(m2) = HE(0).

[0355] Another example is that the ciphertext retrieval function is ciphertext division. If the division of two ciphertexts is equal to the homomorphic ciphertext of "1", it is considered that the retrieval is successful.

[0356] HE(m1) / HE(m2) = HE(1).

[0357] The second network element can retrieve the ciphertext it needs (such as the second ciphertext) based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier. Based on the retrieved ciphertext, the association information between it and the first ciphertext of the first information is further determined.

[0358] In one possible implementation manner, the second network element determines the target key from one or more computing keys according to the public key identifier. Among them, the public key identifier can be used to determine the index information of the computing key required for ciphertext retrieval. For example, a certain PLMN-level computing key or a certain user-level computing key can be selected. The second network element determines the target key from one or more computing keys based on the index information of the computing key determined by the public key identifier.

[0359] Furthermore, the second network element retrieves in the preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain the second ciphertext. Exemplarily, the second network element first selects the preset database based on the type of the first keyword, and the second network element performs a ciphertext retrieval based on the ciphertext of the first keyword, the target key, and the ciphertext in the preset database. The ciphertext retrieval function used for the ciphertext retrieval can be the above-mentioned ciphertext subtraction or ciphertext division, etc.

[0360] Exemplarily, the computing key (target key) can be used to perform ciphertext calculations (such as multiplication or other operations, logical AND gates, etc.), and can also be used to control noise growth or ciphertext size expansion, etc. Among them, based on these multiplications or other operations, logical AND gates, etc., calculations can be constructed to obtain the above-mentioned ciphertext retrieval function (i.e., ciphertext subtraction or ciphertext division, etc.).

[0361] In a possible implementation, the second network element may also calculate a fourth ciphertext based on a calculation key for the third ciphertext. Subsequently, the second network element sends the fourth ciphertext to the fifth network element. The fifth network element may decrypt the fourth ciphertext based on a decryption key.

[0362] In a possible implementation, the third ciphertext may be the aforementioned first ciphertext.

[0363] In a possible implementation, the fifth network element may be a network element in the plaintext area. For example, the preset network element is the aforementioned first network element, etc.

[0364] Optionally, the second network element receives fifth information from the fourth network element, and the fifth information includes the one or more calculation keys. The fourth network element may be a Privacy Computing Management Unit (PCM). For the introduction of the fourth network element, reference may be made to the description of the aforementioned third network element, which will not be elaborated here. Exemplarily, the fourth network element is the PCM corresponding to the ciphertext area.

[0365] It can be understood that the fifth information may further include one or more calculation parameters. The calculation parameters and calculation keys are listed below:

[0366] For the homomorphic encryption algorithm, the homomorphic calculation key may also be referred to as the homomorphic evaluation key, which is used to perform homomorphic calculations (usually homomorphic multiplication or other equivalent operations, such as the logical AND gate) during homomorphic evaluation, and is used to control noise growth or ciphertext size expansion. The homomorphic calculation key generally has types such as the bootstrapping key and the key-switching key. For example, when the homomorphic encryption algorithm BFV (Brakerski, Fan, Vercauteren) performs homomorphic multiplication, since each ciphertext has 2 ciphertext components, the output result of the homomorphic multiplication of two ciphertexts will have three ciphertext components, causing ciphertext size inflation, and the key corresponding to the ciphertext of the output result has an exponential term. The homomorphic calculation key needs to be used to adjust to obtain a ciphertext with the correct dimension as the final output result of the homomorphic multiplication.

[0367] The homomorphic encryption algorithm TFHE is different from other methods. It proposes a special type of bootstrapping that is very fast and can perform homomorphic evaluation of functions while reducing noise. For example, TFHE can perform operations such as AND on ciphertexts during the execution of gate bootstrapping, and requires a bootstrapping key and a key-conversion key.

[0368] Taking the fully homomorphic encryption algorithm TFHE as an example, the homomorphic calculation parameters include: the security level λ, the LWE dimensions of three levels, the ciphertext modulus Q, the basis of the gadget decomposition during the outer product operation in function bootstrapping, the length of the gadget decomposition during the outer product operation, and the basis of the gadget decomposition during key switching, and the length of the gadget decomposition during key switching.

[0369] Homomorphic Computation Key Key eval : For example, BSK bootstrap key, KSK key conversion key, etc.; The bootstrap key is the key used for bootstrap noise reduction in homomorphic computation. The key conversion key is used to solve the situation where key conversion is required during homomorphic computation, such as eliminating key cross terms after homomorphic multiplication, or switching different levels of keys in circuit bootstrap.

[0370] Homomorphic Computation Key Size: For example, the KSK key conversion key n s ×(n t +1), BSK key size, etc.

[0371] Homomorphic computation keys include:

[0372] 1) Multivalued function bootstrap from level 0 to level 2: Bootstrap key.

[0373] 2) From level 2 to level 1: Key switching key, scheme switching key.

[0374] 3) From level 1 to level 0: Key switching key.

[0375] As shown in Table 2, it is an example of the parameter set of the fully homomorphic encryption algorithm TFHE at different levels provided by the embodiments of the present application.

[0376] Table 2

[0377]

[0378]

[0379] In a possible implementation, after the second network element determines the association information between the second ciphertext and the first ciphertext of the first information, it can perform classified storage and other processing, etc. For example, after determining that both the first ciphertext and the second ciphertext are ciphertexts of terminal 1, then store both the first ciphertext and the second ciphertext in the information corresponding to terminal 1, etc.

[0380] In the embodiments of the present application, the first network element encrypts the first information to obtain the first ciphertext of the first information; then, the first network element sends the second information to the second network element. The second network element determines the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword in the second information, the type of the first keyword, and the public key identifier. By adopting this means, the second network element cannot know the plaintext of the first information, which can protect privacy. In addition, the second information also includes the type of the first keyword and the public key identifier, enabling the second network element to perform ciphertext retrieval based on the type of the first keyword and the public key identifier, and further perform ciphertext calculation. In other words, information or data can be interacted with and used while protecting privacy.

[0381] Such as Figure 5aAs shown in the figure, it is a schematic diagram of the process of key derivation and distribution provided by an embodiment of the present application. In this example, the first network element may be a network element in the home public land mobile network (HPLMN), and the second network element is a network element in the visited public land mobile network (VPLMN). Exemplarily, the key is a PLMN-level key derivation. This process may include steps 501-505b, specifically as follows:

[0382] 501: After the establishment of a secure channel between the home public land mobile network PLMN2 (i.e., HPLMN) and the visited public land mobile network PLMN1 (i.e., VPLMN), network elements such as the authentication server function (AUSF) / unified data management (UDM) in the home public land mobile network PLMN2 report their privacy computing capabilities to the privacy computing management unit PCM2 within the same PLMN.

[0383] 502a: Network elements such as NF1, AUSF / UDM in the visited public land mobile network PLMN1 report their privacy computing capabilities to the privacy computing management unit PCM1 within the same PLMN and request the computing key and parameters of PLMN2.

[0384] 502b: PCM1 sends a request to PCM2 in the home public land mobile network PLMN2 to apply for the computing key and parameters, and carries the privacy computing capabilities of the network elements in the visited network.

[0385] 503: Based on the privacy computing capabilities of the visited network and the home network, PCM2 in the home network selects an encryption algorithm and derives a PLMN-level key.

[0386] As Figure 5b shown, among them, the input parameters for key derivation include: home network key, serving network name, serial number, algorithm identifier for privacy computing, algorithm common reference quantity, etc. By inputting these parameters into the key generator, an encryption key, a decryption key, a computing key, etc. can be obtained.

[0387] Among them, the encryption key is used by the encrypting party to encrypt the plaintext information, the decryption key is used by the decrypting party to decrypt the ciphertext, and the computing key is used by the computing party to process the ciphertext.

[0388] 504: PCM2 in the home network issues the encryption key, decryption key, and parameters, etc. to the AUSF / UDM in the home network.

[0389] 505a: PCM2 in the home network issues the computing key and parameters to PCM1 in the visited public land mobile network PLMN1.

[0390] 505b: PCM1 issues the computing key and parameters to NF1 in the visited network.

[0391] Based on the above-mentioned key derivation and distribution, exemplarily, after the UE completes access authentication, the visited network requests sensitive information from the home network. High-trust-level network elements such as the AUSF / UDM in the home network encrypt the sensitive information to obtain the ciphertext format of the sensitive information (Sensitive information Concealed format, SICF), and then the home network sends the ciphertext of the sensitive information to the network elements in the visited network.

[0392] In another possible implementation, the encryption key is determined based on at least one of the user key, service network name, serial number, user identifier, algorithm identifier, and public reference quantity. Exemplarily, the third network element is a Privacy Computing Management Unit (PCM).

[0393] As Figure 5c shown, it is a schematic diagram of another key derivation and distribution process provided by the embodiments of the present application. Exemplarily, the key is UE-level key derivation. This process may include steps 511-515b, specifically as follows:

[0394] 511: After the UE completes access authentication, network elements such as the AUSF / UDM in the home Public Land Mobile Network (PLMN) 2 report their privacy computing capabilities to the Privacy Computing Management Unit (PCM) 2 within the same PLMN.

[0395] 512a: Network elements such as NF1 and AUSF / UDM in the visited PLMN 1 report their privacy computing capabilities to the Privacy Computing Management Unit (PCM) 1 within the same PLMN, and request the computing key and parameters of PLMN 2.

[0396] 512b: PCM 1 sends a request to PCM 2 in the home PLMN 2 to apply for the computing key and parameters, and carries the privacy computing capabilities of the network elements in the visited network.

[0397] 513: Based on the privacy computing capabilities of the visited network and the home network, PCM 2 in the home network selects the privacy computing algorithm and derives the UE-level key.

[0398] As Figure 5d shown, among them, the input parameters for key derivation are the UE key, service network name, serial number, user identifier, algorithm identifier, public reference quantity, etc. By inputting these parameters into the key generator, encryption keys, decryption keys, computing keys, etc. can be obtained.

[0399] Among them, the UE key can be obtained from a key management center (KMC), or can also be generated based on the Universal Mobile Telecommunications System (UMTS) subscriber identity module (USIM) key architecture. This solution does not limit this. After the UE completes access authentication in step 511, the symmetric key architecture of the user has been derived on both the UE and network sides. If the UE-level key is derived based on the USIM key architecture, the key in the USIM key architecture can be used as the input of the key derivation function, such as Kseaf, Kamf, etc.

[0400] 514: The PCM2 of the home network sends the encryption key, decryption key, parameters, etc. to the AUSF / UDM of the home network.

[0401] 515a: The PCM2 of the home network sends the calculation key and parameters to the PCM1 of the visited network PLMN1.

[0402] 515b: The PCM1 sends the calculation key and parameters to the NF1 of the visited network.

[0403] Based on the above key derivation and distribution, exemplarily, the visited network sends a request for sensitive information to the home network. High-trust-level network elements such as the AUSF / UDM of the home network encrypt the sensitive information to obtain the ciphertext SICF, and then the home network sends the ciphertext of the sensitive information to the network elements of the visited network. Among them, the key granularity of the UE-level key is smaller and the privacy protection is stronger.

[0404] Figure 5a 、 Figure 5c Taking the key derivation at the PLMN level and the key derivation at the UE level as examples respectively for introduction, it can also be other keys, and this solution does not limit this.

[0405] Refer to Figure 6 As shown, it is a flowchart of an authentication and key negotiation method provided by an embodiment of the present application. This example is introduced by taking the first information including the user identity SUPI as an example. As Figure 6 The method shown can include steps 601-616. Among them, in this example, high-trust-level network elements AUSF, UDM, and UE in the plaintext area are taken as examples, and low-trust-level network elements SEAF / AMF in the ciphertext area are taken as examples for introduction. Steps 601-616 are specifically as follows:

[0406] 601. The UE sends an attachment / registration request to the SEAF / AMF, and the attachment / registration request includes a subscription concealed identifier (SUCI). Accordingly, the SEAF / AMF receives the attachment / registration request.

[0407] 602. The SEAF / AMF sends an authentication request to the AUSF, and the authentication request includes the SUCI and the serving network (SN) name. Accordingly, the AUSF receives the authentication request.

[0408] 603. The AUSF sends an authentication request to the UDM. Accordingly, the UDM receives the authentication request.

[0409] 604. The UDM invokes the SIDF, selects an authentication method, and generates an authentication vector AV.

[0410] 605. The UDM sends an authentication response to the AUSF. Accordingly, the AUSF receives the authentication response.

[0411] The above authentication response includes AV (RAND, authentication token (AUTN), XRES*, K AUSF ), SUPI, Authentication and Key Management for Applications (AKMA) indication, routing indication.

[0412] Exemplarily, the AUSF / Mobile Equipment (ME) derives the key K AUSF based on the input parameters such as SUPI, SN name, and the higher-level key K SEAF .

[0413] Based on the input parameters such as ABBA and the higher-level key K SEAF , the Security Anchor Function SEAF / ME derives the key K AMF .

[0414] 606. The AUSF calculates HXRES* from XRES* and stores XRES* and SUPI.

[0415] 607. The AUSF sends an authentication response to the SEAF / AMF, and the authentication response includes RAND, AUTN, HXRES*. Accordingly, the SEAF / AMF receives the authentication response.

[0416] 608. The SEAF / AMF sends an authentication request to the UE, and the authentication request includes parameters such as RAND, AUTN, next generation key set identifier (ngKSI), and Anti-Bidding down Between Architectures (ABBA). Accordingly, the UE receives the authentication request.

[0417] 609. The UE authenticates the network and calculates the authentication response RES*.

[0418] 610. The UE sends an authentication response to the SEAF / AMF, and the authentication response includes RES*. Accordingly, the SEAF / AMF receives the authentication response.

[0419] 611. The SEAF / AMF performs service network authentication. The SEAF / AMF calculates HRES* based on RES*, and compares HRES* with HXRES*. If they are the same, it means success, then the SEAF / AMF sends RES* to the AUSF for subsequent verification and comparison; if they are different, that is, not successful, then the access is directly rejected.

[0420] 612. The SEAF / AMF sends an authentication request to the AUSF, and the authentication request includes RES*. Accordingly, the AUSF receives the authentication request.

[0421] 613. The AUSF compares the authentication response RES* sent by the UE with the authentication response XRES* calculated by the network side. If they are the same, it means the authentication is successful. After the authentication is successful, the AUSF generates the ciphertext SUCF of the SUPI.

[0422] Among them, the ciphertext SUCF of the SUPI is an example of the second information in the above text, and the specific content can be referred to the above text.

[0423] 614. The AUSF sends an authentication response to the SEAF / AMF, and the authentication response includes the result result and K SEAF , the ciphertext SUCF of the SUPI. Accordingly, the SEAF / AMF receives the authentication response.

[0424] Exemplarily, the SEAF / AMF stores the ciphertext SUCF of the SUPI so that when other information is received subsequently, based on the ciphertext SUCF such as keywords, the information related to it can be obtained for associated storage and corresponding operations, etc.

[0425] 615. The AUSF also sends an authentication confirmation request to the UDM, and the authentication confirmation request includes the plaintext and ciphertext SUCF of the SUPI. Accordingly, the UDM receives the authentication confirmation request.

[0426] 616. The UDM sends an authentication confirmation response to the AUSF. Correspondingly, the AUSF receives the authentication confirmation response.

[0427] In this example, by hiding the permanent identity information from the serving network and no longer sending the clear text of the SUPI to the ciphertext area (such as SEAF / AMF), the privacy protection of the identity SUPI is strengthened.

[0428] Refer to Figure 7 As shown, it is a schematic flowchart of another information processing method provided by an embodiment of the present application. This example takes the first information as the SUPI, takes the plaintext area including network elements UDR and UDM, and takes the ciphertext area including network elements NEF and AMF as an example for introduction. As Figure 7 The information processing method shown can include steps 701-705. The specific steps 701-705 are as follows:

[0429] 701. The NEF sends an event exposure subscription request to the UDM. The subscription request includes the ciphertext of the UE ID (SUCF), operation instructions, report type, maximum number of reports, and duration, etc. Correspondingly, the UDM receives the subscription request.

[0430] 702a. The UDM sends an event exposure subscription request to all relevant AMFs. The subscription request includes the ciphertext of the UE ID (SUCF) and operation instructions. Correspondingly, the AMF receives the subscription request.

[0431] 702b. The AMF sends an event exposure subscription response to the UDM to confirm the subscription. Correspondingly, the UDM receives the subscription response.

[0432] 703. The UDM sends an event exposure subscription response to the NEF to confirm the subscription. Correspondingly, the NEF receives the subscription response.

[0433] 704a. When the UDM detects that the monitored event occurs, it sends an event exposure notification to the NEF, and sends the event report and timestamp to the NEF, including the ciphertext of the UE ID (SUCF). Correspondingly, the NEF receives the notification.

[0434] Among them, the NEF can perform subsequent information association storage and other processing based on the received ciphertext of the UE ID (SUCF).

[0435] 704b. The NEF sends a create / update request to the UDR to store the received notification in the UDR.

[0436] 704c. When the AMF detects that a monitored event has occurred, it sends an event exposure notification to the NEF, and sends the event report and timestamp to the NEF, including the UE ID ciphertext (SUCF). Accordingly, the NEF receives this notification.

[0437] 704d. The NEF sends a create / update request to the UDR and stores the received notification in the UDR.

[0438] 705. When the AMF detects that an event related to subscription change (such as AMF reallocation or new group UE registration) has occurred, it sends an event exposure notification to the UDM, and this notification includes the UE ID ciphertext (SUCF). Accordingly, the UDM receives this notification.

[0439] If the subscription permanent identifier (SUPI) is provided to the serving network in plaintext, many security threats may be triggered. In the embodiment of this application, the SUPI is no longer provided to the serving network in plaintext, which ensures the security and privacy enhancements required for the SUPI in the serving network, but also normally provides network interaction services.

[0440] Refer to Figure 8 As shown, it is a schematic flowchart of another information processing method provided by the embodiment of this application. This example takes the plaintext area including network elements such as home user plane function (H-UPF), home session management function (H-SMF), home policy control function (H-PCF), and UDM, and takes the ciphertext area including network elements such as UE, (R)AN, AMF, visit user plane function (V-UPF), and visit session management function (V-SMF) network element as an example for introduction. As Figure 8 The information processing method shown may include steps 801-813. Steps 801-813 are specifically as follows:

[0441] 801. The UE sends a PDU session creation request to the AMF. Accordingly, the AMF receives this request.

[0442] 802. The AMF performs SMF selection.

[0443] Among them, the result of the AMF selection includes the V-SMF.

[0444] 803a. The AMF sends an SM context creation request to the V-SMF. The request includes the UE ID ciphertext (SUCF), Network Slice Selection Assistance Information (NSSAI), the H-SMF identifier, etc. Correspondingly, the V-SMF receives the request.

[0445] 803b. The V-SMF sends an SM context creation response to the AMF. Correspondingly, the AMF receives the response.

[0446] 804. The V-SMF performs UPF selection.

[0447] Among them, the selection result of the V-SMF includes the V-UPF.

[0448] 805a. The V-SMF sends a session creation request to the V-UPF through the N4 interface. Correspondingly, the V-UPF receives the request.

[0449] Among them, the N4 interface is the interface between the SMF and the UPF.

[0450] 805b. The V-UPF sends a session creation response to the V-SMF through the N4 interface. Correspondingly, the V-SMF receives the response.

[0451] 806. The V-SMF sends a PDU session creation request to the H-SMF. The request includes the UE ID ciphertext (SUCF), GPSI, V-SMF SM Context ID, Data Network Name DNN, S-NSSAI, PDU Session ID, the V-SMF identifier, etc. Correspondingly, the H-SMF receives the request.

[0452] 807. The H-SMF can choose to use service operations such as Nudm_SDM_Get or Nudm_SDM_Subscribe to obtain session management subscription data, where the service operation signaling includes the UE ID (SUPI).

[0453] 808. PDU session authentication / authorization.

[0454] 809a. The H-SMF performs PCF selection.

[0455] 809b. The H-SMF establishes an SM policy association or modifies an SMF-initiated SM policy association.

[0456] 810. The H-SMF performs UPF selection.

[0457] 811. The H-SMF initiates an SM policy association modification.

[0458] 812a. The H-SMF sends an N4 session creation request to the H-UPF. Correspondingly, the H-UPF receives the request.

[0459] 812b. The H-UPF sends an N4 session creation response to the H-SMF. Correspondingly, the H-SMF receives the response.

[0460] 812c. The H-SMF performs registration.

[0461] 813. The H-SMF sends a PDU session creation response to the V-SMF, and the response includes the UE ID ciphertext (SUCF), etc. Correspondingly, the V-SMF receives the response.

[0462] If the subscription permanent identifier (SUPI) is provided to the service network in plain text, many security threats may be triggered. In the embodiments of this application, the SUPI is no longer provided to the service network in plain text, ensuring the enhancement of the security and privacy of the SUPI in the service network, but also normally providing network interaction services.

[0463] It should be noted that in each embodiment of this application, if there is no special description and logical conflict, the terms and / or descriptions between the embodiments are consistent and can be referenced to each other. The technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0464] The method of the embodiments of this application is elaborated in detail above. Below, the devices of the embodiments of this application are provided. It can be understood that in each device embodiment of this application, the division of multiple units or modules is only a logical division according to functions and does not limit the specific structure of the device. In specific implementations, some of the functional modules may be further divided into more fine-grained functional modules, and some functional modules may also be combined into one functional module. However, no matter whether these functional modules are divided or combined, the general processes executed by the device are the same. For example, some devices include a receiving unit and a sending unit. In some designs, the sending unit and the receiving unit can also be integrated into a communication unit, and this communication unit can implement the functions implemented by the receiving unit and the sending unit. Generally, each unit corresponds to its own program code (or program instructions). When the program codes corresponding to these units run on the processor, the unit is controlled by the processing unit to execute the corresponding process to implement the corresponding function.

[0465] The embodiments of this application also provide a device for implementing any of the above methods. For example, an information processing device is provided, which includes modules (or means) for implementing the steps executed by the first network element, the second network element, the third network element, the fourth network element, etc. in any of the above methods.

[0466] For example, referring to Figure 9 As shown in Figure 9 , it is a schematic structural diagram of an information processing device provided by an embodiment of the present application. This information processing device is used to implement each step (or means) executed by the first network element in the foregoing information processing method.

[0467] As Figure 9 shown in Figure 9 , the device may include a processing module 901 and a communication module 902, specifically as follows: The processing module 901 is used to encrypt the first information to obtain a first ciphertext of the first information, where the first information includes a first keyword; the communication module 902 is used to send second information to a second network element, and the second information includes the first ciphertext of the first information, the type of the first keyword, and a public key identifier.

[0468] For other optional implementation manners of the device, reference may be made to the foregoing description, and details are not described herein again.

[0469] Again, an information processing device is provided, which includes modules (or means) for implementing each step executed by the second network element in any of the above methods.

[0470] As Figure 9 shown in Figure 9 , the device may include a processing module 901 and a communication module 902, specifically as follows:

[0471] The communication module 902 is used to receive second information from a first network element, and the second information includes a first ciphertext of first information, the type of a first keyword, and a public key identifier, where the first information includes the first keyword;

[0472] The processing module 901 is used to determine the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

[0473] For other optional implementation manners of the device, reference may be made to the foregoing description, and details are not described herein again.

[0474] Again, an information processing device is provided, which includes modules (or means) for implementing each step executed by the third network element in any of the above methods.

[0475] The information processing device includes: a communication module, which is used to receive a first request, where the first request is used to obtain an encryption key, and the first request further includes the privacy computing capability of the first network element;

[0476] And the communication module is further used to send third information, where the third information includes at least one of an encryption key, encryption parameters, and a decryption key.

[0477] For other optional implementation manners of the device, reference may be made to the foregoing description, and details are not described herein again.

[0478] For another example, there is provided an information processing apparatus including modules (or means) for implementing the steps performed by the fourth network element in any of the above methods.

[0479] An information processing apparatus includes: a communication module configured to receive a third request for obtaining a computing key, the third request further including the privacy computing capability of a second network element;

[0480] and the communication module is further configured to send a second request for obtaining a computing key, the request further including the privacy computing capability of the second network element;

[0481] and the communication module is further configured to receive a seventh piece of information including at least one of a computing key and computing parameters;

[0482] and the communication module is further configured to send a fifth piece of information including at least one of the computing key and computing parameters.

[0483] For other optional implementation manners of the apparatus, reference may be made to the foregoing description, which will not be elaborated herein.

[0484] For the introduction of the above modules, reference may be made to the description of the foregoing embodiments, which will not be elaborated herein.

[0485] It should be understood that the division of each module in the above-mentioned devices is only a division of logical functions. In actual implementation, they can be fully or partially integrated into a physical entity, or physically separated. In addition, the modules in the information processing device can be implemented in the form of a processor calling software. For example, the information processing device includes a processor, the processor is connected to a memory, and instructions are stored in the memory. The processor calls the instructions stored in the memory to implement any of the above methods or the functions of each module of the device. The processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory inside or outside the device. Alternatively, the modules in the device can be implemented in the form of hardware circuits, and the functions of some or all units can be implemented by designing the hardware circuits. The hardware circuits can be understood as one or more processors. For example, in one implementation, the hardware circuit is an application-specific integrated circuit (ASIC), and the functions of some or all of the above units are implemented by designing the logical relationships of the components in the circuit. Again, in another implementation, the hardware circuit can be implemented by a programmable logic device (PLD). Taking a field programmable gate array (FPGA) as an example, it can include a large number of logic gate circuits, and the connection relationships between the logic gate circuits are configured through a configuration file to implement the functions of some or all of the above units. All the modules of the above device can be all implemented in the form of a processor calling software, or all implemented in the form of hardware circuits, or some implemented in the form of a processor calling software and the remaining part implemented in the form of hardware circuits.

[0486] Referring to Figure 10 shown, it is a schematic hardware structure diagram of another information processing device provided by an embodiment of the present application. As Figure 10 shown, the information processing device 1000 includes one or more processors 1001 (one processor is illustrated in the figure).

[0487] The processor 1001 is a circuit with signal processing capabilities. In one implementation, the processor 1001 can be a circuit with instruction reading and running capabilities, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a type of microprocessor), or a digital signal processor (DSP), etc.; in another implementation, the processor 1001 can achieve certain functions through the logical relationship of hardware circuits, and the logical relationship of this hardware circuit is fixed or can be reconfigured. For example, the processor 1002 is a hardware circuit implemented by an ASIC or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document to implement the configuration of the hardware circuit can be understood as the process of the processor loading instructions to implement the functions of some or all of the above modules. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as a type of ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc. The processor 1001 is used to execute relevant programs to implement the functions required to be executed by the units in the information processing device in the embodiments of the present application, or to execute the information processing method in the method embodiments of the present application.

[0488] Optionally, the information processing device 1000 may further include a memory (such as memory 1003, memory 1004, memory 1005) (shown as a dotted line in the figure). The memory is used to store the instructions executed by the processor 1001, or the input data required for the processor 1001 to run the instructions, or the data generated after the processor 1001 runs the instructions.

[0489] Optionally, the memory may be located in one or more of the processors (such as memory 1003), or outside one or more of the processors (such as memory 1004, memory 1005), or may include a storage part located in one or more of the processors and a storage part located outside one or more of the processors.

[0490] In the embodiments of the present application, the memory (such as memory 1003, memory 1004, memory 1005) may include, but is not limited to, a cache, a read-only memory (ROM), a random access memory (RAM), a synchronous dynamic random access memory (SDRAM), a hard disk drive (HDD), or a solid-state drive (SSD), an erasable programmable read-only memory (EPROM), or a compact disc read-only memory (CD-ROM), etc. The memory is any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory in the embodiments of the present application may also be a circuit or any other device capable of implementing a storage function, for storing computer programs or instructions, and / or data.

[0491] Optionally, the information processing device 1000 may further include a communication interface 1002 (shown as a dashed line in the figure). The processor 1001 and the communication interface 1002 are coupled to each other. Among them, the communication interface 1002 may be a transceiver or an interface circuit, a bus, a module, or other types of communication interfaces.

[0492] The memory may store a program. When the program stored in the memory is executed by the processor 1001, the processor 1001 and the communication interface 1002 are used to execute the various steps of the information processing method in the embodiments of the present application.

[0493] It can be seen that each module in the above device may be one or more processors (or processing circuits) configured to implement the above method, such as: CPU, GPU, NPU, TPU, DPU, microprocessor, DSP, ASIC, FPGA, or a combination of at least two of these processor forms, or a partial processing circuit of these processors.

[0494] In addition, each module in the above device can be integrated in whole or in part, or can be implemented independently. In one implementation, these modules are integrated together and implemented in the form of a system-on-a-chip (SOC). The SOC may include at least one processor for implementing any of the above methods or the functions of each module of the device. The types of the at least one processor can be different, for example, including a CPU and an FPGA, a CPU and an artificial intelligence processor, a CPU and a GPU, etc.

[0495] It should be noted that although Figure 10 the shown device 1000 only shows a memory, a processor, and a communication interface, in the specific implementation process, those skilled in the art should understand that the device 1000 also includes other devices necessary for normal operation. At the same time, according to specific needs, those skilled in the art should understand that the device 1000 may also include hardware devices for implementing other additional functions. In addition, those skilled in the art should understand that the device 1000 may also only include the devices necessary for implementing the embodiments of the present application, and does not necessarily include Figure 10 all the devices shown in

[0496] The embodiment of the present application also provides a computer-readable storage medium. Instructions are stored in the computer-readable storage medium. When the instructions run on a computer or a processor, the computer or the processor is enabled to execute one or more steps in any of the above methods.

[0497] The embodiment of the present application also provides a computer program product containing instructions. When the computer program product runs on a computer or a processor, the computer or the processor is enabled to execute one or more steps in any of the above methods.

[0498] It should be understood that in the description of this application, unless otherwise specified, " / " indicates that the objects associated with each other are in an "or" relationship. For example, A / B can mean A or B; where A and B can be singular or plural. Also, in the description of this application, unless otherwise specified, "multiple" means two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or plural. In addition, to facilitate the clear description of the technical solutions of the embodiments of this application, in the embodiments of this application, words such as "first" and "second" are used to distinguish between identical or similar items with substantially the same functions and effects. Those skilled in the art will understand that words such as "first" and "second" do not limit the quantity or execution order, and words such as "first" and "second" do not necessarily mean different. At the same time, in the embodiments of this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of this application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Rather, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner to facilitate understanding.

[0499] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the division of the units is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. The mutual coupling, direct coupling, or communication connection shown or discussed can be through some interface, indirect coupling or communication connection of devices or units, and can be electrical, mechanical or other forms.

[0500] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0501] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions according to the embodiments of the present application are generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium or transmitted through the computer-readable storage medium. The computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center in a wired manner (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wirelessly (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or a data center that includes one or more integrated available media. The available medium can be a read-only memory (ROM), a random access memory (RAM), a magnetic medium, such as a floppy disk, a hard disk, a magnetic tape, a magnetic disk, or an optical medium, such as a digital versatile disc (DVD), or a semiconductor medium, such as a solid state disk (SSD), etc.

[0502] As described above, the above are only the specific implementation manners of the embodiments of the present application, but the protection scope of the embodiments of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the embodiments of the present application should be covered by the protection scope of the embodiments of the present application. Therefore, the protection scope of the embodiments of the present application should be subject to the protection scope of the claims.

Claims

1. An information processing method, applied to a first network element, characterized in that, The method includes: Encrypting the first information to obtain a first ciphertext of the first information, where the first information includes a first keyword; Sending second information to a second network element, where the second information includes the first ciphertext of the first information, the type of the first keyword, and a public key identifier.

2. The method according to claim 1, characterized in that, The public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

3. The method according to claim 1 or 2, characterized in that, At least one of the first network element and the second network element is a network element in a wireless network.

4. The method according to claim 3, wherein The first keyword is at least one of a user identifier and a device identifier.

5. The method according to any one of claims 1 to 4, characterized in that, The second information further includes at least one of the following: Data category, home network identifier information, routing indication information, protection scheme identifier information.

6. The method according to any one of claims 1 to 5, characterized in that, The first information includes at least one of the following: User identity information, user subscription information, perception information, authentication and / or key information.

7. The method according to any one of claims 1 to 6, characterized in that, The method further includes: Encrypting the first information based on an encryption key to obtain a first ciphertext of the first information.

8. The method according to claim 7, wherein The encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a common reference quantity; or The encryption key is determined based on at least one of a user key, a serving network name, a serial number, a user identifier, an algorithm identifier, and a common reference quantity.

9. The method according to claim 7 or 8, characterized in that, The encrypting the first information based on the encryption key to obtain a first ciphertext of the first information includes: Performing initial encryption on the first information based on the encryption key to obtain an initial ciphertext of the first information; Performing blinding processing on the initial ciphertext of the first information to obtain a first ciphertext of the first information.

10. The method according to any one of claims 7 to 9, characterized in that The method further includes: Receiving third information from a third network element, where the third information includes the encryption key.

11. The method according to any one of claims 1 to 10, wherein The first network element is a network element in a home network, and the second network element is a network element in a visited network; or The first network element is a network element with a high trust level, and the second network element is a network element with a low trust level; or The first network element is a management plane network element, and the second network element is a control plane network element; Or At least one of the first network element and the second network element is a virtual network element, and the trust area of the first network element does not include the second network element; Or At least one of the first network element and the second network element is a radio access network RAN node, and the trust area of the first network element does not include the second network element; Or The first network element is a user equipment UE or an application program APP server, and the second network element is a RAN node or a core network element; or the first network element is a third-party server or a network element in an application layer, and the second network element is a network element in a wireless network; Or The first network element is a network element in a wireless network, and the second network element is a third-party server or a network element in an application layer.

12. An information processing method, applied to a second network element, characterized in that, The method includes: Receiving second information from a first network element, where the second information includes a first ciphertext of first information, the type of a first keyword, and a public key identifier, where the first information includes the first keyword; Determine the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

13. The method according to claim 12, wherein The determining the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier includes: Retrieve in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain the second ciphertext, where the second ciphertext is the ciphertext corresponding to the fourth information in the preset database, and the fourth information includes the first keyword; Determine the association information between the second ciphertext and the first ciphertext of the first information.

14. The method according to claim 13, characterized in that The retrieving in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain the second ciphertext includes: Determine a target key from one or more computing keys according to the public key identifier; Retrieve in the preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain the second ciphertext.

15. The method according to claim 14, characterized in that, The method further includes: Receive fifth information from a fourth network element, where the fifth information includes the one or more computing keys.

16. The method according to any one of claims 12 to 15, characterized in that The public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

17. The method according to any one of claims 12 to 16, characterized in that, At least one of the first network element and the second network element is a network element in a wireless network.

18. The method according to claim 17, wherein The first keyword is at least one of a user identifier and a device identifier.

19. The method according to any one of claims 12 to 18, characterized in that The second information further includes at least one of the following: Data category, home network identifier information, routing indication information, protection scheme identifier information.

20. The method according to any one of claims 12 to 19, characterized in that, The first information includes at least one of the following: User identity information, user subscription information, perception information, authentication and / or key information.

21. The method according to any one of claims 12 to 20, wherein The first network element is a network element in a home network, and the second network element is a network element in a visited network; or, The first network element is a network element with a high trust level, and the second network element is a network element with a low trust level; or, The first network element is a management plane network element, and the second network element is a control plane network element; Or, At least one of the first network element and the second network element is a virtual network element, and the trust area of the first network element does not include the second network element; Or, At least one of the first network element and the second network element is a radio access network RAN node, and the trust area of the first network element does not include the second network element; Or, The first network element is a user equipment UE or an application program APP server, and the second network element is a RAN node or a core network element; or, the first network element is a third-party server or a network element in the application layer, and the second network element is a network element in a wireless network; Or, The first network element is a network element in a wireless network, and the second network element is a third-party server or a network element in the application layer.

22. An information processing apparatus, characterized in that, Include a module or unit for implementing the method according to any one of claims 1-11.

23. An information processing apparatus, characterized in that, It includes a module or unit for implementing the method according to any one of claims 12-21.

24. An information processing apparatus, characterized in that, The device includes a processor configured to cause the device to execute the method according to any one of claims 1-11 by executing a computer program (or computer-executable instructions) stored in a memory and / or by means of a logic circuit.

25. An information processing apparatus, characterized in that, The device includes a processor configured to cause the implementation of the method according to any one of claims 12-21 to be realized by executing a computer program (or computer-executable instructions) stored in a memory and / or by means of a logic circuit.

26. The device according to claim 24 or 25, characterized in that, It further includes the memory.

27. An information processing system, characterized in that, The system includes the information processing device according to claim 24 and the information processing device according to claim 25.

28. A computer-readable storage medium, characterized in that, A computer program is stored, and when the computer program is executed by a processor, it causes the implementation of the method according to any one of claims 1-11; or causes the implementation of the method according to any one of claims 12-21.

29. A computer program product containing instructions, which when running on a processor, causes the implementation of the method according to any one of claims 1-11; or causes the implementation of the method according to any one of claims 12-21.

Images