Bidirectional emergency message transmission method and device based on multi-protocol and multi-identity recognition, and medium

Abstract

The invention discloses a bidirectional emergency message transmission method and device based on multi-protocol and multi-identity recognition, and a medium, and can be applied to the technical field of 5G communication. The emergency message in the 5G information is extracted after multi-identity verification is performed on the sending terminal, the target priority queue corresponding to the emergency message is generated according to the identity information of the receiving terminal, network resource allocation is performed on the target priority queue to obtain the network resource allocation result, and meanwhile, protocol conversion is performed on the emergency message to obtain the network resource allocation result. Determining a target transmission path according to the emergency message after protocol conversion and the current network state, performing encryption processing on the emergency message after protocol conversion, and transmitting the encrypted emergency message to a receiving terminal through a satellite network according to a network resource allocation result and the target transmission path. Therefore, the emergency message can be sent to the authenticated user terminal and the non-authenticated user terminal, the timeliness and reliability of emergency message transmission in any scene are realized, and the actual application effect of the emergency message is improved.

Description

Technical Field

[0001] The present application relates to the field of 5G communication technology, and in particular to a two-way emergency message transmission method, device and medium based on multi-protocol and multi-identity recognition. Background Art

[0002] In the relevant technologies, emergency communications play an indispensable role in disaster relief and public safety scenarios. However, since the existing system is mainly oriented towards authenticated user terminals, it is difficult to support emergency message transmission of non-authenticated devices, resulting in the inability to send emergency messages to non-authenticated devices in disaster scenarios. At the same time, different devices and network environments use different communication protocols (such as SIP, non-SIP, SMS, IP and non-IP), which makes it difficult for a single-protocol communication system to meet the needs of all scenarios. In addition, emergency communications need to ensure the real-time and reliability of messages, but in disaster scenarios, network equipment may partially or completely fail, resulting in the inability of multi-protocol, multi-channel emergency message delivery methods to deliver emergency messages to devices in a timely manner, thereby affecting the actual application effect of emergency messages at critical moments.

[0003] In summary, the technical problems existing in the relevant technologies need to be improved. Summary of the Invention

[0004] The main purpose of the embodiments of the present application is to propose a two-way emergency message transmission method, device and medium based on multi-protocol and multi-identity identification, which can achieve the timeliness and reliability of emergency message transmission in any scenario, thereby improving the actual application effect of emergency messages.

[0005] To achieve the above objectives, an embodiment of the present application provides a bidirectional emergency message delivery method based on multi-protocol and multi-identity recognition, the method comprising the following steps:

[0006] When a sending terminal uploads 5G information, multi-authentication is performed on the sending terminal based on a preset authentication mechanism;

[0007] When the identity verification is passed, extract the emergency message from the 5G information;

[0008] Generate a target priority queue corresponding to the emergency message according to the identity information of the receiving terminal; the identity information includes an authenticated identity state and an unauthenticated identity state, and the target priority queue includes a temporary identity identifier of the unauthenticated receiving terminal;

[0009] Allocating network resources to the target priority queue to obtain a network resource allocation result;

[0010] Performing protocol conversion on the emergency message according to the upload format corresponding to the 5G information uploaded by the sending terminal;

[0011] Determine a target delivery path according to the emergency message after protocol conversion and the current network status;

[0012] encrypting the emergency message after protocol conversion;

[0013] The encrypted emergency message is delivered to the receiving terminal via a satellite network according to the network resource allocation result and the target delivery path.

[0014] In some embodiments, the method further comprises the following steps:

[0015] When no confirmation signal returned by the receiving terminal is received, the emergency message is re-delivered to the receiving terminal.

[0016] In some embodiments, performing multi-identity authentication on the sending terminal based on a preset authentication mechanism includes:

[0017] Determining that the sending terminal uploads the 5G information to the 5G system through a 5G base station, and verifying the identity of the sending terminal through the 5G base station;

[0018] Determining that the sending terminal uploads the 5G information to the 5G system via Bluetooth, and verifying the identity of the sending terminal using a two-factor authentication method;

[0019] Determine that the sending terminal uploads the 5G information to the 5G system through a low-power wide area network, and verify the identity of the sending terminal through a low-power wide area network protocol.

[0020] In some embodiments, generating a target priority queue corresponding to the emergency message according to the identity information of the receiving terminal includes:

[0021] Determining a priority level of each of the emergency messages according to the urgency of the emergency message;

[0022] Generate a first priority queue corresponding to each priority level;

[0023] When it is determined based on the identity information that the receiving terminal is a non-authenticated terminal, generating a temporary identity identifier for the non-authenticated terminal;

[0024] The temporary identity identifier is stored in the corresponding first priority queue to obtain the target priority queue.

[0025] In some embodiments, determining a target delivery path according to the emergency message after protocol conversion and the current network status includes:

[0026] Identify the identity identifier of the receiving terminal corresponding to the emergency message after protocol conversion;

[0027] Get the current network status;

[0028] Generate a routing table according to the identity identifier and the current network status;

[0029] determining a transmission path to be selected according to the routing table;

[0030] The target delivery path is determined from the candidate delivery paths based on a shortest path search method.

[0031] In some embodiments, encrypting the emergency message after protocol conversion includes:

[0032] Determine the target encryption method according to the priority corresponding to the emergency message after protocol conversion;

[0033] The emergency message after protocol conversion is encrypted according to the target encryption method.

[0034] In some embodiments, delivering the encrypted emergency message to the receiving terminal via a satellite network includes:

[0035] Buffering the encrypted emergency message in the satellite network and the ground network node;

[0036] Synchronize cache information through blockchain;

[0037] The synchronized emergency message is delivered to the receiving terminal.

[0038] To achieve the above objectives, another aspect of the present application provides a bidirectional emergency message transmission device based on multi-protocol and multi-identity recognition, the device comprising:

[0039] The first module is configured to perform multi-authentication authentication on the sending terminal based on a preset authentication mechanism when the sending terminal uploads 5G information;

[0040] The second module is used to extract the emergency message in the 5G information after the identity authentication is passed;

[0041] The third module is used to generate a target priority queue corresponding to the emergency message according to the identity information of the receiving terminal; the identity information includes an authenticated identity state and an unauthenticated identity state, and the target priority queue includes a temporary identity identifier of the unauthenticated receiving terminal;

[0042] The fourth module is used to allocate network resources to the target priority queue and obtain a network resource allocation result;

[0043] The fifth module is used to perform protocol conversion on the emergency message according to the upload format corresponding to the 5G information uploaded by the sending terminal;

[0044] A sixth module is configured to determine a target delivery path according to the emergency message after protocol conversion and the current network status;

[0045] The seventh module is used to encrypt the emergency message after the protocol conversion;

[0046] An eighth module is configured to transmit the encrypted emergency message to the receiving terminal via a satellite network according to the network resource allocation result and the target transmission path.

[0047] To achieve the above objectives, another aspect of the present application provides a computer device, including:

[0048] at least one processor;

[0049] at least one memory for storing at least one program;

[0050] When the at least one program is executed by the at least one processor, the at least one processor implements the above method.

[0051] To achieve the above-mentioned purpose, another aspect of an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and the computer program implements the above-mentioned method when executed by a processor.

[0052] The embodiments of the present application include at least the following beneficial effects: The present application provides a two-way emergency message transmission method, device and medium based on multi-protocol and multi-identity identification. The scheme performs multi-identity authentication on the sending terminal based on a preset verification mechanism when the sending terminal uploads 5G information, and extracts the emergency message in the 5G information after the identity authentication is passed. Then, a target priority queue corresponding to the emergency message including a temporary identity identifier of the non-authenticated receiving terminal is generated according to the identity information of the receiving terminal, and network resources are allocated to the target priority queue to obtain a network resource allocation result. At the same time, the emergency message is protocol-converted according to the upload format corresponding to the 5G information uploaded by the sending terminal, and the target transmission path is determined according to the emergency message after the protocol conversion and the current network status. The emergency message after the protocol conversion is encrypted, and the encrypted emergency message is transmitted to the receiving terminal through the satellite network according to the network resource allocation result and the target transmission path, thereby sending the emergency message to the authenticated user terminal and the non-authenticated user terminal, thereby achieving the timeliness and reliability of emergency message transmission in any scenario, thereby improving the actual application effect of the emergency message. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] Figure 1 This is a flowchart of a two-way emergency message transmission method based on multi-protocol and multi-identity recognition provided by an embodiment of the present application;

[0054] Figure 2 This is a schematic diagram of an application scenario of a two-way emergency message transmission method based on multi-protocol and multi-identity recognition provided by an embodiment of the present application;

[0055] Figure 3 This is a schematic diagram of the structure of a two-way emergency message transmission device based on multi-protocol and multi-identity recognition provided by an embodiment of the present application;

[0056] Figure 4 Schematic diagram of the hardware structure of the computer device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0057] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application is further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the embodiments of the present application. They are merely examples of devices and methods consistent with some aspects of the embodiments of the present application.

[0058] It will be understood that the terms "first", "second", etc. used in this application may be used herein to describe various concepts, but unless otherwise specified, these concepts are not limited by these terms. These terms are only used to distinguish one concept from another. For example, without departing from the scope of the embodiments of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the words "if" and "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0059] The terms "at least one", "plurality", "each", "any", etc. used in this application include "at least one", "two" or more, "plurality" or "each", "any" or "any one", "each" or "any one" as used herein.

[0060] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which this application pertains. The terms used herein are for the purpose of describing the embodiments of this application only and are not intended to limit this application.

[0061] In the relevant technologies, emergency communications play an indispensable role in disaster relief and public safety scenarios. However, since the existing system is mainly oriented towards authenticated user terminals, it is difficult to support emergency message transmission of non-authenticated devices, resulting in the inability to send emergency messages to non-authenticated devices in disaster scenarios. At the same time, different devices and network environments use different communication protocols (such as SIP, non-SIP, SMS, IP and non-IP), which makes it difficult for a single-protocol communication system to meet the needs of all scenarios. In addition, emergency communications need to ensure the real-time and reliability of messages, but in disaster scenarios, network equipment may partially or completely fail, resulting in the inability of multi-protocol, multi-channel emergency message delivery methods to deliver emergency messages to devices in a timely manner, thereby affecting the actual application effect of emergency messages at critical moments.

[0062] In view of this, an embodiment of the present application provides a two-way emergency message transmission method, device and medium based on multi-protocol and multi-identity identification. The embodiment of the present application can achieve the timeliness and reliability of emergency message transmission in any scenario, thereby improving the actual application effect of emergency messages.

[0063] The following is a detailed description of the embodiments of the present application with reference to the accompanying drawings:

[0064] Figure 1 This is an optional flowchart of a two-way emergency message transmission method based on multi-protocol and multi-identity identification provided by an embodiment of the present application. Figure 1 The method may include but is not limited to steps S110 to S180:

[0065] Step S110: When the sending terminal uploads 5G information, multi-identity authentication is performed on the sending terminal based on a preset authentication mechanism;

[0066] Step S120: After the identity verification is passed, extract the emergency message from the 5G information;

[0067] Step S130: Generate a target priority queue corresponding to the emergency message based on the identity information of the receiving terminal; wherein the identity information includes an authenticated identity state and an unauthenticated identity state, and the target priority queue includes a temporary identity identifier of the unauthenticated receiving terminal;

[0068] Step S140: Allocate network resources to the target priority queue to obtain a network resource allocation result;

[0069] Step S150: performing protocol conversion on the emergency message according to the upload format corresponding to the 5G information uploaded by the sending terminal;

[0070] Step S160: determining a target delivery path based on the emergency message after protocol conversion and the current network status;

[0071] Step S170: encrypting the emergency message after the protocol conversion;

[0072] Step S180: Deliver the encrypted emergency message to the receiving terminal via the satellite network according to the network resource allocation result and the target delivery path.

[0073] In the embodiments of this application, Figure 2 As shown in Figure 1, different transmitting terminals in different environments can connect to the 5G system through communication methods such as 5G base stations, WiFi, Bluetooth, and low-power wide area networks (LoRa). The 5G system can use different detection and verification mechanisms based on the protocol type and user identity, such as password authentication, certificate authentication, and biometric recognition.

[0074] It can be understood that when this embodiment performs multi-identity authentication on the sending terminal based on the preset verification mechanism, it is determined that the sending terminal uploads 5G information to the 5G system through the 5G base station, and the identity of the sending terminal is verified through the 5G base station; it is determined that the sending terminal uploads 5G information to the 5G system through Bluetooth, and the identity of the sending terminal is verified through a two-factor authentication method; it is determined that the sending terminal uploads 5G information to the 5G system through a low-power wide area network, and the identity of the sending terminal is verified by the low-power wide area network protocol.

[0075] Specifically, when the 5G system receives the 5G information sent by the sending terminal through the 5G base station, it starts the normal identity authentication process:

[0076] User request access: User equipment (UE) sends an access request to the radio access network (RAN).

[0077] Authentication: The RAN authenticates the UE to verify the legitimacy of the UE's identity.

[0078] Key negotiation: The RAN negotiates a key with the UE to encrypt subsequent data transmission.

[0079] Authorized access: If the authentication is successful, the UE will be authorized to access the network.

[0080] When the 5G system receives a 5G message sent by a sending terminal via Bluetooth, which may contain voice, video, image, text, or hypertext data, it authenticates the sending terminal in the following ways:

[0081] Sending terminal registration and authentication: When a new sending terminal first accesses the 5G core network, it sends its International Mobile Equipment Identity (IMEI) to the Equipment Identity Registration Service (EIR) through the authentication process. The EIR will register and verify the received IMEI in its database.

[0082] Access control: Based on the device registration and verification results, the EIR sends a decision about device access permissions to core network elements, such as the SMF (Session Management Function). Legitimate devices are granted access to network resources.

[0083] Evolution of authentication mechanisms: The authentication mechanisms in 5G networks have been improved and perfected based on 4G LTE, including more secure authentication protocols (such as authentication protocols based on elliptic curve cryptography), more flexible authentication methods (such as authentication based on passwords, certificates, and biometrics), more powerful authentication functions (such as support for two-factor authentication and multi-factor authentication), and smarter authentication management (using artificial intelligence and machine learning technologies).

[0084] Authentication: The sending terminal (UE) sends an access request to the radio access network (RAN). The RAN authenticates the UE and verifies its legitimacy. The RAN then negotiates a key with the UE to encrypt subsequent data transmissions. If authentication is successful, the UE is granted network access.

[0085] Secondary authentication scheme: For enterprise / industry users' sending terminals, 5G networks can adopt a secondary authentication scheme. This scheme utilizes the user's biometric information that can be collected on the sending terminal and combines it with a challenge-response authentication mechanism to design the authentication process. The specific process includes: the sending terminal initiates an authentication request to the secondary authentication server. The server generates a random number as a challenge code. The sending terminal verifies the signature, decrypts the plaintext challenge code, and collects the user's biometric code to form an identity identification code. The challenge code and identification code are then encrypted into an information packet, which is signed and sent to the authentication server.

[0086] Two-factor authentication: In addition to using a static password, two-factor authentication adds a physical factor—an authentication token—to generate a dynamic password. When a user logs in, both the static and dynamic passwords must be verified. Only when both are correct can the user's identity be confirmed.

[0087] When the 5G system receives a 5G message from a sending terminal via LoRa, the authentication process for the LoRa sending terminal mainly follows the provisions of the LoRaWAN protocol. The specific steps are as follows:

[0088] Transmitter registration: Before joining the LoRaWAN network, the terminal needs to register with the network server. During the registration process, the transmitting terminal sends its unique identifier (DevEUI), application identifier (AppEUI), and device key (AppKey) to the network server.

[0089] Sending terminal authentication: After receiving the terminal registration information, the network server verifies the terminal's identity. This verification process is typically based on the sending terminal's DevEUI, AppEUI, and AppKey, ensuring the legitimacy of the sending terminal and the legitimate user's ownership of the device.

[0090] Key distribution for the sending terminal: After authentication is successful, the network server will distribute a device session key and an application session key to the sending terminal. These keys are used to encrypt and decrypt communications between the device and the server to ensure communication security.

[0091] Transmitter Activation: After completing registration, authentication, and key distribution, the transmitting terminal can establish a formal communication session with the network server through the activation process. LoRaWAN supports two activation methods: OTAA (Over-The-Air Activation) and ABP (Activation By Personalization). OTAA establishes a session by sending an activation request and response from the network server to the device. ABP preconfigures session parameters between the device and the network server, eliminating the need for an activation process.

[0092] It is understandable that, in this embodiment, after completing the identity authentication of the sending terminal, the 5G system performs the emergency message sending service processing. The processing process is as follows:

[0093] Data parsing: The 5G system calls data parsing components to parse received 5G messages and extract authorization information and target service data. Parsing components may include voice parsing, video parsing, image parsing, text parsing, and hypertext parsing.

[0094] Business processing: According to the pre-set business processing flow, the 5G system performs business processing based on the extracted authorization information and target business data to obtain the business processing results.

[0095] Security enhancement: To improve data security, service data can be encrypted and / or digitally signed. After receiving a 5G message, the 5G system needs to decrypt the message and / or verify the digital signature.

[0096] Blockchain storage: In order to achieve tamper-proof and traceable business data, business data can also be stored in the blockchain.

[0097] Multi-format support: The 5G system supports data transmission in multiple formats, including handwritten, electronic, voice, video, etc., to adapt to different business scenarios and user needs.

[0098] In the embodiments of this application, Figure 2 As shown in the figure, the 5G system realizes the forwarding of multi-protocol emergency message services through satellite access. This access method includes transparent mode and regeneration mode. Among them, in the transparent mode, the satellite does not process the data received from the mobile phone, and directly sends it to the 5G base station deployed on the ground. The base station handles all communication protocols and is interconnected with the 5G core network. This method is the simplest and has the fastest deployment speed. In the regeneration mode, the base station equipment is deployed on the satellite, and the base station on the satellite can process the signaling and data of the terminal. This method is technically complex and needs to consider switching and reselection between base stations, as well as broadcasting different network information in different areas. In addition, the UPF (user plane processing function), a component of the 5G core network, can also be deployed on the satellite to access the service data on the satellite nearby and reduce the latency of the terminal accessing the satellite data.

[0099] In an embodiment of the present application, if the current environment in which the receiving terminal is located does not have a cellular network and the receiving terminal has the need to make and receive calls, send and receive text messages, and send data, 5G NTN (non-terrestrial network) modem technology can be used to support direct two-way communication between the receiving terminal (UE) and the satellite. When the UE accesses the satellite network for the first time, hash functions and XOR are mainly used for calculations. Security is ensured by introducing timestamps, message authentication codes, random numbers, and RES, and session keys are generated.

[0100] It is understandable that in a satellite network, the receiving terminal (UE) first needs to complete registration in the home domain, including offline generation of user identity, long-term shared keys, etc. At the same time, in this process, the UE uses its own identity (User Identification, UID) to register and obtain a temporary identity (Temporary Identity, TID) returned by the NCC (Network Control Center). Specifically, the temporary identity can be a temporary identity generation module deployed in the 5G core network to generate a temporary identity (TID) based on device attributes (such as IMEI) or location for non-authenticated users. During the message transmission process, the validity of the TID can be verified to prevent the forgery of emergency messages. Among them, the TID can be a unique identifier generated based on a hash function and a timestamp. After each successful authentication, the TID will be refreshed, and its validity period can be set to 24 hours, thereby improving the security of information transmission.

[0101] It can be understood that in the emergency message delivery mechanism supported by multiple protocols in this implementation, the protocol used by the emergency message sent by the sending terminal is detected by the protocol identification module deployed in the 5G core network. Among them, the sending protocol of the emergency message may include but is not limited to SIP, non-SIP, SMS, IP, non-IP and other protocols. If the receiving terminal does not support the current protocol, the message can be converted into a protocol supported by the target device through the protocol conversion module. The optimal delivery path is then dynamically selected based on the network status, protocol type and identity of the receiving terminal. For example, low-latency paths (such as satellite links) or high-reliability paths (such as terrestrial networks) are given priority. Then, when transmitting across protocols, the message is encapsulated into a unified format (such as JSON or XML) and decapsulated into the original format at the receiving end.

[0102] It can be understood that when this embodiment generates a target priority queue corresponding to an emergency message based on the identity information of the receiving terminal, the priority level of each emergency message can be determined according to the urgency of the emergency message, and a first priority queue corresponding to each priority level can be generated. When the receiving terminal is determined to be a non-authenticated terminal based on the identity information, a temporary identity identifier of the non-authenticated terminal is generated, and then the temporary identity identifier is stored in the corresponding first priority queue to obtain the target priority queue.

[0103] Specifically, the processing of this embodiment can be handled by a priority message processing mechanism based on identity status. The identification process of this mechanism can be to identify the identity status (authentication or non-authentication) of the user device by deploying an identity authentication module in the 5G core network. Then, according to the user identity and the severity of the emergency, the messages are divided into three priorities: high, medium, and low, and placed in different queues to form priority queues, so that network resources (such as bandwidth, computing resources) can be preferentially allocated to messages in the high-priority queue to ensure their rapid delivery. At the same time, a temporary identity identifier (TID) is generated for non-authenticated users, and their messages are placed in the medium-priority queue to obtain the target priority queue.

[0104] In an embodiment of the present application, the target encryption method is determined based on the priority of the emergency message after protocol conversion, and then the emergency message after protocol conversion is encrypted according to the target encryption method. Specifically, the encryption process of this embodiment can be implemented through a dynamic security-enhanced emergency message delivery mechanism. The implementation process is as follows:

[0105] Dynamic encryption module: A dynamic encryption module is deployed in the 5G core network to select encryption algorithms (such as AES and RSA) based on message priority and sensitivity.

[0106] Authentication mechanism: Use two-factor authentication (2FA) or multi-factor authentication (MFA) to ensure the authenticity of user identities.

[0107] Security policy management: Dynamically adjust security policies (such as encryption strength and authentication methods) based on network status and message type.

[0108] Encryption Algorithm: Identify AES-256 as the target encryption method for high-priority messages and AES-128 as the target encryption method for medium- and low-priority messages.

[0109] Authentication method: password + biometrics (such as fingerprint, facial recognition).

[0110] Specifically, AES-256 is an Advanced Encryption Standard (AES) that uses a 256-bit key for data encryption, offering high security and wide applicability. AES-128 is a symmetric encryption algorithm based on the AES that uses a 128-bit key for data encryption and decryption.

[0111] It is understood that the process of determining the target delivery path based on the protocol-converted emergency message and the current network status in this embodiment can be performed by identifying the identity identifier (e.g., IMMSI, IMEI) corresponding to the receiving terminal corresponding to the protocol-converted emergency message, and after obtaining the current network status, generating a routing table based on the identity identifier and the current network status, then determining the candidate delivery paths based on the routing table, and determining the target delivery path from the candidate delivery paths based on a shortest path search method. The shortest path search method can be a Dijkstra algorithm or an A* algorithm. By calculating the shortest path from the candidate delivery paths using the shortest path search method, the shortest path can be ensured to be quickly delivered.

[0112] It can be understood that in the process of delivering the encrypted emergency message to the receiving terminal via the satellite network, this embodiment can cache the encrypted emergency message in the satellite network and the ground network node to temporarily cache the emergency message, and synchronize the cached information through the blockchain to ensure data consistency and anti-tampering. Then, the synchronized emergency message can be delivered to the receiving terminal after selecting the optimal delivery path based on the cache location and network status to reduce the delay in emergency message delivery.

[0113] In an embodiment of the present application, when no confirmation signal returned by the receiving terminal is received, the emergency message is re-delivered to the receiving terminal.

[0114] Specifically, this embodiment can deploy a message retransmission module in the 5G core network to automatically retransmit messages when delivery fails. Specifically, the receiving terminal feeds back an acknowledgment signal (ACK) after receiving the emergency message, and the sending device triggers retransmission if it does not receive an ACK. This embodiment can send messages through multiple channels (such as satellite, terrestrial network, and WiFi) to ensure successful delivery through at least one channel.

[0115] From the above content, it can be seen that the improved method of this embodiment mainly adopts the following processing mechanism:

[0116] Multi-protocol Emergency Message Delivery: This mechanism supports the delivery of emergency messages via multiple protocols, including SIP, non-SIP, SMS, IP, and non-IP. It dynamically selects the optimal delivery path based on message content and network status. This pioneering multi-protocol framework for emergency message delivery effectively addresses the limited applicability of a single protocol across diverse scenarios.

[0117] Identity-status-based priority message handling: This mechanism dynamically adjusts message priority and resource allocation strategies based on the UE's identity status (authenticated or unauthenticated) and the severity of the emergency, ensuring that high-priority messages are delivered first. This unique mechanism for prioritizing emergency messages for unauthenticated UEs significantly enhances the flexibility and coverage of the emergency communication system.

[0118] Cross-channel message reliability assurance mechanism: This mechanism introduces cross-protocol and multi-channel message retransmission and confirmation mechanisms. By integrating multiple delivery paths, it ensures the successful delivery rate of emergency messages in high-load or disaster scenarios. A cross-channel reliability optimization mechanism is proposed, significantly improving the performance of emergency message delivery in multi-protocol environments.

[0119] Multi-identity dynamic routing mechanism for emergency messages: This mechanism dynamically allocates the optimal delivery path and target network for emergency messages by identifying the UE's identity (such as IMSI, IMEI) or location data. This provides a new technical framework for dynamic identification and routing optimization for non-authenticated UEs.

[0120] Satellite-based distributed message caching and delivery: This mechanism leverages the wide coverage of satellite access to implement distributed caching and delivery of emergency messages across network nodes, reducing latency and improving message delivery rates. This is the first time that distributed caching has been combined with satellite communications to improve the timeliness and stability of emergency messages.

[0121] Dynamically Secured Emergency Messaging: This mechanism addresses the security requirements of multi-protocol emergency messaging by designing a dynamic encryption and authentication mechanism that selects an adaptive security policy based on message priority and sensitivity. This is the first dynamic security policy proposed for emergency scenarios, balancing the efficiency and security of emergency communications.

[0122] Temporary identity generation and management mechanism for non-authenticated UEs: A temporary identity based on device attributes (such as IMEI) or location is generated for non-authenticated UEs for emergency message delivery and system tracking. This solves the identification problem of non-authenticated UEs in emergency communication scenarios and enhances the practicality and coverage of the system.

[0123] Multi-channel congestion management and resource allocation mechanisms: Congestion management and dynamic resource allocation mechanisms are designed for emergency messaging across multiple protocols and channels to ensure that critical messages are prioritized even under high-load scenarios. This optimizes resource allocation and improves system reliability in high-load emergency communication scenarios.

[0124] Feedback-based intelligent retransmission mechanism for emergency messages: This mechanism dynamically adjusts message retransmission intervals, routing, and protocol selection based on message confirmation and reception feedback to ensure rapid delivery of emergency messages. This feedback-based intelligent retransmission solution significantly improves the success rate of emergency message delivery in complex network environments.

[0125] Multi-node collaboration and synchronization mechanism for emergency messaging services: In a multi-node network, inter-node collaboration and message synchronization support efficient and consistent distribution of large-scale emergency messages. Combined with distributed collaboration and synchronization mechanisms, this optimizes cross-node emergency message distribution performance.

[0126] It can be seen that the method provided in the embodiment of the present application has the following beneficial effects:

[0127] (1) Compared with traditional systems, the emergency communication mechanism of this embodiment combining the 5G system with satellite access can provide wider coverage. In particular, when the ground network infrastructure is damaged, satellite communication can serve as a supplement to ensure the continuity of communication.

[0128] (2) In extreme situations such as natural disasters, this embodiment can provide communication support through the satellite network when the ground network completely fails.

[0129] (3) This embodiment supports multiple communication protocols, such as SIP, non-SIP, SMS, IP, and non-IP, which enables it to adapt to different devices and network environments, while traditional systems often only support a single or limited protocol.

[0130] (4) This embodiment supports comprehensive services for both authenticated and unauthenticated users, including devices that do not have a SIM card inserted or are not registered to the network.

[0131] Reference Figure 3 The embodiment of the present application provides a two-way emergency message transmission device based on multi-protocol and multi-identity recognition, the device comprising:

[0132] The first module 310 is configured to perform multi-authentication authentication on the sending terminal based on a preset authentication mechanism when the sending terminal uploads 5G information;

[0133] The second module 320 is used to extract the emergency message from the 5G information after the identity authentication is passed;

[0134] The third module 330 is configured to generate a target priority queue corresponding to the emergency message based on the identity information of the receiving terminal; wherein the identity information includes an authenticated identity state and an unauthenticated identity state, and the target priority queue includes a temporary identity identifier of the unauthenticated receiving terminal;

[0135] The fourth module 340 is configured to allocate network resources to the target priority queue and obtain a network resource allocation result;

[0136] The fifth module 350 is configured to perform protocol conversion on the emergency message according to the upload format corresponding to the 5G information uploaded by the sending terminal;

[0137] The sixth module 360 is configured to determine a target delivery path according to the emergency message after protocol conversion and the current network status;

[0138] The seventh module 370 is used to encrypt the emergency message after the protocol conversion;

[0139] The eighth module 380 is configured to transmit the encrypted emergency message to the receiving terminal via the satellite network according to the network resource allocation result and the target transmission path.

[0140] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0141] The present application also provides a computer device comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the above method when executing the computer program. The computer device can be any intelligent terminal including a tablet computer, an in-vehicle computer, or the like.

[0142] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0143] See also Figure 4 , Figure 4 The hardware structure of a computer device according to another embodiment is shown. The computer device includes:

[0144] The processor 410 may be implemented as a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is configured to execute relevant programs to implement the technical solutions provided in the embodiments of the present application.

[0145] The memory 420 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 420 can store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented through software or firmware, the relevant program code is stored in the memory 420 and is called by the processor 410 to execute the above-mentioned methods of the embodiments of this application.

[0146] Input / output interface 430, used to implement information input and output;

[0147] Communication interface 440, used to implement communication interaction between the computer device and other devices, which can be achieved through wired means (such as USB, network cable, etc.) or wireless means (such as mobile network, WiFi, Bluetooth, etc.);

[0148] bus 450 , which transmits information between various components of the computer device (e.g., processor 410 , memory 420 , input / output interface 430 , and communication interface 440 );

[0149] The processor 410 , the memory 420 , the input / output interface 430 , and the communication interface 440 are communicatively connected to each other within the computer device via a bus 450 .

[0150] An embodiment of the present application further provides a computer-readable storage medium, which stores a computer program, and the computer program implements the above method when executed by a processor.

[0151] It can be understood that the contents of the above method embodiments are all applicable to the present storage medium embodiment, the functions specifically implemented by the present storage medium embodiment are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0152] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely arranged relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0153] The embodiments described in the embodiments of this application are intended to more clearly illustrate the technical solutions of the embodiments of this application and do not constitute a limitation on the technical solutions provided by the embodiments of this application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.

[0154] Those skilled in the art will understand that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0155] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, i.e., they may be located in one place or distributed across multiple network units. Some or all of the modules may be selected based on actual needs to achieve the objectives of this embodiment.

[0156] Those skilled in the art will appreciate that all or some of the steps in the methods, systems, and functional modules / units in the devices disclosed above may be implemented as software, firmware, hardware, or appropriate combinations thereof.

[0157] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0158] It should be understood that in this application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0159] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the above-mentioned units is only a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0160] The units described above as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0161] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0162] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes multiple instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: various media that can store programs, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0163] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but are not intended to limit the scope of the present invention. Any modifications, equivalent substitutions, and improvements made by those skilled in the art without departing from the scope and essence of the present invention should be within the scope of the present invention.

Claims

1. A two-way emergency message transmission method based on multi-protocol and multi-identity recognition, characterized in that: The method comprises the following steps: When a sending terminal uploads 5G information, multi-authentication is performed on the sending terminal based on a preset authentication mechanism; When the identity verification is passed, extract the emergency message from the 5G information; Generate a target priority queue corresponding to the emergency message according to the identity information of the receiving terminal; the identity information includes an authenticated identity state and an unauthenticated identity state, and the target priority queue includes a temporary identity identifier of the unauthenticated receiving terminal; Allocating network resources to the target priority queue to obtain a network resource allocation result; Performing protocol conversion on the emergency message according to the upload format corresponding to the 5G information uploaded by the sending terminal; Determine a target delivery path according to the emergency message after protocol conversion and the current network status; encrypting the emergency message after protocol conversion; The encrypted emergency message is delivered to the receiving terminal via a satellite network according to the network resource allocation result and the target delivery path.

2. The method according to claim 1, characterized in that The method further comprises the following steps: When no confirmation signal returned by the receiving terminal is received, the emergency message is re-delivered to the receiving terminal.

3. The method according to claim 1, characterized in that The performing multi-identity authentication on the sending terminal based on a preset authentication mechanism includes: Determining that the sending terminal uploads the 5G information to the 5G system through a 5G base station, and verifying the identity of the sending terminal through the 5G base station; Determining that the sending terminal uploads the 5G information to the 5G system via Bluetooth, and verifying the identity of the sending terminal using a two-factor authentication method; Determine that the sending terminal uploads the 5G information to the 5G system through a low-power wide area network, and verify the identity of the sending terminal through a low-power wide area network protocol.

4. The method according to claim 1, wherein Generating a target priority queue corresponding to the emergency message according to the identity information of the receiving terminal includes: Determining a priority level of each of the emergency messages according to the urgency of the emergency message; Generate a first priority queue corresponding to each priority level; When it is determined based on the identity information that the receiving terminal is a non-authenticated terminal, generating a temporary identity identifier for the non-authenticated terminal; The temporary identity identifier is stored in the corresponding first priority queue to obtain the target priority queue.

5. The method according to claim 1, wherein The determining of a target delivery path according to the emergency message after protocol conversion and the current network status includes: Identify the identity identifier of the receiving terminal corresponding to the emergency message after protocol conversion; Get the current network status; Generate a routing table according to the identity identifier and the current network status; determining a transmission path to be selected according to the routing table; The target delivery path is determined from the candidate delivery paths based on a shortest path search method.

6. The method according to claim 1, characterized in that The encrypting the emergency message after the protocol conversion includes: Determine the target encryption method according to the priority corresponding to the emergency message after protocol conversion; The emergency message after protocol conversion is encrypted according to the target encryption method.

7. The method according to claim 1, characterized in that The step of transmitting the encrypted emergency message to the receiving terminal via a satellite network comprises: Buffering the encrypted emergency message in the satellite network and the ground network node; Synchronize cache information through blockchain; The synchronized emergency message is delivered to the receiving terminal.

8. A two-way emergency message transmission device based on multi-protocol and multi-identity recognition, characterized in that: The device comprises: The first module is configured to perform multi-authentication authentication on the sending terminal based on a preset authentication mechanism when the sending terminal uploads 5G information; The second module is used to extract the emergency message in the 5G information after the identity authentication is passed; The third module is used to generate a target priority queue corresponding to the emergency message according to the identity information of the receiving terminal; the identity information includes an authenticated identity state and an unauthenticated identity state, and the target priority queue includes a temporary identity identifier of the unauthenticated receiving terminal; The fourth module is used to allocate network resources to the target priority queue and obtain a network resource allocation result; The fifth module is used to perform protocol conversion on the emergency message according to the upload format corresponding to the 5G information uploaded by the sending terminal; A sixth module is configured to determine a target delivery path according to the emergency message after protocol conversion and the current network status; The seventh module is used to encrypt the emergency message after the protocol conversion; An eighth module is configured to transmit the encrypted emergency message to the receiving terminal via a satellite network according to the network resource allocation result and the target transmission path.

9. A computer device, characterized in that: include: at least one processor; at least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor implements the method according to any one of claims 1 to 7.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images