Communication method and communication device

Abstract

The invention provides a communication method and a communication device. The communication method includes receiving a first message, the first message including a first identifier, a first command, and first information, the first identifier identifying the communication device, the first information uniquely identifying the first message. If the first condition is met, executing the first command; and if the first condition is not met, not executing or discarding the first command. The communication device comprises a first A-IoT device or a chip in the first AIoT device. The first condition comprises that the first information is received by the communication device for the first time.

Description

Technical Field

[0001] This application relates to the field of communication technology, specifically to a communication method and a communication device. Background Technology

[0002] With the development of communication technology, the 3rd Generation Partnership Project (3GPP) defined the Ambient Internet of Things (A-IoT) technology. In A-IoT and other related technologies, the communication system can include readers and tags. Readers can be implemented by network devices (such as base stations) or terminals, while tags can be IoT terminals, such as passive / semi-passive / active tags. A-IoT technology is mainly used to realize the following services: inventory, positioning, sensing, and commands; typical application scenarios of A-IoT technology include logistics, warehousing, industrial manufacturing, identity recognition, and environmental monitoring.

[0003] During the execution of command services, when the access network device sends a non-access stratum (NAS) protocol data unit (PDU) containing a command to the reader, and / or when the reader sends a NAS PDU containing a command to the A-IoT device, an attacker can obtain the NAS PDU containing the command and replay it to the A-IoT device one or more times. This can cause the A-IoT device to execute the same command multiple times, or even cause the A-IoT device to lose power and be unable to execute other A-IoT services. Summary of the Invention

[0004] To address the aforementioned technical problems, this application provides a communication method and communication device, which facilitates the prevention of replay attacks in command services.

[0005] Firstly, a communication method is provided, which can be executed by a communication device, the communication device including a first A-IoT device or a chip in the first A-IoT device. For ease of understanding, the following description uses the example of execution by a communication device.

[0006] The method includes: receiving a first message, the first message including a first identifier, a first command, and first information, the first identifier being used to identify a communication device, and the first information uniquely identifying the first message; executing the first command if a first condition is met; and not executing or discarding the first command if the first condition is not met; wherein the communication device includes a first A-IoT device or a chip in the first A-IoT device; the first condition includes: the first information being received by the communication device for the first time.

[0007] Based on the above technical solution, the first information included in the first message is used to uniquely identify the first message. Therefore, the communication device can determine whether it has received the first message for the first time based on whether it has received the first information for the first time, thereby determining whether the first command has already been executed, which helps to avoid replay attacks. For example, if the communication device determines that it has received the first information beforehand, it is equivalent to having received the first message. Furthermore, the communication device can determine that it has already executed the first command included in the first message. To avoid executing the first command again, the communication device will not execute or will discard the first command if it has already received the first information. In other words, according to this application, the problem of repeatedly executing the first command caused by the communication device's inability to determine whether the first command has already been executed can be avoided.

[0008] It should be noted that the communication device's failure to execute the first command can include the communication device both failing to execute and discarding the first command. Discarding the first command means that the communication device neither executes nor discards the first command. Executing the first command is equivalent to the communication device responding to the first command, and failing to execute the first command is equivalent to the communication device not responding to the first command.

[0009] In conjunction with the first aspect, in some implementations of the first aspect, the first message further includes a second value, or the first information is a second value; before receiving the first message, the method further includes: sending a second message, the second message including the first value, the first value being randomly determined; after receiving the first message, the method further includes: determining a third value based on the first value, or determining a third value based on the first value and the first information; the first condition further includes: the third value and the second value conforming to a first preset rule.

[0010] It should be noted that if the first message also includes a second value, the communication device determines the third value based on the first value and the first information, or determines the third value based on the first value. If the first information is a second value, the communication device determines the third value based on the first value.

[0011] For example, the third value and the second value conforming to the first preset rule include any of the following cases: the third value and the second value are the same, the difference between the third value and the second value is a predefined value #3, the sum between the third value and the second value is a predefined value #4, the product between the third value and the second value is a predefined value #5, or the ratio between the third value and the second value is a predefined value #6.

[0012] Based on the above technical solution, if the communication device sends a first value to the first core network element, the first core network element can send a second value to the communication device. Then, if the communication device executes a first command if a third value determined based on the first value conforms to a first preset rule and the second value, this helps prevent the communication device from being attacked by an attacker. For example, if the third value determined by the communication device based on the first value does not conform to the first preset rule, the communication device determines that the received first command may not be from the first core network element. Therefore, the communication device determines that not executing or discarding the first command can prevent attacks from attackers.

[0013] In conjunction with the first aspect, in some implementations of the first aspect, the first information is a second value, and the first message also includes the identification information of the first command; before receiving the first message, the method further includes: sending a second message, the second message including the first value, the first value being randomly determined; the method further includes: determining a third value based on the first value and the identification information of the first command; the first condition further includes: the third value and the second value conforming to a first preset rule.

[0014] Based on the above technical solution, if the communication device sends a first value to the first core network element, the first core network element can send a second value to the communication device. Then, the communication device executes the first command when the third value determined according to the first value and the second value meet the first preset rule, which helps to avoid the communication device from being attacked by attackers.

[0015] In conjunction with the first aspect, in some implementations of the first aspect, the method further includes: receiving first indication information, the first indication information indicating a first time, the first time being associated with second information, the second information being the identification information of the first command; and discarding the second information after the first time expires.

[0016] Based on the above technical solution, the communication device can discard the second information after the first instruction information expires in the first time, thereby avoiding the memory and / or power consumption of storing the second information for a long time.

[0017] In conjunction with the first aspect, in some implementations of the first aspect, the second message further includes second indication information, which is used to indicate a first time period, the first time period being the period during which the current battery power of the communication device can maintain communication.

[0018] Based on the above technical solution, core network elements can determine whether to trigger command services according to the second indication information, thereby avoiding unnecessary signaling consumption caused by triggering command services when the power of the communication device is exhausted.

[0019] In conjunction with the first aspect, in some implementations of the first aspect, before sending the second message, the method further includes: sending a fourth value and a third indication information, the third indication information indicating a second time period, the second time period being the period during which the current battery power of the communication device can maintain communication, the fourth value being randomly generated; sending the second message, including: sending the second message after the second time period expires.

[0020] In conjunction with the first aspect, in some implementations of the first aspect, the second message further includes a second identifier, which is obtained by encrypting the identifier of the communication device.

[0021] Based on the above technical solution, by encrypting the identifier of the communication device, attackers can be prevented from obtaining the identifier of the communication device.

[0022] In conjunction with the first aspect, in some implementations of the first aspect, after receiving the first message, the method further includes: decrypting the first identifier to obtain a third identifier; the first condition further includes: the third identifier is the same as the identifier of the communication device.

[0023] Based on the above technical solution, by verifying the first identifier included in the first message, it can be determined whether the first message is a message for the communication device, thereby preventing the communication device from executing commands that are not for the communication device.

[0024] In conjunction with the first aspect, in some implementations of the first aspect, the method further includes: receiving a third message, the third message including the first identifier, a second command and third information, the third information uniquely identifying the third message; executing the second command if a second condition is met; not executing or discarding the second command if the second condition is not met; wherein the second condition includes: the third information being received by the communication device for the first time.

[0025] Based on the above technical solution, if a communication device executes multiple command services, different information identifiers can be used to identify the command-containing messages sent in different command services. This helps prevent the communication device from discarding commands from different command services as replay messages. For example, if a communication device executes a first command service and a third command service, and the first information determined by the first core network element during the execution of the first command service is the same as the third information determined during the execution of the third command service, then during the execution of the third command service, the communication device considers that it has already received the first information and thus discards the second command in the third command service as a replay message. If the first information determined by the first core network element during the execution of the first command service is different from the third information determined during the execution of the third command service, then during the execution of the third command service, the communication device considers that the third information is being received for the first time and thus will not discard the second command in the third command service as a replay message.

[0026] In conjunction with the first aspect, in some implementations of the first aspect, the third message further includes a sixth value, or the third information is a sixth value; before receiving the third message, the method further includes: sending a fourth message, the fourth message including a fifth value, the fifth value being randomly determined; after receiving the third message, the method further includes: determining a seventh value based on the fifth value, or determining a seventh value based on the fifth value and the third information; the second condition further includes: the seventh value and the sixth value conforming to a second preset rule.

[0027] In conjunction with the first aspect, in some implementations of the first aspect, the third information is a sixth value, and the third message also includes the identification information of the second command; before receiving the third message, the method further includes: sending a fourth message, the fourth message including a fifth value, the fifth value being randomly determined; after receiving the third message, the method further includes: determining a seventh value based on the fifth value, or determining a seventh value based on the fifth value and the identification information of the second command; the second condition further includes: the seventh value and the sixth value conforming to a second preset rule.

[0028] Secondly, a communication method is provided, which can be executed by a first core network element or by a component of the first core network element (such as a chip, circuit, or chip system). For ease of understanding, the following description uses the execution by the first core network element as an example.

[0029] The method includes: receiving a fifth message, the fifth message including a second identifier, a first value, and second indication information, the first identifier being used to identify a communication device, the first value being randomly determined, and the second indication information being used to indicate a first time period, the first time period being the time during which the current battery power of the communication device can maintain communication; determining a second value based on the first value; if a third condition is met, sending a sixth message, the sixth message including a first command, the second value, and first information, the first information uniquely identifying the sixth message sent by the first core network element, the first command being directed to the communication device, the second value being directed to the communication device, the communication device including a first A-IoT device or a chip in the first A-IoT device; if the third condition is not met, sending a seventh message, the seventh message being used to obtain the identifier of the A-IoT device.

[0030] Based on the above technical solution, the first information included in the sixth message is used to uniquely identify the sixth message, which helps the communication device determine whether the first command has been executed based on whether the first information is received for the first time, thereby helping to avoid replay attacks.

[0031] In conjunction with the second aspect, in some implementations of the second aspect, the third condition includes: the first time period has not expired.

[0032] Based on the above technical solution, unnecessary signaling consumption caused by the first core network element triggering command services when the communication device's power is depleted can be avoided.

[0033] In conjunction with the second aspect, in some implementations of the second aspect, after sending the sixth message, the method further includes: if the third condition is met, sending an eighth message, the eighth message including a third command and fourth information, the fourth information uniquely identifying the eighth message sent by the first core network element, the third command being directed to the communication device; if the third condition is not met, sending a ninth message, the ninth message being used to obtain the identifier of the A-IoT device.

[0034] In conjunction with the second aspect, in some implementations of the second aspect, after sending the seventh message, the method further includes: receiving a tenth message, the tenth message including a second identifier, a fifth value, and fourth indication information, the second identifier being used to identify the communication device, the fifth value being randomly determined, and the fourth indication information being used to indicate a third time period, the third time period being the time during which the current battery power of the communication device can maintain communication; determining a sixth value based on the fifth value; if the fourth condition is met, sending an eleventh message, the eleventh message including a second command and third information, the third information uniquely identifying the eleventh message sent by the first core network element, the second command being directed to the communication device; if the fourth condition is not met, sending a twelfth message, the twelfth message being used to obtain the identifier of the A-IoT device.

[0035] In conjunction with the second aspect, in some implementations of the second aspect, the fourth condition includes: the third time period has not expired.

[0036] In conjunction with the second aspect, in some implementations of the second aspect, after receiving the fifth message, the method further includes: decrypting the second identifier to obtain the fourth identifier; the third condition further includes: the fourth identifier is the same as the identifier of the communication device.

[0037] In conjunction with the second aspect, in some implementations of the second aspect, the sixth message also includes a first identifier, which is obtained by encrypting the identifier of the communication device.

[0038] Thirdly, a communication apparatus is provided for performing the method provided in the first aspect. Specifically, the communication apparatus may include units and / or modules for performing the method provided in any of the above implementations of the first aspect, such as a processing unit and a transceiver unit.

[0039] In one implementation, the transceiver unit can be a transceiver or an input / output interface; the processing unit can be at least one processor. Optionally, the transceiver can be a transceiver circuit. Optionally, the input / output interface can be an input / output circuit.

[0040] In another implementation, the transceiver unit can be an input / output interface, interface circuit, output circuit, input circuit, pin, or related circuit on the chip, chip system, or circuit; the processing unit can be at least one processor, processing circuit, or logic circuit.

[0041] Fourthly, a communication apparatus is provided for performing the method provided in the second aspect. Specifically, the communication apparatus may include units and / or modules for performing the method provided in the second aspect, such as a processing unit and a transceiver unit.

[0042] In one implementation, the transceiver unit can be a transceiver or an input / output interface; the processing unit can be at least one processor. Optionally, the transceiver can be a transceiver circuit. Optionally, the input / output interface can be an input / output circuit.

[0043] In another implementation, the transceiver unit can be an input / output interface, interface circuit, output circuit, input circuit, pin, or related circuit on the chip, chip system, or circuit; the processing unit can be at least one processor, processing circuit, or logic circuit.

[0044] Fifthly, this application provides a processor for executing the method provided by any of the implementations of the first to second aspects described above.

[0045] Unless otherwise specified, or if it does not contradict its actual function or internal logic in the relevant description, the transmission and acquisition / reception operations involved in the processor can be understood as processor output and reception, input and other operations, or as transmission and reception operations performed by radio frequency circuits and antennas. This application does not limit them in this regard.

[0046] A sixth aspect provides a computer-readable storage medium storing program code for execution by a device, the program code including a method for performing any of the implementations of the first to second aspects described above.

[0047] In a seventh aspect, a computer program product containing instructions is provided, which, when run on a computer, causes the computer to perform the method provided by any of the implementations of the first to second aspects described above.

[0048] Eighthly, a chip is provided, the chip including a processor and a communication interface, the processor reading instructions stored in a memory through the communication interface and executing the method provided by any one of the implementations of the first to second aspects.

[0049] Optionally, as one implementation, the chip also includes a memory storing computer programs or instructions, and a processor is used to execute the computer programs or instructions stored in the memory. When the computer programs or instructions are executed, the processor is used to execute the method provided by any of the implementations of the first to second aspects described above.

[0050] Ninth aspect, a communication system is provided, including the communication device described in the third aspect and the communication device described in the fourth aspect. Attached Figure Description

[0051] Figure 1 This is a schematic diagram of a communication system applicable to embodiments of this application.

[0052] Figure 2 This is a schematic diagram of another communication system applicable to embodiments of this application.

[0053] Figure 3 This is a schematic diagram of another communication system applicable to embodiments of this application.

[0054] Figure 4 This is a schematic diagram of another communication system applicable to embodiments of this application.

[0055] Figure 5 This is a schematic diagram of an open radio access network (O-RAN) system applicable to embodiments of this application.

[0056] Figure 6 This is a schematic diagram of another O-RAN system applicable to embodiments of this application.

[0057] Figure 7 This is a schematic diagram of a random access process for a tag.

[0058] Figure 8 This is a schematic flowchart of a communication method 800 provided in an embodiment of this application.

[0059] Figure 9 This is a schematic flowchart of a communication method 900 provided in an embodiment of this application.

[0060] Figure 10 This is a schematic flowchart of a communication method 1000 provided in an embodiment of this application.

[0061] Figure 11 This is a schematic flowchart of a communication method 1100 provided in an embodiment of this application.

[0062] Figure 12 This is a schematic flowchart of a communication method 1200 provided in an embodiment of this application.

[0063] Figure 13 This is a schematic block diagram of the communication device 1300 provided in the embodiments of this application.

[0064] Figure 14 This is a schematic block diagram of another communication device 1400 provided in the embodiments of this application.

[0065] Figure 15 This is a schematic block diagram of the chip system 1500 provided in the embodiments of this application. Detailed Implementation

[0066] The technical solutions in this application will now be described with reference to the accompanying drawings.

[0067] The technical solutions provided in this application can be applied to various communication systems, such as: 5th generation (5G) or new radio (NR) systems, long term evolution (LTE) systems, LTE frequency division duplex (FDD) systems, LTE time division duplex (TDD) systems, wireless local area network (WLAN) systems, satellite communication systems, future communication systems, or integrated systems of multiple systems. The technical solutions provided in this application can also be applied to device-to-device (D2D) communication, vehicle-to-everything (V2X) communication, machine-to-machine (M2M) communication, machine-type communication (MTC), and Internet of Things (IoT) communication systems or other communication systems.

[0068] The technical solutions provided in this application can also be applied to non-terrestrial network (NTN) systems such as inter-satellite communication and satellite communication. As an example, a satellite communication system includes a satellite base station and terminal equipment. The satellite base station provides communication services to the terminal equipment. The satellite base station can also communicate with other base stations. A satellite can act as a base station or as a terminal device. Here, "satellite" can refer to unmanned aerial vehicles (UAVs), hot air balloons, low-Earth orbit (LEO) satellites, medium-Earth orbit (MEO) satellites, high-Earth orbit (HEO) satellites, etc. "Satellite" can also refer to non-terrestrial base stations or non-terrestrial equipment, etc.

[0069] In a communication system, a device can send signals to or receive signals from another device. These signals can include information, signaling, or data. The device can also be replaced by an entity, network entity, communication device, mobile device, network element, communication module, node, communication node, communication apparatus, etc. This disclosure uses a device as an example. For instance, a communication system can include at least one terminal device and at least one network device. The network device can send downlink signals to the terminal device, and / or the terminal device can send uplink signals to the network device. It is understood that the terminal device in this disclosure can be replaced by a first communication device, and the network device can be replaced by a second communication device, both performing the corresponding communication methods described in this disclosure. Alternatively, the corresponding communication methods in this disclosure can be applied between network devices or between terminal devices, without limitation herein.

[0070] The terminal device in this application embodiment can be a device or module that accesses the aforementioned communication system and has corresponding communication functions. The terminal device can include various devices with wireless communication capabilities, which can be used to connect people, objects, machines, etc. The terminal device can be widely applied in various scenarios, such as: cellular communication, D2D, V2X, peer-to-peer (P2P), M2M, MTC, IoT, virtual reality (VR), augmented reality (AR), industrial control, autonomous driving, telemedicine, smart grids, smart furniture, smart offices, smart wearables, smart transportation, smart cities, drones, robots, remote sensing, passive sensing, positioning, navigation and tracking, autonomous delivery, etc. The terminal device can be a terminal in any of the above scenarios, such as an MTC terminal, an IoT terminal, etc. Terminal equipment can be user equipment (UE), terminal, fixed equipment, mobile station equipment or mobile equipment, subscriber unit, handheld device, vehicle-mounted equipment, wearable device, cellular phone, smartphone, session initiation protocol (SIP) phone, wireless data card, personal digital assistant (PDA), computer, tablet computer, laptop computer, wireless modem, handset, laptop computer, computer with wireless transceiver capability, smart book, vehicle, satellite, global positioning system (GPS) device, target tracking device, aircraft (e.g., drone, helicopter, multiple helicopters, four helicopters, or airplanes), ship, remote control device, smart home device, industrial equipment, transportation vehicle with wireless communication capability, communication module, or roadside unit with terminal function, all conforming to the 3GPP standard. The terminal device (RSU) can be a unit or a device built into the aforementioned equipment (e.g., a communication module, modem, or chip in the aforementioned equipment), or other processing devices connected to a wireless modem. For ease of description, the terminal device will be described below as a terminal or UE.

[0071] It should be understood that in certain scenarios, a UE can also be used as a base station. For example, a UE can act as a scheduling entity, providing sidelink signaling between UEs in scenarios such as V2X, D2D, or P2P.

[0072] In this embodiment, the device for implementing the functions of the terminal device can be the terminal device itself, or it can be any device capable of supporting the terminal device in implementing those functions, such as a chip system. This device can be installed in or used in conjunction with the terminal device. In this embodiment, the chip system can be composed of chips or may include chips and other discrete components. This embodiment only uses the terminal device as an example to illustrate the device for implementing the functions of the terminal device, and does not constitute a limitation on the solution of this embodiment.

[0073] The network device in this application embodiment can be a device or module with corresponding communication functions. The network device can be a device used to communicate with terminal devices; it can also be called an access network device or a wireless access network device, such as a base station. In this application embodiment, the network device can refer to a radio access network (RAN) node (or device) that connects the terminal device to the wireless network. A base station can broadly encompass, or be replaced by, various names including: NodeB, evolved NodeB (eNB), next-generation NodeB (gNB), relay station, access point, transmitting and receiving point (TRP), transmitter, master station, auxiliary station, motor slide retainer (MSR) node, home base station, network controller, access node, wireless node, access point (AP), transmission node, transceiver node, baseband unit (BBU), remote radio unit (RRU), active antenna unit (AAU), remote radio head (RRH), central unit (CU), distributed unit (DU), positioning node, etc. A base station can be a macro base station, micro base station, relay node, donor node, or a combination thereof. A base station can also refer to a communication module, modem, or chip installed within the aforementioned equipment or apparatus. A base station can also be a mobile switching center, a device that performs base station functions in D2D, V2X, and M2M communications, or a device that performs base station functions in future communication systems. A base station can support networks using the same or different access technologies. The embodiments of this application do not limit the specific technologies or device forms used in the network equipment.

[0074] Base stations can be fixed or mobile. For example, a helicopter or drone can be configured to act as a mobile base station, and one or more cells can move depending on the location of the mobile base station. In other examples, a helicopter or drone can be configured as a device to communicate with another base station.

[0075] In some deployments, the network devices mentioned in the embodiments of this application may be devices including CU, DU, or CU and DU, or devices with control plane CU nodes (central unit-control plane (CU-CP)) and user plane CU nodes (central unit-user plane (CU-UP)) and DU nodes. For example, the network devices may include gNB-CU-CP, gNB-CU-UP, and gNB-DU.

[0076] In some deployments, multiple RAN nodes collaborate to assist terminals in achieving wireless access, with different RAN nodes each implementing some of the base station's functions. For example, RAN nodes can be CUs, DUs, CU-CPs, CU-UPs, or RUs. CUs and DUs can be configured separately or included in the same network element, such as a BBU. RUs can be included in radio frequency equipment or radio frequency units, such as RRUs, AAUs, or RRHs.

[0077] In some deployments, the CU (Core Unit) is a logical node that carries the Radio Resource Control (RRC) layer, Service Data Adaptation Protocol (SDAP) layer, Packet Data Convergence Protocol (PDCP) layer, and other control functions of the access network equipment. The CU connects to network nodes such as the core network through interfaces, which may be E2 interfaces, etc. Optionally, the CU possesses some core network functions. The CU (e.g., the PDCP layer and higher layers) connects to the DU (e.g., the Radio Link Control (RLC) layer and lower layers) through interfaces, which may be F1 interfaces, etc. In some examples, these interfaces (e.g., the F1 interface) can provide control plane (C-Plane) and user plane (U-Plane) functions (e.g., interface management, system information management, UE context management, RRC message transmission, etc.). The F1 application protocol (F1AP) is the application protocol for the F1 interface, and in some examples, it defines the F1 signaling procedures. The F1 interface supports both the control plane (F1-C) and the user plane (F1-U).

[0078] In some deployments, the CU can be split into CU-CP and CU-UP. CU-CP is a logical node carrying the RRC layer and the control plane part of PDCP (PDCP-C) layer, used to implement the CU's control plane functions. CU-CP can interact with network elements in the core network used to implement control plane functions. These network elements in the core network can be access and mobility function network elements. CU-UP is a logical node carrying the SDAP layer and the user plane part of PDCP (PDCP-U) layer, used to implement the CU's user plane functions. CU-UP can interact with network elements in the core network used to implement user plane functions. The above CU and DU configurations are merely examples; the functions of CU and DU can be configured as needed. For example, CU or DU can be configured to have more protocol layer functions, or CU or DU can be configured to have only partial protocol layer processing functions. For example, some functions of the RLC layer and the functions of the protocol layer above the RLC layer can be placed in the CU, while the remaining functions of the RLC layer and the functions of the protocol layer below the RLC layer can be placed in the DU. Another example is that the functions of the CU or DU can be divided according to service type or other system requirements. For instance, based on latency, functions that need to meet low latency requirements can be placed in the DU, while functions that do not need to meet such latency requirements can be placed in the CU.

[0079] In some deployments, the DU (Distributed Unit) is a logical node that carries the RLC (Real-Time Control) layer, the medium access control (MAC) layer, the higher physical layer (Higher PHY) layer, and other functions. In some examples, the DU can control at least one RU (Remote Root). The DU connects to the RU through interfaces, which can be fronthaul interfaces. In some examples, the Higher PHY layer includes the PHY layer processing, such as forward error correction (FEC) encoding and decoding, scrambling, modulation, and demodulation.

[0080] In some deployments, the RU is a logical node that carries both lower physical layer (PHY) and radio frequency (RF) processing. In some examples, the RU can be a TRP, RRH, or other similar entity. In some examples, the Low-PHY includes portions of the PHY processing, such as Fast Fourier Transform (FFT), Inverse Fast Fourier Transform (IFFT), digital beamforming, and filtering. The RU communicates with one or more UEs via a radio link.

[0081] The DU and RU can be co-located or not. The DU and RU exchange control plane and user plane information via a fronthaul link through a lower-layer split-control, user, and synchronization (LLS-CUS) interface. LLS-CUS may include interfaces providing control and user planes respectively. In some examples, the control plane refers to real-time control between the DU and RU. The DU and RU exchange management information via a fronthaul link interface (such as an LLS-M interface), and the management plane (M-Plane) refers to non-real-time management operations between the DU and RU.

[0082] DU and RU can cooperate to implement the functions of the PHY layer. A DU can be connected to one or more RUs. The functions of DU and RU can be configured in various ways depending on the design. For example, a DU can be configured to implement baseband functions, and an RU can be configured to implement mid-RF functions. Another example is that a DU can be configured to implement higher-level functions in the PHY layer, and an RU can be configured to implement lower-level functions in the PHY layer, or to implement both lower-level and RF functions. Higher-level functions in the physical layer can include a portion of the physical layer's functions that are closer to the MAC layer, while lower-level functions in the physical layer can include another portion of the physical layer's functions that are closer to the mid-RF side.

[0083] In one possible design, the processing unit in the BBU used to implement baseband functions is called the baseband high (BBH) unit, and the processing unit in the RRU / AAU / RRH used to implement baseband functions is called the baseband low (BBL) unit.

[0084] In different systems, CU (or CU-CP and CU-UP), DU, or RU may have different names, but those skilled in the art will understand their meaning. For example, a radio access network can also be an open radio access network (O-RAN) architecture. In an O-RAN system, CU can also be called an open CU (open CU, O-CU), DU can also be called an open DU (open DU, O-DU), CU-CP can also be called an open CU-CP (O-CU-CP), CU-UP can also be called an open CU-UP (O-CU-UP), and RU can also be called an open RU (open RU, O-RU). Any of the units among CU (or CU-CP, CU-UP), DU, and RU in this application can be implemented through software modules, hardware modules, or a combination of software modules and hardware modules.

[0085] In this embodiment, the device for implementing the functions of a network device can be a network device itself, or a device capable of supporting the network device in implementing those functions, such as a chip system, chip, circuit, or communication module (i.e., a communication module that performs communication functions). This device can be installed within the network device. In this embodiment, the chip system can be composed of chips, or it can include chips and other discrete devices. Furthermore, the device can be configured with program instructions for performing corresponding communication functions. This embodiment only uses a network device as an example to illustrate the device for implementing the functions of a network device, and does not limit the solution of this embodiment.

[0086] Network devices and terminal devices can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; they can also be deployed on water; and they can also be deployed in the air on airplanes, balloons, and satellites. This application does not limit the scenario in which the network devices and terminal devices are located. Furthermore, terminal devices and network devices can be hardware devices, software functions running on dedicated hardware, or software functions running on general-purpose hardware, such as virtualization functions instantiated on a platform (e.g., a cloud platform), or entities that include dedicated or general-purpose hardware devices and software functions. This application does not limit the specific form of the terminal devices and network devices.

[0087] First, a brief introduction to the communication system applicable to the embodiments of this application is given below.

[0088] Figure 1 This is a schematic diagram of a communication system 100 applicable to an embodiment of this application. For example... Figure 1As shown, the communication system includes a network device 110 and an ambient Internet of Things (A-IoT) terminal 120. The network device 110 and the A-IoT terminal 120 communicate bidirectionally. This communication includes A-IoT data and / or signaling. Specifically, the network device 110 sends downlink data and / or signaling to the A-IoT terminal 120, and the A-IoT terminal 120 sends uplink data and / or signaling to the network device 110. Alternatively, it can be understood that the network device 110 and the A-IoT terminal 120 transmit uplink and downlink data and / or signaling.

[0089] Figure 2 This is a schematic diagram of a communication system 200 applicable to an embodiment of this application. For example... Figure 2 As shown, the communication system includes a network device 210, an intermediate node 220, and an A-IoT terminal 230. The network device 210 and the A-IoT terminal 230 communicate bidirectionally with the intermediate node 220. For example, the network device 210 communicates bidirectionally with the intermediate node 220, and then the intermediate node 220 communicates bidirectionally with the A-IoT terminal 120. That is, the network device 210 transmits uplink and downlink data and / or signaling between itself and the intermediate node 220, and the intermediate node 220 transmits uplink and downlink data and / or signaling between itself and the A-IoT terminal 120. In this embodiment, the intermediate node 220 can be a repeater, an integrated access backhaul (IAB) node, a UE, etc.

[0090] Figure 3 This is a schematic diagram of a communication system 300 applicable to an embodiment of this application. For example... Figure 3 As shown in (a) and (b), the communication system includes a network device 310, an auxiliary node 320, and an A-IoT terminal 330. Figure 3 In (a), the A-IoT terminal 330 sends data and / or signaling to the network device 310, the network device 310 sends data and / or signaling to the auxiliary node 320 via Uu, and then the A-IoT terminal 330 receives data and / or signaling from the auxiliary node 320. Figure 3 In (b), the A-IoT terminal 330 receives data and / or signaling sent by the network device 310 and sends data and / or signaling to the auxiliary node 320. Then, the network device 310 receives data and / or signaling from the auxiliary node 320 through the Uu interface. In this embodiment, the intermediate node of the auxiliary node 320 may be a repeater, an IAB node, a UE, etc.

[0091] Figure 4This is a schematic diagram of a communication system 400 applicable to an embodiment of this application. For example... Figure 4 As shown, the communication system includes a terminal device 410 and an A-IoT terminal 420. The terminal device 410 and the A-IoT terminal 420 communicate bidirectionally. The communication between the terminal device 410 and the A-IoT terminal 420 includes environmental IoT data and / or signaling. Specifically, the terminal device 410 sends downlink data and / or signaling to the A-IoT terminal 420, and the A-IoT terminal 420 sends uplink data and / or signaling to the terminal device 410. Alternatively, it can be understood that the terminal device 410 and the A-IoT terminal 420 transmit uplink and downlink data and / or signaling.

[0092] Figures 1 to 4 This is merely an illustration; the communication system to which this application's embodiments apply may also include other devices, such as core network equipment, wireless relay equipment, and / or wireless backhaul equipment. Figures 1 to 4 It is not shown in the middle.

[0093] The embodiments of this application can also be applied to open RAN (O-RAN) system architecture.

[0094] like Figure 5 As shown, an O-RAN system can include core network (CN) equipment, access network (RAN) equipment, and user equipment (UE). Access network equipment communicates with core network equipment via a backhaul link and with UE via an air interface. For example, a BBU in the access network equipment communicates with the core network equipment via a backhaul link, and an RU in the access network equipment communicates with the UE via an air interface. The BBU communicates with at least one RU via a fronthaul link; the BBU and RU may or may not be co-located. The BBU includes at least one CU and at least one DU, and the CU and DU can communicate via at least one midhaul link.

[0095] Figure 5 This is just an illustration; the wireless communication system may also include other devices. Figure 5 It is not shown in the middle.

[0096] Figure 6 This is a schematic diagram of the application framework involving RIC modules under the O-RAN architecture. For example... Figure 6As shown, the communication system includes a RAN intelligent controller (RIC). The RIC includes near-real-time RICs (near-RT RICs) and non-real-time RICs (non-RT RICs). Non-real-time RICs primarily process non-real-time information, such as data that is not sensitive to latency, with latency in the order of seconds. Real-time RICs primarily process near-real-time information, such as data that is relatively sensitive to latency, with latency in the order of tens of milliseconds.

[0097] The near real-time RIC and non-real-time RIC can also be set up as separate network elements. Optionally, the near real-time RIC and non-real-time RIC can also be part of other devices. For example, the near real-time RIC can be set in the RAN node (e.g., in CU, DU), while the non-real-time RIC can be set in the OAM, cloud server, core network device, or other network device.

[0098] To facilitate a better understanding of the technical solution of this application, some related technologies involved in the technical solution of this application are introduced.

[0099] 1. Passive Radio Frequency Identification (RFID):

[0100] An RFID system consists of an interrogator and tags, which communicate with each other without contact. The interrogator can read information from the tag or write information to the tag. The tag itself is simple, requiring excitation from the interrogator to transmit information; it converts the wireless signal emitted by the interrogator into energy to power itself. If RFID is applied to mobile communication systems, such as 5G systems, the base station can act as the interrogator, fulfilling its functions.

[0101] The primary application of RFID is identification, but it can also be used for data reading and writing. The tags have the following characteristics:

[0102] 1) The label design is simple, for example, the application layer and air interface signaling are combined into one design.

[0103] 2) The tag supports power consumption in the microwatt (μW) level or hundreds of microwatts level, but cannot support complex designs or complex measurements.

[0104] 3) When using multi-tag communication, time-division multiplexing is used, and multiple tags are read serially. It does not support the distinction between the frequency domain and the code domain, and its parallel performance is poor.

[0105] Figure 7 This is a flowchart illustrating the RFID process. (For example...) Figure 7 As shown, the specific working process of RFID is as follows.

[0106] In S710, the reader sends a select signal to the tag. Correspondingly, the tag receives the select signal from the reader.

[0107] The select signaling is used to select one tag or a group of tags. Specifically, the reader uses the select signaling to cause tags that meet and / or do not meet the selection criteria to set the status of a specific session in the inventory flag.

[0108] For example, the inventory flag can have four independent sessions: session 0 (S0), session 1 (S1), session 2 (S2), and session 3 (S3). Each session can be in state A or state B. Specifically, the select signaling also carries the fields of inventory session, action, and mask. The select signaling sets the selected tag with the corresponding flag. Assuming that the inventorySession selects session S0 and action = 0, if the mask matches, the tag will set the flag of S0 to A, i.e., perform the initial flag setting.

[0109] Each flag corresponds to a session, and `inventorySession` specifies which session's flag should be set. The `action` parameter specifies how to set the flag; for example, `action = 1` or `action = 0`. When a tag receives a `select` signal, if the mask matches, it will set the flag corresponding to the session to A (action = 1) or B (action = 0). The `mask` is used to filter which tags are selected. For example, if a tag stores a complete 96-bit identifier, the `mask` can indicate that tags with the first 16 bits being 111…111 are selected. If the `mask` matches, the tag can further set its flag based on the `action` parameter and then listen for subsequent query commands.

[0110] Optionally, the above select signaling can also be paging signaling, used to page one or a group of tags.

[0111] In S720, the reader sends a query command to the tag. Correspondingly, the tag receives the query command from the reader.

[0112] The query command carries the value of parameter Q, the session, and a disk storage flag. Assuming the session is S0 and the disk storage flag is A, when the tag's session matches the flag, a random value between 0 and 2 is generated based on parameter Q. Q A value between -1 and 1 is used as the initial value of the counter. The tag determines whether to immediately send a random number (RN) to the reader based on the value of the counter. For example, when counter = 0, the tag will send an RN to the reader (e.g., RN(16), where RN(16) is a 16-bit random number). When counter is not 0, the tag will not send an RN to the reader. If the reader does not receive an RN from the tag within a certain period of time, it will send a queryRep command to the tag.

[0113] Specifically, there are two scenarios for the subsequent execution steps: scenario 1 and scenario 2.

[0114] Case 1: Counter = 0, specifically including S721.

[0115] S721, the tag sends a random number to the reader. Correspondingly, the reader receives the random number from the tag.

[0116] The random number (RN) can be a 16-bit random number or an 8-bit random number; this application does not limit this.

[0117] Case 2: Counter is an integer greater than or equal to 1, specifically including S722 and S723.

[0118] In S722, the reader sends a queryRep command to the tag. Correspondingly, the tag receives the queryRep command from the reader.

[0119] The `queryRep` command can be empty, meaning it may omit the value of parameter Q, session, and disk flag. The number of times the `queryRep` command is sent is determined by the value of `counter`. Specifically, each time the tag receives a `queryRep` command, `counter` is decremented by 1. The tag continues sending an `RN` to the reader when the value of `counter` reaches 0.

[0120] More specifically, the tag can calculate the selectable time slot range [0, 2] based on the value of the random parameter Q. Q -1], the label can be in [0, 2]Q A random value is selected from [-1] and assigned to counter. Each time the tag receives a queryRep command, the counter's count is decremented by 1. When the counter's count reaches 0, S723 can be executed.

[0121] For example, each queryRep command corresponds to the start or end of an access time slot. That is, each time a tag receives a queryRep command, it signifies the end of the previous time slot and the start of the next time slot.

[0122] S723, the tag sends a random number to the reader. Correspondingly, the reader receives the random number from the tag.

[0123] When the counter count is 0, the tag sends a random number in its randomly selected access time slot.

[0124] In S730, the reader sends an acknowledged (ACK) message to the tag. Correspondingly, the tag receives the ACK message from the reader.

[0125] When a reader receives the aforementioned RN from a tag, if there is no collision (i.e., the reader receives only one RN from a tag), it will send an ACK message to the reader. This ACK message includes the received RN, indicating that the tag contention has been successfully resolved.

[0126] S740, the tag sends uplink data to the reader.

[0127] The upstream data can be the electronic product code (EPC).

[0128] In S750, the reader sends the queryRep command to the tag again. Correspondingly, the tag receives the queryRep command from the reader.

[0129] S760, the tag will reverse the state of the disk storage flag.

[0130] After a tag receives the queryRep command, indicating successful data transmission, it can reverse the state of the disk entry flag. For example, the state of session 0 can be set from state A to state B. Reversing the disk entry flag prevents tags that have already been disked from being disked again, because tags with flag A set to A and flag B set to B in subsequent query commands will not respond to the query command.

[0131] The queryRep command can be used to trigger tags that have not yet successfully connected to the reader. Specifically, the count value of tags whose counter value is not 0 is decremented by 1 until the counter value is 0. Then, steps S723 to S760 are repeated until all tags have successfully connected to the reader.

[0132] 2. A-IoT:

[0133] With the development of communication technology, 3GPP defined A-IoT technology. A-IoT devices in A-IoT technology include network devices and Type I terminal devices; or, in other words, A-IoT-based communication systems include network devices and Type I terminal devices. Type I terminal devices can be devices with A-IoT terminal device functionality. In this case, both readers and A-IoT terminal devices can be implemented based on cellular network infrastructure. In other words, both readers and A-IoT terminal devices can be devices within a cellular network. For example, the functionality of a reader can be implemented by network devices, such as base stations. A-IoT terminal devices can be implemented by terminals within a cellular network, such as ultra-low power, ultra-low complexity IoT terminals, i.e., Type I terminals. Network devices and Type I terminals can perform contactless data communication, thereby reading information from Type I terminals and / or writing information that needs to be stored into Type I terminals. A-IoT technology can be used to implement one or more of the following services: inventory, positioning, sensing, and command. Typical application scenarios for A-IoT technology include logistics, warehousing, industrial manufacturing, identity recognition, and environmental monitoring.

[0134] For example, inventory management involves using a reader (e.g., a base station or terminal device) to access A-IoT terminals (or A-IoT terminal devices) within its coverage area. Successfully connected devices need to send their unique identifier (which can be recognized by the network, such as the EPC in RFID) to the reader. Inventory management can also be called a count operation. It retrieves tag identification information; for example, the reader can use commands like `query` and `ACK` to obtain tag identification information. To facilitate tag inventory, tags include four session identifiers, each corresponding to two inventory states: A and B. The inventory state is indicated by an inventory flag. When a reader selects a tag, the selection command sent to it carries a session identifier, and the tag stores this session identifier. When the reader performs inventory management on the tag, the query command sent to it includes the session identifier, at which point the tag can flip its inventory state from A to B. If the reader sends a query command to perform inventory operations again, the tag will not respond to the reader because the inventory status of the tag is B, thus avoiding the same tag being inventoried multiple times in the same inventory cycle.

[0135] Positioning is the process of using location signals to pinpoint the location of an A-IoT terminal.

[0136] Sensing involves A-IoT terminals reporting sensor data to the base station, such as temperature data.

[0137] Commands can be operational instructions, such as read, write, kill, or lock. Read operations can read the EPC, tag identifier (TID), content stored in the tag's reserved area, or content stored in the user's storage area from the tag's memory. Write operations can perform write operations on the tag's storage area; for example, a network device (e.g., a base station) can send a downlink command and data to instruct the A-IoT terminal to write data to its own storage area. Kill operations can permanently disable the tag. Lock operations can lock the tag's information, preventing read or write operations on that tag. Alternatively, locking operations can also lock a storage area, preventing or disallowing read or write operations on that storage area; for example, a network device can send a downlink command to instruct the A-IoT terminal to lock the location at a specified address in the storage area, making the contents of that storage area immutable and / or unreadable.

[0138] Terminal devices in A-IoT can be divided into three categories: device A, device B, and device C.

[0139] 1) Device A (similar to a passive tag): It has no energy storage, cannot generate independent signals, and uses backscattering to transmit signals.

[0140] 2) Device B (similar to a semi-passive tag): It stores energy but cannot generate signals independently; it uses backscattering to transmit signals. The stored energy can amplify the reflected signal.

[0141] 3) Device C (similar to an active tag): It has energy storage, can generate signals independently, and has active radio frequency (RF) components for transmission.

[0142] The 3GPP meeting further defined the following three categories of A-IoT devices: device 1, device 2a, and device 2b.

[0143] 1) Device 1: Peak power consumption is approximately 1μW, with energy storage function, and initial sampling frequency offset (SFO) reaches 10. X At parts per million (ppm), it cannot amplify downlink (DL) or uplink (UL) signals. It requires an external carrier signal for backscatter communication to enable uplink transmission.

[0144] 2) Device 2a: Peak power consumption less than or equal to several hundred μW, with energy storage function, and initial sampling frequency offset up to 10. X ppm can amplify DL and / or UL signals. An external carrier signal is required for backscatter communication in order to perform uplink transmission.

[0145] 3) Device 2b: Peak power consumption less than or equal to several hundred μW, with energy storage function, and initial sampling frequency offset of 10. X ppm, capable of DL and / or UL signal amplification. The device can perform uplink transmission without relying on an externally provided carrier.

[0146] As mentioned earlier, A-IoT technology can be used to implement command services. However, in the existing command process, during the process of the access network device sending a non-access stratum (NAS) protocol data unit (PDU) containing a command to the reader, and / or during the process of the reader sending a NAS PDU containing a command to the A-IoT device, an attacker can obtain the NAS PDU containing the command and replay it to the A-IoT device once or multiple times. This can cause the A-IoT device to execute the same command multiple times, or even cause the A-IoT device to lose power and be unable to execute other A-IoT services.

[0147] In view of this, this application provides a communication method that is beneficial for preventing replay of command services.

[0148] Before introducing the scheme of this application, the following points should be noted.

[0149] (1) In this application, “instruction” may include direct instruction, indirect instruction, explicit instruction, and implicit instruction. When describing a certain instruction information for the purpose of instructing A, it can be understood that the instruction information carries A, directly instructs A, or indirectly instructs A.

[0150] In this application, the information indicated by the instruction information is called the information to be instructed. In specific implementations, there are many ways to indicate the information to be instructed, such as, but not limited to, directly indicating the information to be instructed, such as the information to be instructed itself or its index. It can also indirectly indicate the information to be instructed by indicating other information, where there is a relationship between the other information and the information to be instructed. It can also indicate only a part of the information to be instructed, while the other parts are known or pre-agreed upon. For example, the instruction of specific information can be achieved by using a pre-agreed (e.g., protocol-defined) arrangement of various pieces of information, thereby reducing instruction overhead to some extent. Furthermore, the information to be instructed can be sent as a whole or divided into multiple sub-information pieces, and the sending period and / or timing of these sub-information pieces can be the same or different.

[0151] (2) In this application, "send" and "receive" indicate the direction of signal transmission. For example, "send information to XX" can be understood as the destination of the information being XX, which may include direct transmission via the air interface or indirect transmission via the air interface by other units or modules. "Receive information from YY" can be understood as the source of the information being YY, which may include direct reception from YY via the air interface or indirect reception from YY via the air interface by other units or modules. "Send" can also be understood as the "output" of the chip interface, and "receive" can also be understood as the "input" of the chip interface. In other words, sending and receiving can occur between devices, such as between network devices and terminal devices, or within a device, such as between components, modules, chips, software modules, or hardware modules within the device via a bus, wiring, or interface.

[0152] (3) In the various embodiments of this application, unless otherwise specified or logically conflicting, the terms and / or descriptions of different embodiments are consistent and can be referenced by each other. The technical features of different embodiments can be combined to form new embodiments according to their inherent logical relationship.

[0153] (4) In this application, "first" and "second" are used for descriptive convenience only to distinguish objects and are not intended to limit the scope of the embodiments of this application. They are not used to describe the order or sequence of features. It should be understood that the objects described in this way can be interchanged where appropriate so as to describe solutions other than those in the embodiments of this application.

[0154] (5) In this application, “predefined” may mean a standard protocol predefined, or it may mean that the devices have agreed or negotiated in advance.

[0155] (6) In this application, the words “exemplary,” “for example,” etc., are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as an “example” in this application should not be construed as being more preferred or advantageous than other embodiments or designs. Specifically, the use of the word “example” is intended to present the concept in a concrete manner. In the embodiments of this application, “of,” “corresponding, relevant,” and “corresponding” may sometimes be used interchangeably, and it should be noted that their intended meanings are consistent unless their distinction is emphasized.

[0156] The methods provided by the embodiments of this application are described in detail below with reference to the accompanying drawings. The embodiments provided by this application can be applied to the above-described embodiments. Figure 1 The communication system shown is not limited.

[0157] In the following embodiments, terminal devices and network devices are used as examples for illustrative purposes. The term "terminal device" can be replaced by a component of a terminal device (e.g., a chip, chip system, circuit, or communication module), and the term "network device" can be replaced by a component of a network device (e.g., a chip, chip system, circuit, or communication module).

[0158] Figure 8 This is a schematic diagram of a communication method 800 provided in an embodiment of this application. For ease of description, the following... Figure 8 The interaction between core network elements and communication devices is illustrated using an example. The communication device can be replaced by a terminal device, an A-IoT device, or a component of an A-IoT terminal (e.g., a chip, chip system, circuit, or communication module), and the core network element can be replaced by a component of a core network element (e.g., a chip, chip system, circuit, or communication module). Furthermore, the steps described below as being performed by a single execution entity can also be divided into steps performed by multiple execution entities, which can be logically and / or physically separated. Figure 8 The method 800 shown may include the following steps.

[0159] S801, the communication device sends the fourth numerical value and the third indication information.

[0160] Correspondingly, the reader receives the fourth numerical value and the third indication information.

[0161] The reader can be an access network reader (RAN reader) or a terminal device reader (UE reader). An A-IoT access network node can include one or more RAN readers. For example, an A-IoT access network node can have one or more TRPs / antennas / beams, and each TRP / antenna / beam can be a RAN reader.

[0162] The fourth value is randomly generated by the communication device, or in other words, it is randomly assigned or determined by the communication device. The fourth value can also be called the fourth random number or the fourth fresh number. It should be understood that the value randomly generated by the communication device at different times may differ; for example, the value #1 generated by the communication device before generating the fourth value may be different from the fourth value.

[0163] This application does not limit the number of bits in the fourth value. For example, the fourth value can be a 16-bit random number or an 8-bit random number.

[0164] The third indication information is used to indicate the second time period, or in other words, the third indication information is used to determine the second time period. For example, the third indication information includes an index of the second time period, or the third indication information includes the second time period. This application does not limit the specific form of the third indication information in its embodiments.

[0165] The second time period is the duration for which the communication device's current battery power can sustain communication. It can be understood that the communication device communicates directly with the reader; therefore, the second time period can be the duration for which the communication device's current battery power can sustain communication with the reader. The second time period is less than or equal to the duration for which the communication device's battery power can sustain communication.

[0166] The second time period can be a relative time, for example, the granularity of the second time period can be a frame, subframe, slot, or symbol. The second time period can also be an absolute time, for example, the granularity of the second time period can be a minute, second, or millisecond. The start time of the second time period can be the time when the first core network element receives the third indication information, or a time before the time when the first core network element receives the third indication information; this application does not limit this.

[0167] The embodiments of this application do not limit the timing of the communication device sending the fourth numerical value and the third indication information.

[0168] For example, the communication device can send a fourth numerical value and a third indication information during the execution of the first service. The first service can be any A-IoT service executed before the command service, such as an inventory service, a positioning service, a sensing service, or a command service. For a more detailed description of the inventory service, please refer to the above text. Figure 7 The description in the text.

[0169] As another example, the communication device may send a fourth numerical value and a third instruction information during the execution of a command service.

[0170] It should be noted that in S801, the fourth numerical value and the third indication information sent by the communication device can be carried in the same message or in different messages, and this application does not limit this.

[0171] S802, the reader sends the fourth value and the third indication information.

[0172] Correspondingly, the first core network element receives the fourth numerical value and the third indication information.

[0173] The first core network element can be one of the following: access and mobile management function (AMF), tag management function (TMF) network element, ambient IoT management function (AIoTMF), ambient IoT function (AIoTF), or A-IoT aware core network (A-IoT aware CN), etc. Alternatively, the first core network element can be other core network elements / nodes / devices that support or enable A-IoT. This application does not limit the name of the first core network element.

[0174] It should be noted that if the reader is a UEreader, the reader sends the fourth value and the third indication information to the first core network element through the access network device. For example, the reader sends the fourth value and the third indication information to the access network device through the NR Uu interface, and then the access network device sends the fourth value and the third indication information to the first core network element through the first interface.

[0175] Wherein, if the first core network element is an AMF, then the first interface can be a next-generation (NG) interface. The radio network layer protocol of the first interface, or the application protocol providing signaling services between the access network device and the first core network element, can be a next-generation access protocol (NGAP) or a simplified version of NGAP. If the first core network element is another network element that supports A-IoT (such as TMF / AIoTF / AIoTMF / AIoT-aware CN, or other core network elements / devices that support / enable A-IoT), then the first interface can be an XX interface. The XX interface is an interface defined for the interface between the access network device and the first core network element. Correspondingly, the radio network layer protocol on the XX interface, or the application protocol providing signaling services between the access network device and the first core network element, can be NGAP, a simplified version of NGAP, or a defined XX access protocol (XXAP).

[0176] Furthermore, if the communication device has not yet executed the first command service and the second time period expires, then method 800 continues to execute S803 and S804. The first command service is the first command service executed after the communication device is ready to send the fourth value and the third indication information.

[0177] S803, the communication device sends a second message.

[0178] Correspondingly, the reader receives the second message.

[0179] The second message includes the first numerical value. This first numerical value is randomly generated by the communication device, or in other words, it is randomly assigned or determined by the communication device. The first numerical value can also be called the first random number or the first fresh number. It should be understood that the first numerical value randomly generated by the communication device is different from the fourth numerical value.

[0180] This application does not limit the number of bits of the first value. For example, the first value can be a 16-bit random number or an 8-bit random number.

[0181] The first numerical value corresponds to the first command service, which is the first command service executed after the communication device sends the first numerical value. In other words, after the communication device sends the first numerical value and before the communication device executes the first command service, the communication device does not execute any other command services.

[0182] The first value determined by the communication device is different from the values ​​corresponding to other command services that are different from the first command service. In other words, the communication device determines different values ​​for different command services.

[0183] Optionally, the second message may also include a second instruction message.

[0184] The second indication information is used to indicate the first time period, or in other words, the second indication information is used to determine the first time period. For example, the second indication information includes an index of the first time period, or the second indication information includes the first time period. This application does not limit the specific form of the second indication information in its embodiments.

[0185] The first time period is the duration for which the communication device's current battery power can maintain communication. The first time period is less than or equal to the duration for which the communication device's battery power can maintain communication. For more details on the first time period, please refer to the description of the second time period above.

[0186] Optionally, the second message may also include a second identifier, which is used to identify the communication device. For example, the second identifier may be an unencrypted identifier of the communication device, or the second identifier may be obtained by encrypting the identifier of the communication device.

[0187] For example, the communication device can encrypt its identifier using key #1 and algorithm #1 to obtain a second identifier. For instance, the second identifier can be represented as function #1{device ID, key #1}, where function #1{} is algorithm #1 and device ID is the identifier of the communication device.

[0188] For another example, the communication device encrypts its identifier according to algorithm #1 to obtain a second identifier. For instance, the second identifier can be represented as function #1{device ID}.

[0189] For example, the communication device can encrypt its identifier using key #1, algorithm #1, a first value, and random number #1 to obtain a second identifier. For instance, the second identifier can be represented as function #1{device ID, key #1, first value, random number #1}.

[0190] Key #1 can be a pre-configured or pre-defined key, or a key that is pre-aligned between the communication device and the first core network element. For example, key #1 can be a group key sent by the first core network element to the communication device during the inventory process.

[0191] Algorithm #1 can be a pre-configured or pre-defined algorithm, or an algorithm that is pre-aligned between the communication device and the first core network element. For example, Algorithm #1 can be an algorithm sent by the first core network element to the communication device during the inventory process. Algorithm #1 can be an encryption algorithm or an integrity protection algorithm. For example, Algorithm #1 can be any of the following algorithms: 128-NR encryption algorithm (NEA)1 (e.g., 128-bit Snow 3rd generation (SNOW 3G) encryption algorithm); 128-NEA2 (e.g., 128-bit Advanced Encryption Standard (AES) algorithm); 128-NEA3 (e.g., 128-bit Zu Chongzhi algorithm); 128-Evolved Packet System Encryption Algorithm (EEA)1 (e.g., 128-bit SNOW 3G algorithm); 128-EEA2 (e.g., 128-bit AES algorithm); 128-EEA3 (e.g., 128-bit Zu Chongzhi algorithm).

[0192] Random number #1 can be a pre-configured or pre-defined random number, or a random number that is pre-aligned between the communication device and the first core network element. For example, random number #1 can be a random number sent by the first core network element to the communication device during the execution of inventory services.

[0193] The embodiments of this application do not limit the timing of the communication device sending the second message.

[0194] For example, the communication device may send a second message while performing a first service.

[0195] As another example, the communication device may send a second message during the execution of a second command service, wherein the first command service is the command service executed first after the second command service.

[0196] It should also be noted that the communication device executes S801 and S803 in different processes. For example, if the communication device executes S801 during the execution of the first service #1, then after the second time period expires, the first device executes S803 during the execution of the first service #2 after completing the first service #1. As another example, if the communication device executes S801 during the execution of command service #1, then after the second time period expires, the communication device executes S803 during the execution of the first command service after completing the command service #1.

[0197] S804, the reader sends the fifth message.

[0198] Correspondingly, the first core network element receives the fifth message.

[0199] After receiving the second message from the communication device, the reader sends the fifth message to the first core network element according to the second message.

[0200] The fifth message includes the first numerical value. Optionally, if the second message includes second indication information, then the fifth message also includes the second indication information. Optionally, if the second message also includes a second identifier, then the fifth message also includes the second identifier.

[0201] It should be noted that if the reader is a UEreader, the reader sends the fifth message to the first core network element through the access network device.

[0202] S805, the first core network element sends the sixth message.

[0203] Correspondingly, in S805, the reader receives the sixth message.

[0204] The sixth message includes the first identifier, the first command, and the first information.

[0205] The first information is used to uniquely identify the sixth message. Specifically, the first information is used to uniquely identify the sixth message sent by the first core network element. It can be understood that the sixth message is a message sent by the first core network element during the execution of the first command service; therefore, the first information is also used to uniquely identify the first command service.

[0206] The first command is included in the first command service. In other words, the command sent by the first core network element during the execution of the first command service is the first command. The first command can be an operation command, such as a write command, read command, deactivation command, or lock command, which is not limited in this application. It should be understood that the first command in the embodiments of this application refers to the command sent by the first core network element during the execution of the first command service. Even if the command #A sent by the first core network element during the execution of a command service #A different from the first command service is the same as the first command, command #A cannot be called the first command.

[0207] The first piece of information is determined by the first core network element, or in other words, it is generated by the first core network element. The following describes how the first core network element determines the first piece of information.

[0208] In one possible implementation, when the first core network element receives a first value, it determines first information based on the first value. The first information determined by the first core network element based on the first value is a second value.

[0209] For example, the second value is the value determined by adding a predefined value #1 to the first value of the first core network element, or the second value is the value determined by subtracting a predefined value #2 from the first value of the first core network element.

[0210] For example, the first core network element can determine the second value based on the first value and the first algorithm. For instance, the second value determined by the first core network element based on the first value and the first algorithm can be represented as: function1{first value}, where function1{} represents the first algorithm.

[0211] For example, the first core network element can determine the second value based on the first value, the first key, and the first algorithm. For instance, the second value determined by the first core network element based on the first value, the first key, and the first algorithm can be represented as: function1{first value, first key}.

[0212] For example, the first core network element can determine the second value based on the first value, the identification information of the first command, and the first algorithm. For instance, the second value determined by the first core network element based on the first value, the identification information of the first command, and the first algorithm can be represented as: function1{first value, identification information of the first command}.

[0213] For example, the first core network element can determine the second value based on the first value, the first key, the identification information of the first command, and the first algorithm. For instance, the second value determined by the first core network element based on the first value, the identification information of the first command, the first key, and the first algorithm can be represented as: function1{first value, first key, identification information of the first command}.

[0214] The first key can be a predefined or preconfigured key, or a key aligned by prior interaction between the first device and the first core network element. The first algorithm can be a predefined or preconfigured algorithm, or an algorithm corresponding to prior interaction between the first device and the first core network element. The first algorithm can be an encryption algorithm or an integrity protection algorithm. For example, more details about the first algorithm can be found in the description of algorithm #1 above.

[0215] It should be understood that when the first value corresponds to the first command service, the second value determined by the first core network element corresponds to the first command service. In other words, the second value determined by the first core network element can be uniquely used to identify the first command service and to uniquely identify the sixth message.

[0216] In one possible implementation, the first core network element can determine the first information itself. The first information determined by the first core network element can be called the identification information of the first command, or the identification information of the first command service.

[0217] For example, the first core network element can first randomly generate the value #2, and then generate the identification information of the first command based on the value #2. The method by which the first core network element generates the identification information of the first command based on the value #2 can be referenced to the method by which the first core network element generates the first information based on the first value.

[0218] For example, the first core network element can directly generate the identification information of the first command. For instance, the identification information of the first command may include a random number randomly generated by the first core network element and / or a counter maintained by the first core network element. Each time the first core network element generates the identification information of a command, the counter maintained by the first core network element is incremented by 1. For example, before generating the identification information of the first command, the value of the counter included in the identification information of command #1 generated by the first core network element is B. After the first core network element generates the identification information of command #1, the value of the counter is updated to (B+1). Therefore, if the identification information of the first command generated by the first core network element includes a counter, then the value of the counter included in the identification information of the first command is (B+1).

[0219] It should be noted that the identification information of the first command determined by the first core network element is different from the identification information of commands in other command services. In other words, the identification information of the commands generated by the first core network element is different for different command services. Optionally, the identification information of the commands generated by the first core network element is different for different command services executed by the same device (e.g., a communication device).

[0220] Optionally, if the fifth message also includes the second indication information, then if the third condition is met, the first core network element sends a sixth message; if the third condition is not met, the first core network element sends a seventh message. The seventh message is used to obtain the identifier of the A-IoT device, or in other words, the seventh message is used for inventory. The third condition includes: the first time period has not expired.

[0221] Optionally, if the fifth message also includes the second identifier, then the third condition also includes: the fourth identifier is the same as the identifier of the communication device. The fourth identifier is obtained by the first core network element decrypting the second identifier.

[0222] The following describes other information that the sixth message may include.

[0223] Optionally, if the fifth message includes the first value and the sixth message includes the first information which is the identification information of the first command, then the first message also includes the second value.

[0224] Optionally, if the first information is the second value, and the second value is determined based on the first value, the identification information of the first command, and the first algorithm, or if the second value is determined based on the first value, the identification information of the first command, the first key, and the first algorithm, then the sixth message may also include the identification information of the first command.

[0225] Optionally, the sixth message also includes a first identifier, which is used to identify the communication device. For example, the first identifier is the identifier of the unencrypted communication device, or the first identifier is obtained by the first core network element after encrypting the identifier of the communication device. The method by which the first core network element encrypts the identifier of the communication device to obtain the first identifier can refer to the method by which the communication device encrypts its identifier to obtain the second identifier.

[0226] Optionally, if the first information is the identification information of the first command, or if the first message also includes the identification information of the first command, then the first message also includes the first instruction information.

[0227] The first indication information is used to indicate a first time, or in other words, the first indication information is used to determine a first time. For example, the first indication information includes an index of the first time, or the first indication information includes the first time. This application embodiment does not limit the specific form of the first indication information. The first time is associated with the identification information of the first command.

[0228] It should be noted that if the reader is a UEreader, the first core network element sends the sixth message to the reader through the access network device.

[0229] S806, the reader sends the first message.

[0230] Accordingly, the communication device receives the first message.

[0231] When the reader receives the sixth message, it sends the first message to the communication device based on the sixth message. The first message includes a first identifier, a first command, and first information. The first information uniquely identifies the first message; specifically, the first information uniquely identifies the first message received by the communication device. It can be understood that the first message is sent by the reader based on the sixth message; therefore, since the first information uniquely identifies the sixth message, the first information can also uniquely identify the first message.

[0232] Optionally, if the sixth message also includes a second value, then the first message also includes the second value.

[0233] Optionally, if the sixth message also includes the identification information of the first command, then the first message also includes the identification information of the first command.

[0234] Optionally, if the sixth message also includes the first identifier, then the first message also includes the first identifier.

[0235] Optionally, if the sixth message further includes the first instruction information, then the first message further includes the first instruction information.

[0236] Accordingly, if the communication device receives the first instruction information, it saves the identifier information of the first command before the first time expires, and discards the identifier information of the first command after the first time expires. If the communication device does not receive the first instruction information, it discards the identifier information of the first command after executing the first command service.

[0237] S807, the communication device determines whether to execute the first command based on the first information.

[0238] For example, if the first condition is met, the communication device executes the first command; if the first condition is not met, the communication device does not execute or discards the first command.

[0239] It should be noted that the communication device not executing the first command may include the communication device not executing and discarding the first command. Discarding the first command means that the communication device neither executes nor discards the first command.

[0240] It should also be noted that the execution of the first command by the communication device is equivalent to the communication device responding to the first command; the failure to execute the first command by the communication device is equivalent to the communication device not responding to the first command.

[0241] The first condition includes: the first information is received by the communication device for the first time.

[0242] In other words, if the communication device has never received the first information before receiving the first message, the communication device determines that the first condition is met and then executes the first command; or, if the communication device has received the first information before receiving the first message, the communication device determines that the first condition is not met and then does not execute or discards the first command.

[0243] It should be understood that the first information is used to uniquely identify the first message. Therefore, if the communication device has never received the first information, it is equivalent to never receiving the first message. Consequently, the communication device can determine that the first command included in the first message has not yet been executed. If the communication device has received the first information, it is equivalent to having received the first message. Consequently, the communication device can determine that the first command included in the first message has been executed. To avoid executing the first command again, if the communication device has already received the first information, it will not execute or will discard the first command.

[0244] Optionally, if the first information is the second value, or if the first information is the identifier information of the first command, and the communication device also receives the second value from the first core network element, then the first condition further includes: the third value and the second value conform to the first preset rule.

[0245] The third value is determined by the communication device based on the first value. The third value and the second value conform to the first preset rule, including any of the following situations: the third value and the second value are the same; the difference between the third value and the second value is a predefined value #3; the sum between the third value and the second value is a predefined value #4; the product between the third value and the second value is a predefined value #5; or the ratio between the third value and the second value is a predefined value #6.

[0246] The following describes how the communication device determines a third value based on a first value.

[0247] For example, the third value is the value determined by adding the predefined value #7 to the first value, or the third value is the value determined by subtracting the predefined value #8 from the first value. The predefined value #7 and the predefined value #1 may be the same or different, and the predefined value #8 and the predefined value #2 may be the same or different; this application does not limit this.

[0248] For example, the communication device can determine a third value based on a first value and a second algorithm. For instance, the third value determined by the communication device based on the first value and the second algorithm can be represented as: function2{first value}, where function2{} represents the second algorithm.

[0249] As another example, the communication device can determine a third value based on a first value, a second key, and a second algorithm. For instance, the third value determined by the communication device based on the first value, the second key, and the second algorithm can be represented as: function2{first value, second key}.

[0250] As another example, if the first message also includes identification information of the first command, the communication device can determine the third value based on the first value, the identification information of the first command, and the second algorithm. For example, the third value determined by the communication device based on the first value, the identification information of the first command, and the second algorithm can be represented as: function2{first value, identification information of the first command}.

[0251] As another example, if the first message also includes identification information of the first command, the communication device can determine the third value based on the first value, the second key, the identification information of the first command, and the second algorithm. For example, the third value determined by the communication device based on the first value, the identification information of the first command, the second key, and the second algorithm can be represented as: function2{first value, second key, identification information of the first command}.

[0252] The second key can be a predefined or pre-configured key, or a key that has been previously aligned between the communication device and the first core network element. The second algorithm can be a predefined or pre-configured algorithm, or an algorithm that has been previously aligned between the communication device and the first core network element. The second algorithm can be an encryption algorithm or an integrity protection algorithm; further details about the second algorithm can be found in the description of algorithm #1 above.

[0253] The second key may be the same as or different from the first key, and the second algorithm may be the same as or different from the first algorithm; this application does not impose any restrictions on this.

[0254] It should be noted that the communication device determines the third value in the same way that the first core network element determines the second value. For example, if the third value determined by the communication device is the value obtained by adding a predefined value #1 to the first value, then the second value determined by the first core network element is the value obtained by adding a predefined value #7 to the first value.

[0255] Optionally, if the first identifier is obtained by encrypting the identifier of the communication device by the first core network element, the first condition further includes: the third identifier is the same as the identifier of the communication device. The third identifier is obtained by decrypting the first identifier by the communication device.

[0256] Optionally, after executing the first command service, the communication device releases or discards information related to the first command service. For example, the communication device releases or discards one or more of the first information, the first value, the second value, the third value, or the identification information of the first command.

[0257] In this embodiment, the first information included in the first message is used to uniquely identify the first message. Therefore, the communication device can determine whether it has received the first message for the first time based on whether it has received the first information for the first time, thereby determining whether the first command has already been executed, which helps to avoid replay attacks. For example, if the communication device determines that it has received the first information beforehand, it is equivalent to having received the first message. Furthermore, the communication device can determine that the first command included in the first message has already been executed. To avoid executing the first command again, the communication device will not execute or will discard the first command if it has already received the first information. In other words, according to this application, the problem of repeatedly executing the first command caused by the communication device's inability to determine whether the first command has already been executed can be avoided.

[0258] Furthermore, if the communication device sends a first value to the first core network element, the first core network element can send a second value to the communication device. Then, if the communication device executes the first command if the third value determined based on the first value matches the second value according to a first preset rule, this helps prevent the communication device from being attacked by an attacker. For example, if the third value determined by the communication device based on the first value does not match the second value according to the first preset rule, the communication device determines that the received first command may not be from the first core network element. Therefore, the communication device determines that not executing or discarding the first command can prevent it from being attacked by an attacker.

[0259] Optionally, if the communication device executes a third command service after executing the first command service, then method 800 further includes one or more steps in S08 to S809.

[0260] S808, the communication device sends the fourth message.

[0261] Correspondingly, the reader receives the fourth message.

[0262] The fourth message includes a fifth value. This fifth value is randomly generated by the communication device, or in other words, it is randomly assigned or determined by the communication device. The fifth value can also be called a fifth random number or a fifth fresh number. It should be understood that the fifth value randomly generated by the communication device differs from the first and fourth values ​​mentioned above.

[0263] This application does not limit the number of bits in the fifth value. For example, the fifth value can be a 16-bit random number or an 8-bit random number.

[0264] The fifth value corresponds to the third command service. The third command service is the first command service executed after the communication device sends the fifth value. In other words, after the communication device sends the fifth value and before the communication device executes the third command service, the communication device does not execute any other command services.

[0265] Optionally, the fourth message may also include a fourth instruction message.

[0266] The fourth indication information is used to indicate the third time period, or in other words, the fourth indication information is used to determine the third time period. For example, the fourth indication information includes an index of the third time period, or the fourth indication information includes the third time period. This application does not limit the specific form of the fourth indication information in its embodiments.

[0267] The third time period is the duration for which the communication device's current battery power can maintain communication. The third time period is less than or equal to the duration for which the communication device can maintain its battery power. For more details on the third time period, please refer to the description of the first time period above.

[0268] Optionally, the fourth message may also include a second identifier.

[0269] This application does not limit the timing of the communication device sending the fourth message. For example, if the communication device executes the first service after executing the first command service and before executing the third command service, the communication device may send the fourth message during the execution of the first service.

[0270] For example, if the communication device does not perform any other services after executing the first command service and before executing the third command service, the communication device may send a fourth message in the first command service.

[0271] S809, the reader sends the tenth message.

[0272] Correspondingly, the first core network element receives the tenth message.

[0273] After receiving the fourth message from the communication device, the reader sends the tenth message to the first core network element based on the fourth message.

[0274] The tenth message includes the fifth value. Optionally, if the fourth message includes the fourth indication information, then the tenth message also includes the fourth indication information. Optionally, if the fourth message also includes the second identifier, then the tenth message also includes the second identifier.

[0275] It should be noted that if the reader is a UEreader, the reader sends the tenth message to the first core network element through the access network device.

[0276] S810, the first core network element sends the eleventh message.

[0277] Correspondingly, in the S810, the reader receives the eleventh message.

[0278] The eleventh message includes the first identifier, the second command, and the third information.

[0279] The third information is used to uniquely identify the eleventh message. Specifically, the third information is used to uniquely identify the eleventh message sent by the first core network element. It can be understood that the eleventh message is sent by the first core network element during the execution of the third command service; therefore, the third information is also used to uniquely identify the third command service. To ensure that the third information uniquely identifies the eleventh message, it differs from the first information. When the third information differs from the first information, the eleventh message differs from the sixth message.

[0280] The second command is included within the third command service. In other words, the command sent by the first core network element to the communication device during the execution of the third command service is the second command. The second command can be an operation command, such as a write command, read command, deactivation command, or lock command, which is not limited in this application. The second command may be the same as or different from the first command, which is not limited in this application. It should be understood that the second command in the embodiments of this application refers to the command sent by the first core network element during the execution of the third command service. Even if the command #A sent by the first core network element during the execution of a command service #A different from the third command service is the same as the second command, command #A cannot be called the second command.

[0281] The third piece of information is determined by the first core network element, or in other words, it is generated by the first core network element. The following describes how the first core network element determines the third piece of information.

[0282] In one possible implementation, upon receiving the fifth value, the first core network element determines the third information based on that fifth value. The third information determined by the first core network element based on the fifth value is the sixth value. The method by which the first core network element determines the sixth value based on the fifth value can be referenced from the method described in S810 above, where the first core network element determines the second value based on the first value. It is understandable that, since the fifth value is different from the first value, the sixth value determined by the first core network element is different from the second value.

[0283] It should be understood that when the fifth value corresponds to the third command service, the sixth value determined by the first core network element based on the fifth value corresponds to the third command service. In other words, the sixth value determined by the first core network element can be uniquely used to identify the third command service and to uniquely identify the eleventh message.

[0284] In one possible implementation, the first core network element can determine the third information itself. This third information, determined by the first core network element, can be referred to as the identification information of the second command, or the identification information of the third command service. The method by which the first core network element determines the identification information of the second command can be referenced from the method described in S810 above, where the first core network element determines the identification information of the first command.

[0285] Optionally, if the tenth message also includes the fourth indication information, then if the fourth condition is met, the first core network element sends the eleventh message; if the fourth condition is not met, the first core network element sends the twelfth message. The twelfth message is used to obtain the identifier of the A-IoT device, or in other words, the twelfth message is used for inventory. The fourth condition includes: the third time period has not expired.

[0286] Optionally, if the tenth message also includes a second identifier, then the fourth condition further includes: the fourth identifier is the same as the identifier of the communication device. The fourth identifier is obtained by the first core network element decrypting the second identifier.

[0287] The following description may include other information in the eleventh message.

[0288] Optionally, if the tenth message includes the fifth value and the eleventh message includes the third information which is the identification information of the second command, then the eleventh message also includes the sixth value.

[0289] Optionally, if the third information is the sixth value, and the sixth value is determined based on the fifth value, the identification information of the second command, and the first algorithm, or if the sixth value is determined based on the fifth value, the identification information of the second command, the first key, and the first algorithm, then the eleventh message may also include the identification information of the second command.

[0290] Optionally, the eleventh message may also include a first identifier.

[0291] Optionally, if the third information is the identification information of the second command, or if the eleventh message also includes the identification information of the second command, then the eleventh message also includes instruction information #2.

[0292] Instruction information #2 is used to indicate a second time, or in other words, instruction information #2 is used to determine a second time. For example, instruction information #2 includes an index of the second time, or instruction information #2 includes the second time itself. This application embodiment does not limit the specific form of instruction information #2. The second time is associated with the identification information of the second command.

[0293] It should be noted that if the reader is a UEreader, the first core network element sends the eleventh message to the reader through the access network device.

[0294] S811, the reader sends a third message.

[0295] Correspondingly, the communication device receives the third message.

[0296] Upon receiving the eleventh message, the reader sends a third message to the communication device based on the eleventh message. The third message includes a first identifier, a second command, and third information. The third information uniquely identifies the third message; specifically, it uniquely identifies the third message received by the communication device. It can be understood that the third message is sent by the reader based on the eleventh message; therefore, since the third information uniquely identifies the eleventh message, it can also uniquely identify the third message.

[0297] Optionally, if the eleventh message also includes the sixth value, then the third message also includes the sixth value.

[0298] Optionally, if the eleventh message also includes the identification information of the second command, then the third message also includes the identification information of the second command.

[0299] Optionally, if the eleventh message also includes the first identifier, then the third message also includes the first identifier.

[0300] Optionally, if the eleventh message also includes instruction information #2, then the third message also includes instruction information #2.

[0301] Accordingly, if the communication device also receives instruction message #2, the communication device saves the identification information of the second command before the second time expires, and discards the identification information of the second command after the second time expires. If the communication device does not receive instruction message #2, the communication device discards the identification information of the second command after executing the third command service.

[0302] S812, the communication device determines whether to execute the second command based on the third information.

[0303] For example, if the second condition is met, the communication device executes the second command; if the second condition is not met, the communication device either does not execute or discards the second command. It should be noted that the communication device not executing the second command can include the communication device both not executing and discarding the second command. Discarding the second command means that the communication device both does not execute and discards the second command.

[0304] The second condition includes: the third information is received by the communication device for the first time.

[0305] In other words, if the communication device has never received the third information before receiving the third message, the communication device determines that the second condition is met and then executes the second command; or, if the communication device has received the third information before receiving the third message, the communication device determines that the second condition is not met and then does not execute or discards the second command.

[0306] Optionally, if the third information is the sixth value, or if the third information is the identification information of the second command, and the communication device also receives the sixth value from the first core network element, then the second condition further includes: the seventh value and the sixth value conform to the second preset rule.

[0307] The seventh value is determined by the communication device based on the fifth value. The method by which the communication device determines the seventh value based on the fifth value can be similar to the method by which the communication device determines the third value based on the first value. The seventh value and the sixth value conforming to the first preset rule include any of the following: the seventh value and the sixth value are the same; the difference between the seventh value and the sixth value is a predefined value #3; the sum between the seventh value and the sixth value is a predefined value #4; the product between the seventh value and the sixth value is a predefined value #5; or the ratio between the seventh value and the sixth value is a predefined value #6.

[0308] Optionally, if the first identifier is obtained by encrypting the identifier of the communication device by the first core network element, the second condition also includes: the third identifier is the same as the identifier of the communication device.

[0309] Optionally, after executing the third command service, the communication device releases or discards information related to the third command service. For example, the communication device releases or discards one or more of the third information, the fifth value, the sixth value, the seventh value, or the identification information of the first command.

[0310] In this embodiment, if the communication device executes multiple command services, the first core network element determines different information for each command service to uniquely identify the message containing the command sent in each command service, thereby preventing the communication device from discarding the commands in different command services as replay messages. For example, if the communication device executes a first command service and a third command service, and the first information determined by the first core network element during the execution of the first command service is the same as the third information determined during the execution of the third command service, then during the execution of the third command service, the communication device considers that it has already received the first information and discards the second command in the third command service as a replay message; if the first information determined by the first core network element during the execution of the first command service is different from the third information determined during the execution of the third command service, then during the execution of the third command service, the communication device considers that the third information is received for the first time and will not discard the second command in the third command service as a replay message.

[0311] The following is combined with Figure 9 and Figure 10 Taking the communication device as A-IoT device #1 and the first core network element as the A-IoT sensing core network node (A-IoT-aware CN node) as an example, the above text... Figure 8 The method shown in 800 is described. It should be noted that, in Figure 9 and Figure 10 In the illustrated embodiment, A-IoT device #1 communicates with the A-IoT sensing core network node through the RAN reader included in the access network node (A-IoT RAN node).

[0312] Figure 9 This is a schematic diagram of a communication method 900 provided in an embodiment of this application. Figure 9 The method 900 shown may include the following steps. Specifically, steps S901 to S906 in method 900 are steps executed in a first service, which may be an inventory management service, and steps S907 to S911 are steps executed in a command service.

[0313] S901, the A-IoT sensing core network node sends the first request.

[0314] Accordingly, the A-IoT RAN node receives the first request.

[0315] The first request may include a command indication.

[0316] Optionally, the first request may also include a group key and a group ID, which is used to identify a group of A-IoT devices, including A-IoT device #1.

[0317] For example, the first request is an inventory request.

[0318] Optionally, method 900 also includes S902.

[0319] S902, the A-IoT access network node sends the first response.

[0320] Correspondingly, the A-IoT sensing core network node receives the first response.

[0321] For example, if the first request is an inventory request, then the first response is an inventory response.

[0322] S903, the A-IoT access network node sends the first signaling.

[0323] Correspondingly, A-IoT device #1 receives the first signaling.

[0324] For example, the first signaling is the select signaling.

[0325] For more details on the S903, please refer to the above text. Figure 7 The S710 in the middle.

[0326] Optionally, if the inventory request includes a group ID and a group key, the select signaling includes the group ID and the group key.

[0327] Optionally, select signaling can be replaced with paging signaling / message. Paging signaling can be used to instruct A-IoT device #1 to access the reader. For example, when the reader is a base station / access network device, paging signaling can be used to instruct A-IoT device #1 to access the network; when the reader is a terminal device, paging signaling can be used to instruct A-IoT device #1 to access the terminal. Optionally, A-IoT device #1 can access the network through a terminal.

[0328] Paging signaling can also be used to trigger / instruct A-IoT device #1 to send uplink data, or to trigger / instruct / request A-IoT device #1 to perform a second service, wherein the second service may include at least one of the following: paging service, inventory service, command service (such as read, write, deactivate, lock, etc.), positioning service, and sensing service.

[0329] Paging signaling can also be called an (initial) trigger message. Paging signaling can be triggered by A-IoT sensing core network nodes (such as AMF, or ambient IoT management function (A-IoT MF), ambient IoT function (AIoTF), etc.). For example, an A-IoT sensing core network node sends a first service request message or paging message to an A-IoT access network node. The second service could be an inventory service, a command service, or a location service, etc. The A-IoT access network node then sends paging signaling based on the second service request message or paging message.

[0330] S904, A-IoT device #1 performs random access.

[0331] The A-IoT device #1 performing the random access procedure may include the above. Figure 7 S720 to S730 are shown.

[0332] S905, A-IoT device #1 sends uplink data #1.

[0333] Correspondingly, the A-IoT access network node receives uplink data #1.

[0334] Uplink data #1 may include a random number (rand) #1 randomly generated by A-IoT device #1 (rand #1 is an example of the first value).

[0335] Optionally, uplink data #1 may also include the ID of A-IoT device #1. Optionally, uplink data #1 may also include an identifier #1 (an example of a second identifier), which is obtained by encrypting the ID of A-IoT device #1. For example, if the first signaling includes a group key, then A-IoT device #1 can obtain the identifier #1 by encrypting its ID using the group key.

[0336] Optionally, the uplink data #1 also includes indication information #a, which indicates time period #1 (an example of a first time period), which is the time that the current battery power of the A-IoT device #1 can sustain communication with the A-IoT access network node.

[0337] S906, A-IoT access network node sends uplink data #1.

[0338] Correspondingly, the A-IoT sensing core network node receives uplink data #1.

[0339] S907, A-IoT sensing core network node sends message #1 (an example of the sixth message).

[0340] Correspondingly, the A-IoT access network node receives message #1.

[0341] For example, message #1 could be an xxAP message.

[0342] Message #1 includes command #1 (command #1 is an example of a first command) and response value #1 (denoted as RES #1) (RES #1 is an example of a second value). RES #1 is generated by the A-IoT sensing core network node based on rand #1. The method by which the A-IoT sensing core network node generates RES #1 based on rand #1 can be referenced from the method described above in S805 where the first core network element determines the second value based on the first value.

[0343] Optionally, message #1 may also include the ID of A-IoT device #1. Optionally, message #1 may include identifier #2 (an example of the first identifier), which is obtained by encrypting the identifier of A-IoT device #1 by the A-IoT sensing core network node.

[0344] Optionally, if the A-IoT sensing core network node assigns identification information to command#1, and the A-IoT sensing core network node uses the identification information of command#1 when determining the second value, then message #1 also includes the identification information assigned to command#1 by the A-IoT sensing core network node.

[0345] Optionally, if uplink data #1 includes indication information #a, the A-IoT sensing core network node will execute subsequent command services if it determines that time period #1 has not expired based on indication information #a. In other words, the A-IoT sensing core network node will send command #1 and RES #1 if it determines that time period #1 has not expired based on indication information #a.

[0346] Optionally, if uplink data #1 includes indication information #a, and the A-IoT sensing core network node determines that time period #1 expires based on indication information #a before sending message #1, then the A-IoT sensing core network node triggers a re-execution of S901 to S906, causing A-IoT device #1 to regenerate a rand and send it to the A-IoT sensing core network node. It should be understood that this embodiment uses the example of the A-IoT sensing core network node sending message #1 before time period #1 expires for illustration.

[0347] Optionally, if the uplink data #1 includes identifier #1, then if the A-IoT sensing core network node decrypts identifier #1 to obtain the identifier of A-IoT device #1, it sends command #1 and RES #1.

[0348] S908, the A-IoT access network node sends a second signaling message (an example of the first message).

[0349] Correspondingly, A-IoT device #1 receives the second signaling.

[0350] For example, the second signaling could be paging signaling.

[0351] The second signaling includes command#1 and RES#1.

[0352] Optionally, if message #1 also includes the ID of A-IoT device #1, then the second signaling also includes the ID of A-IoT device #1. If message #1 includes identifier #2, then the second signaling also includes identifier #2.

[0353] Optionally, if message #1 also includes the identification information of command #1, then the second signaling also includes the identification information of command #1.

[0354] Optionally, if message #1 also includes indication information #a, then the second signaling also includes indication information #a.

[0355] S909, A-IoT device #1 determines whether to execute command #1.

[0356] For example, if condition #1 (an example of the first condition) is met, then A-IoT device #1 executes command #1; if condition #1 is not met, then A-IoT device #1 does not execute or discards command #1. Condition #1 includes: A-IoT device #1 receiving RES #1 for the first time.

[0357] Optionally, condition #1 also includes: the response value #2 (denoted as RES#2) determined by A-IoT device #1 according to rand#1 satisfies preset rule #1 (preset rule #1 is an example of the first preset rule).

[0358] Among them, RES#2 and RES#1 conform to preset rule #1, including any of the following cases: RES#2 and RES#1 are the same, the difference between RES#2 and RES#1 is a predefined value #3, the sum between RES#2 and RES#1 is a predefined value #4, the product between RES#2 and RES#1 is a predefined value #5, or the ratio between RES#2 and RES#1 is a predefined value #6.

[0359] Optionally, if the second signaling also includes identifier #2, then condition #1 also includes: A-IoT device #1 decrypts identifier #2 to obtain the identifier of A-IoT device #1.

[0360] The method by which A-IoT device #1 determines RES#2 based on rand#1 can be referenced from the method described in S807 above, where the communication device determines the third value based on the first value. It should be understood that if the second signaling also includes the identification information of command#1, then A-IoT device #1 determines RES#2 based on both rand#1 and the identification information of command#1.

[0361] S910, A-IoT device #1 sends uplink data #2.

[0362] Correspondingly, the A-IoT access network node receives uplink data #2.

[0363] Uplink data #2 includes response information, which indicates whether A-IoT device #1 has executed command #1. Response information can also be called feedback or reply information.

[0364] Optionally, uplink data #2 may also include the ID of A-IoT device #1. Optionally, uplink data #2 may include identifier #1.

[0365] Optionally, the uplink data #2 also includes rand#2 randomly generated by the A-IoT device #1. rand#2 is used to prevent replay of commands that may be executed later. rand#2 is different from rand#1.

[0366] Optionally, the uplink data #2 also includes indication information #b, which indicates a time period #2, which is the time that the current battery power of the A-IoT device #1 can maintain communication with the A-IoT access network node.

[0367] S911, A-IoT access network node sends uplink data #2.

[0368] Correspondingly, the A-IoT sensing core network node receives uplink data #2.

[0369] In this embodiment, the A-IoT device can send a randomly generated rand to the A-IoT sensing core network node during the execution of the first service (e.g., inventory service). This allows the A-IoT sensing core network node to generate a response value based on rand. Subsequently, the A-IoT device can determine whether to execute the command based on whether it has received RES for the first time, which helps to avoid replay attacks.

[0370] Figure 10This is a schematic diagram of a communication method 1000 provided in an embodiment of this application. Figure 10 The method 1000 shown may include the following steps. Among them, S1001 to S1006 in method 1000 are steps executed in the first service, S1007 to S1011 are steps executed in command service #1, and S1012 to S1016 are steps executed in command service #2.

[0371] S1001 to S1006 in method 1000 can be referred to as S901 to S906 in method 900. For the sake of brevity, they will not be repeated here.

[0372] S1007, A-IoT sensing core network node sends message #1 (an example of the sixth message).

[0373] Correspondingly, the A-IoT access network node receives message #1.

[0374] For example, message #1 could be an xxAP message.

[0375] Message #1 includes command #1 and RES #1. RES #1 is generated by the A-IoT sensing core network node based on rand #1. The method by which the A-IoT sensing core network node generates RES #1 based on rand #1 can be referenced from the method described above in S805 where the first core network element determines the second value based on the first value.

[0376] Optionally, message #1 may also include the ID of A-IoT device #1. Optionally, message #1 may include identifier #2 (an example of the first identifier), which is obtained by encrypting the identifier of A-IoT device #1 by the A-IoT sensing core network node.

[0377] Optionally, message #1 may also include the identification information assigned to command #1 by the A-IoT sensing core network node. It should be noted that if rand #1 is only used for anti-replay of command service #1, then message #1 may not include the identification information of command #1; if rand #1 is also used for anti-replay of command service #2, then message #1 must include the identification information of command #1.

[0378] Optionally, if uplink data #1 includes indication information #a, the A-IoT sensing core network node will execute subsequent command services if it determines that time period #1 has not expired based on indication information #a. In other words, the A-IoT sensing core network node will send command #1 and RES #1 if it determines that time period #1 has not expired based on indication information #a.

[0379] Optionally, if uplink data #1 includes indication information #a, and the A-IoT sensing core network node determines that time period #1 expires based on indication information #a before sending message #1, then the A-IoT sensing core network node triggers a re-execution of S901 to S906, causing A-IoT device #1 to regenerate a rand and send it to the A-IoT sensing core network node. It should be understood that this embodiment uses the example of the A-IoT sensing core network node sending message #1 before time period #1 expires for illustration.

[0380] Optionally, if the uplink data #1 includes identifier #1, then if the A-IoT sensing core network node decrypts identifier #1 to obtain the identifier of A-IoT device #1, it sends command #1 and RES #1.

[0381] S1008, the A-IoT access network node sends a second signaling message (an example of the first message).

[0382] Correspondingly, A-IoT device #1 receives the second signaling.

[0383] For example, the second signaling could be paging signaling.

[0384] The second signaling includes command#1 and RES#1.

[0385] Optionally, if message #1 also includes the ID of A-IoT device #1, then the second signaling also includes the ID of A-IoT device #1. If message #1 includes identifier #2, then the second signaling also includes identifier #2.

[0386] Optionally, if message #1 also includes the identification information of command #1, then the second signaling also includes the identification information of command #1.

[0387] Optionally, if message #1 also includes indication information #a, then the second signaling also includes indication information #a.

[0388] S1009, A-IoT device #1 determines whether to execute command #1.

[0389] For example, if condition #1 (an example of the first condition) is met, then A-IoT device #1 executes command #1; if condition #1 is not met, then A-IoT device #1 does not execute or discards command #1.

[0390] In one possible implementation, if rand#1 is only used to prevent replay of command service #1, then condition #1 includes: A-IoT device #1 receives RES#1 for the first time.

[0391] Optionally, condition #1 also includes: the response value #2 (denoted as RES#2) determined by A-IoT device #1 according to rand#1 satisfies preset rule #1 with RES#1. The description of preset rule #1 can be found in S909 of method 900 above.

[0392] Optionally, if the second signaling also includes the identification information of command#1, then condition #1 also includes: A-IoT device #1 receives the identification information of command#1 for the first time.

[0393] Optionally, if the second signaling also includes identifier #2, then condition #1 also includes: A-IoT device #1 decrypts identifier #2 to obtain the identifier of A-IoT device #1.

[0394] In one possible implementation, if rand#1 is used to prevent replay of both command service #1 and command service #2, then condition #1 includes: A-IoT device #1 receives the identification information of command#1 for the first time.

[0395] Optionally, condition #1 also includes: the response value #2 (denoted as RES#2) determined by A-IoT device #1 according to rand#1 satisfies the preset rule #1 with RES#1.

[0396] Optionally, if the second signaling also includes identifier #2, then condition #1 also includes: A-IoT device #1 decrypts identifier #2 to obtain the identifier of A-IoT device #1.

[0397] S1010, A-IoT device #1 sends uplink data #2.

[0398] Correspondingly, the A-IoT access network node receives uplink data #2.

[0399] Uplink data #2 includes response information #1, which indicates whether A-IoT device #1 executes command #1.

[0400] Optionally, uplink data #2 may also include the ID of A-IoT device #1. Optionally, uplink data #2 may include identifier #1.

[0401] Optionally, the uplink data #2 may include rand#2 randomly generated by the A-IoT device #1 (rand#1 is an example of the fifth value), and rand#2 is different from rand#1.

[0402] Optionally, the uplink data #2 also includes indication information #b, which indicates a time period #2, which is the time that the current battery power of the A-IoT device #1 can maintain communication with the A-IoT access network node.

[0403] S1011, A-IoT access network node sends uplink data #2.

[0404] Correspondingly, the A-IoT sensing core network node receives uplink data #2.

[0405] S1012, A-IoT sensing core network node sends message #2 (an example of the eleventh message).

[0406] Correspondingly, the A-IoT access network node receives message #2.

[0407] For example, message #2 could be an xxAP message.

[0408] Message #2 includes command #2 (command #2 is an example of a second command).

[0409] Optionally, if the uplink data #2 received by the A-IoT sensing core network node in S1011 also includes rand#2, then message #2 also includes response value #3 (denoted as RES#3) (RES#3 is an example of the sixth value). RES#3 is generated by the A-IoT sensing core network node based on rand#2. The method by which the A-IoT sensing core network node generates RES#3 based on rand#2 can be referenced from the method described in S805 above, where the first core network element determines the second value based on the first value. If the uplink data #2 received by the A-IoT sensing core network node in S1011 does not include rand#2, then message #2 also includes RES#1.

[0410] Optionally, message #2 may also include the ID of A-IoT device #1. Optionally, message #2 may include identifier #2.

[0411] Optionally, message #2 may also include identification information assigned to command #2 by the A-IoT sensing core network node. This identification information is different from the identification information assigned to command #1 by the A-IoT sensing core network node. It should be noted that if message #2 includes RES#1, then message #2 must include the identification information assigned to command #2 by the A-IoT sensing core network node.

[0412] Optionally, if message #2 includes RES#1 and uplink data #1 includes indication information #a, then if the A-IoT sensing core network node determines that time period #1 has not expired based on indication information #a, it will execute the subsequent command service #2. In other words, if the A-IoT sensing core network node determines that time period #1 has not expired based on indication information #a, it will send command #2 and RES#1.

[0413] Optionally, if message #2 includes RES#3 and uplink data #2 includes indication information #b, then if the A-IoT sensing core network node determines that time period #2 has not expired based on indication information #b, it will execute the subsequent command service #2. In other words, if the A-IoT sensing core network node determines that time period #2 has not expired based on indication information #b, it will send command #2 and RES#3.

[0414] Optionally, if the uplink data #2 includes identifier #1, then the A-IoT sensing core network node sends message #2 after decrypting identifier #1 to obtain the identifier of A-IoT device #1.

[0415] S1013, the A-IoT access network node sends a third signaling (an example of a third message).

[0416] Correspondingly, A-IoT device #1 receives the third signaling.

[0417] For example, the third signaling could be paging signaling.

[0418] The third signaling includes command#2 and RES#1, or command#2 and RES#3.

[0419] Optionally, if message #2 also includes the ID of A-IoT device #1, then the third signaling also includes the ID of A-IoT device #1. If message #2 includes identifier #2, then the third signaling also includes identifier #2.

[0420] Optionally, if message #2 also includes the identification information of command #2, then the third signaling will also include the identification information of command #2. It should be noted that if message #2 includes RES#1, then message #2 must include the identification information of command #2.

[0421] Optionally, if message #2 also includes indication information #b, then the third signaling also includes indication information #b.

[0422] S1014, A-IoT device #1 determines whether to execute command #2.

[0423] For example, if condition #2 (an example of the second condition) is met, then A-IoT device #1 executes command #2; if condition #2 is not met, then A-IoT device #1 does not execute or discards command #2.

[0424] In one possible implementation, if the third signaling includes command#2 and RES#3, then condition #2 includes: A-IoT device #1 receives RES#3 for the first time.

[0425] Optionally, condition #2 also includes: A-IoT device #1 satisfies preset rule #2 with RES#4 and RES#3 determined by rand#2.

[0426] Among them, RES#4 and RES#3 conform to preset rule #2, including any of the following cases: RES#4 and RES#3 are the same, the difference between RES#4 and RES#3 is a predefined value #3, the sum between RES#4 and RES#3 is a predefined value #4, the product between RES#4 and RES#3 is a predefined value #5, or the ratio between RES#4 and RES#3 is a predefined value #6.

[0427] Optionally, if the third signaling also includes the identification information of command#2, then condition #2 also includes: A-IoT device #1 receives the identification information of command#2 for the first time.

[0428] Optionally, if the third signaling also includes identifier #2, then condition #2 also includes: A-IoT device #1 decrypts identifier #2 to obtain the identifier of A-IoT device #1.

[0429] In one possible implementation, if the third signaling includes the identification information of command#2, RES#1 and command#2, then condition #1 includes: whether the A-IoT device #1 has received the identification information of command#2 for the first time.

[0430] Optionally, condition #1 also includes: A-IoT device #1 satisfies preset rule #1 with RES#2 determined by rand#1 and RES#1.

[0431] Optionally, if the third signaling also includes identifier #2, then condition #2 also includes: A-IoT device #1 decrypts identifier #2 to obtain the identifier of A-IoT device #1.

[0432] S1015, A-IoT device #1 sends uplink data #3.

[0433] Correspondingly, the A-IoT access network node receives uplink data #3.

[0434] Uplink data #3 includes response information #2, which indicates whether A-IoT device #1 executes command #2.

[0435] Optionally, uplink data #3 may also include the ID of A-IoT device #1. Optionally, uplink data #2 may include identifier #1.

[0436] Optionally, the uplink data #3 may include rand#3 randomly generated by the A-IoT device #1, which is different from rand#1 and rand#2.

[0437] Optionally, the uplink data #2 also includes indication information #c, which indicates a time period #3, which is the time that the current battery power of the A-IoT device #1 can maintain communication with the A-IoT access network node.

[0438] S1016, A-IoT access network node sends uplink data #3.

[0439] Correspondingly, the A-IoT sensing core network node receives uplink data #3.

[0440] In this embodiment, the A-IoT device can randomly generate different rand values ​​for each command service, so that the A-IoT sensing core network node can generate different response values ​​(i.e., RES) based on the rand generated by the A-IoT device, thereby preventing the A-IoT device from discarding the command in different command services as a replay message.

[0441] Alternatively, A-IoT sensing core network nodes can assign different identification information to different command services, so that A-IoT devices can determine whether to execute a command based on whether the identification information of the command is received for the first time. This helps to avoid replay attacks and also prevents A-IoT devices from discarding commands in different command services as replay messages.

[0442] The following is combined with Figure 11 and Figure 12 Taking the communication device as A-IoT device #1 and the first core network element as the A-IoT sensing core network node (A-IoT-aware CN node) as an example, the above text... Figure 8 The method shown in 800 is described. It should be noted that, in Figure 11 and Figure 12 In the illustrated embodiment, A-IoT device #1 communicates with the A-IoT sensing core network node via a UEreader. For example... Figure 11 and Figure 12 As shown, the UEreader communicates with the A-IoT sensing core network node through the access network device (gNB).

[0443] Figure 11 This is a schematic diagram of a communication method 1100 provided in an embodiment of this application. Figure 11The method 1100 shown may include the following steps. Among them, S1101 to S1109 in method 1100 are steps executed in the first service, and S1110 to S1116 are steps executed in the command service.

[0444] S1101, the A-IoT sensing core network node sends the first request.

[0445] Accordingly, the gNB receives the first request.

[0446] The first request can be referred to in the description of S901 in method 900 above.

[0447] S1102, gNB sends the first request.

[0448] Accordingly, UEreader receives the first request.

[0449] Optionally, method 1100 also includes S1103 and S1104.

[0450] S1103, UEreader sends the first response.

[0451] Accordingly, the gNB receives the first response.

[0452] S1104, gNB sends the first response.

[0453] Correspondingly, the A-IoT sensing core network node receives the first response.

[0454] S1105, UEreader sends the first signaling.

[0455] Correspondingly, A-IoT device #1 receives the first signaling.

[0456] For a more detailed description of S1105, please refer to S903 in Method 900 above.

[0457] S1106, A-IoT device #1 performs random access.

[0458] The A-IoT device #1 performing the random access procedure may include the above. Figure 7 S720 to S730 are shown.

[0459] S1107, A-IoT device #1 sends uplink data #1.

[0460] Correspondingly, the UEreader receives uplink data #1.

[0461] For a more detailed description of S1107, please refer to S905 in Method 900 above.

[0462] S1108, UEreader sends uplink data #1.

[0463] Correspondingly, the gNB receives uplink data #1.

[0464] S1109, gNB sends uplink data #1.

[0465] Correspondingly, the A-IoT sensing core network node receives uplink data #1.

[0466] S1110, A-IoT sensing core network node sends message #1.

[0467] Accordingly, the gNB receives message #1.

[0468] For a more detailed description of S1110, please refer to S907 in Method 900 above.

[0469] S1111, gNB sends an RRC message.

[0470] Correspondingly, the UEreader receives RRC messages.

[0471] The gNB sends an RRC message containing the same content as message #1.

[0472] S1112, the UEreader sends the second signaling.

[0473] Correspondingly, A-IoT device #1 receives the second signaling.

[0474] The second signaling message contains the same content as the RRC message.

[0475] For example, the second signaling could be paging signaling.

[0476] S1113, A-IoT device #1 determines whether to execute command #1.

[0477] For a more detailed description of S1113, please refer to S909 in Method 900 above.

[0478] S1114, A-IoT device #1 sends uplink data #2.

[0479] Correspondingly, UEreader receives uplink data #2.

[0480] For a more detailed description of S1114, please refer to S910 in Method 900 above.

[0481] S1115, UEreader sends uplink data #2.

[0482] Correspondingly, the gNB receives uplink data #2.

[0483] S1116, gNB sends uplink data #2.

[0484] Correspondingly, the A-IoT sensing core network node receives uplink data #2.

[0485] In this embodiment, the A-IoT device can send a randomly generated rand to the A-IoT sensing core network node during the execution of the first service (e.g., inventory service). This allows the A-IoT sensing core network node to generate a response value based on rand. Subsequently, the A-IoT device can determine whether to execute the command based on whether it has received RES for the first time, which helps to avoid replay attacks.

[0486] Figure 12 This is a schematic diagram of a communication method 1200 provided in an embodiment of this application. Figure 12 The method 1200 shown may include the following steps. Among them, S1201 to S1209 in method 1200 are steps executed in the first service, S1210 to S1216 are steps executed in command service #1, and S1217 to S1223 are steps executed in command service #2.

[0487] Methods 1201 to 1209 in method 1200 can be referred to as methods 1101 to 1109 in method 1100. For the sake of brevity, they will not be repeated here.

[0488] S1210, A-IoT sensing core network node sends message #1.

[0489] Accordingly, the gNB receives message #1.

[0490] For example, message #1 is an xxAP message.

[0491] For a more detailed description of S1210, please refer to S1007 in Method 1000 above.

[0492] S1211, gNB sends RRC message #1.

[0493] Correspondingly, the UEreader receives RRC message #1.

[0494] The gNB sends RRC message #1, which contains the same content as message #1.

[0495] S1212, the UEreader sends the second signaling.

[0496] Correspondingly, A-IoT device #1 receives the second signaling.

[0497] The second signaling message contains the same content as RRC message #1.

[0498] For example, the second signaling is paging signaling.

[0499] S1213, A-IoT device #1 determines whether to execute command #1.

[0500] For a more detailed description of S1213, please refer to S1009 in Method 1000 above.

[0501] S1214, A-IoT device #1 sends uplink data #2.

[0502] Correspondingly, UEreader receives uplink data #2.

[0503] For a more detailed description of S1214, please refer to S1010 in Method 1000 above.

[0504] S1215, UEreader sends uplink data #2.

[0505] Correspondingly, the gNB receives uplink data #2.

[0506] S1216, gNB sends uplink data #2.

[0507] Correspondingly, the A-IoT sensing core network node receives uplink data #2.

[0508] S1217, A-IoT sensing core network node sends message #2.

[0509] Correspondingly, the gNB receives message #2.

[0510] For example, message #2 is an xxAP message.

[0511] For a more detailed description of S1217, please refer to S1012 in Method 1000 above.

[0512] S1218, gNB sends RRC message #2.

[0513] Correspondingly, the UEreader receives RRC message #2.

[0514] The gNB sends RRC message #2, which contains the same content as message #2.

[0515] S1219, UEreader sends third signaling.

[0516] Correspondingly, A-IoT device #1 receives the third signaling.

[0517] The third signaling message contains the same content as RRC message #2.

[0518] For example, the third signaling is paging signaling.

[0519] S1220, A-IoT device #1 determines whether to execute command #2.

[0520] For a more detailed description of S1220, please refer to S1014 in Method 1000 above.

[0521] S1221, A-IoT device #1 sends uplink data #3.

[0522] Correspondingly, UEreader receives uplink data #3.

[0523] For a more detailed description of S1221, please refer to S1015 in Method 1000 above.

[0524] S1222, UEreader sends uplink data #3.

[0525] Correspondingly, the gNB receives uplink data #3.

[0526] S1223, gNB sends uplink data #3.

[0527] Correspondingly, the A-IoT sensing core network node receives uplink data #3.

[0528] In this embodiment, the A-IoT device can randomly generate different rand values ​​for each command service, so that the A-IoT sensing core network node can generate different response values ​​(i.e., RES) based on the rand generated by the A-IoT device, thereby preventing the A-IoT device from discarding the command in different command services as a replay message.

[0529] Alternatively, A-IoT sensing core network nodes can assign different identification information to different command services, so that A-IoT devices can determine whether to execute a command based on whether the identification information of the command is received for the first time. This helps to avoid replay attacks and also prevents A-IoT devices from discarding commands in different command services as replay messages.

[0530] As shown above, the access network equipment involved in this implementation example can be based on the ORAN architecture. The following is a brief introduction to the above-mentioned features under the ORAN architecture. Figures 8 to 12 The application of the communication method shown.

[0531] In the O-RAN architecture, the RIC can directly control both the gNB-CU and the gNB-DU, requiring the above-mentioned... Figures 8 to 12In the communication method steps shown, "access network device" is expanded to "CU" and "DU".

[0532] In one possible implementation, the access network device receives messages from a communication device or a UE reader, including: the access network device's DU receiving messages from the communication device or the UE reader. Then, the access network device's DU sends the received messages from the communication device or the UE reader to the access network device's CU, which in turn sends them to the core network element.

[0533] For example, the message received by the DU of the access network device from the communication device or UE reader may include a first value, and optionally, second indication information, and optionally, a second identifier. Further description of the first value, the second indication information, and the second identifier can be found in method 800 above.

[0534] In one possible implementation, the access network device receives messages from core network elements, including: the access network device's CU terminating the message from the core network element. Then, the access network device's CU sends an F1 access protocol (F1AP) message to the access network device's DU based on the received message from the core network element. The access network device's DU then sends a message to the communication device or UE reader based on the received F1AP message.

[0535] For example, the message received by the CU of the access network device from the core network element may include a first identifier, a first command, and first information. Further description of the first command, first information, and first identifier can be found in method 800 above.

[0536] It should be understood that the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application.

[0537] It should also be understood that, in the various embodiments of this application, unless otherwise specified or in case of logical conflict, the terms and / or descriptions between different embodiments are consistent and can be referenced by each other, and the technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0538] It should also be understood that in some of the above embodiments, exemplary descriptions are mainly based on devices in existing network architectures (such as A-IoT devices or core network elements). It should be understood that the specific form of the device is not limited in the embodiments of this application. For example, any device that can achieve the same function in the future is applicable to the embodiments of this application.

[0539] It is understood that the methods and operations implemented by devices (such as A-IoT devices or core network elements) in the above-described method embodiments can also be implemented by components (such as chips or circuits).

[0540] Those skilled in the art will recognize that, based on the units and algorithm steps described in conjunction with the embodiments disclosed herein, this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is implemented in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0541] The following combination Figures 13 to 15 The communication device provided in this application is described in detail. It should be understood that the description of the device embodiments corresponds to the description of the method embodiments. Therefore, for details not described in detail, please refer to the method embodiments above; for brevity, some details are omitted.

[0542] This application embodiment can divide the transmitting or receiving device into functional modules according to the above method examples. For example, each function can be divided into its own functional modules, or two or more functions can be integrated into one processing module. The integrated module can be implemented in hardware or as a software functional module. It should be noted that the module division in this application embodiment is illustrative and only represents one logical functional division. In actual implementation, there may be other division methods. The following description uses the division of functional modules according to each function as an example.

[0543] Figure 13 This is a schematic block diagram of a communication device 1300 provided in an embodiment of this application. The device 1300 includes a transceiver module 1310 and a processing module 1320. The transceiver module 1310 can implement corresponding communication functions, and the processing module 1320 is used for data processing. In other words, the transceiver module 1310 is used to perform operations related to receiving and sending, and the processing module 1320 is used to perform other operations besides receiving and sending. The transceiver module 1310 can also be referred to as a communication interface or a communication unit.

[0544] Optionally, the device 1300 may further include a storage module 1330, which can be used to store instructions and / or data. The processing module 1320 can read the instructions and / or data in the storage module to enable the device to perform the operation of the device in the aforementioned method embodiments.

[0545] In one design, the device 1300 may correspond to the communication device in the above method embodiments.

[0546] The device 1300 can implement the steps or processes corresponding to those performed by the first prince in the above method embodiment. The transceiver module 1300 can be used to perform transceiver-related operations of the communication device in the above method embodiment, and the processing module 1300 can be used to perform processing-related operations of the communication device in the above method embodiment.

[0547] In one possible implementation, the transceiver module 1310 is used to receive a first message, the first message including a first identifier, a first command, and first information. The first identifier is used to identify the communication device, and the first information uniquely identifies the first message. The processing module 1320 is used to execute the first command if a first condition is met, or to not execute or discard the first command if the first condition is not met.

[0548] Among them, when the device 1300 is used to perform Figure 8 When the method is in use, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S801, S803, S806, S808 or S811. The processing module 1320 can be used to execute the processing steps in the method, such as S807 or S812.

[0549] When the device 1300 is used to perform Figure 9 When the method is in use, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S903, S904, S905, S908 or S910. The processing module 1320 can be used to execute the processing steps in the method, such as S909.

[0550] When the device 1300 is used to perform Figure 10 When the method is executed, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S1003, S1004, S1005, S1008, S1010, S1013 or S1015. The processing module 1320 can be used to execute the processing steps in the method, such as S1009 or S1014.

[0551] When the device 1300 is used to perform Figure 11 When the method is executed, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S1105, S1106, S1107, S1112 or S1114. The processing module 1320 can be used to execute the processing steps in the method, such as S1113.

[0552] When the device 1300 is used to perform Figure 12When the method is executed, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S1205, S1206, S1207, S1212, S1214, S1219 or S1221. The processing module 1320 can be used to execute the processing steps in the method, such as S1213 or S1220.

[0553] It should be understood that the specific process of each unit performing the above-mentioned corresponding steps has been described in detail in the above method embodiments, and will not be repeated here for the sake of brevity.

[0554] In another design, the device 1300 may correspond to the first core network element in the above method embodiment, or a component (such as a chip) of the first core network element.

[0555] The device 1300 can implement the steps or processes corresponding to the first core network element in the above method embodiment. The transceiver module 1310 can be used to perform the transceiver-related operations of the first core network element in the above method embodiment, and the processing module 1320 can be used to perform the processing-related operations of the first core network element in the above method embodiment.

[0556] In one possible implementation, transceiver module 1310 receives a fifth message, which includes a second identifier, a first value, and second indication information. The first identifier identifies the communication device, the first value is randomly determined, and the second indication information indicates a first time period, which is the duration for which the communication device's current battery power can sustain communication. Processing module 1320 determines the second value based on the first value. Transceiver module 1310 is also configured to send a sixth message if a third condition is met. The sixth message includes a first command, a second value, and first information, where the first information uniquely identifies the sixth message sent by the first core network element. The first command and the second value are specific to the communication device, which includes a first A-IoT device or a chip within the first A-IoT device. Alternatively, it can send a seventh message if the third condition is not met, where the seventh message is used to obtain the identifier of the A-IoT device.

[0557] Among them, when the device 1300 is used to perform Figure 8 When the method is in use, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S802, S804, S805, S809 or S810. The processing module 1320 can be used to execute the processing steps in the method.

[0558] When the device 1300 is used to perform Figure 9When the method is in use, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S901, S902, S906, S907 or S911. The processing module 1320 can be used to execute the processing steps in the method.

[0559] When the device 1300 is used to perform Figure 10 When the method is in use, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S1001, S1002, S1006, S1007, S1011, S1012 or S1016. The processing module 1320 can be used to execute the processing steps in the method.

[0560] When the device 1300 is used to perform Figure 11 When the method is in use, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S1101, S1104, S1109, S1110 or S1116. The processing module 1320 can be used to execute the processing steps in the method.

[0561] When the device 1300 is used to perform Figure 12 When the method is in use, the transceiver module 1310 can be used to execute the steps of sending and receiving information in the method, such as S1201, S1204, S1209, S1210, S1216, S1217 or S1223. The processing module 1320 can be used to execute the processing steps in the method.

[0562] It should be understood that the specific process of each unit performing the above-mentioned corresponding steps has been described in detail in the above method embodiments, and will not be repeated here for the sake of brevity.

[0563] It should also be understood that the device 1300 here is embodied in the form of a functional module. The term "module" here can refer to application-specific integrated circuits (ASICs), electronic circuits, processors (e.g., shared processors, proprietary processors, or group processors, etc.) and memories for executing one or more software or firmware programs, integrated logic circuits, and / or other suitable components supporting the described functions. In an alternative example, those skilled in the art will understand that the device 1300 may specifically be a mobility management network element in the above embodiments, and may be used to execute the various processes and / or steps corresponding to the mobility management network element in the above method embodiments; or, the device 1300 may specifically be a terminal device in the above embodiments, and may be used to execute the various processes and / or steps corresponding to the terminal device in the above method embodiments. To avoid repetition, further details are omitted here.

[0564] The apparatus 1300 of each of the above-described schemes has the function of implementing the corresponding steps performed by the devices (such as the first core network element, A-IoT device) in the above methods. This function can be implemented by hardware or by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the above functions; for example, the transceiver module can be replaced by a transceiver (for example, the transmitting unit in the transceiver module can be replaced by a transmitter, and the receiving unit in the transceiver module can be replaced by a receiver), and other units, such as processing modules, can be replaced by processors, which respectively execute the transceiver operations and related processing operations in each method embodiment.

[0565] In addition, the transceiver module 1310 can also be a transceiver circuit (for example, it may include a receiving circuit and a transmitting circuit), and the processing module 1320 can be a processing circuit.

[0566] Figure 14 This is a schematic diagram of another communication device 1400 provided in an embodiment of this application. The device 1400 includes a processor 1410, which is used to execute computer programs or instructions stored in a memory 1420, or to read data / signaling stored in the memory 1420, to perform the methods in the above-described method embodiments. Optionally, there may be one or more processors 1410.

[0567] Optionally, such as Figure 14 As shown, the device 1400 also includes a memory 1420 for storing computer programs or instructions and / or data. The memory 1420 may be integrated with the processor 1410 or may be disposed separately. Optionally, there may be one or more memories 1420.

[0568] Optionally, such as Figure 14 As shown, the device 1400 also includes a transceiver 1430 for receiving and / or transmitting signals. For example, a processor 1410 is used to control the transceiver 1430 to receive and / or transmit signals.

[0569] As one option, the device 1400 is used to implement the operations performed by the first core network element in the various method embodiments described above.

[0570] As an alternative, the device 1400 is used to implement the operations performed by the communication device in the various method embodiments described above.

[0571] It should be understood that the processor mentioned in the embodiments of this application can be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor can be a microprocessor or any conventional processor.

[0572] It should also be understood that the memory mentioned in the embodiments of this application can be volatile memory and / or non-volatile memory. Non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory can be random access memory (RAM). For example, RAM can be used as an external cache. By way of example and not limitation, RAM includes the following forms: static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous linked dynamic random access memory (SLDRAM), and direct rambus RAM (DR RAM).

[0573] It should be noted that when the processor is a general-purpose processor, DSP, ASIC, FPGA, or other programmable logic device, discrete gate or transistor logic device, or discrete hardware component, the memory (storage module) can be integrated into the processor.

[0574] It should also be noted that the memory described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0575] Figure 15 This is a schematic diagram of a chip system 1500 provided in an embodiment of this application. The chip system 1500 (or may also be referred to as a processing system) includes logic circuitry 1510 and an input / output interface 1520.

[0576] The logic circuit 1510 can be a processing circuit in the chip system 1500. The logic circuit 1510 can be coupled to a memory unit, calling instructions from the memory unit, enabling the chip system 1500 to implement the methods and functions of the embodiments of this application. The input / output interface 1520 can be an input / output circuit in the chip system 1500, outputting processed information from the chip system 1500, or inputting data or signaling information to be processed into the chip system 1500 for processing.

[0577] As one approach, the chip system 1500 is used to implement the operations performed by the first core network element and the communication device in the various method embodiments described above.

[0578] For example, logic circuit 1510 is used to implement processing-related operations performed by the first core network element and communication device in the above method embodiment; input / output interface 1520 is used to implement sending and / or receiving-related operations performed by the first core network element and communication device in the above method embodiment.

[0579] This application also provides a computer-readable storage medium storing computer instructions for implementing the methods executed by the first core network element and the communication device in the above-described method embodiments.

[0580] For example, when the computer program is executed by the computer, it enables the computer to implement the methods executed by the first core network element and the communication device in the various embodiments of the above methods.

[0581] This application also provides a computer program product comprising instructions that, when executed by a computer, implement the methods performed by the first core network element and the communication device in the above-described method embodiments.

[0582] This application also provides a communication system, including the aforementioned first core network element and communication device.

[0583] The explanations and beneficial effects of the relevant contents in any of the devices provided above can be found in the corresponding method embodiments provided above, and will not be repeated here.

[0584] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of apparatus or units may be electrical, mechanical, or other forms.

[0585] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0586] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0587] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0588] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0589] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0590] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0591] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A communication method, the method being applied to a communication device, characterized by, The method comprises: receiving a first message, the first message comprising a first identifier, a first command and first information, the first identifier being used to identify the communication device, and the first information uniquely identifying the first message; if a first condition is met, executing the first command; if the first condition is not met, not executing or discarding the first command; wherein the communication device comprises a chip in a first AIoT device or a first A-IoT device, and the first condition comprises that the first information is first received by the communication device.

2. The method of claim 1, wherein: the first message further comprises a second value, or the first information is a second value; before receiving the first message, the method further comprises: sending a second message, the second message comprising a first value, the first value being randomly determined; after receiving the first message, the method further comprises: determining a third value according to the first value, or determining a third value according to the first value and the first information; the first condition further comprises that the third value meets a first preset rule with the second value.

3. The method of claim 1, wherein: the first information is a second value, and the first message further comprises identification information of the first command; before receiving the first message, the method further comprises: sending a second message, the second message comprising a first value, the first value being randomly determined; the method further comprises: determining a third value according to the first value and the identification information of the first command; the first condition further comprises that the third value meets a first preset rule with the second value.

4. The method of claim 3, wherein, The method further comprises: receiving first indication information, the first indication information indicating a first time, the first time being associated with second information, and the second information being identification information of the first command; after the first time expires, discarding the second information.

5. The method of any one of claims 2 to 4, wherein: the second message further comprises second indication information, the second indication information being used to indicate a first time period, and the first time period being a time period during which the communication device can currently maintain communication.

6. The method of any one of claims 2 to 5, wherein: before sending the second message, the method further comprises: sending a fourth value and third indication information, the third indication information indicating a second time period, the second time period being a time period during which the communication device can currently maintain communication, and the fourth value being randomly generated; sending a second message comprises: after the second time period expires, sending the second message.

7. The method according to any one of claims 2 to 6, characterized in that, The second message further comprises a second identifier, the second identifier being obtained by encrypting an identifier of the communication device.

8. The method of claim 7, wherein: after receiving the first message, the method further comprises: decrypting the first identifier to obtain a third identifier; the first condition further comprises that the third identifier is the same as the identifier of the communication device.

9. The method according to any one of claims 1 to 8, characterized in that, The method further includes: receiving a third message, the third message including the first identity, a second command, and third information, the third information uniquely identifying the third message; if a second condition is satisfied, executing the second command; if the second condition is not satisfied, not executing or discarding the second command; wherein the second condition includes that the third information is first received by the communication device.

10. The method of claim 9, wherein: the third message further includes a sixth value, or the third information is a sixth value; before receiving the third message, the method further includes sending a fourth message, the fourth message including a fifth value, the fifth value being randomly determined; after receiving the third message, the method further includes determining a seventh value based on the fifth value, or determining a seventh value based on the fifth value and the third information; the second condition further includes that the seventh value and the sixth value satisfy a second preset rule.

11. The method of claim 9, wherein: the third information is a sixth value, and the third message further includes identity information of the second command; before receiving the third message, the method further includes sending a fourth message, the fourth message including a fifth value, the fifth value being randomly determined; the method further includes determining a seventh value based on the fifth value and the identity information of the second command; the second condition further includes that the seventh value and the sixth value satisfy a second preset rule.

12. A communications device, characterized by A computer program product for implementing the method of any one of claims 1-11.

13. The communication apparatus according to claim 12, wherein The communication device includes an environmental Internet of Things device or a chip.

14. A computer-readable storage medium, characterized in that, The computer readable storage medium is included in a communication device, and the computer readable storage medium stores computer instructions which, when executed, cause the method of any one of claims 1-11 to be implemented.

15. A computer program product, the computer program product being embodied in a communication device, characterized in that The computer program product, when executed, causes the method of any one of claims 1-11 to be implemented.

Images