Key derivation method and device

Abstract

The application relates to a key derivation method, device, computer readable storage medium, computer program product and computer program. The method comprises: a terminal receiving a next hop chaining counter (NCC) associated with a first third generation partnership project (3GPP) connection, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal; and the terminal deriving an access stratum (AS) key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on a security parameter associated with the first 3GPP connection, the security parameter associated with the first 3GPP connection comprises the NCC associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections of the multiple 3GPP connections of the terminal are different.

Description

Key derivation method and device Technical Field

[0001] The present application relates to the field of communications, and more particularly, to a key derivation method, device, computer-readable storage medium, computer program product, and computer program. Background Art

[0002] In existing technologies, 5G systems can support the generation and simultaneous use of a set of 3GPP (3rd Generation Partnership Project) access keys and a set of non-3GPP access keys. However, existing technologies do not design a key derivation architecture for scenarios where a terminal simultaneously accesses the core network through two or more 3GPPs. As a result, the security of each 3GPP connection cannot be guaranteed in scenarios where a terminal simultaneously accesses the core network through multiple 3GPPs.

[0003] Summary of the Invention

[0004] Embodiments of the present application provide a key derivation method, device, computer-readable storage medium, computer program product, and computer program.

[0005] This embodiment of the present application provides a key derivation method, including:

[0006] The terminal receives a next hop chaining counter NCC associated with a first Third Generation Partnership Project 3GPP connection, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal;

[0007] The terminal derives the access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on the security parameters associated with the first 3GPP connection, the security parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0008] This embodiment of the present application provides a key derivation method, including:

[0009] The core network side device sends an NCC associated with a first Third Generation Partnership Project 3GPP connection to the terminal, where the first 3GPP connection is one of multiple 3GPP connections of the terminal, and the NCC associated with the first 3GPP connection is used by the terminal to derive an access layer AS key associated with the first 3GPP connection, and different AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different;

[0010] The core network side device sends the key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection, wherein the key generation parameters associated with the first 3GPP connection are used by the first access network device to derive the access layer AS key associated with the first 3GPP connection.

[0011] This embodiment of the present application provides a key derivation method, including:

[0012] A first access network device receives a key generation parameter associated with a first Third Generation Partnership Project 3GPP connection of a terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal;

[0013] The first access network device derives the access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on the key generation parameter associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0014] An embodiment of the present application provides a terminal, including:

[0015] A first communication unit is configured to receive a next hop chaining counter NCC associated with a first Third Generation Partnership Project 3GPP connection, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal;

[0016] The first processing unit is used to derive an access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on the security parameters associated with the first 3GPP connection, the security parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0017] An embodiment of the present application provides a core network side device, including:

[0018] A second communication unit is used to send an NCC associated with a first Third Generation Partnership Project 3GPP connection to a terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal, and the NCC associated with the first 3GPP connection is used by the terminal to derive an access layer AS key associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different; and to send a key generation parameter associated with the first 3GPP connection to a first access network device corresponding to the first 3GPP connection, wherein the key generation parameter associated with the first 3GPP connection is used by the first access network device to derive an access layer AS key associated with the first 3GPP connection.

[0019] An embodiment of the present application provides a first access network device, including:

[0020] a third communication unit, configured to receive a key generation parameter associated with a first Third Generation Partnership Project 3GPP connection of the terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal;

[0021] The third processing unit is used to derive the access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on the key generation parameter associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0022] An embodiment of the present application provides a terminal, comprising: a transceiver, a processor, and a memory. The memory is used to store a computer program, the transceiver is used to communicate with other devices, and the processor is used to call and run the computer program stored in the memory, so that the terminal executes the above method.

[0023] An embodiment of the present application provides a core network side device, comprising: a transceiver, a processor, and a memory. The memory is used to store a computer program, the transceiver is used to communicate with other devices, and the processor is used to call and execute the computer program stored in the memory, so that the core network side device performs the above method.

[0024] An embodiment of the present application provides a first access network device, comprising: a transceiver, a processor, and a memory. The memory is configured to store a computer program, the transceiver is configured to communicate with other devices, and the processor is configured to call and execute the computer program stored in the memory, so that the first access network device performs the above-described method.

[0025] The embodiment of the present application provides a chip for implementing the above method.

[0026] Specifically, the chip includes: a processor, which is used to call and run a computer program from a memory, so that a device equipped with the chip executes the above method.

[0027] An embodiment of the present application provides a computer-readable storage medium for storing a computer program, which enables a device to perform the above method when the computer program is executed by the device.

[0028] An embodiment of the present application provides a computer program product, including computer program instructions, which enable a computer to execute the above method.

[0029] An embodiment of the present application provides a computer program, which, when executed on a computer, enables the computer to execute the above method.

[0030] By adopting the solution provided in this embodiment, the AS key associated with each 3GPP connection of the terminal can be derived in a scenario where the terminal maintains multiple 3GPP connections at the same time, and the AS keys associated with different 3GPP connections are different. In this way, for the scenario where the UE accesses the 5G core network through two 3GPPs at the same time, the AS key is derived for each 3GPP connection, which solves the problem that the related technology only supports the generation and simultaneous use of one set of 3GPP access keys and one set of non-3GPP access keys, but does not support the derivation of access layer keys for each 3GPP connection in multiple 3GPP connections, thereby ensuring the security of each 3GPP connection. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] FIG1 is a schematic diagram of an application scenario according to an embodiment of the present application.

[0032] Figure 2 is a schematic diagram of the 5G network system architecture.

[0033] FIG3 is a schematic diagram of scenarios in which a terminal accesses a core network through 3GPP access and non-3GPP access.

[0034] FIG4 is a schematic flow chart of the authentication process.

[0035] Figure 5 is a schematic diagram of the key derivation architecture scenario of the 5G system.

[0036] FIG6 is a schematic diagram of the horizontal and vertical key derivation scenarios.

[0037] FIG7 is a schematic diagram of a scenario in which a terminal accesses a core network through multiple 3GPPs according to an embodiment of the present application.

[0038] FIG8 is a schematic flowchart of a key derivation method according to an embodiment of the present application.

[0039] FIG9 is a schematic flowchart of a key derivation method according to another embodiment of the present application.

[0040] FIG10 is another schematic flowchart of a key derivation method according to another embodiment of the present application.

[0041] Figure 11 is a schematic diagram of a key derivation architecture of a 5G system according to an embodiment of the present application.

[0042] Figure 12 is another schematic diagram of the key derivation architecture of a 5G system according to an embodiment of the present application.

[0043] Figure 13 is another schematic diagram of the key derivation architecture of the 5G system according to an embodiment of the present application.

[0044] Figure 14 is another schematic diagram of the key derivation architecture of the 5G system according to an embodiment of the present application.

[0045] FIG15 is a flowchart illustrating an example of a key derivation method according to another embodiment of the present application.

[0046] FIG16 is a schematic block diagram of a terminal according to an embodiment of the present application.

[0047] FIG17 is a schematic block diagram of a core network side device according to an embodiment of the present application.

[0048] FIG18 is a schematic block diagram of a first access network device according to an embodiment of the present application.

[0049] FIG19 is a schematic block diagram of a communication device according to an embodiment of the present application.

[0050] FIG20 is a schematic block diagram of a chip according to an embodiment of the present application.

[0051] Figure 21 is a schematic block diagram of a communication system according to an embodiment of the present application. DETAILED DESCRIPTION

[0052] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0053] The technical solutions of the embodiments of the present application can be applied to various communication systems, such as: Long Term Evolution (LTE) system, Advanced Long Term Evolution (LTE-A) system, New Radio (NR) system, NR system evolution system, LTE on unlicensed spectrum (LTE-U) system, NR on unlicensed spectrum (NR-based access to unlicensed spectrum, NR-U) system, Non-Terrestrial Networks (NTN) system, Universal Mobile Telecommunication System (UMTS), Wireless Local Area Networks (WLAN), Wireless Fidelity (WiFi), Fifth Generation (5G) system or other communication systems.

[0054] Generally speaking, traditional communication systems support a limited number of connections and are easy to implement. However, with the development of communication technology, mobile communication systems will not only support traditional communications, but will also support, for example, device-to-device (D2D) communication, machine-to-machine (M2M) communication, machine-type communication (MTC), vehicle-to-vehicle (V2V) communication, or vehicle-to-everything (V2X) communication, and the embodiments of the present application may also be applied to these communication systems. In one possible implementation, the communication system in the embodiment of the present application may be applied to a carrier aggregation (CA) scenario, a dual connectivity (DC) scenario, or a standalone (SA) networking scenario. In one possible implementation, the communication system in the embodiment of the present application may be applied to an unlicensed spectrum, where the unlicensed spectrum may also be considered a shared spectrum; or, the communication system in the embodiment of the present application may also be applied to an authorized spectrum, where the authorized spectrum may also be considered a non-shared spectrum.

[0055] The embodiments of the present application describe various embodiments in conjunction with network devices and terminal devices, where the terminal device may also be referred to as user equipment (UE), access terminal, subscriber unit, subscriber station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent, or user device, etc. The terminal device may be a station (STAION, ST) in a WLAN, a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA) device, a handheld device with wireless communication capabilities, a computing device or other processing device connected to a wireless modem, an in-vehicle device, a wearable device, a terminal device in a next-generation communication system such as a NR network, or a terminal device in a future-evolved Public Land Mobile Network (PLMN) network, etc. In an embodiment of the present application, the terminal device can be deployed on land, including indoors or outdoors, handheld, wearable or vehicle-mounted; it can also be deployed on the water surface (such as a ship, etc.); it can also be deployed in the air (such as an airplane, a balloon, and a satellite, etc.). In an embodiment of the present application, the terminal device can be a mobile phone, a tablet computer, a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, or a wireless terminal device in a smart home, etc. As an example and not a limitation, in an embodiment of the present application, the terminal device can also be a wearable device. Wearable devices, also known as wearable smart devices, are a general term for wearable devices developed by applying wearable technology to intelligently design everyday wearables, such as glasses, gloves, watches, clothing, and shoes. Wearable devices are portable devices that are worn directly on the body or integrated into clothing or accessories. Wearable devices are more than just hardware devices; they also enable powerful functionality through software support, data interaction, and cloud-based interaction.In a broad sense, wearable smart devices include those that are fully functional, large in size, and can achieve complete or partial functions without relying on smartphones, such as smart watches or smart glasses, as well as those that only focus on a certain type of application function and need to be used in conjunction with other devices such as smartphones, such as various smart bracelets and smart jewelry for vital sign monitoring.

[0056] In an embodiment of the present application, a network device may be a device for communicating with a mobile device. The network device may be an access point (AP) in a WLAN, a base station (BTS) in a GSM or CDMA, a base station (NodeB, NB) in a WCDMA, an evolved base station (eNB or eNodeB) in an LTE, or a relay station or access point, or a vehicle-mounted device, a wearable device, a network device (gNB) in an NR network, or a network device in a future evolved PLMN network or a network device in an NTN network. As an example and not a limitation, in an embodiment of the present application, the network device may have a mobile feature, for example, the network device may be a mobile device. Optionally, the network device may be a satellite or a balloon station. For example, the satellite may be a low earth orbit (LEO) satellite, a medium earth orbit (MEO) satellite, a geostationary earth orbit (GEO) satellite, a high elliptical orbit (HEO) satellite, etc. Optionally, the network device may also be a base station set up in a location such as land or water. In an embodiment of the present application, the network device may provide services for a cell, and the terminal device may communicate with the network device through the transmission resources used by the cell (for example, frequency domain resources, or spectrum resources). The cell may be a cell corresponding to the network device (for example, a base station), and the cell may belong to a macro base station or a base station corresponding to a small cell. The small cells here may include: metro cells, micro cells, pico cells, femto cells, etc. These small cells have the characteristics of small coverage and low transmission power, and are suitable for providing high-speed data transmission services.

[0057] Figure 1 exemplarily shows a communication system 100. The communication system includes a network device 110 and two terminal devices 120. In a possible implementation, the communication system 100 may include multiple network devices 110, and each network device 110 may include other number of terminal devices 120 within its coverage area, which is not limited in this embodiment of the present application. In a possible implementation, the communication system 100 may also include other network entities such as a Mobility Management Entity (MME) and an Access and Mobility Management Function (AMF), which is not limited in this embodiment of the present application. Among them, the network device may include an access network device and a core network device. That is, the wireless communication system also includes multiple core networks for communicating with the access network device. The access network equipment may be an evolutionary base station (evolutional node B, which may be referred to as eNB or e-NodeB) macro base station, micro base station (also called "small base station"), micro base station, access point (AP), transmission point (TP) or new generation Node B (gNodeB) in a long-term evolution (LTE) system, a next-generation (mobile communication system) (next radio, NR) system or an authorized auxiliary access long-term evolution (LAA-LTE) system. It should be understood that the equipment with communication functions in the network / system in the embodiment of the present application may be referred to as communication equipment. Taking the communication system shown in Figure 1 as an example, the communication equipment may include network equipment and terminal equipment with communication functions. The network equipment and terminal equipment may be specific equipment in the embodiment of the present application, which will not be repeated here; the communication equipment may also include other equipment in the communication system, such as network controllers, mobile management entities and other network entities, which are not limited in the embodiment of the present application.

[0058] To facilitate understanding of the embodiments of the present application, the following briefly describes the basic processes and basic concepts involved in the embodiments of the present application. It should be understood that the basic processes and basic concepts introduced below do not limit the embodiments of the present application.

[0059] The 5G network system architecture is shown in Figure 2, which includes: NSSF (Network Slice Selection Function) is mainly used to manage network slice related information, such as selecting network slices for terminal devices; AUSF (Authentication Server Function) is used to complete the identity authentication function of user access; UDM (Unified Data Management) is used to manage and store contract data and authentication data; AMF (Access and Mobility Management Function) is used to complete mobility management, security anchor and secure UE policy management, etc. In addition to managing the mobility of UE, AMF is also responsible for forwarding session management related messages between UE and SMF; SMF (Session Management Function) is used to complete session management, UE IP address allocation and management, etc.; PCF (Policy Control Function) is responsible for formulating policies related to UE mobility management, session management, billing, etc.; AF (Application Function) is used for external application servers; UPF (User Plane Function) is used to manage and store user data and authentication data; The 5GC (5G Core Network) is a 5G core network that is used for complex user plane processing, such as forwarding traffic between the radio access network and the Internet, reporting traffic usage, and implementing QoS (Quality of Service) policies. The DN (Data Network) is the external data network of the 5GC (such as the Internet). Data is transmitted between the various nodes of the 5GC (5G Core Network), between the user equipment (UE) and the 5GC nodes, between the UE and the Radio Access Network (RAN), and between the RAN and the 5GC nodes through corresponding interfaces. For example, as shown in Figure 2: Data is transmitted between the AMF and NSSF in the 5GC through interface N22; the AMF transmits data to the SMF through interface N11; the AMF transmits data to the AUSF through N12; and the AMF transmits data to the UDM through interface N8. Data is transmitted between the SMF and the UPF through interface N4. The UPF transmits data to the external data network through interface N6 and to the AN through interface N3. The UE establishes an access layer connection with the AN through the Uu port, exchanges access layer messages and wireless data transmission, and establishes a non-access layer (NAS) connection with the AMF through the N1 port, exchanges NAS messages.Data is transmitted between the RAN and AMF via the N2 interface, and between the RAN and UPF via the N3 interface. It should be understood that the above description only describes the interfaces between some nodes, and the other interfaces between other 5GC nodes in Figure 2 are not detailed one by one. In Figure 2, except for the UE, (R)AN, and DN, all other nodes are core network nodes; core network nodes can be further divided into user plane nodes (i.e., UPF in Figure 2) and control plane nodes (core network nodes other than UPF).

[0060] As shown in FIG3 , in the current standard, a UE can access the core network simultaneously through 3GPP access and non-3GPP access, and transmit different data packets through 3GPP (3rd Generation Partnership Project) access or non-3GPP (Non-3GPP) access. To this end, the 3GPP core network needs to authenticate the UE and derive corresponding keys for 3GPP access and non-3GPP access. As shown in Figure 4, the specific steps may include the following: S401. After receiving the authentication request (such as the authentication request sent by the UE), the UDM / ARPF will generate (Generate) an authentication vector Authentication Vector (AV) based on the root key (K) of the UE, where AV can be a 5G home network authentication vector (such as 5G HE AV), and 5G HE AV may include at least one of the following: RAND (random number), AUTN, expected verification response (XRES*), and key Kausf; S402. The UDM / ARPF sends an authentication get response (Nudm Authentication Get Response) to the AUSF (carrying 5G HE AV, [SUPI]), where [] indicates optional; S403. The AUSF saves the 5G HE Expected Verification Response (XRES*) in AV; S404, AUSF calculates the hash expected verification response (HXRES*); S405, AUSF sends a user access verification response (Nausf UEAuthentication Authenticate Response) to SEAF (carrying 5G authentication vector (5G AV)), where 5G AV may include at least one of the following: RAND (random number), AUTN, HXRES*, key KSEAF; S406, SEAF sends an authentication request (Authentication Request) to the UE, which includes 5G AV; S407, UE calculates the verification response (RES*), specifically, the UE calculates the authentication response (RES*) according to the 5G AV calculates RES* and related AS (Access-stratum) keys and NAS (Non-Access-stratum) keys; S408, UE sends a verification response to SEAF / AMF, which may carry RES*; S409, SEAF / AMF calculates HRES* based on RES*, compares HRES* with HXRES*, and executes S410 if the two are consistent; S410, SERF sends a user access authentication request (Nausf UEAuthentication Authenticate Request) to AUSF, which carries RES*;S411. The AUSF verifies RES*. Specifically, the AUSF compares RES* and XRES* to see if they are consistent. If they are, the AUSF executes S412. S412. The AUSF sends a User Access Authentication Response (Nausf UE Authentication Authenticate Response) to the SEAF / AMF. The Nausf UE Authentication Authenticate Response may carry the result (i.e., the authentication result, i.e., the verification result of RES*) and, optionally, the SUPI (Subscription Permanent Identifier) ​​corresponding to the user.

[0061] In the processing flow shown in FIG4 , the key derivation architecture of the 5G system involved can be shown in FIG5 . The key derivation on the network side may include: ARPF (usually set up together with UDM) uses the root key K to generate the next-level key CK, IK, and further ARPF generates the next-level key K based on CK, IK. AUSF or CK', IK'->K AUSF , ARPF will generate K AUSF Sent to AUSF network element for use; AUSF network element uses K AUSF Generate the next level key K SEAF And send it to SEAF (usually set up together with AMF); SEAF will send it to SEAF according to K SEAF Generate K AMF , and generates an indicator parameter ngKSI to identify the K AMF ;AMF according to K AMF Can further generate (K gNB , NH), K N3IWF , where (K gNB , NH) is used for NAS and AS layer connections under 5G 3GPP access, K N3IWF Used for NAS layer connection under 5G non-3GPP access. Here, the NAS key derived by the AMF may include at least one of the following: K NASint , K NASenc .

[0062] Continuing with Figure 5, on the UE side, the UE can be further divided into USIM (Universal Subscriber Identity Module) and ME (Mobile Equipment). Except for CK and IK, which are generated by the UE's USIM, all other levels of keys are generated by the UE's ME. On the gNB side, it will receive the (K gNB , NH). And on the UE side and gNB side, it will be based on (K gNBNH) further derives an AS key, which is shown in FIG5 and may include at least one of the following: K RRCint , K RRCenc , K UPint , K UPenc .

[0063] On the UE side and the gNB side, the execution of horizontal or vertical derivation will be determined based on {NCC, NH} to obtain the new K gNB (or K NG-RAN* For example, Figure 6 illustrates horizontal and vertical derivation of key derivation. When the base station (gNB) has unused {NCC, NH} information, vertical derivation is performed. If there is no unused {NCC, NH} information, horizontal derivation is performed. For example, during a handover, the unused {NCC, NH} information is used to derive a new key K. gNB , that is, vertical derivation, if there is no unused {NCC, NH} information, then according to the currently used K gNB Derive a new K gNB (K NG-RAN *), that is, horizontal derivative. When performing horizontal derivative or vertical derivative, other parameters can also be used to generate K gNB , as shown in Figure 6, when performing horizontal derivation, according to the currently used K gNB , PCI and downlink (DL) frequency to derive the new K gNB (K NG-RAN *). It should be noted that the base station side (gNB) is only the initial (inital) K when it obtains the key for the first time. gNB , the base station side does not obtain the NH (or NH parameter) for the first time, such as shown in Figure 6, when NCC = 0, the base station obtains the initial key K gNB , then the initial K gNB For AMF based on K AMF and NAS uplink (UL, Uplink) count (COUNT); when NCC=2, the base station obtains NH, which is AMF based on K AMF and derived from the most recently derived NH.

[0064] However, in the above-mentioned related technologies, the 5G system supports the generation and simultaneous use of a set of 3GPP access keys and a set of non-3GPP access keys, but cannot support the scenario in which the terminal accesses the core network (or 5G core network) through two or more 3GPPs at the same time as shown in Figure 7. Therefore, it is necessary to provide a key derivation scheme that can support the scenario in which the terminal accesses the core network through multiple 3GPPs at the same time. In addition, it should be noted that with respect to Figure 7, the base stations of 3GPP access 1 and 3GPP access 2 can be the same, and the base stations of 3GPP access 1 and 3GPP access 2 can be different. In the two cases where the base stations of 3GPP access 1 and 3GPP access 2 are the same or different, they logically require two AS air interface connections and / or two NAS connections for maintenance. Therefore, the two are essentially the same, that is, the AS keys and / or NAS keys that need to be derived are used for each 3GPP access respectively.

[0065] It should be understood that the terms "system" and "network" are often used interchangeably in this article. The term "and / or" in this article is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the objects associated before and after are in an "or" relationship. It should be understood that the "indication" mentioned in the embodiments of this application can be a direct indication, an indirect indication, or an indication of an association relationship. For example, A indicates B, which can mean that A directly indicates B, for example, B can be obtained through A; it can also mean that A indirectly indicates B, for example, A indicates C, and B can be obtained through C; it can also mean that there is an association relationship between A and B. In the description of the embodiments of this application, the term "corresponding" can mean that there is a direct or indirect correspondence between the two, or it can mean that there is an association relationship between the two, or it can mean a relationship between indication and indication, configuration and configuration, etc.

[0066] To facilitate understanding of the technical solutions of the embodiments of the present application, the relevant technologies of the embodiments of the present application are described below. The following relevant technologies can be arbitrarily combined with the technical solutions of the embodiments of the present application as optional solutions, and they all fall within the protection scope of the embodiments of the present application.

[0067] Figure 8 is a schematic flow chart of a key derivation method according to an embodiment of the present application. The method includes at least part of the following contents.

[0068] S810. The terminal receives an NCC (Next hop Chaining Counter) associated with a first 3GPP connection, where the first 3GPP connection is one of multiple 3GPP connections of the terminal.

[0069] S820. The terminal derives the AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on the security parameters associated with the first 3GPP connection, the security parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0070] Figure 9 is a schematic flow chart of a key derivation method according to another embodiment of the present application. The method includes at least part of the following contents.

[0071] S910. The core network side device sends an NCC associated with a first 3GPP connection to the terminal, where the first 3GPP connection is one of multiple 3GPP connections of the terminal. The NCC associated with the first 3GPP connection is used by the terminal to derive an access stratum AS key associated with the first 3GPP connection, and different AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

[0072] S920. The core network side device sends the key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection, wherein the key generation parameters associated with the first 3GPP connection are used by the first access network device to derive the access layer AS key associated with the first 3GPP connection.

[0073] Here, the processing of S910 and S920 can be in any order. For example, S910 can be executed first and then S920, or S920 can be executed first and then S910, and so on. This application does not limit or exhaustively list the execution order of S910 and S920.

[0074] Figure 10 is a schematic flow chart of a key derivation method according to another embodiment of the present application. The method includes at least part of the following contents.

[0075] S1010. A first access network device receives a key generation parameter associated with a first 3GPP connection of a terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal;

[0076] S1020. The first access network device derives an access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on a key generation parameter associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0077] The terminal may be a 3GPP terminal, that is, a terminal that can access a 3GPP network to send and receive data. For example, the terminal may be a mobile phone, a watch, a tablet, etc., and all possible types of terminals are not limited or enumerated here.

[0078] The multiple 3GPP connections of the terminal may be multiple 3GPP connections currently maintained by the terminal, or multiple 3GPP connections currently maintained simultaneously by the terminal. Here, the multiple 3GPP connections may refer to two or more 3GPP connections.

[0079] Different 3GPP connections among the multiple 3GPP connections of the terminal correspond to different radio bearers, and the radio bearer may include at least one of the following: DRB (Data Radio Bearer) and SRB (Signaling Radio Bearer).

[0080] The first 3GPP connection is one of the terminal's multiple 3GPP connections. Further, in this embodiment of the present application, the first 3GPP connection mainly refers to at least one of the following: any one of the terminal's multiple 3GPP connections that is not established for the first time, and any one of the terminal's multiple 3GPP connections that is not used for the first time to derive an AS key.

[0081] Among them, the first 3GPP connection is any 3GPP connection among multiple 3GPP connections of the terminal that is not established for the first time, which means that before the first 3GPP connection, the terminal has established one or more other 3GPP connections, and has derived and maintained the AS key associated with each other 3GPP connection.

[0082] The first 3GPP connection is any 3GPP connection among the terminal's multiple 3GPP connections for which the AS key is not derived for the first time. This means that, prior to the first 3GPP connection, the terminal has already derived an associated AS key for each of one or more other 3GPP connections that the terminal simultaneously maintains. It should be understood that this description is only from the perspective of the terminal. In actual processing, the access network device corresponding to each other 3GPP connection also derives and maintains the associated AS key. For the sake of brevity, the description of the access network device side is omitted.

[0083] The access network equipment may include at least one of the following: a base station, a gNB, an eNB, a network device in a future evolved PLMN network, a network device in an NTN network, a satellite, and the like.

[0084] The first access network device may refer to the access network device corresponding to or associated with the first 3GPP connection of the terminal. It should be pointed out that each of the multiple 3GPP connections of the terminal has a corresponding access network device; the access network devices corresponding to different 3GPP connections of the terminal may be the same or different, and the same access network device may correspond to one or more 3GPP connections of the terminal, and different access network devices correspond to different 3GPP connections of the terminal. For example, the SRB and / or DRB of any two 3GPP connections among the multiple 3GPP connections of the terminal are different, but these two 3GPP connections may correspond to the same base station; for another example, the SRB and / or DRB of any two 3GPP connections among the multiple 3GPP connections of the terminal are different, and the access nodes (that is, access network devices) corresponding to these two 3GPP connections are also different.

[0085] The core network side device may include a core network element capable of maintaining, deriving or transmitting key-related parameters associated with each 3GPP connection in multiple 3GPP connections of the terminal; the key-related parameters associated with each 3GPP connection may at least include K associated with each 3GPP connection. AMF Furthermore, the key-related parameters associated with each 3GPP connection may also include at least one of the NCC associated with each 3GPP connection, key generation parameters, etc., which are not limited or exhaustive here. Exemplarily, the core network side device may include at least one of the following: one or more access and mobility management functions (AMF), SEAF. It should be understood that the above is only an exemplary description. In actual processing, the core network side device is not limited to the core network elements listed above, and all possible core network elements of the core network side device are not exhaustively listed here.

[0086] Next, the following describes in detail the process of allocating the NCC associated with the first 3GPP connection and the key generation parameters associated with the first 3GPP connection to the core network side device, deriving the AS key associated with the first 3GPP connection based on the security parameters associated with the first 3GPP connection, and deriving the AS key associated with the first 3GPP connection based on the key generation parameters associated with the first 3GPP connection by the first access network device. It should be understood that any 3GPP connection that is not established for the first time and / or any 3GPP connection that is not derived from the AS key for the first time among the multiple 3GPP connections of the terminal can perform the same or similar processing as the first 3GPP connection. For the sake of brevity, these will not be described one by one below.

[0087] In some possible implementations, the first keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are the same. In this implementation, the first key may be KAMF , hereinafter, the first key, K AMF The meanings are the same and no repetitive explanation is given.

[0088] In this embodiment, the K associated with multiple 3GPP connections of the terminal AMF For the same K AMF That is, on the terminal side and the core network equipment side, only a set of K AMF .

[0089] In some embodiments, different 3GPP connections of the terminal are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

[0090] On the core network side device side, the intermediate key associated with the first 3GPP connection is a key K associated with the first 3GPP connection. AMF Derived.

[0091] Specifically, in the core network side device, the intermediate key associated with the first 3GPP connection is the same first key (K AMF ), wherein the first intermediate key is the intermediate key corresponding to the terminal generated last time. The intermediate key associated with the first 3GPP connection includes the next hop key (NH) associated with the first 3GPP connection; the first intermediate key may include one of the following: an initial key, a first NH. Since the first keys associated with multiple 3GPP connections of the terminal in this embodiment are K AMF Same, so all 3GPP connections have the same K AMF An initial key can be derived. In this embodiment, the initial key can be K gNB ,Hereinafter, the initial key,K gNB The meanings are the same and no repetitive explanation is given.

[0092] It should be understood that NH may also be alternatively called a next hop parameter, etc. in some possible examples, and all possible names thereof are not limited or enumerated here.

[0093] The core network side device can determine the NCC associated with the first 3GPP connection, and the NCC associated with the first 3GPP connection can be used to indicate the initial key K gNBThe number of intermediate keys associated with the first 3GPP connection is derived. The NCC associated with the first 3GPP connection is greater than the NCC last allocated by the core network device to the terminal. It should be understood that NCC can also be alternatively referred to as next-hop key count, next-hop key association count, NCC value, or NCC value, and all possible names or descriptions of NCC are not limited or exhaustive here.

[0094] The above embodiment has explained that the first 3GPP connection is any one of the multiple 3GPP connections of the terminal that is not established for the first time and / or any one of the multiple 3GPP connections of the terminal that is not derived from the AS key for the first time. Therefore, the core network side device has allocated NCC and intermediate keys for one or more other 3GPP connections of the terminal. Therefore, in this embodiment, the core network side device, in addition to maintaining the same first key K associated with the multiple 3GPP connections of the terminal, AMF In addition, the NCC associated with each other 3GPP connection of the terminal and the intermediate key associated with each other 3GPP connection are also maintained.

[0095] Correspondingly, the core network side device can determine the first intermediate key by: based on the NCC associated with each other 3GPP connection of the assigned terminal and the intermediate key associated with each other 3GPP connection, determining the intermediate key corresponding to the terminal generated last time, and using the intermediate key corresponding to the terminal generated last time as the first intermediate key.

[0096] Specifically, the core network side device may derive the intermediate key associated with the first 3GPP connection by: using a key generation algorithm to generate the same first key K associated with multiple 3GPP connections of the terminal. AMF , and the first intermediate key to obtain the intermediate key associated with the first 3GPP connection. The key generation algorithm can be configured according to actual conditions. For example, the key generation algorithm can be a key derivation function (KDF). It should also be noted that the same K associated with multiple 3GPP connections of the terminal AMF , calculate the first intermediate key, and in the process of obtaining the intermediate key associated with the first 3GPP connection, one or more derivation calculations or inference calculations can be performed, and the number of derivation calculations or inference calculations is equal to the difference between the NCC associated with the first 3GPP connection and the NCC last allocated to the terminal.

[0097] Taking the 3GPP connection associated with the NCC and the intermediate key allocated by the core network side device last time (the last time may also be the most recent or latest time) as the second 3GPP connection of the terminal as an example, that is, the 3GPP connection associated with the NCC and the intermediate key allocated to the terminal by the core network side device last time was {the NCC associated with the second 3GPP connection, the intermediate key associated with the second 3GPP connection}.

[0098] In one case, the NCC associated with the second 3GPP connection may be equal to an initial value (such as 0), and the intermediate key associated with the second 3GPP connection may be the initial key K gNB In this case, the second 3GPP connection may be the first 3GPP connection established by the terminal, and the initial key K associated with the second 3GPP connection is gNB It can be the same first key K associated with multiple 3GPP connections based on the terminal. AMF The specific derivation method is not limited in this embodiment.

[0099] The core network side device can use the intermediate key associated with the second 3GPP connection as the first intermediate key, that is, the first intermediate key is the initial key K gNB .

[0100] The core network side device may determine the NCC associated with the first 3GPP connection, where the NCC associated with the first 3GPP connection is greater than the NCC associated with the second 3GPP connection. In addition, the core network side device may use a key generation algorithm to generate the same first key K associated with multiple 3GPP connections of the terminal. AMF , initial key K gNB Perform a calculation to obtain the intermediate key associated with the first 3GPP connection; here, the number of derivation calculations or inference calculations performed by the core network side device to obtain the intermediate key associated with the first 3GPP connection is equal to the difference between the NCC associated with the first 3GPP connection and the NCC associated with the second 3GPP connection.

[0101] For example, assuming that the second 3GPP connection associated with the core network side device is maintained by {NCC1=0, initial key K gNB The core network side device may derive the intermediate key NH2 associated with the first 3GPP connection in a manner that is based on the same first key associated with multiple 3GPP connections of the terminal, namely K AMF , initial key K gNB Derived NH2, wherein the number of times the core network side device derives NH2 and performs the derivation calculation may be one or more times, and the calculation formula used by the core network side device for any derivation calculation in the process of calculating NH2 may be KDF(Key, S), wherein KDF() is a KDF calculation function, and Key is the same first key associated with multiple 3GPP connections of the terminal, i.e., K AMF, S includes the last derived key (for example, it may include the initial key K gNB The core network side device can determine that the value of NCC2 associated with the first 3GPP connection is an integer greater than NCC1 (0 in the current scenario), for example, NCC2 can be 1, or 2, or other values, and the difference between NCC2 and NCC1 can be equal to the value of the core network side device from the initial key K gNB After the above processing, the core network side device can finally obtain {NCC2, NH2} associated with the first 3GPP connection.

[0102] In one case, the NCC associated with the second 3GPP connection may not be equal to 0, and the intermediate key associated with the second 3GPP connection is the first NH. In this case, the core network side device may use the intermediate key associated with the second 3GPP connection as the first intermediate key, that is, the first intermediate key is the first NH.

[0103] The core network side device may determine the NCC associated with the first 3GPP connection, where the NCC associated with the first 3GPP connection is greater than the NCC associated with the second 3GPP connection. In addition, the core network side device may use a key generation algorithm to generate the same first key, i.e., K, associated with multiple 3GPP connections of the terminal. AMF , the first NH is calculated to obtain the intermediate key associated with the first 3GPP connection; here, the number of derivation calculations or inference calculations performed by the core network side device to obtain the intermediate key associated with the first 3GPP connection can be equal to the difference between the NCC associated with the first 3GPP connection and the NCC associated with the second 3GPP connection.

[0104] For example, assuming that the core network side device maintains the second 3GPP connection associated with {NCC1, first NH}. The core network side device can derive the intermediate key NH2 associated with the first 3GPP connection based on the same first key associated with multiple 3GPP connections of the terminal, namely K AMF , the first NH derives NH2, wherein the number of times the core network side device derives NH2 and performs the derivation calculation can be one or more times, and the calculation formula used by the core network side device for any derivation calculation in the process of calculating NH2 can be KDF(Key, S), wherein KDF() is a KDF calculation function, and Key is the same K associated with multiple 3GPP connections of the terminal. AMF, S includes the last derived key (for example, it may include the first NH or the last derived NH). The core network side device can determine that the value of NCC2 associated with the first 3GPP connection is an integer greater than NCC1 (not 0 in the current scenario). For example, if NCC1 is equal to 1, then NCC2 can be 2, or 3, or other values. The difference between NCC2 and NCC1 can be equal to the number of times the core network side device derives NH2 from the first NH. After the above processing, the core network side device can finally obtain {NCC2, NH2} associated with the first 3GPP connection.

[0105] After obtaining the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection, the core network-side device may perform the following processing: sending the NCC associated with the first 3GPP connection to the terminal; and sending key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection. In this embodiment, the key generation parameters associated with the first 3GPP connection include: the NCC associated with the first 3GPP connection; and the key generation parameters associated with the first 3GPP connection also include: the intermediate key associated with the first 3GPP connection.

[0106] It should be noted that after the core network side device obtains the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection, the core network side device will associate, maintain or save the first key associated with the first 3GPP connection, that is, K AMF , NCC associated with the first 3GPP connection, and intermediate keys associated with the first 3GPP connection.

[0107] On the terminal side, after receiving the NCC associated with the first 3GPP connection, a process of deriving the AS key associated with the first 3GPP connection may be performed. The following describes the process of deriving the AS key associated with the first 3GPP connection on the terminal side:

[0108] The security parameters associated with the first 3GPP connection may include the NCC associated with the first 3GPP connection, that is, the terminal may first use the NCC associated with the first 3GPP connection as one of the security parameters associated with the first 3GPP connection. Further, the security parameters associated with the first 3GPP connection may also include at least one of the following: a first key (K AMF ), the intermediate key associated with the first 3GPP connection.

[0109] On the terminal side, the AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is the same first key K associated with multiple 3GPP connections of the terminal. AMF, the NCC associated with the first 3GPP connection, and a first intermediate key derived, where the first intermediate key is the intermediate key generated by the terminal last time.

[0110] The intermediate key associated with the first 3GPP connection includes the NH associated with the first 3GPP connection; the first intermediate key may include one of the following: an initial key, a first NH.

[0111] Specifically, the process of deriving the AS key associated with the first 3GPP connection on the terminal side may include: the terminal deriving the same first key K associated with multiple 3GPP connections of the terminal AMF , the NCC associated with the first 3GPP connection, and the first intermediate key are calculated to obtain the intermediate key associated with the first 3GPP connection; the terminal calculates the access network key associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection; the terminal calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection. In this embodiment, the access network key can be K NG-RAN , in the following, the access network key, K NG-RAN The meanings are the same and no repetitive explanation is given.

[0112] Among them, the K associated with the first 3GPP connection maintained by the terminal side AMF Specifically, it can be the same first key K associated with multiple 3GPP connections of the terminal. AMF The same K associated with multiple 3GPP connections of the terminal AMF The description is the same as that of the above embodiment and will not be repeated.

[0113] The terminal is based on the same first key K associated with multiple 3GPP connections of the terminal. AMF , the NCC associated with the first 3GPP connection, and the first intermediate key calculation to obtain the intermediate key associated with the first 3GPP connection may include: determining the number of derivation calculations (or inference calculations) based on the NCC associated with the first 3GPP connection, and using a key generation algorithm based on the same first key K associated with multiple 3GPP connections of the terminal. AMF , the first intermediate key, and the number of derivation calculations to derive the intermediate key associated with the first 3GPP connection. This key generation algorithm is the same as in the previous embodiment and is not repeated here. It should be noted that the number of derivation calculations is equal to the difference between the NCC associated with the first 3GPP connection and the NCC last obtained by the terminal.

[0114] The above embodiment has explained that the first 3GPP connection is any 3GPP connection that is not established for the first time among the multiple 3GPP connections of the terminal and / or any 3GPP connection that is not derived from the AS key for the first time among the multiple 3GPP connections of the terminal. Therefore, the terminal side will maintain the security parameters associated with each other 3GPP connection in one or more other 3GPP connections from which it has derived the AS key, wherein the security parameters associated with each other 3GPP connection include at least one of the following: NCC associated with each other 3GPP connection, first key K associated with each other 3GPP connection AMF , the intermediate key associated with each other 3GPP connection. Accordingly, the terminal may determine the first intermediate key by: determining the intermediate key generated last by the terminal as the first intermediate key based on the security parameters associated with each other 3GPP connection.

[0115] The intermediate key generated last time by the terminal and the NCC obtained last time by the terminal may be associated with the same 3GPP connection.

[0116] For example, the NCC associated with the second 3GPP connection of the terminal is the NCC obtained last by the terminal, and the intermediate key associated with the second 3GPP connection of the terminal is the intermediate key generated last by the terminal:

[0117] In one case, the NCC associated with the second 3GPP connection may be equal to the initial value, ie, 0, and the intermediate key associated with the second 3GPP connection may be the initial key K gNB The terminal can use the intermediate key associated with the second 3GPP connection as the first intermediate key, that is, the first intermediate key is the initial key K gNB .

[0118] The terminal may determine the number of derived calculations (or pushed calculations) based on the NCC associated with the first 3GPP connection, and use a key generation algorithm based on the same first key K associated with multiple 3GPP connections of the terminal. AMF , initial key K gNB , derive the number of calculations to derive the intermediate key associated with the first 3GPP connection.

[0119] For example, assuming that the security parameters of the second 3GPP connection maintained by the terminal include {NCC1=0, initial key K gNB}; Assume that the NCC associated with the first 3GPP connection received by the terminal is denoted as NCC2. The terminal can use NCC2 as the number of times of derivation calculation, and then use the key generation algorithm based on the number of times of derivation calculation, the same K associated with multiple 3GPP connections of the terminal, and the NCC2 as the number of times of derivation calculation ... AMF , initial key K gNBDerive NH2, and use NH2 as the intermediate key associated with the first 3GPP connection, wherein the calculation formula used by the terminal for any derivation calculation in the process of calculating the intermediate key associated with the first 3GPP connection (i.e., NH2) may be KDF(Key, S), wherein KDF() is a KDF calculation function, and Key is the same first key K associated with multiple 3GPP connections of the terminal. AMF , S includes the last derived key (for example, it may include the initial key K gNB or the NH derived last time). After the above processing, the terminal can finally obtain {NCC2, NH2} in the security parameters associated with the first 3GPP connection.

[0120] In one case, the NCC associated with the second 3GPP connection may not be equal to 0, and the intermediate key associated with the second 3GPP connection is the first NH. In this case, the terminal may use the intermediate key associated with the second 3GPP connection as the first intermediate key, that is, the first intermediate key is the first NH.

[0121] The terminal may determine the number of derived calculations (or derivation calculations) based on the difference between the NCC associated with the first 3GPP connection and the NCC associated with the second 3GPP connection, and adopt a key generation algorithm based on the same first key K associated with multiple 3GPP connections of the terminal. AMF , the first NH, the number of times the export calculation is performed, and the intermediate key associated with the first 3GPP connection is derived.

[0122] For example, assume that the second 3GPP connection associated with the terminal is {NCC1, first NH}; and assume that the NCC associated with the first 3GPP connection received by the terminal is expressed as NCC2. The terminal can calculate the difference between NCC2 and NCC1, determine the number of derivation calculations based on the difference, and then use the key generation algorithm based on the number of derivation calculations, the same K associated with multiple 3GPP connections of the terminal, and the NCC2. AMF , derive NH2 from the first NH, and use NH2 as the intermediate key associated with the first 3GPP connection, wherein the calculation formula used by the terminal for any derivation calculation during the calculation of NH2 may be KDF(Key, S), wherein KDF() is a KDF calculation function, and Key is the same K associated with multiple 3GPP connections of the terminal. AMF , S includes the last derived key (eg, the first NH or the last derived NH). After the above processing, the terminal can finally obtain {NCC2, NH2} in the security parameters associated with the first 3GPP connection.

[0123] Alternatively, the terminal may also use the NCC associated with the first 3GPP connection as the number of times of deriving the calculation (or pushing the calculation), and adopt the key generation algorithm based on the same first key K associated with multiple 3GPP connections of the terminal. AMF , initial key K gNB , derive the number of calculations to derive the intermediate key associated with the first 3GPP connection.

[0124] The terminal calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection. NG-RAN , which may include: the terminal performing horizontal derivation based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection to obtain the access network key K associated with the first 3GPP connection NG-RAN .

[0125] In some possible examples, the access network key K associated with the first 3GPP connection is NG-RAN It can also be expressed alternatively as K NG- RAN *, or, the access network key K associated with the first 3GPP connection NG-RAN It can also be expressed alternatively as a non-initial key K gNB .

[0126] Among them, the first wireless parameter of the first 3GPP connection may include at least one of the following: the cell identifier corresponding to the first 3GPP connection, the uplink UL frequency information corresponding to the first 3GPP connection, the downlink DL frequency information corresponding to the first 3GPP connection, the tracking area code (TAC) corresponding to the first 3GPP connection, and the radio bearer identifier corresponding to the first 3GPP connection.

[0127] The cell identifier may be a PCI (Physical Cell Identifier). The UL frequency information may include UL frequency information. The DL frequency information may include DL frequency information. The radio bearer may include a DRB and / or an SRB; accordingly, the radio bearer identifier may include an SRB ID and / or a DRB ID.

[0128] The AS key associated with the first 3GPP connection may include at least one of the following: RRCint , K associated with the first 3GPP connection RRCenc , K associated with the first 3GPP connection UPint , K associated with the first 3GPP connection UPenc .

[0129] Accordingly, the terminal calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, which may include at least one of the following: the terminal calculates the K associated with the first 3GPP connection based on the specified first security key generation algorithm and the access network key associated with the first 3GPP connection. RRCint The terminal calculates the K associated with the first 3GPP connection based on the specified second security key generation algorithm and the access network key associated with the first 3GPP connection UPint The terminal calculates the K associated with the first 3GPP connection based on the specified first encryption key generation algorithm and the access network key associated with the first 3GPP connection RRCenc The terminal calculates the K associated with the first 3GPP connection based on the specified second encryption key generation algorithm and the access network key associated with the first 3GPP connection UPenc .

[0130] Among them, the K associated with the first 3GPP connection UPint It may be a key used to protect UP (user plane) services between the terminal and the first access network device through a specific integrity protection algorithm.

[0131] K associated with the first 3GPP connection UPenc It may be a key used to protect UP (user plane) services between the terminal and the first access network device through a specific encryption algorithm.

[0132] K associated with the first 3GPP connection RRCint It may be a key used to protect RRC signaling between the terminal and the first access network device through a specific integrity protection algorithm.

[0133] K associated with the first 3GPP connection UPenc It can be a key used to protect RRC signaling between the terminal and the first access network device through a specific encryption algorithm.

[0134] The first security key generation algorithm, the second security key generation algorithm, the first encryption key generation algorithm, and the second encryption key generation algorithm can all be configured according to actual conditions. This embodiment does not limit or enumerate these algorithms.

[0135] It should be noted that after the terminal calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, the terminal will associate, maintain or save the security parameters associated with the first 3GPP connection and the AS key associated with the first 3GPP connection.

[0136] After receiving the key generation parameters associated with the first 3GPP connection, the first access network device may derive the AS key associated with the first 3GPP connection. The following describes the process of deriving the AS key associated with the first 3GPP connection on the first access network device side:

[0137] The key generation parameters associated with the first 3GPP connection include: an NCC associated with the first 3GPP connection and an intermediate key associated with the first 3GPP connection.

[0138] On the first access network device side, the AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection.

[0139] Specifically, the process of deriving the AS key associated with the first 3GPP connection by the first access network device may include: the first access network device calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection. NG-RAN ; The first access network device calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection.

[0140] Here, the first access network device calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection. NG-RAN Specific instructions, and the aforementioned terminal based on the intermediate key associated with the first 3GPP connection, the first wireless parameter of the first 3GPP connection, calculate the access network key K associated with the first 3GPP connection NG-RAN The specific processing is the same and will not be repeated. The description of the AS key associated with the first 3GPP connection, and the processing of the first access network device calculating the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, are the same as the processing of the terminal calculating the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, and will not be repeated.

[0141] It should be pointed out that after the first access network device calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, the first access network device side will associate, maintain or save the key generation parameters associated with the first 3GPP connection and the AS key associated with the first 3GPP connection.

[0142] 11 for the terminal's multiple 3GPP connections in different 3GPP connection associated K AMFSimilarly, the NCCs associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different, and the intermediate keys associated with different 3GPP connections are different. An exemplary description of the key derivation method in this scenario is given:

[0143] Assume that the terminal has currently established a 3GPP connection 1 (i.e., the second 3GPP connection in the aforementioned embodiment), and the K AMF (The K AMF That is, all 3GPP connections of the terminal are associated with the same K AMF ), NCC1 associated with 3GPP connection 1, and the intermediate key associated with 3GPP connection 1. The intermediate key associated with 3GPP connection 1 may be NH1 shown in FIG11 (i.e., the first NH in the aforementioned embodiment). Further, the terminal and the gNB corresponding to 3GPP connection 1 (the gNB corresponding to 3GPP connection 1 is represented as gNB1 in FIG11) maintain the AS key associated with 3GPP connection 1. In the process of deriving the AS key associated with 3GPP connection 1, the terminal and gNB1 may first derive the K shown in FIG11 based on NH1. gNB1 (or K associated with 3GPP connection 1 NG-RAN ), and then based on K gNB1 Derive the AS key associated with 3GPP connection 1, which is shown in Figure 11 as: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc- 1. It should be understood that, in actual processing, the AS key associated with the 3GPP connection 1 may include at least one of the following four keys illustrated in FIG11: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 .

[0144] Then the terminal initiates the first process through 3GPP connection 2 (i.e., the first 3GPP connection in the aforementioned embodiment). During the execution of the first process, the core network side device generates NCC2 associated with 3GPP connection 2 and NH2 associated with 3GPP connection 2. The core network side device (such as AMF) sends NCC2 associated with 3GPP connection 2 to the terminal, and sends NCC2 and NH2 to the gNB corresponding to 3GPP connection 2 (the gNB corresponding to 3GPP connection 2 is represented as gNB2 in Figure 11).

[0145] The terminal is based on 3GPP Connection 2 NCC2, K AMF (i.e. all 3GPP connections of the terminal are associated with the same K AMF), NH1, derive the intermediate key associated with 3GPP connection 2 (i.e., NH2 shown in Figure 11). In the process of the terminal and gNB2 deriving the AS key associated with 3GPP connection 2, the K shown in Figure 11 can be derived based on NH2. gNB2 (or K associated with 3GPP connection 2 NG-RAN ), and then based on K gNB2 Derive the AS key associated with 3GPP connection 2, which is shown in Figure 11 as: K RRCint-2 , K RRCenc-2 , K UPint-2 , K UPenc-2 It should be understood that, in actual processing, the AS key associated with the 3GPP connection 2 may include at least one of the following four keys illustrated in FIG11 : K RRCint-2 , K RRCenc-2 , K UPint-2 , K UPenc-2 .

[0146] Regarding the example of Figure 11 above, it should be noted that for clarity, Figure 11 illustrates gNB1 corresponding to 3GPP connection 1 and gNB2 corresponding to 3GPP connection 2, respectively. In actual scenarios, gNB1 and gNB2 can be the same device or different devices, which are all within the scope of protection of this embodiment and will not be repeated here. In addition, Figure 11 also illustrates the relevant keys derived from network elements such as ARPF, AUSF, SEAF, and N3IWF. The relevant descriptions of these keys have been detailed in the previous text and are therefore not repeated here.

[0147] In some embodiments, NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and intermediate keys associated with different 3GPP connections are different.

[0148] The core network side device can allocate the NCC associated with the first established 3GPP connection, the initial key K associated with the first established 3GPP connection, and the initial key K associated with the first established 3GPP connection for the terminal. gNB Or NH. The initial key K is derived by the core network side device for the first 3GPP connection established for the terminal. gNB Or NH mode, it can be based on the same K associated with multiple 3GPP connections of the terminal AMF Derived, the specific derivation method will not be described here.

[0149] The first 3GPP connection is any 3GPP connection among the multiple 3GPP connections of the terminal that is not established for the first time and / or any 3GPP connection among the multiple 3GPP connections of the terminal that is not derived from the AS key for the first time; in this embodiment, the core network side device no longer generates a new intermediate key for the first 3GPP connection, nor allocates a new NCC for the first 3GPP connection, but uses the NCC associated with other 3GPP connections of the terminal that have been established historically as the NCC associated with the first 3GPP connection; wherein, the other 3GPP connections of the terminal that have been established historically may include the 3GPP connection established for the first time by the terminal.

[0150] After determining the NCC associated with the first 3GPP connection, the core network device may perform the following processing: sending the NCC associated with the first 3GPP connection to the terminal; and sending key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection. In this embodiment, the key generation parameters associated with the first 3GPP connection include only the NCC associated with the first 3GPP connection.

[0151] It should be noted that after the core network side device obtains the NCC associated with the first 3GPP connection, the core network side device will associate, maintain or save the first key K associated with the first 3GPP connection. AMF , the NCC associated with the first 3GPP connection.

[0152] On the terminal side, after receiving the NCC associated with the first 3GPP connection, a process of deriving the AS key associated with the first 3GPP connection may be performed. The following describes the process of deriving the AS key associated with the first 3GPP connection on the terminal side:

[0153] On the terminal side, the security parameters associated with the first 3GPP connection may include the NCC associated with the first 3GPP connection, that is, the terminal may first use the NCC associated with the first 3GPP connection as one of the security parameters associated with the first 3GPP connection. Further, the security parameters associated with the first 3GPP connection may also include an intermediate key associated with the first 3GPP connection.

[0154] The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, the intermediate key associated with the first 3GPP connection is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

[0155] Specifically, the processing of deriving the AS key associated with the first 3GPP connection on the terminal side may include: the terminal determines the second intermediate key based on the NCC associated with the first 3GPP connection; the terminal calculates the intermediate key associated with the first 3GPP connection based on the second intermediate key and the first wireless parameter of the first 3GPP connection; the terminal calculates the AS key associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection.

[0156] The intermediate key associated with the first 3GPP connection includes an access network key associated with the first 3GPP connection; the second intermediate key includes one of the following: an initial key, a second NH, and a second access network key. The description of the first radio parameter of the first 3GPP connection is the same as that in the previous embodiment and is not repeated here.

[0157] In this embodiment, the first key may be K AMF ; The initial key can be K gNB ; The access network key is K NG- RAN In the following embodiments, the first key may be K AMF (or the first key K AMF ) is used to indicate that the initial key may be K gNB (or initial key K gNB ) is used to indicate that the access network key may be K NG-RAN (or access network key K NG-RAN ) are used to indicate the meaning, and no repeated explanation is given below.

[0158] Since the first 3GPP connection is any 3GPP connection that is not established for the first time among the multiple 3GPP connections of the terminal and / or any 3GPP connection for which the AS key is not derived for the first time among the multiple 3GPP connections of the terminal, the terminal side will maintain the security parameters associated with each other 3GPP connection in one or more other 3GPP connections from which it has derived the AS key, wherein the security parameters associated with each other 3GPP connection include at least one of the following: NCC associated with each other 3GPP connection, K associated with each other 3GPP connection AMF , the intermediate keys associated with each other 3GPP connection.

[0159] Correspondingly, the terminal determines the second intermediate key based on the NCC associated with the first 3GPP connection, which may include: the terminal searches for the intermediate key that is the same as the NCC associated with the first 3GPP connection and was generated by the terminal last time or previously as the second intermediate key based on the security parameters associated with each other 3GPP connection in one or more other 3GPP connections maintained by the terminal.

[0160] Taking the intermediate key that is the same as the NCC associated with the first 3GPP connection and is generated by the terminal last time or previously as an example, the NCC and intermediate key associated with the second 3GPP connection of the terminal are:

[0161] In one case, the intermediate key associated with the second 3GPP connection is the initial key K gNB The terminal can associate the initial key K with the second 3GPP connection gNB As the second intermediate key.

[0162] The terminal calculating the intermediate key associated with the first 3GPP connection based on the second intermediate key and the first radio parameter of the first 3GPP connection may include: the terminal calculating the intermediate key associated with the first 3GPP connection based on the initial key K gNB Horizontally derive the first wireless parameter of the first 3GPP connection to calculate the access network key K associated with the first 3GPP connection NG-RAN , the access network key K associated with the first 3GPP connection NG-RAN As the intermediate key associated with the first 3GPP connection.

[0163] For example, assuming that the security parameters of the second 3GPP connection maintained by the terminal include {NCC1=0, initial key K gNB}; Assume that the NCC associated with the first 3GPP connection received by the terminal is also NCC1. The terminal uses the initial key K gNB Horizontally derive the first wireless parameter of the first 3GPP connection to calculate the access network key K associated with the first 3GPP connection NG-RAN-1 , the access network key K associated with the first 3GPP connection NG-RAN-1 As the intermediate key associated with the first 3GPP connection. After the above processing, the terminal can finally obtain {NCC1=0, K NG-RAN-1}.

[0164] In one case, the intermediate key associated with the second 3GPP connection is a second NH. The terminal may use the intermediate key associated with the second 3GPP connection as the second intermediate key, that is, the second intermediate key is the second NH.

[0165] The terminal calculating, based on the second intermediate key and the first radio parameter of the first 3GPP connection, the intermediate key associated with the first 3GPP connection may include: the terminal performing horizontal derivation based on the second NH and the first radio parameter of the first 3GPP connection to calculate the access network key K associated with the first 3GPP connection. NG-RAN , the access network key K associated with the first 3GPP connection NG-RAN As the intermediate key associated with the first 3GPP connection.

[0166] For example, assuming that the security parameters of the second 3GPP connection maintained by the terminal include {NCC1=1, NH1}, NH1 is the second NH in this embodiment; and assuming that the NCC associated with the first 3GPP connection received by the terminal is also NCC1. The terminal performs horizontal derivation based on NH1 and the first radio parameter of the first 3GPP connection to calculate the access network key K associated with the first 3GPP connection. NG-RAN-2 , the access network key K associated with the first 3GPP connection NG-RAN-2 As the intermediate key associated with the first 3GPP connection. After the above processing, the terminal can finally obtain {NCC1=1, K NG-RAN-2}.

[0167] In one case, the intermediate key associated with the second 3GPP connection is the second access network key K NG-RAN The terminal may use the intermediate key associated with the second 3GPP connection as the second intermediate key, that is, the second intermediate key is the second access network key K NG-RAN .

[0168] The terminal calculating the intermediate key associated with the first 3GPP connection based on the second intermediate key and the first radio parameter of the first 3GPP connection may include: the terminal calculating the intermediate key associated with the first 3GPP connection based on the second access network key K NG-RAN Horizontally derive the first wireless parameter of the first 3GPP connection to calculate the access network key K associated with the first 3GPP connection NG-RAN , the access network key K associated with the first 3GPP connection NG-RAN As the intermediate key associated with the first 3GPP connection.

[0169] For example, assuming that the security parameters of the second 3GPP connection maintained by the terminal include {NCC1=1, K NG-RAN-1}, K NG-RAN-1 is the second access network key of this embodiment; and it is assumed that the NCC associated with the first 3GPP connection received by the terminal is also NCC1. NG-RAN-1 Horizontally derive the first wireless parameter of the first 3GPP connection to calculate the access network key K associated with the first 3GPP connection NG-RAN-2 , the access network key K associated with the first 3GPP connection NG-RAN-2 As the intermediate key associated with the first 3GPP connection. After the above processing, the terminal can finally obtain {NCC1=1, K NG-RAN- 2}.

[0170] In some possible examples, the access network key K associated with the first 3GPP connection is NG-RAN It can also be expressed alternatively as K NG- RAN *, or the access network key associated with the first 3GPP connection can also be expressed as a non-initial key K gNB .

[0171] In this embodiment, the terminal calculates the AS key associated with the first 3GPP connection in a similar manner to that in the aforementioned embodiment, and the content of the AS key associated with the first 3GPP connection is the same as that in the aforementioned embodiment, and therefore will not be described in detail.

[0172] It should be noted that after the terminal calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, the terminal will associate, maintain or save the security parameters associated with the first 3GPP connection and the AS key associated with the first 3GPP connection.

[0173] After receiving the key generation parameters associated with the first 3GPP connection, the first access network device may derive the AS key associated with the first 3GPP connection. The following describes the process of deriving the AS key associated with the first 3GPP connection on the first access network device side:

[0174] In this embodiment, the key generation parameters associated with the first 3GPP connection include only the NCC associated with the first 3GPP connection. On the first access network device side, the AS key associated with the first 3GPP connection is generated based on the intermediate key associated with the first 3GPP connection, which is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

[0175] The process of deriving the AS key associated with the first 3GPP connection by the first access network device may include: the first access network device calculating the intermediate key associated with the first 3GPP connection based on the second intermediate key and the first radio parameter of the first 3GPP connection; the first access network device calculating the AS key associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection. The intermediate key associated with the first 3GPP connection includes the access network key K associated with the first 3GPP connection. NG-RAN The second intermediate key includes one of the following: initial key K gNB , second NH, second access network key K NG-RAN The description of the first wireless parameter of the first 3GPP connection is the same as that in the above embodiment and will not be repeated.

[0176] Among them, before the first access network device calculates the intermediate key associated with the first 3GPP connection based on the second intermediate key and the first wireless parameter of the first 3GPP connection, the method on the first access network device side also includes: the first access network device obtains the second intermediate key.

[0177] Specifically, the first access network device obtaining the second intermediate key may include: the first access network device obtaining the second intermediate key based on the NCC associated with the first 3GPP connection.

[0178] Optionally, the first access network device locally maintains an intermediate key associated with another 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last time. The first access network device can directly obtain the intermediate key associated with the other 3GPP connection of the terminal locally as the second intermediate key.

[0179] Specifically, the first access network device obtains the second intermediate key based on the NCC associated with the first 3GPP connection, which may include: the first access network device searches whether the NCC and intermediate key associated with each other 3GPP connection in one or more other 3GPP connections of the terminal are stored locally; if so, when an intermediate key associated with another 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last or previously is found, the intermediate key associated with another 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last or previously is used as the second intermediate key.

[0180] Optionally, if the first access network device does not locally maintain an intermediate key associated with another 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last time, the first access network device can obtain an intermediate key associated with another 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last time from other access network devices as the second intermediate key.

[0181] Specifically, the first access network device obtains the second intermediate key based on the NCC associated with the first 3GPP connection, which may include: the first access network device searches whether the NCC and intermediate key associated with each of one or more other 3GPP connections of the terminal are stored locally; if not, obtains an intermediate key associated with another 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last time or previously from other access network devices associated with the other 3GPP connections of the terminal as the second intermediate key.

[0182] Alternatively, the first access network device obtains the second intermediate key based on the NCC associated with the first 3GPP connection, which may include: the first access network device searches whether the NCC and intermediate key associated with each of one or more other 3GPP connections of the terminal are stored locally; if so, searches whether the local intermediate key associated with an other 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last or previously is stored; if not, obtains the intermediate key associated with an other 3GPP connection of the terminal that is the same as the NCC associated with the first 3GPP connection and was generated last or previously from other access network devices associated with the other 3GPP connections of the terminal as the second intermediate key.

[0183] The process by which the first access network device calculates the intermediate key associated with the first 3GPP connection based on the second intermediate key and the first wireless parameter of the first 3GPP connection is the same as the specific process by which the aforementioned terminal calculates the intermediate key associated with the first 3GPP connection based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and thus is not described again. The description of the AS key associated with the first 3GPP connection, and the process by which the first access network device calculates the AS key associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection, are also similar to the process by which the terminal calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, and thus are not described again.

[0184] It should be noted that after the first access network device calculates or derives the AS key associated with the first 3GPP connection, the first access network device side will associate, maintain or save the key generation parameters associated with the first 3GPP connection and the AS key associated with the first 3GPP connection.

[0185] Combined with FIG12, K associated with different 3GPP connections in multiple 3GPP connections of the terminal AMF The same, the NCC associated with different 3GPP connections in the multiple 3GPP connections of the terminal is the same, and the intermediate keys associated with different 3GPP connections are different. An exemplary description of the key derivation method in this scenario is given:

[0186] Assume that the terminal has currently established a 3GPP connection 1 (i.e., the second 3GPP connection in the aforementioned embodiment), and the terminal side (specifically, including the ME and USIM as shown in FIG12 ) and the core network side device (illustrated as the network side in FIG12 ) maintain the security parameters associated with the 3GPP connection 1. The security parameters associated with the 3GPP connection 1 include the K associated with the 3GPP connection 1. AMF(All 3GPP connections of the terminal are associated with the same K AMF ), NCC1 associated with 3GPP connection 1, and the intermediate key associated with 3GPP connection 1. The intermediate key associated with 3GPP connection 1 may be NH1 shown in FIG12 (i.e., the second NH in the aforementioned embodiment). Further, the terminal and the gNB corresponding to 3GPP connection 1 (the gNB corresponding to 3GPP connection 1 is represented as gNB1 in FIG12) maintain the AS key associated with 3GPP connection 1. In the process of deriving the AS key associated with 3GPP connection 1, the terminal and gNB1 may first derive K based on NH1. gNB1 , then based on K gNB1 Derive the AS key associated with 3GPP connection 1, which is shown in Figure 12 as: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 It should be understood that, in actual processing, the AS key associated with the 3GPP connection 1 may include at least one of the following four keys illustrated in FIG12: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 .

[0187] Then the terminal initiates the first process through 3GPP connection 2 (i.e., the first 3GPP connection in the aforementioned embodiment). During the execution of the first process, the core network side device reallocates the NCC1 associated with 3GPP connection 1 to 3GPP connection 2, that is, 3GPP connection 2 is also associated with NCC1; the core network side device (such as AMF) sends the NCC1 associated with 3GPP connection 2 to the terminal, and sends NCC1 to the gNB corresponding to 3GPP connection 2 (the gNB corresponding to 3GPP connection 2 is represented as gNB2 in Figure 12).

[0188] The terminal and gNB2 determine that the second intermediate key is NH1 based on the received NCC1 of 3GPP connection 2, and derive the intermediate key associated with 3GPP connection 2 (i.e., K shown in Figure 12) based on NH1 and the first radio parameter of 3GPP connection 2. NG-RAN-2 ); K associated with 3GPP connection 2 NG-RAN-2 Derive the AS key associated with 3GPP connection 2. The AS key associated with 3GPP connection 2 is shown in Figure 12 as: K RRCint-2 , K RRCenc-2 , K UPint-2 , K UPenc-2 It should be understood that, in actual processing, the AS key associated with the 3GPP connection 2 may include at least one of the following four keys illustrated in FIG12: K RRCint-2 , K RRCenc-2 , KUPint-2 , K UPenc-2 .

[0189] Regarding the example in FIG12 above, it should be noted that, for clarity, FIG12 illustrates gNB1 corresponding to 3GPP connection 1 and gNB2 corresponding to 3GPP connection 2, respectively. In actual scenarios, gNB1 and gNB2 can be the same device or different devices, which are all within the scope of protection of this embodiment and will not be repeated here. In addition, FIG12 also illustrates the related keys derived from network elements such as ARPF, AUSF, SEAF, and N3IWF. The relevant descriptions of these keys have been detailed above and are therefore not repeated here.

[0190] In some embodiments, NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and intermediate keys associated with different 3GPP connections are the same.

[0191] The core network side device can allocate the NCC associated with the first established 3GPP connection, the initial key K associated with the first established 3GPP connection, and the initial key K associated with the first established 3GPP connection for the terminal. gNB Or NH; wherein, the core network side device derives the initial key K for the first 3GPP connection established by the terminal gNB Or NH mode, it can be based on the same K associated with multiple 3GPP connections of the terminal AMF Derived, the specific derivation method is not described here. The first 3GPP connection is any 3GPP connection that is not established for the first time among the multiple 3GPP connections of the terminal and / or any 3GPP connection that is not the first time the AS key is derived among the multiple 3GPP connections of the terminal. In this embodiment, the core network side device does not generate a new intermediate key for the first 3GPP connection, does not allocate a new NCC for the first 3GPP connection, but uses the NCC associated with other 3GPP connections that have been established in the history as the NCC associated with the first 3GPP connection, and uses the intermediate keys associated with other 3GPP connections as the intermediate keys associated with the first 3GPP connection; wherein, the other 3GPP connections of the terminal that have been established in the history may include the 3GPP connection established for the first time by the terminal.

[0192] After obtaining the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection, the core network side device may perform the following processing: sending the NCC associated with the first 3GPP connection to the terminal; sending the key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection. In this embodiment, the key generation parameters associated with the first 3GPP connection include: the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection. The intermediate key associated with the first 3GPP connection includes one of the following: initial key KgNB , the NH associated with the first 3GPP connection.

[0193] It should be noted that after the core network side device obtains the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection, the core network side device will associate, maintain or save the K associated with the first 3GPP connection. AMF , NCC associated with the first 3GPP connection, and intermediate keys associated with the first 3GPP connection.

[0194] On the terminal side, after receiving the NCC associated with the first 3GPP connection, a process of deriving the AS key associated with the first 3GPP connection may be performed. The following describes the process of deriving the AS key associated with the first 3GPP connection on the terminal side:

[0195] On the terminal side, the security parameters associated with the first 3GPP connection may include the NCC associated with the first 3GPP connection, that is, the terminal may first use the NCC associated with the first 3GPP connection as one of the security parameters associated with the first 3GPP connection. Further, the security parameters associated with the first 3GPP connection may also include at least one of the following: the K AMF , an intermediate key associated with the first 3GPP connection.

[0196] The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is obtained based on the NCC associated with the first 3GPP connection, and the second wireless parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different.

[0197] The AS key associated with the first 3GPP connection is the access network key K associated with the first 3GPP connection. NG-RAN and an access network key K associated with the first 3GPP connection derived from the second radio parameter of the first 3GPP connection NG-RAN The wireless key is derived based on an intermediate key associated with the first 3GPP connection and a first radio parameter of the first 3GPP connection.

[0198] Specifically, the processing of deriving the AS key associated with the first 3GPP connection on the terminal side may include: the terminal obtains the intermediate key associated with the first 3GPP connection based on the NCC associated with the first 3GPP connection; the terminal calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection. NG-RAN ; The terminal is based on the access network key K associated with the first 3GPP connectionNG-RAN and the second radio parameter of the first 3GPP connection, and calculating an AS key associated with the first 3GPP connection.

[0199] Among them, the terminal obtains the intermediate key associated with the first 3GPP connection based on the NCC associated with the first 3GPP connection, which may include: the terminal obtains the locally stored intermediate keys associated with other 3GPP connections that are the same as the NCC associated with the first 3GPP connection based on the NCC associated with the first 3GPP connection, and uses the intermediate keys associated with other 3GPP connections that are the same as the NCC associated with the first 3GPP connection as the intermediate keys associated with the first 3GPP connection.

[0200] The terminal calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection. NG-RAN The method may include: the terminal horizontally deriving an access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection, NG-RAN In some possible examples, the access network key K associated with the first 3GPP connection NG-RAN It can also be expressed alternatively as K NG-RAN *, or the access network key associated with the first 3GPP connection can also be expressed as a non-initial key K gNB .

[0201] The terminal is based on the access network key K associated with the first 3GPP connection NG-RAN and the second wireless parameter of the first 3GPP connection, calculating the AS key associated with the first 3GPP connection, which may include at least one of the following: the terminal generating the AS key based on the specified first security key generation algorithm, the access network key K associated with the first 3GPP connection NG-RAN and the second wireless parameter of the first 3GPP connection, calculating K associated with the first 3GPP connection RRCint Based on the specified second security key generation algorithm, the access network key K associated with the first 3GPP connection NG- RAN and the second wireless parameter of the first 3GPP connection, calculating K associated with the first 3GPP connection UPint Based on the specified first encryption key generation algorithm, the access network key K associated with the first 3GPP connection NG-RAN and the second wireless parameter of the first 3GPP connection, calculating K associated with the first 3GPP connection RRCenc Based on the specified second encryption key generation algorithm, the access network key K associated with the first 3GPP connection NG-RANand the second wireless parameter of the first 3GPP connection, calculating K associated with the first 3GPP connection UPenc .

[0202] The first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code (TAC) corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0203] The second wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0204] It should be understood that the above is only an exemplary description of the first wireless parameters of the first 3GPP connection and the second wireless parameters of the first 3GPP connection. The actual processing may include but is not limited to the specific contents listed above, but this embodiment does not limit or exhaustively list them.

[0205] It should also be understood that the first wireless parameters of the first 3GPP connection and the second wireless parameters of the first 3GPP connection may be the same or different, that is, at least one parameter from the cell identifier corresponding to the first 3GPP connection, the uplink UL frequency information corresponding to the first 3GPP connection, the downlink DL frequency information corresponding to the first 3GPP connection, the TAC corresponding to the first 3GPP connection, and the wireless bearer identifier corresponding to the first 3GPP connection may be selected as the first wireless parameter of the first 3GPP connection; and at least one parameter from the cell identifier corresponding to the first 3GPP connection, the uplink UL frequency information corresponding to the first 3GPP connection, the downlink DL frequency information corresponding to the first 3GPP connection, the TAC corresponding to the first 3GPP connection, and the wireless bearer identifier corresponding to the first 3GPP connection may be selected as the second wireless parameter of the first 3GPP connection. The parameters selected twice may be the same or different.

[0206] Optionally, the first wireless parameter of the first 3GPP connection is the same as the second wireless parameter of the first 3GPP connection.

[0207] For example, the first radio parameter of the first 3GPP connection and the second radio parameter of the first 3GPP connection may both include: a cell identifier (such as a PCI) corresponding to the first 3GPP connection and DL frequency (or frequency point) information corresponding to the first 3GPP connection. For example, the first radio parameter of the first 3GPP connection and the second radio parameter of the first 3GPP connection may both include: uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, downlink DL frequency (or frequency point) information corresponding to the first 3GPP connection, TAC corresponding to the first 3GPP connection, and radio bearer identifier corresponding to the first 3GPP connection. For example, the first radio parameter of the first 3GPP connection and the second radio parameter of the first 3GPP connection may both include: a cell identifier (such as a PCI) corresponding to the first 3GPP connection, uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, and TAC corresponding to the first 3GPP connection. This is for illustrative purposes only and does not exhaustively enumerate or limit all possible situations in which the first radio parameter of the first 3GPP connection is the same as the second radio parameter of the first 3GPP connection.

[0208] Optionally, the first radio parameter of the first 3GPP connection is at least partially different from the second radio parameter of the first 3GPP connection.

[0209] In one case, the first radio parameter of the first 3GPP connection and the second radio parameter of the first 3GPP connection have some identical parameters and some different parameters.

[0210] For example, the first wireless parameters of the first 3GPP connection include: a cell identifier (e.g., PCI) corresponding to the first 3GPP connection, and DL frequency (or frequency point) information corresponding to the first 3GPP connection. The second wireless parameters of the first 3GPP connection may include uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, and downlink DL frequency (or frequency point) information corresponding to the first 3GPP connection.

[0211] For example, the first wireless parameters of the first 3GPP connection may include only the cell identifier corresponding to the first 3GPP connection (for example, it may be expressed as a PCI). The second wireless parameters of the first 3GPP connection may include: the cell identifier corresponding to the first 3GPP connection (for example, it may be expressed as a PCI), the uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, the downlink DL frequency (or frequency point) information corresponding to the first 3GPP connection, the TAC corresponding to the first 3GPP connection, and the radio bearer identifier corresponding to the first 3GPP connection.

[0212] For example, the first wireless parameters of the first 3GPP connection include: a cell identifier corresponding to the first 3GPP connection (such as a PCI), uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, downlink DL frequency (or frequency point) information corresponding to the first 3GPP connection, and a TAC corresponding to the first 3GPP connection. The second wireless parameters of the first 3GPP connection may include downlink DL frequency (or frequency point) information corresponding to the first 3GPP connection, a TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0213] The above is only an exemplary explanation. As long as the first wireless parameters of the first 3GPP connection and the second wireless parameters of the first 3GPP connection have some identical parameters and some different parameters, and the parameters contained in the first wireless parameters of the first 3GPP connection and the second wireless parameters of the first 3GPP connection are the cell identifier corresponding to the first 3GPP connection, the uplink UL frequency information corresponding to the first 3GPP connection, the downlink DL frequency information corresponding to the first 3GPP connection, the tracking area code TAC corresponding to the first 3GPP connection, the radio bearer identifier corresponding to the first 3GPP connection, and at least one of more possible parameters, it is within the protection scope of this embodiment and is not limited or exhaustive here.

[0214] In one case, the first radio parameter of the first 3GPP connection is completely different from the second radio parameter of the first 3GPP connection.

[0215] For example, the first radio parameter of the first 3GPP connection includes at least one of the following: a cell identifier (e.g., PCI) corresponding to the first 3GPP connection, and DL frequency (or frequency point) information corresponding to the first 3GPP connection. The second radio parameter of the first 3GPP connection may include at least one of the following: uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, a TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0216] For example, the first wireless parameter of the first 3GPP connection may include only the cell identifier (for example, PCI) corresponding to the first 3GPP connection. The second wireless parameter of the first 3GPP connection may include at least one of the following: uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, downlink DL frequency (or frequency point) information corresponding to the first 3GPP connection, TAC corresponding to the first 3GPP connection, and radio bearer identifier corresponding to the first 3GPP connection.

[0217] For example, the first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier (e.g., PCI) corresponding to the first 3GPP connection, uplink UL frequency (or frequency point) information corresponding to the first 3GPP connection, and downlink DL frequency (or frequency point) information corresponding to the first 3GPP connection. The second wireless parameter of the first 3GPP connection may include at least one of the following: a TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0218] It should be understood that the above is only an exemplary description of the first wireless parameters of the first 3GPP connection and the second wireless parameters of the first 3GPP connection. In actual processing, it may include but is not limited to the parameter types in the above examples, nor is it limited to the several possible combinations provided in the above examples. This is just that this embodiment does not make exhaustive and limiting statements.

[0219] After receiving the key generation parameters associated with the first 3GPP connection, the first access network device may derive the AS key associated with the first 3GPP connection. The following describes the process of deriving the AS key associated with the first 3GPP connection on the first access network device side:

[0220] The key generation parameters associated with the first 3GPP connection include: an NCC associated with the first 3GPP connection and an intermediate key associated with the first 3GPP connection.

[0221] On the first access network device side, the AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second radio parameter of the first 3GPP connection, wherein the second radio parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different. The AS key associated with the first 3GPP connection is based on the access network key K associated with the first 3GPP connection. NG-RAN and the second radio parameter of the first 3GPP connection, the K associated with the first 3GPP connection NG-RAN The wireless key is derived based on an intermediate key associated with the first 3GPP connection and a first radio parameter of the first 3GPP connection.

[0222] Specifically, the process of deriving the AS key associated with the first 3GPP connection by the first access network device may include: the first access network device calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection. NG-RAN The first access network device calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection and the second radio parameter of the first 3GPP connection.

[0223] Here, the first access network device calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection. NG-RAN , and the aforementioned terminal calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection NG-RAN The specific processing is the same and will not be repeated. The description of the AS key associated with the first 3GPP connection, as well as the calculation of the AS key associated with the first 3GPP connection by the first access network device based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, and the calculation of the AS key associated with the first 3GPP connection by the terminal based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection are also the same and will not be repeated.

[0224] It should be pointed out that after the first access network device calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, the first access network device side will associate, maintain or save the key generation parameters associated with the first 3GPP connection and the AS key associated with the first 3GPP connection.

[0225] Combined with FIG13, K associated with different 3GPP connections in multiple 3GPP connections of the terminal AMF The same, the NCC associated with different 3GPP connections in the multiple 3GPP connections of the terminal is the same, and the intermediate keys associated with different 3GPP connections are the same. An exemplary description of the key derivation method in this scenario is given:

[0226] Assume that the terminal has currently established a 3GPP connection 1, and the K associated with the 3GPP connection 1 is maintained on the terminal side (specifically including ME and USIM as shown in FIG13 ) and the core network side device (shown as the network side in FIG13 ). AMF (All 3GPP connections of the terminal are associated with the same K AMF ), NCC1 associated with 3GPP connection 1, and the intermediate key associated with 3GPP connection 1. The intermediate key associated with 3GPP connection 1 may be NH1 as shown in FIG13 . Furthermore, the terminal and the gNB corresponding to 3GPP connection 1 (the gNB corresponding to 3GPP connection 1 is represented as gNB1 in FIG13 ) maintain the AS key associated with 3GPP connection 1. In the process of deriving the AS key associated with 3GPP connection 1, the terminal may first derive the K shown in FIG13 based on NH1. gNB1 (or K associated with 3GPP connection 1 NG-RAN ), and then based on K gNB1, the second radio parameter of the 3GPP connection 1 derives the AS key associated with the 3GPP connection 1, and the AS key associated with the 3GPP connection 1 is shown in FIG13 as: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 It should be understood that, in actual processing, the AS key associated with the 3GPP connection 1 may include at least one of the following four keys illustrated in FIG13 : K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 .

[0227] Then the terminal initiates the first process through 3GPP connection 2 (i.e., the first 3GPP connection in the aforementioned embodiment). During the execution of the first process, the core network side device allocates NCC1 associated with 3GPP connection 1 to 3GPP connection 2, and allocates NH1 associated with 3GPP connection 1 to 3GPP connection 2. The core network side device (such as AMF) sends NCC1 associated with 3GPP connection 2 to the terminal, and sends NCC1 and NH1 to the gNB corresponding to 3GPP connection 2 (the gNB corresponding to 3GPP connection 2 is represented as gNB2 in Figure 13).

[0228] The terminal obtains NH1 based on NCC1 associated with 3GPP connection 2. The terminal and the gNB corresponding to 3GPP connection 2 (the gNB corresponding to 3GPP connection 2 is represented as gNB2 in Figure 13) derive the AS key associated with 3GPP connection 2 based on NH1 and the second radio parameters of 3GPP connection 2. In the process of deriving the AS key associated with 3GPP connection 2 by terminal 2 and gNB2, the K shown in Figure 13 can be first derived based on NH1 and the first radio parameters of 3GPP connection 2. gNB2 (or K associated with 3GPP connection 2 NG-RAN ), and then based on K gNB2 , the second radio parameter of the 3GPP connection 2 derives the AS key associated with the 3GPP connection 2, and the AS key associated with the 3GPP connection 2 is shown in FIG13 as: K RRCint-2 , K RRCenc-2 , K UPint-2 , K UPenc-2 It should be understood that, in actual processing, the AS key associated with the 3GPP connection 2 may include at least one of the following four keys illustrated in FIG13: K RRCint-2 , K RRCenc-2 , K UPint-2 , K UPenc- 2.

[0229] Regarding the example in Figure 13 above, it should be noted that for clarity, gNB1 corresponding to 3GPP connection 1 and gNB2 corresponding to 3GPP connection 2 are shown separately in Figure 13. In actual scenarios, gNB1 and gNB2 can be the same device or different devices, which are all within the scope of protection of this embodiment and are not further described here. In addition, Figure 13 also illustrates the relevant keys derived from network elements such as ARPF, AUSF, SEAF, and N3IWF. The relevant descriptions of these keys have been detailed in the previous text and are therefore not repeated here.

[0230] In some possible implementations, the first key (K AMF )different.

[0231] In this embodiment, the first key K associated with different 3GPP connections of the terminal AMF For different first keys K AMF That is, multiple sets of first keys K need to be maintained on the terminal side and the core network device side. AMF , and different first keys K AMF Associate different 3GPP connections of the terminal.

[0232] On the core network side device side, the intermediate key associated with the first 3GPP connection is the first key K associated with the first 3GPP connection AMF The intermediate key associated with the first 3GPP connection includes one of the following: the initial key K associated with the first 3GPP connection gNB , the NH associated with the first 3GPP connection.

[0233] The core network side device may determine the NCC associated with the first 3GPP connection, and the NCC associated with the first 3GPP connection may be used to represent the initial key K associated with the first 3GPP connection. gNB The number of times the intermediate key associated with the first 3GPP connection is derived.

[0234] In one case, the NCC associated with the first 3GPP connection may be an initial value (such as 0), and the intermediate key associated with the first 3GPP connection may be the initial key K associated with the first 3GPP connection. gNB Due to the different 3GPP connection associated with the terminal K AMF Different, so according to different K AMF The derived K associated with different 3GPP connections of the terminal gNB Also different.

[0235] In one case, the NCC associated with the first 3GPP connection may be a non-initial value (such as not 0), and the intermediate key associated with the first 3GPP connection is the NH associated with the first 3GPP connection. AMF Different, so according to different K AMF The derived NHs (ie, intermediate keys) associated with different 3GPP connections of the terminal are also different.

[0236] The core network side device may use a key generation algorithm to generate the K associated with the first 3GPP connection of the terminal. AMF Perform a calculation to obtain the intermediate key associated with the first 3GPP connection; here, the number of derivation calculations or inference calculations performed by the core network side device to obtain the intermediate key associated with the first 3GPP connection is equal to the difference between the NCC associated with the first 3GPP connection and the NCC of the previous intermediate key associated with the first 3GPP connection.

[0237] For example, assuming that the core network side device maintains the initial key K associated with the first 3GPP connection of the terminal gNB Assuming that the NCC associated with the first 3GPP connection is not 0, the core network side device may derive the NH associated with the first 3GPP connection based on the K associated with the first 3GPP connection of the terminal. AMF , the initial key K associated with the first 3GPP connection gNB Deriving the NH associated with the first 3GPP connection, wherein the number of times the core network side device derives the NH associated with the first 3GPP connection can be one or more times, and the calculation formula used by the core network side device in any one of the derivation calculations in the process of calculating the NH associated with the first 3GPP connection can be KDF (Key, S), wherein KDF () is a KDF calculation function, and Key is the K associated with the first 3GPP connection of the terminal. AMF , S includes the last derived key (for example, it may include the K associated with the first 3GPP connection gNB or last exported NH).

[0238] The processing of each 3GPP connection of the terminal by the core network side device is similar to the first 3GPP connection mentioned above, except that the K AMF Therefore, the processing of each 3GPP connection will not be described here one by one.

[0239] After obtaining the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection, the core network-side device may perform the following processing: sending the NCC associated with the first 3GPP connection to the terminal; and sending key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection. In this embodiment, the key generation parameters associated with the first 3GPP connection include: the NCC associated with the first 3GPP connection; and the key generation parameters associated with the first 3GPP connection also include: the intermediate key associated with the first 3GPP connection.

[0240] It should be noted that after the core network side device obtains the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection, the core network side device will associate, maintain or save the K associated with the first 3GPP connection. AMF , NCC associated with the first 3GPP connection, and intermediate keys associated with the first 3GPP connection.

[0241] On the terminal side, after receiving the NCC associated with the first 3GPP connection, a process of deriving the AS key associated with the first 3GPP connection may be performed. The following describes the process of deriving the AS key associated with the first 3GPP connection on the terminal side:

[0242] The security parameters associated with the first 3GPP connection may include the NCC associated with the first 3GPP connection, that is, the terminal may first use the NCC associated with the first 3GPP connection as one of the security parameters associated with the first 3GPP connection. Further, the security parameters associated with the first 3GPP connection may also include at least one of the following: AMF , an intermediate key associated with the first 3GPP connection.

[0243] On the terminal side, the AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, and the intermediate key associated with the first 3GPP connection is derived based on the NCC associated with the first 3GPP connection, the K associated with the first 3GPP connection, and the NCC associated with the first 3GPP connection. AMF The intermediate key associated with the first 3GPP connection includes one of the following: the initial key K associated with the first 3GPP connection gNB , the NH associated with the first 3GPP connection.

[0244] Specifically, the process of deriving the AS key associated with the first 3GPP connection on the terminal side may include: the terminal deriving the AS key associated with the first 3GPP connection based on the AS key associated with the first 3GPP connection AMF, the NCC associated with the first 3GPP connection calculates the intermediate key associated with the first 3GPP connection; the terminal calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection NG-RAN ; The terminal calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection.

[0245] In one case, the NCC associated with the first 3GPP connection may be equal to the initial value, that is, 0, and the terminal may associate the initial key K with the first 3GPP connection. gNB As the intermediate key associated with the first 3GPP connection.

[0246] In one case, the NCC associated with the first 3GPP connection may not be equal to 0. The terminal AMF , the NCC associated with the first 3GPP connection calculates the intermediate key associated with the first 3GPP connection, which may include: determining the number of derived calculations (or inferred calculations) based on the NCC associated with the first 3GPP connection, using a key generation algorithm based on the K associated with the first 3GPP connection AMF , deriving the number of calculations, and deriving the NH associated with the first 3GPP connection. The key generation algorithm is the same as that in the previous embodiment and will not be repeated.

[0247] The number of derived calculations may be equal to the NCC associated with the first 3GPP connection. Alternatively, when the first 3GPP connection has been assigned one or more NCCs, the number of derived calculations may be equal to the difference between the NCC last associated with the first 3GPP connection and the current NCC. The calculation formula used by the terminal for any derived calculation in the process of deriving the NH associated with the first 3GPP connection may be KDF(Key, S), where KDF() is a KDF calculation function, and Key is the same KCC associated with multiple 3GPP connections of the terminal. AMF , S includes the last derived key (for example, it may include the initial key K associated with the first 3GPP connection gNB or last exported NH).

[0248] The terminal calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection. NG-RAN , which may include: the terminal performing horizontal derivation based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection to obtain the access network key K associated with the first 3GPP connection NG-RANIn some possible examples, the access network key K associated with the first 3GPP connection NG-RAN It can also be expressed alternatively as K NG-RAN *, or the access network key associated with the first 3GPP connection can also be expressed as a non-initial key K gNB The description of the first wireless parameter of the first 3GPP connection is the same as that in the above embodiment and will not be repeated here.

[0249] The process of the terminal calculating the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection is the same as that in the above embodiment and will not be repeated.

[0250] It should be noted that after the terminal calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, the terminal will associate, maintain or save the security parameters associated with the first 3GPP connection and the AS key associated with the first 3GPP connection.

[0251] After receiving the key generation parameters associated with the first 3GPP connection, the first access network device may derive the AS key associated with the first 3GPP connection. The following describes the process of deriving the AS key associated with the first 3GPP connection on the first access network device side:

[0252] The key generation parameters associated with the first 3GPP connection include: an NCC associated with the first 3GPP connection and an intermediate key associated with the first 3GPP connection.

[0253] On the first access network device side, the AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection.

[0254] Specifically, the process of deriving the AS key associated with the first 3GPP connection by the first access network device may include: the first access network device calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection. NG-RAN ; The first access network device calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection.

[0255] Here, the first access network device calculates the access network key K associated with the first 3GPP connection based on the intermediate key associated with the first 3GPP connection and the first radio parameter of the first 3GPP connection. NG-RAN Specific instructions, and the aforementioned terminal based on the intermediate key associated with the first 3GPP connection, the first wireless parameter of the first 3GPP connection, calculate the access network key K associated with the first 3GPP connection NG-RANThe specific processing is the same and will not be repeated. The description of the AS key associated with the first 3GPP connection, and the processing of the first access network device calculating the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, are the same as the processing of the terminal calculating the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, and will not be repeated.

[0256] It should be pointed out that after the first access network device calculates the AS key associated with the first 3GPP connection based on the access network key associated with the first 3GPP connection, the first access network device side will associate, maintain or save the key generation parameters associated with the first 3GPP connection and the AS key associated with the first 3GPP connection.

[0257] 14 for the terminal's multiple 3GPP connections associated with different 3GPP connections K AMF The following is an example of the key derivation method in different scenarios:

[0258] Assume that the terminal has currently established a 3GPP connection 1, and the K associated with the 3GPP connection 1 is maintained on the terminal side (specifically including ME and USIM as shown in FIG14 ) and the core network side device (shown as the network side in FIG14 ). AMF (K shown in Figure 14 AMF -1), NCC1 associated with 3GPP connection 1, intermediate key associated with 3GPP connection 1, the intermediate key associated with 3GPP connection 1 can be the initial key K shown in FIG14 gNB 1 or NH1. Furthermore, the terminal and the gNB corresponding to 3GPP connection 1 (the gNB corresponding to 3GPP connection 1 is represented as gNB1 in Figure 14) maintain the AS key associated with 3GPP connection 1, which is shown in Figure 14 as: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 It should be understood that, in actual processing, the AS key associated with the 3GPP connection 1 may include at least one of the following four keys illustrated in FIG14: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 .

[0259] Then the terminal initiates the first process through 3GPP connection 2 (ie, the first 3GPP connection in the above embodiment). When executing the first process, the core network side device uses the K associated with 3GPP connection 2 to initiate the first process. AMF -2 derive the initial key K associated with 3GPP connection 2 gNB2 or NH2, the core network side device (such as AMF) sends NCC2 associated with 3GPP connection 2 to the terminal, and sends NCC2 associated with 3GPP connection 2 and the initial key K associated with 3GPP connection 2 to the gNB corresponding to 3GPP connection 2 (the gNB corresponding to 3GPP connection 2 is represented as gNB2 in Figure 14). gNB -2 or NH2.

[0260] The terminal is based on NCC2 of 3GPP connection 2 and K associated with 3GPP connection 2 AMF (K shown in Figure 14 AMF -2), derive the intermediate key associated with 3GPP connection 2 (ie, the initial key K shown in FIG14 gNB 2 or NH2). The terminal and gNB2 derive the AS key associated with 3GPP connection 2, which is shown in Figure 14 as: K RRCint-2 , K RRCenc-2 , K UPint- 2. K UPenc-2 It should be understood that, in actual processing, the AS key associated with the 3GPP connection 2 may include at least one of the following four keys illustrated in FIG14: K RRCint-2 , K RRCenc-2 , K UPint-2 , K UPenc-2 .

[0261] Regarding the example in Figure 14 above, it should be noted that for clarity, gNB1 corresponding to 3GPP connection 1 and gNB2 corresponding to 3GPP connection 2 are illustrated separately in Figure 14. In actual scenarios, gNB1 and gNB2 can be the same device or different devices, which are all within the scope of protection of this embodiment and are not further described here. In addition, Figure 14 also illustrates the relevant keys derived from network elements such as ARPF, AUSF, SEAF, and N3IWF. The relevant descriptions of these keys have been detailed in the previous text and are therefore not repeated here.

[0262] In some possible implementations, before the terminal receives the NCC associated with the first 3GPP connection, the method may include: the terminal initiating a first process through the first 3GPP connection corresponding to the first access network device.

[0263] The first process may be any NAS (Non-Access Stratum) related process. Exemplarily, the first process may allocate or update at least one of the NCC associated with the first 3GPP connection and the intermediate key associated with the first 3GPP connection during execution. For example, the first process may be any one of the following types: a registration process, a registration update process, a location update process, a switching process, and the like. The switching process may include at least one of the following: N2 based handover (handover based on the N2 interface), Xn based handover (handover based on the Xn interface), and the like. It should be understood that this is only an exemplary description of the types that may be included in the first process. In actual processing, it may include but is not limited to the several possible processes exemplified above, but this example is not exhaustive or limiting.

[0264] The terminal initiating the first process through the first 3GPP connection corresponding to the first access network device may refer to: the terminal sending a first message through the first 3GPP connection corresponding to the first access network device, where the first message is used to initiate the first process. The first message may be any uplink message capable of triggering or initiating the first process, for example, any uplink NAS message, which is not limited in this embodiment.

[0265] The content carried by the first message may include at least one of the following: multiple 3GPP connection related parameters, and parameters and / or information that the terminal needs to carry in the first message initiating the first process as specified by relevant protocols.

[0266] The first message is related to the specific type of the first process; the first message may at least include: parameters and / or information that the terminal is required to carry in the first message initiating the first process as specified by the relevant protocol. For example, if the first process is a registration process, the first message may be a registration request message, and the content included in the registration request message may be the parameters and / or information that the registration request message is required to carry as specified by the relevant protocol. For another example, if the first process is a handover process, the first message may be a handover request message, and the content included in the handover request message may be the parameters and / or information that the handover request message is required to carry as specified by the relevant protocol, and so on. This does not limit or exhaustively enumerate all possible message types.

[0267] The multiple 3GPP connection-related parameters may enable the core network-side device to determine at least one of the following: the terminal supports establishing multiple 3GPP connections, and one or more other 3GPP connections that the terminal has established and currently maintains. The multiple 3GPP connection-related parameters may include an identifier or associated parameters of each of the one or more other 3GPP connections that the terminal has established and currently maintains, etc. This embodiment does not exhaustively enumerate or limit the specific content of the multiple 3GPP connection-related parameters.

[0268] It should be pointed out that the parameters related to multiple 3GPP connections are optional. If the first message does not carry the relevant parameters of the first 3GPP connection, after receiving the first message, the core network side device can still determine whether NCC and / or intermediate keys have been allocated for other 3GPP connections of the terminal based on the identifier carried in the first message specified by the existing protocol of the terminal (such as SUPI and / or GUTI (Globally Unique Temporary UE Identity)).

[0269] The processing of the core network side device after receiving the first message sent by the terminal through the first 3GPP connection corresponding to the first access network device may include: when the core network side device executes the first process, the core network side device sends the NCC associated with the first 3GPP connection to the terminal, and the core network side device sends the key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection.

[0270] Accordingly, the terminal receives the NCC associated with the first 3GPP connection, including: during the execution of the first process, the terminal receives the NCC associated with the first 3GPP connection sent by the core network side device. The processing of the first access network device receiving the key generation parameters associated with the first 3GPP connection of the terminal can be: the first access network device receives the key generation parameters associated with the first 3GPP connection of the terminal sent by the core network side device.

[0271] The transmission of the NCC associated with the first 3GPP connection occurs in the first process. That is, the NCC associated with the first 3GPP connection may be carried in any one or more messages or signalings sent by the core network side device to the terminal during the first process.

[0272] The transmission of the key generation parameters associated with the first 3GPP connection also occurs in the first process. That is, the key generation parameters associated with the first 3GPP connection can be carried in any one or more messages or signaling sent by the core network side device to the first access network device during the execution of the first process.

[0273] Optionally, when the core network side device sends the NCC associated with the first 3GPP connection to the terminal, it may also send relevant parameters of the first 3GPP connection to the terminal. The relevant parameters of the first 3GPP connection may include an identifier or associated parameters of the first 3GPP connection, etc.

[0274] It should also be pointed out that the aforementioned embodiment has described that the first 3GPP connection is any 3GPP connection among the multiple 3GPP connections of the terminal that is not established for the first time and / or any 3GPP connection among the multiple 3GPP connections of the terminal that is not derived for the first time from the AS key. Therefore, before the first 3GPP connection, the terminal may have performed one or more processes similar to the first process to establish one or more other 3GPP connections and derive the AS key associated with each other 3GPP connection.

[0275] Taking the other 3GPP connection established for the first time or for the first time by the terminal as the second 3GPP connection as an example, the terminal will also perform the following processing: the terminal initiates a second process through the second 3GPP connection corresponding to the second access network device; receives the NCC associated with the second 3GPP connection sent by the core network side device; derives the AS key associated with the second 3GPP connection, wherein the AS key associated with the second 3GPP connection is derived based on the security parameters associated with the second 3GPP connection, and the security parameters associated with the second 3GPP connection include at least the NCC associated with the second 3GPP connection.

[0276] The types that may be included in the second process are also similar to those of the first process, for example, any one of the following types: registration process, registration update process, location update process, handover process, etc. It should be understood that the second process may be the same as or different from the first process, for example, the second process may be a registration process (corresponding to the registration process of the second 3GPP connection) and the first process may be a registration process (corresponding to the registration process of the first 3GPP connection); for example, the second process may be a registration process (corresponding to the second 3GPP connection) and the first process may be a handover process, etc. All possible situations of the second process and the first process are not exhaustively listed here.

[0277] The terminal initiating the second process through the second 3GPP connection corresponding to the second access network device may refer to: the terminal sending a second message through the second 3GPP connection corresponding to the second access network device, and the second message is used to initiate the second process. The second message can be any uplink message that can trigger or initiate the second process. For example, the second message can be any uplink NAS message, which is not limited in this embodiment. Optionally, the content that the second message may carry is different from the aforementioned embodiment in that the second message may also carry a first indication to enable the core network side device to determine that the terminal supports or requests to establish multiple 3GPP connections.

[0278] The security parameters associated with the second 3GPP connection may include content that corresponds to the security parameters associated with each 3GPP connection in different scenarios in the aforementioned embodiments, and are not repeated here. The manner in which the terminal derives the AS key associated with the second 3GPP connection is similar to the manner in which the AS key for the initial association is derived in the aforementioned embodiments, and is not further described.

[0279] The processing of the core network side device after receiving the second message sent by the terminal through the second 3GPP connection corresponding to the second access network device may include: when the core network side device executes the second process, the core network side device sends the NCC associated with the second 3GPP connection to the terminal, and the core network side device sends the key generation parameters associated with the second 3GPP connection to the second access network device corresponding to the second 3GPP connection.

[0280] Optionally, the core network side device may also send relevant parameters of the second 3GPP connection to the terminal while sending the NCC associated with the second 3GPP connection to the terminal. The relevant parameters of the second 3GPP connection may include an identifier or associated parameters of the second 3GPP connection, etc.

[0281] Correspondingly, the processing of the second access network device may be: the second access network device receives the key generation parameters associated with the second 3GPP connection of the terminal sent by the core network side device, and the second access network device derives the AS key associated with the second 3GPP connection.

[0282] The second access network device may be the same as or different from the first access network device in the aforementioned embodiment.

[0283] The key generation parameters associated with the second 3GPP connection may include at least one of the NCC associated with the second 3GPP connection and the intermediate key associated with the second 3GPP connection. The manner in which the second access network device derives the AS key associated with the second 3GPP connection is similar to the manner in which the AS key is first derived in the aforementioned embodiment, and is not repeated here.

[0284] In some possible implementations, the terminal may only establish one NAS connection (for example, the second 3GPP connection in the aforementioned embodiment), that is, the terminal may only perform a registration process once to establish a NAS connection; accordingly, the terminal may only obtain one NCC during the registration process (that is, the terminal maintains a set of security contexts).

[0285] Furthermore, the terminal may establish multiple user plane connections, wherein different user plane connections in the multiple user plane connections may correspond to different access network devices. Since different access network devices corresponding to different user plane connections of the terminal need to use different AS keys, and the terminal may only obtain one NCC, in this case, the terminal can generate multiple AS keys based on the same NCC (i.e., the same set of security contexts), and different AS keys in the multiple AS keys correspond to different access network devices. The processing of multiple AS keys generated by the terminal based on the same NCC includes: the terminal generates multiple AS keys based on the NCC and K AMF , generate the intermediate key (which can be the initial key K gNB or NH); based on the intermediate key, the wireless parameters of each access network device (which may include the first wireless parameters and / or the second wireless parameters), calculate the AS key corresponding to each access network device, and different AS keys correspond to different access network devices.

[0286] For example, after a terminal (such as UE) establishes a NAS connection and obtains an NCC, it establishes a user plane connection through two base stations (i.e., two access network devices). In this scenario, the UE uses the same NCC, i.e., the same set of security contexts to generate two sets of AS keys. The two sets of AS keys correspond to the two base stations, for example, AS key-1 (which can include at least one of the following four keys: K RRCint-1 , K RRCenc-1 , K UPint-1 , K UPenc-1 ) corresponds to base station 1, AS key-2 (which may include at least one of the following four keys: K RRCint-2 , K RRCenc-2 , K UPint-2 , K UPenc-2 ) corresponds to base station 2.

[0287] Finally, with reference to FIG15 , taking the case where the terminal is a UE, the core network side device includes an AMF / SEAF, and the first access network device corresponding to the first 3GPP connection is a base station 2, the processing flow of the key derivation method provided in this embodiment is exemplarily described:

[0288] S1511. The UE first initiates process 1 (such as the second process in the aforementioned embodiment) through connection 1 of base station 1 (such as the 3GPP connection established by the terminal for the first time in the aforementioned embodiment). Assuming that process 1 is the first or first registration process, the uplink NAS message 1 (such as the registration request message) of process 1 may carry a first indication (optional), which is used to inform the AMF / SEAF that the UE requests multiple 3GPP connections; accordingly, the AMF (or AMF / SEAF) may carry relevant parameters of connection 1 in the registration reply message. The relevant parameters of connection 1 may include association parameters of connection 1 or an identifier (number) of the connection, which is used to indicate that the multiple 3GPP connections established by the UE belong to the same UE, or the number of one of the 3GPP connections of the UE.

[0289] S1512. In the execution process 1, AMF (or AMF / SEAF) sends the intermediate key associated with connection 1 (such as the initial key K gNB or NH1), and NCC1 associated with 3GPP connection 1, the process is consistent with the existing mechanism description mechanism; and AMF (or AMF / SEAF) sends NCC1 associated with connection 1 to the UE.

[0290] After this step is completed, base station 1 generates the key parameters (intermediate key associated with connection 1 (such as initial key K)) sent by AMF (or AMF / SEAF) gNB or NH1), and 3GPP connection 1 associated NCC1) derive the AS key associated with connection 1, and since the UE has the root key, it only needs the NCC1 associated with connection 1 to derive the AS key associated with connection 1.

[0291] It should be noted that base station 1 is the base station corresponding to connection 1, and the following steps will involve base station 2 corresponding to connection 2. Base station 1 and base station 2 are both devices on the access network (AN) side, and base station 1 and base station 2 can be the same or different.

[0292] S1521. The UE first initiates process 2 (i.e., the first process in the aforementioned embodiment) through connection 2 of base station 2 (i.e., the first 3GPP connection in the aforementioned embodiment). The uplink NAS message 2 of process 2 may carry a first indication (optional). The first indication is used to inform the AMF (or AMF / SEAF) that the UE requests multiple 3GPP connections. The uplink NAS message 2 may also carry relevant parameters of connection 1 (optional).

[0293] S1522. When executing process 2, the AMF (or AMF / SEAF) can determine that the UE has been allocated the intermediate key associated with connection 1 and NCC1 based on the parameters reported by the UE, and therefore sends the intermediate key associated with connection 2 (such as K gNB 2 or NH2) and NCC2; and sends NCC2 associated with connection 2 to the UE.

[0294] Here K gNB 2 or NH2 can be compared with the parameters in process 1 (ie, the first registration process) of S1512 (such as the initial key K gNB or NH1) may be the same or different. The detailed values ​​have been detailed in the aforementioned possible embodiments and are not repeated here. For NCC2, the AMF (or AMF / SEAF) may send NCC2, which may be the same or different from NCC1 in process 1 (i.e., the first registration process) of S1512. The detailed values ​​have been detailed in the aforementioned possible embodiments and are not repeated here.

[0295] After S1522 is completed, base station 2 generates the key parameters (i.e., the intermediate key associated with connection 2 (such as K)) obtained from AMF (or AMF / SEAF). gNB 2 or NH2) and NCC2) derive the AS key associated with connection 2, and since the UE has the root key, it only needs the NCC2 associated with connection 2 to derive the AS key associated with connection 2.

[0296] It should be noted that base station 1 and base station 2 can be the same base station or different base stations. Moreover, both connection 1 and connection 2 are 3GPP connections of the terminal.

[0297] Process 1 and process 2 include, but are not limited to, existing NAS-related processes, such as a registration process and a location update process, and may also refer to a handover process (including an N2-based handover or an Xn-based handover). The transmission of relevant key information may be part of process 1 and process 2, or may occur during process 1 and process 2.

[0298] In process 1 and process 2, in addition to sending key-related parameters to the UE and the base station corresponding to each connection (for example, sending the NCC associated with each connection to the UE, and sending the NCC and / or intermediate keys associated with each connection to the base station corresponding to each connection), it is also necessary to perform algorithm activation at the NAS layer and AS layer, generally using a security mode command message.

[0299] In process 1 and process 2, the first indication and connection-related parameters carried in the uplink NAS message are optional. Even without these parameters, the AMF / SEAF may theoretically be able to find out whether key-related parameters have been allocated to the UE through the UE's existing identifier (such as SUPI, GUTI). However, the benefit of introducing these parameters is that it can reduce the maintenance burden on the network side and help backward compatibility, letting the network side know whether the UE supports establishing multiple 3GPP connections.

[0300] It should be understood that the example in Figure 15 above is only an illustrative explanation using two 3GPP connections (connection 1 and connection 2) as an example. In actual processing, the above-mentioned S1521 and S1522 processes can also be performed on each 3GPP connection that is not established for the first time. Ultimately, the UE and the base station corresponding to each 3GPP connection can derive the AS key associated with each 3GPP connection, and the AS keys associated with different 3GPP connections are different. That is, the UE and the base station corresponding to each 3GPP connection can derive and use keys based on the NCC (or NCC value) corresponding to each 3GPP connection. At the same time, the UE, the base station corresponding to each 3GPP connection, and the AMF can store or maintain the NCC in association with the associated parameters and / or 3GPP connection identifier, so that the NCC value corresponding to each 3GPP connection can be known.

[0301] It can be seen that by adopting the above solution, the AS key associated with each 3GPP connection of the terminal can be derived in the scenario where the terminal maintains multiple 3GPP connections at the same time, and the AS keys associated with different 3GPP connections are different. In this way, for the scenario where the UE accesses the 5G core network through two 3GPPs at the same time, the AS key is derived for each 3GPP connection, which solves the problem that the related technology only supports the generation and simultaneous use of one set of 3GPP access keys and one set of non-3GPP access keys, but does not support the derivation of access layer keys for each 3GPP connection in multiple 3GPP connections, thereby ensuring the security of each 3GPP connection.

[0302] FIG16 is a schematic diagram of the structure of a terminal according to an embodiment of the present application, including:

[0303] A first communication unit 1601 is configured to receive a next hop chaining counter NCC associated with a first Third Generation Partnership Project 3GPP connection, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal;

[0304] The first processing unit 1602 is used to derive the access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on the security parameters associated with the first 3GPP connection, the security parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0305] The security parameters associated with the first 3GPP connection further include at least one of the following: a first key associated with the first 3GPP connection, and an intermediate key associated with the first 3GPP connection.

[0306] The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

[0307] Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

[0308] The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is derived based on the same first key associated with multiple 3GPP connections of the terminal, the NCC associated with the first 3GPP connection, and the first intermediate key, and the first intermediate key is the intermediate key generated by the terminal last time.

[0309] The intermediate key associated with the first 3GPP connection includes a next hop key NH associated with the first 3GPP connection; the first intermediate key includes one of the following: an initial key, a first NH.

[0310] Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are different.

[0311] The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, the intermediate key associated with the first 3GPP connection is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

[0312] The intermediate key associated with the first 3GPP connection includes an access network key associated with the first 3GPP connection; the second intermediate key includes one of the following: an initial key, a second NH, and a second access network key.

[0313] Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are the same.

[0314] The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is obtained based on the NCC associated with the first 3GPP connection, and the second wireless parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different.

[0315] The AS key associated with the first 3GPP connection is derived based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, and the access network key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection.

[0316] The first radio parameter of the first 3GPP connection is the same as the second radio parameter of the first 3GPP connection; or the first radio parameter of the first 3GPP connection is at least partially different from the second radio parameter of the first 3GPP connection.

[0317] The first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0318] The second wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0319] The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, and a NH associated with the first 3GPP connection.

[0320] The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

[0321] The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, and the intermediate key associated with the first 3GPP connection is derived based on the NCC associated with the first 3GPP connection and the first key associated with the first 3GPP connection.

[0322] The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a NH associated with the first 3GPP connection.

[0323] The first key is K AMF ; The initial key is K gNB ; The access network key is K NG-RAN .

[0324] FIG17 is a schematic diagram of the structure of a core network side device according to an embodiment of the present application, including:

[0325] The second communication unit 1701 is used to send a next hop chain counter NCC associated with a first Third Generation Partnership Project 3GPP connection to the terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal, and the NCC associated with the first 3GPP connection is used by the terminal to derive an access layer AS key associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different; and send a key generation parameter associated with the first 3GPP connection to a first access network device corresponding to the first 3GPP connection, wherein the key generation parameter associated with the first 3GPP connection is used by the first access network device to derive an access layer AS key associated with the first 3GPP connection.

[0326] The key generation parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection.

[0327] The key generation parameters associated with the first 3GPP connection include an intermediate key associated with the first 3GPP connection.

[0328] The intermediate key associated with the first 3GPP connection is derived based on the first key associated with the first 3GPP connection.

[0329] The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

[0330] Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

[0331] The intermediate key associated with the first 3GPP connection is derived based on the same first key and the first intermediate key associated with multiple 3GPP connections of the terminal, wherein the first intermediate key is the intermediate key corresponding to the terminal generated last time.

[0332] The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

[0333] Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are the same.

[0334] The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, a next hop key NH associated with the first 3GPP connection.

[0335] The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

[0336] The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a NH associated with the first 3GPP connection.

[0337] The first key is K AMF ; The initial key is K gNB .

[0338] FIG18 is a schematic diagram of the composition structure of a first access network device according to an embodiment of the present application, including:

[0339] The third communication unit 1801 is configured to receive a key generation parameter associated with a first Third Generation Partnership Project 3GPP connection of a terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal;

[0340] The third processing unit 1802 is used to prepare for deriving the access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on the key generation parameter associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections in the multiple 3GPP connections of the terminal are different.

[0341] The key generation parameters associated with the first 3GPP connection include a next hop chaining counter NCC associated with the first 3GPP connection.

[0342] The key generation parameters associated with the first 3GPP connection further include: an intermediate key associated with the first 3GPP connection.

[0343] Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

[0344] Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are different.

[0345] The AS key associated with the first 3GPP connection is generated based on the intermediate key associated with the first 3GPP connection, the intermediate key associated with the first 3GPP connection is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

[0346] The third communication unit is configured to obtain the second intermediate key.

[0347] The intermediate key associated with the first 3GPP connection includes an access network key associated with the first 3GPP connection; the second intermediate key includes one of the following: an initial key, a second NH, and a second access network key.

[0348] Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are the same.

[0349] The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second radio parameter of the first 3GPP connection, wherein the second radio parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different.

[0350] The AS key associated with the first 3GPP connection is derived based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, and the access network key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection.

[0351] The first radio parameter of the first 3GPP connection is the same as the second radio parameter of the first 3GPP connection; or the first radio parameter of the first 3GPP connection is at least partially different from the second radio parameter of the first 3GPP connection.

[0352] The first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0353] The second wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a radio bearer identifier corresponding to the first 3GPP connection.

[0354] The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, a next hop key NH associated with the first 3GPP connection.

[0355] The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a next hop key NH associated with the first 3GPP connection.

[0356] The AS key associated with the first 3GPP connection is derived based on an intermediate key associated with the first 3GPP connection.

[0357] The initial key is K gNB ; The access network key is K NG-RAN .

[0358] The device of the embodiment of the present application can realize the corresponding functions of each device in the aforementioned authentication method embodiment. The corresponding processes, functions, implementation methods and beneficial effects of each module (sub-module, unit or component, etc.) in the terminal device, or the core network side device, or the first access network device can be found in the corresponding description in the above method embodiment, which will not be repeated here. It should be noted that the functions described in the terminal device, or the core network side device, or the various modules (sub-module, unit or component, etc.) in the first access network device of the embodiment of the application can be implemented by different modules (sub-module, unit or component, etc.) or by the same module (sub-module, unit or component, etc.).

[0359] Figure 19 is a schematic structural diagram of a communication device 1900 according to an embodiment of the present application. The communication device 1900 includes a processor 1910, which can retrieve and execute computer programs from a memory to enable the communication device 1900 to implement the methods according to the embodiments of the present application. In one possible implementation, the communication device 1900 may also include a memory 1920. The processor 1910 can retrieve and execute computer programs from the memory 1920 to enable the communication device 1900 to implement the methods according to the embodiments of the present application. The memory 1920 may be a separate device independent of the processor 1910 or integrated into the processor 1910. In one possible implementation, the communication device 1900 may also include a transceiver 1930. The processor 1910 may control the transceiver 1930 to communicate with other devices. Specifically, the transceiver 1930 may send information or data to other devices or receive information or data sent by other devices. The transceiver 1930 may include a transmitter and a receiver. The transceiver 1930 may further include one or more antennas.

[0360] In one possible implementation, the communication device 1900 may be a terminal device, or a core network side device, or a first access network device in an embodiment of the present application, and the communication device 1900 may implement the corresponding processes implemented by the terminal device, or the core network side device, or the first access network device in each method of the embodiment of the present application. For the sake of brevity, they will not be repeated here.

[0361] Figure 20 is a schematic structural diagram of a chip 2000 according to an embodiment of the present application. The chip 2000 includes a processor 2010, which can call and run a computer program from a memory to implement the method in the embodiment of the present application. In one possible implementation, the chip 2000 may also include a memory 2020. The processor 2010 can call and run a computer program from the memory 2020 to implement the method performed by the first device or the target second device in the embodiment of the present application. The memory 2020 can be a separate device independent of the processor 2010, or it can be integrated into the processor 2010. In one possible implementation, the chip 2000 may also include an input interface 2030. The processor 2010 can control the input interface 2030 to communicate with other devices or chips, specifically, to obtain information or data sent by other devices or chips. In one possible implementation, the chip 2000 may also include an output interface 2040. The processor 2010 may control the output interface 2040 to communicate with other devices or chips, and specifically, may output information or data to other devices or chips.

[0362] In one possible implementation, the chip can be applied to the terminal device, or the core network side device, or the first access network device in the embodiment of the present application, and the chip can implement the corresponding processes implemented by the terminal device, or the core network side device, or the first access network device in each method of the embodiment of the present application. For the sake of brevity, they are not described here. It should be understood that the chip mentioned in the embodiment of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc. The above-mentioned processor can be a general-purpose processor, a digital signal processor (DSP), a field programmable gate array (FPGA), an application specific integrated circuit (ASIC) or other programmable logic device, transistor logic device, discrete hardware component, etc. Among them, the above-mentioned general-purpose processor can be a microprocessor or any conventional processor, etc. The above-mentioned memory can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memory. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM) or a flash memory. The volatile memory can be a random access memory (RAM). It should be understood that the above-mentioned memory is exemplary but not restrictive. For example, the memory in the embodiment of the present application can also be a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDR SDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous 3GPP connection dynamic random access memory (SLDRAM) and a direct memory bus random access memory (DR RAM), etc. That is, the memory in the embodiments of the present application is intended to include but is not limited to these and any other suitable types of memory.

[0363] Figure 21 is a schematic block diagram of a communication system 2100 according to an embodiment of the present application. The communication system 2100 includes a terminal 2110, a core network side device 2120, and a first access network device 2130. The terminal 2110 can be used to implement the corresponding functions implemented by the terminal in the above-mentioned method. The core network side device 2120 can be used to implement the corresponding functions implemented by the core network side device in the above-mentioned method. For the sake of brevity, these functions are not described in detail here. The first access network device 2130 can be used to implement the corresponding functions implemented by the first access network device in the above-mentioned method. For the sake of brevity, these functions are not described in detail here.

[0364] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When software is used for implementation, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function in accordance with the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from a website, computer, server or data center by wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.) mode to another website, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrations. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a DVD), or a semiconductor medium (eg, a solid state disk (SSD)).

[0365] It should be understood that in the various embodiments of the present application, the size of the sequence number of each process mentioned above does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application. Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system, device and unit described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here. The above is only a specific implementation method of the present application, but the scope of protection of the present application is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or replacements within the technical scope disclosed in the present application, which should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claim.

Claims

1. A key derivation method, comprising: The terminal receives a next hop chain counter NCC associated with a first third generation partnership project 3GPP connection, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal; The terminal derives an access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on security parameters associated with the first 3GPP connection, the security parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections among multiple 3GPP connections of the terminal are different.

2. The method according to claim 1, wherein: The security parameters associated with the first 3GPP connection further include at least one of the following: a first key associated with the first 3GPP connection, and an intermediate key associated with the first 3GPP connection.

3. The method according to claim 2, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

4. The method according to claim 3, wherein: Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

5. The method according to claim 4, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is derived based on the same first key associated with multiple 3GPP connections of the terminal, the NCC associated with the first 3GPP connection, and a first intermediate key, and the first intermediate key is the intermediate key generated by the terminal last time.

6. The method according to claim 5, wherein: The intermediate key associated with the first 3GPP connection includes a next hop key NH associated with the first 3GPP connection; the first intermediate key includes one of the following: an initial key, a first NH.

7. The method according to claim 3, wherein: Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are different.

8. The method according to claim 7, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, the intermediate key associated with the first 3GPP connection is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

9. The method according to claim 8, wherein: The intermediate key associated with the first 3GPP connection includes an access network key associated with the first 3GPP connection; the second intermediate key includes one of the following: an initial key, a second NH, and a second access network key.

10. The method according to claim 3, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and the intermediate keys associated with different 3GPP connections are the same.

11. The method according to claim 10, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is obtained based on the NCC associated with the first 3GPP connection, and the second wireless parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different.

12. The method according to claim 11, wherein: The AS key associated with the first 3GPP connection is derived based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, and the access network key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection.

13. The method according to claim 12, wherein: The first radio parameter of the first 3GPP connection is the same as the second radio parameter of the first 3GPP connection; or the first radio parameter of the first 3GPP connection is at least partially different from the second radio parameter of the first 3GPP connection.

14. The method according to any one of claims 8, 9, 12 and 13, wherein: The first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

15. The method according to any one of claims 11 to 13, wherein: The second wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

16. The method according to any one of claims 11 to 13, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, and a NH associated with the first 3GPP connection.

17. The method according to claim 2, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

18. The method according to claim 17, wherein: The AS key associated with the first 3GPP connection is derived based on an intermediate key associated with the first 3GPP connection, and the intermediate key associated with the first 3GPP connection is derived based on an NCC associated with the first 3GPP connection and a first key associated with the first 3GPP connection.

19. The method according to claim 18, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a NH associated with the first 3GPP connection.

20. The method according to any one of claims 6, 9, 16 and 19, wherein: The first key is K AMF ; The initial key is K gNB ; The access network key is K NG-RAN .

21. A key derivation method comprising: The core network side device sends a next hop chain counter NCC associated with a first third generation partnership project 3GPP connection to the terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal, and the NCC associated with the first 3GPP connection is used by the terminal to derive an access layer AS key associated with the first 3GPP connection, and different AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different; The core network side device sends the key generation parameters associated with the first 3GPP connection to the first access network device corresponding to the first 3GPP connection, wherein the key generation parameters associated with the first 3GPP connection are used by the first access network device to derive the access layer AS key associated with the first 3GPP connection.

22. The method according to claim 21, wherein: The key generation parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection.

23. The method according to claim 22, wherein: The key generation parameters associated with the first 3GPP connection include an intermediate key associated with the first 3GPP connection.

24. The method according to claim 23, wherein: The intermediate key associated with the first 3GPP connection is derived based on the first key associated with the first 3GPP connection.

25. The method according to claim 24, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

26. The method according to claim 25, wherein: Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

27. The method according to claim 26, wherein: The intermediate key associated with the first 3GPP connection is derived from the same first key and the first intermediate key associated with multiple 3GPP connections of the terminal, wherein the first intermediate key is the intermediate key corresponding to the terminal generated last time.

28. The method of claim 22, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

29. The method of claim 24, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and the intermediate keys associated with different 3GPP connections are the same.

30. The method according to any one of claims 23 to 27 and 29, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, a next hop key NH associated with the first 3GPP connection.

31. The method of claim 24, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

32. The method according to claim 31, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a NH associated with the first 3GPP connection.

33. The method according to claim 30 or 32, wherein: The first key is K AMF ; The initial key is K gNB .

34. A key derivation method comprising: The first access network device receives a key generation parameter associated with a first Third Generation Partnership Project 3GPP connection of the terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal; The first access network device derives an access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on a key generation parameter associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

35. The method of claim 34, wherein: The key generation parameters associated with the first 3GPP connection include a next hop chaining counter NCC associated with the first 3GPP connection.

36. The method of claim 35, wherein: The key generation parameters associated with the first 3GPP connection also include: an intermediate key associated with the first 3GPP connection.

37. The method of claim 36, wherein: Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

38. The method of claim 35, wherein: Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are different.

39. The method of claim 38, wherein: The AS key associated with the first 3GPP connection is generated based on the intermediate key associated with the first 3GPP connection, the intermediate key associated with the first 3GPP connection is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

40. The method of claim 39, wherein: The method further comprises: The first access network device obtains the second intermediate key.

41. The method according to claim 39 or 40, wherein: The intermediate key associated with the first 3GPP connection includes an access network key associated with the first 3GPP connection; the second intermediate key includes one of the following: an initial key, a second NH, and a second access network key.

42. The method of claim 36, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and the intermediate keys associated with different 3GPP connections are the same.

43. The method of claim 42, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, wherein the second wireless parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different.

44. The method of claim 43, wherein: The AS key associated with the first 3GPP connection is derived based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, and the access network key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection.

45. The method of claim 44, wherein: The first radio parameter of the first 3GPP connection is the same as the second radio parameter of the first 3GPP connection; or the first radio parameter of the first 3GPP connection is at least partially different from the second radio parameter of the first 3GPP connection.

46. ​​The method according to any one of claims 39-41, 44, 45, wherein: The first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

47. The method according to any one of claims 43 to 45, wherein: The second wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

48. The method according to any one of claims 37, 42-45, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, a next hop key NH associated with the first 3GPP connection.

49. The method of claim 37, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a next hop key NH associated with the first 3GPP connection.

50. The method according to any one of claims 36, 37, and 49, wherein: The AS key associated with the first 3GPP connection is derived based on an intermediate key associated with the first 3GPP connection.

51. The method according to any one of claims 41, 48, and 49, wherein: The initial key is K gNB ; The access network key is K NG-RAN .

52. A terminal, comprising: A first communication unit is configured to receive a next hop chain counter NCC associated with a first third generation partnership project 3GPP connection, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal; The first processing unit is used to derive an access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on security parameters associated with the first 3GPP connection, the security parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

53. The terminal according to claim 52, wherein: The security parameters associated with the first 3GPP connection further include at least one of the following: a first key associated with the first 3GPP connection, and an intermediate key associated with the first 3GPP connection.

54. The terminal according to claim 53, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

55. The terminal according to claim 54, wherein: Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

56. The terminal according to claim 55, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is derived based on the same first key associated with multiple 3GPP connections of the terminal, the NCC associated with the first 3GPP connection, and a first intermediate key, and the first intermediate key is the intermediate key generated by the terminal last time.

57. The terminal according to claim 56, wherein: The intermediate key associated with the first 3GPP connection includes a next hop key NH associated with the first 3GPP connection; the first intermediate key includes one of the following: an initial key, a first NH.

58. The terminal according to claim 54, wherein: Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are different.

59. The terminal according to claim 58, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, the intermediate key associated with the first 3GPP connection is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

60. The terminal according to claim 59, wherein: The intermediate key associated with the first 3GPP connection includes an access network key associated with the first 3GPP connection; the second intermediate key includes one of the following: an initial key, a second NH, and a second access network key.

61. The terminal according to claim 54, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and the intermediate keys associated with different 3GPP connections are the same.

62. The terminal according to claim 61, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, wherein the intermediate key associated with the first 3GPP connection is obtained based on the NCC associated with the first 3GPP connection, and the second wireless parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different.

63. The terminal according to claim 62, wherein: The AS key associated with the first 3GPP connection is derived based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, and the access network key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection.

64. The terminal according to claim 63, wherein: The first radio parameter of the first 3GPP connection is the same as the second radio parameter of the first 3GPP connection; or the first radio parameter of the first 3GPP connection is at least partially different from the second radio parameter of the first 3GPP connection.

65. The terminal according to any one of claims 59, 60, 63 and 64, wherein: The first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

66. A terminal according to any one of claims 62 to 64, wherein: The second wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

67. The terminal according to any one of claims 62 to 64, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, and a NH associated with the first 3GPP connection.

68. The terminal according to claim 53, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

69. The terminal according to claim 68, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection, and the intermediate key associated with the first 3GPP connection is derived based on the NCC associated with the first 3GPP connection and the first key associated with the first 3GPP connection.

70. The terminal according to claim 69, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a NH associated with the first 3GPP connection.

71. The terminal according to any one of claims 57, 60, 67, and 70, wherein: The first key is K AMF ; The initial key is K gNB ; The access network key is K NG-RAN .

72. A core network side device, comprising: A second communication unit is used to send a next hop chain counter NCC associated with a first Third Generation Partnership Project 3GPP connection to a terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal, and the NCC associated with the first 3GPP connection is used by the terminal to derive an access layer AS key associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different; and to send a key generation parameter associated with the first 3GPP connection to a first access network device corresponding to the first 3GPP connection, wherein the key generation parameter associated with the first 3GPP connection is used by the first access network device to derive an access layer AS key associated with the first 3GPP connection.

73. The core network side device according to claim 72, wherein: The key generation parameters associated with the first 3GPP connection include the NCC associated with the first 3GPP connection.

74. The core network side device according to claim 73, wherein: The key generation parameters associated with the first 3GPP connection include an intermediate key associated with the first 3GPP connection.

75. The core network side device according to claim 74, wherein: The intermediate key associated with the first 3GPP connection is derived based on the first key associated with the first 3GPP connection.

76. The core network side device according to claim 75, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

77. The core network side device according to claim 76, wherein: Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

78. The core network side device according to claim 77, wherein: The intermediate key associated with the first 3GPP connection is derived from the same first key and the first intermediate key associated with multiple 3GPP connections of the terminal, wherein the first intermediate key is the intermediate key corresponding to the terminal generated last time.

79. The core network side device according to claim 78, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same.

80. The core network side device according to claim 75, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and the intermediate keys associated with different 3GPP connections are the same.

81. The core network side device according to any one of claims 74-78 and 80, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, a next hop key NH associated with the first 3GPP connection.

82. The method of claim 75, wherein: The first keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

83. The core network side device according to claim 82, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a NH associated with the first 3GPP connection.

84. The core network side device according to claim 81 or 83, wherein: The first key is K AMF ; The initial key is K gNB .

85. A first access network device, comprising: A third communication unit, configured to receive a key generation parameter associated with a first Third Generation Partnership Project 3GPP connection of the terminal, wherein the first 3GPP connection is one of multiple 3GPP connections of the terminal; The third processing unit is used to prepare for deriving an access layer AS key associated with the first 3GPP connection, wherein the AS key associated with the first 3GPP connection is derived based on a key generation parameter associated with the first 3GPP connection, and the AS keys associated with different 3GPP connections among the multiple 3GPP connections of the terminal are different.

86. The first access network device according to claim 85, wherein: The key generation parameters associated with the first 3GPP connection include a next hop chaining counter NCC associated with the first 3GPP connection.

87. The first access network device according to claim 86, wherein: The key generation parameters associated with the first 3GPP connection also include: an intermediate key associated with the first 3GPP connection.

88. The first access network device according to claim 87, wherein: Among the multiple 3GPP connections of the terminal, different 3GPP connections are associated with different NCCs, and different intermediate keys are associated with different 3GPP connections.

89. The first access network device according to claim 86, wherein: Among the multiple 3GPP connections of the terminal, NCCs associated with different 3GPP connections are the same, and intermediate keys associated with different 3GPP connections are different.

90. The first access network device according to claim 89, wherein: The AS key associated with the first 3GPP connection is generated based on the intermediate key associated with the first 3GPP connection, the intermediate key associated with the first 3GPP connection is generated based on the second intermediate key and the first wireless parameter of the first 3GPP connection, and the NCC corresponding to the second intermediate key is the same as the NCC associated with the first 3GPP connection.

91. The first access network device according to claim 90, wherein: The third communication unit is used to obtain the second intermediate key.

92. The first access network device according to claim 90 or 91, wherein: The intermediate key associated with the first 3GPP connection includes an access network key associated with the first 3GPP connection; the second intermediate key includes one of the following: an initial key, a second NH, and a second access network key.

93. The first access network device according to claim 87, wherein: The NCCs associated with different 3GPP connections among the multiple 3GPP connections of the terminal are the same, and the intermediate keys associated with different 3GPP connections are the same.

94. The first access network device according to claim 93, wherein: The AS key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, wherein the second wireless parameters of different 3GPP connections among the multiple 3GPP connections of the terminal are different.

95. The first access network device according to claim 94, wherein: The AS key associated with the first 3GPP connection is derived based on the access network key associated with the first 3GPP connection and the second wireless parameter of the first 3GPP connection, and the access network key associated with the first 3GPP connection is derived based on the intermediate key associated with the first 3GPP connection and the first wireless parameter of the first 3GPP connection.

96. The first access network device according to claim 95, wherein: The first radio parameter of the first 3GPP connection is the same as the second radio parameter of the first 3GPP connection; or the first radio parameter of the first 3GPP connection is at least partially different from the second radio parameter of the first 3GPP connection.

97. The first access network device according to any one of claims 90-92, 95, and 96, wherein: The first wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

98. The first access network device according to any one of claims 94 to 96, wherein: The second wireless parameter of the first 3GPP connection includes at least one of the following: a cell identifier corresponding to the first 3GPP connection, uplink UL frequency information corresponding to the first 3GPP connection, downlink DL frequency information corresponding to the first 3GPP connection, a tracking area code TAC corresponding to the first 3GPP connection, and a wireless bearer identifier corresponding to the first 3GPP connection.

99. The first access network device according to any one of claims 88, 93-96, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key, a next hop key NH associated with the first 3GPP connection.

100. The first access network device according to claim 88, wherein: The intermediate key associated with the first 3GPP connection includes one of the following: an initial key associated with the first 3GPP connection, and a next hop key NH associated with the first 3GPP connection.

101. The first access network device according to any one of claims 87, 88, and 100, wherein: The AS key associated with the first 3GPP connection is derived based on an intermediate key associated with the first 3GPP connection.

102. The first access network device according to any one of claims 92, 99, and 100, wherein: The initial key is K gNB ; The access network key is K NG-RAN .

103. A terminal comprising: A transceiver, a processor and a memory, the memory being used to store a computer program, the transceiver being used to communicate with other devices, the processor being used to call and run the computer program stored in the memory, so that the terminal executes the method as described in any one of claims 1 to 20.

104. A core network side device, comprising: A transceiver, a processor and a memory, the memory being used to store a computer program, the transceiver being used to communicate with other devices, and the processor being used to call and run the computer program stored in the memory so that the core network side device executes the method as described in any one of claims 21 to 33.

105. A first access network device, comprising: A transceiver, a processor and a memory, the memory being used to store a computer program, the transceiver being used to communicate with other devices, and the processor being used to call and run the computer program stored in the memory so that the first access network device executes the method as described in any one of claims 34 to 51.

106. A chip, comprising: A processor, configured to call and run a computer program from a memory so that a device equipped with the chip executes a method as described in any one of claims 1 to 20, or claims 21 to 33, or claims 34 to 51.

107. A computer-readable storage medium for storing a computer program, which, when executed by a device, causes the device to perform the method of any one of claims 1 to 20, or claims 21 to 33, or claims 34 to 51.

108. A computer program product comprising computer program instructions, the computer program instructions causing a computer to perform the method of any one of claims 1 to 20, or claims 21 to 33, or claims 34 to 51.

109. A computer program, the computer program causing a computer to perform the method of any one of claims 1 to 20, or claims 21 to 33, or claims 34 to 51.

Images