V2X Policy Requirement Method and Apparatus

Abstract

Embodiments of the present disclosure provide a V2X policy request method and apparatus. The method includes sending a registration request message to a network-side device, where the registration request message includes a vehicle-to-everything (V2X) policy request message. Embodiments of the present disclosure further provide an electronic device and a computer-readable storage medium.

Description

Technical Field

[0001] This application claims the priority of Chinese Patent Application CN 202210764640.4, titled "V2X Policy Request Method and Apparatus", filed on June 30, 2022, and all of its content is incorporated herein by reference.

[0002] Embodiments of the present disclosure relate to the field of communications, and more specifically, to a V2X policy request method and apparatus.

Background Art

[0003] According to the 3GPP (registered trademark) 24501 protocol R17 version of the 3rd Generation Partnership Project (3GPP), when a User Equipment (UE) has a UE policy of a Home Public Land Mobile Network (HPLMN) or a selected Public Land Mobile Network (PLMN), in the process of starting an initial registration or migrating from the S1 mode to the N1 mode to start a mobility registration process, it is necessary to include a UE STATE INDICATION in the payload container cell of the Registration Request message of the 5GS Mobility Management (5GMM) in the 5G system. Otherwise, it is not necessary to include it.

[0004] When a UE needs to request a Vehicle to Everything (V2X) policy, it sends a UE POLICY PROVISIONING REQUEST message through the UL NASTRANPORT flow of 5GMM. On the other hand, when there is no V2X policy locally at the UE and it is necessary to request a policy from the Policy Coordination Function (PCF), the conventional method requires performing a registration process first and then starting the policy request, thereby increasing the signaling overhead. In addition, the current multicast communication of V2X over PC5 is not encrypted and is vulnerable to security threats such as message tampering and deletion. Therefore, it is also highly necessary to encrypt multicast messages.

[0005] How to reduce the signaling overhead when requesting a V2X policy is an issue that still needs to be solved currently.

Summary of the Invention

Problems to be Solved by the Invention

[0006] Embodiments of the present disclosure provide a V2X policy request method and apparatus for at least solving the problem of how to reduce the signaling overhead when requesting a V2X policy in the related art.

Means for Solving the Problems

[0007] According to an embodiment of the present disclosure, a V2X policy request method for a UE is provided. This method includes sending a registration request message to a network-side device, where the registration request message includes a vehicle-to-everything (V2X) policy request message.

[0008] According to another embodiment of the present disclosure, a V2X policy request method is further provided. This method includes an Authentication Management Function (AMF) receiving a registration request message sent by a UE, where the registration request message includes a vehicle-to-everything (V2X) policy request message.

[0009] According to another embodiment of the present disclosure, a V2X policy request device for a UE is provided. This device includes a transmission module for sending a registration request message to a network-side device, where the registration request message includes a vehicle-to-everything (V2X) policy request message.

[0010] According to another embodiment of the present disclosure, a V2X policy request device for an AMF is provided. This device includes a reception module for receiving a registration request message sent by a UE, where the registration request message includes a vehicle-to-everything (V2X) policy request message.

[0011] According to another embodiment of the present disclosure, a computer-readable storage medium is further provided. A computer program is stored in the computer-readable storage medium, and when the computer program is executed, the steps in the embodiment of any one of the above methods are realized.

[0012] According to another embodiment of the present disclosure, an electronic device is further provided. This electronic device includes a memory and a processor. A computer program is stored in the memory, and the processor is configured to execute the computer program to realize the steps in the embodiment of any one of the above methods.

Brief Description of the Drawings

[0013]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Embodiments for Carrying Out the Invention

[0014] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings and embodiments.

[0015] Terms such as "first" and "second" in the specification, claims and above drawings of the present disclosure are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0016] Examples of the method provided in the embodiments of the present disclosure may be executed on a mobile terminal, a computer terminal, or a similar computing device. Taking the execution on a computer terminal as an example, FIG. 1 is a hardware structure block diagram of a computer terminal that executes the V2X policy request method in the embodiments of the present disclosure. As shown in FIG. 1, the computer terminal may include one or more (only one is shown in FIG. 1) processors 102 (the processor 102 may include, but is not limited to, a processing device such as a microprocessor (Central Processing Unit, MCU) or a field programmable gate array (Field Programmable Gate Array, FPGA)), and a memory 104 for storing data. Here, the computer terminal may further include a transmission device 106 and an input / output device 108 used for communication functions. The structure shown in FIG. 1 is only schematic and does not limit the structure of the computer terminal. For example, the computer terminal may further include more or fewer assemblies than those shown in FIG. 1, or may have a configuration different from that shown in FIG. 1.

[0017] Memory 104 may be used to store computer programs, such as software programs and modules of application software, for example, computer programs corresponding to the V2X policy request method in the embodiments of the present disclosure. By executing the computer program stored in memory 104, processor 102 can execute various functional applications and data processing, that is, the above method can be realized. Memory 104 may include high-speed random access memory and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memories. In some examples, memory 104 may further include a memory installed remotely with respect to processor 102, and these remote memories may be connected to the computer terminal via a network. Examples of the above network include, but are not limited to, the Internet, intranet, local area network, mobile communication network, and combinations thereof.

[0018] Transmission device 106 is used to receive or transmit data via a network. Specific examples of the above network may include a wireless network provided by a communication vendor of a computer terminal. In one example, transmission device 106 includes a network interface controller (abbreviated as NIC), which can be connected to other network devices via a base station and communicate with the Internet. In one example, transmission device 106 may be a radio frequency (RF) module, which is used to communicate with the Internet in a wireless manner.

[0019] In this embodiment, a V2X policy request method executed on the above computer terminal is provided, and this method is used for a UE. FIG. 2 is a flowchart of the V2X policy request method according to an embodiment of the present disclosure. As shown in FIG. 2, this flow includes the following step S202.

[0020] In step S202, a registration request message is sent to the network-side device, where the registration request message includes a vehicle wireless communication V2X policy request message.

[0021] Step S202 of this embodiment may include including a V2X policy request message in a registration request message sent by the UE to the AMF when the UE does not have the V2X policy of the HPLMN or the selected PLMN, where the UE supports V2X capabilities and V2X NR-PC5.

[0022] In this embodiment, after including a V2X policy request message in the registration request message sent by the UE to the AMF, the UE receives a rejection message for the V2X policy request sent by the AMF, or the UE further includes one of receiving the V2X policy sent by the AMF, where the V2X policy includes parameters such as whether the UE under the current PLMN coverage supports multicast encryption and the algorithm for obtaining the public key and private key required for asymmetric encryption.

[0023] In an exemplary embodiment, after the UE receives the V2X policy sent by the AMF, if the UE needs to participate in a UE group when multicast encryption is supported under the current PLMN coverage, the UE establishes a unicast link with the group creation UE of the UE group and obtains a member identifier ID and a group ID from the group creation UE, where the group creation UE is the UE that creates this UE group, the member ID is the member identifier of the UE within this UE group, the member ID is assigned to the UE by the group creation UE, and the group ID is the ID of this UE group. The UE further includes calculating a public key and a private key based on the public key and private key algorithms required for asymmetric encryption, the member ID, and the group ID, distributing the public key to the group creation UE via a unicast link, and causing the group creation UE to distribute the public key of the UE to other members in the group.

[0024] In this embodiment, the UE receives the public keys of other members in this UE group that are transmitted via the unicast security policy by the group creation UE.

[0025] In this embodiment, this method further includes that when the UE transmits a multicast, the UE uses its private key for encryption, and when the UE receives a multicast transmitted by other members in this UE group, the UE uses the public keys of other members in this UE group for decryption.

[0026] According to another embodiment of the present disclosure, a V2X policy request method is further provided. As shown in FIG. 3, this method includes the following step S302.

[0027] In step S302, the AMF receives a registration request message transmitted by the UE, where the registration request message includes a vehicle-to-everything (V2X) policy request message.

[0028] In this embodiment, after the AMF receives the registration request message transmitted by the UE and after the UE's registration is successful, the AMF further includes requesting a V2X policy from the PCF.

[0029] In this embodiment, after the AMF requests a V2X policy from the PCF, when the PCF rejects the V2X policy request, the AMF receives a V2X policy rejection message from the PCF and forwards it to the UE; when the PCF accepts the V2X policy request, the AMF receives the V2X policy from the PCF and forwards it to the UE, and further includes one of the above. Here, the V2X policy includes parameters such as whether a UE under the current PLMN coverage supports multicast encryption and an algorithm for obtaining the public key and private key required for asymmetric encryption.

[0030] According to the above steps, since the registration request message includes the vehicle wireless communication V2X policy request message, the UE can obtain the V2X policy when registering with the network-side device, thereby reducing the signaling interaction flow. Also, to protect the security of multicast information, two corresponding policy parameters are added to determine whether to support multicast security under the current network coverage and to obtain the asymmetric encryption algorithm used, facilitating the use of the asymmetric encryption algorithm for multicast message encryption. Therefore, the problem of the need to reduce the signaling overhead when requesting the V2X policy in the related art can be solved, the security threat that multicast is exposed to in the communication process, such as message tampering and deletion, can be avoided, the signaling overhead when requesting the V2X policy is saved, and the security of multicast communication is improved.

[0031] According to the description of the above embodiments, the method according to the above examples may be implemented in the form of software and the necessary general-purpose hardware platform. Of course, it may also be implemented by hardware. In many cases, however, the former is a more preferred embodiment. Based on such an understanding, the technical solution of the present disclosure may be embodied in the form of a software product in essence or in the part that contributes to the prior art. This computer software product is stored in a storage medium (such as Read-Only Memory / Random Access Memory (ROM / RAM), magnetic disk, optical disk), and includes several instructions for causing a terminal device (which may be a mobile phone, computer, server, or network device, etc.) to execute the methods described in the embodiments of the present disclosure.

[0032] In this embodiment, a V2X policy request device is further provided. This device is used to implement the above embodiments and preferred embodiments, and the ones already described will not be described further. As used below, the term "module" refers to a combination of software and / or hardware that can realize a predetermined function. The devices described in the following examples are preferably implemented in software, but implementation in hardware or a combination of software and hardware is also possible and contemplated.

[0033] FIG. 4 is a structural block diagram of a V2X policy request device according to an embodiment of the present disclosure. As shown in FIG. 4, this device includes a transmission module 11, a first reception module 12, and a second reception module 13.

[0034] The transmission module 11 is used to transmit a registration request message to a network-side device. Here, the registration request message includes a vehicle wireless communication V2X policy request message.

[0035] The first reception module 12 is used to receive a rejection message for a V2X policy request transmitted by the AMF.

[0036] The second receiving module 13 is used to receive the V2X policy transmitted by the AMF. Here, the V2X policy includes parameters such as whether a UE under the current PLMN coverage supports multicast encryption and an algorithm for obtaining the public key and private key required for asymmetric encryption.

[0037] FIG. 5 is another structural block diagram of a V2X policy request device according to an embodiment of the present disclosure. As shown in FIG. 5, this device includes a receiving module 21 and a request module 22.

[0038] The receiving module 21 is used to receive a registration request message transmitted by the UE. Here, the registration request message includes a vehicle wireless communication V2X policy request message.

[0039] The request module 22 is used to request a V2X policy from the PCF after the UE's registration is successful.

[0040] Each of the above modules may be implemented by software or hardware. For the latter, the above modules may all be located in the same processor, or each of the above modules may be located in different processors in any combination form, but not limited thereto.

[0041] To facilitate the understanding of the technical solutions provided by the present disclosure, the following will be described in detail with reference to embodiments of specific scenarios.

[0042] Embodiments of the present disclosure relate to methods for New Radio Vehicle-to-Everthing (NR-V2X) policy optimization and multicast security parameter extension. A UE can obtain V2X policies during registration, thereby reducing signaling interaction flows. Also, to protect the security of V2X-PC5 type multicast information, message encryption is performed using an asymmetric encryption algorithm, and accordingly, policy parameters are added to determine whether to support multicast security under the current network coverage and to obtain the asymmetric encryption algorithm used.

[0043] In this embodiment, for terminals mainly supporting NR-V2X, the application environment implemented mainly depends on the 5G wireless communication network. Here, the participating network devices include the UE, PCF, and AMF.

[0044] Specifically, the UE supports V2X capabilities and NR-PC5, and the AMF can interconnect with the base station and PCF.

[0045] FIG. 6 is a schematic diagram of a policy optimization method according to an embodiment of the present disclosure. As shown in FIG. 6, this method includes the following steps S601 to S604.

[0046] In step S601, if the UE does not have the V2X policy of the HPLMN or the selected PLMN, the registration request message includes a V2X policy request message.

[0047] In this embodiment, the UE supports V2X capabilities and V2X NR-PC5, and PC5 is a direct connection solution between vehicles.

[0048] In step S602, after successful registration, the AMF requests the V2X policy from the PCF.

[0049] In step S603, when the PCF accepts, the AMF sends a Manage UE Policy Command to the UE via the downlink NAS TRANSPORT flow, that is, sends the V2X policy to the UE.

[0050] In step S604, when the PCF rejects, the AMF sends a rejection message to the UE via the downlink NAS TRANSPORT flow.

[0051] In this embodiment, to support multicast asymmetric encryption, the PCF adds two parameters based on the original policy: whether the UE under the current PLMN coverage supports multicast encryption, and the algorithm for obtaining the public key and private key required for asymmetric encryption.

[0052] In the related art, for the solution of requesting the V2X policy, after the registration is completed, the UE includes a UE Policy Provisioning Request in the uplink NAS TRANSPORT to request the policy from the AMF. Then, after the AMF requests the policy from the PCF, it replies to the UE via the downlink NAS TRANSPORT. On the other hand, according to the policy optimization method of the embodiments of the present disclosure, the UE can obtain the V2X policy at the time of registration. In this way, the uplink signaling can be reduced by one time, that is, the signaling interaction flow is reduced.

[0053] FIG. 7 is a flowchart of a method for extending multicast security parameters according to an embodiment of the present disclosure. As shown in FIG. 7, this method includes the following steps S701 to S705.

[0054] In step S701, when UE1 attempts to join a group, UE1 establishes a unicast link with the group creator UE2.

[0055] In step S702, the group creator UE2 assigns a member ID and a group ID to UE1.

[0056] In step S703, the group creator UE2 distributes the public key of UE1 to the other member UE3 in the group according to the group security policy, and notifies UE1 of the public key of the other member UE3 in the group via the unicast security policy.

[0057] Specifically, after UE1 obtains the V2X policy, if multicast encryption is supported under the current PLMN coverage, the public key and the private key are calculated using the algorithm, group ID, and member ID required for asymmetric encryption provided in this policy. Via the unicast link, UE1 distributes its public key to the group creator UE2. Here, the process of distributing the public key is protected by the unicast security policy.

[0058] In step S704, when UE1 sends a multicast, encryption is performed using the private key of UE1.

[0059] In step S705, when the members UE2 and UE3 in the group receive it, decryption is performed using the public key of UE1.

[0060] In the related art, the solution that requests the V2X policy is not encrypted when transmitting multicast, and there are some security threats. However, the method for extending the multicast security parameters of the embodiments of the present disclosure realizes the protection of multicast messages by using asymmetric encryption based on the V2X policy of the UE, and can guarantee the security in the communication process of the multicast information.

[0061] Embodiments of the present disclosure further provide a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed, the steps in the embodiments of any one of the above methods are executed.

[0062] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media capable of storing a computer program, such as a USB disk, a read-only memory (abbreviated as ROM), a random access memory (abbreviated as RAM), a mobile hard disk, a magnetic disk, or an optical disk.

[0063] Embodiments of the present disclosure further provide an electronic device, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to execute the computer program to execute the steps in the embodiments of any one of the above methods.

[0064] In an exemplary embodiment, the electronic device may further include a transmission device and an input / output device, where the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0065] For the specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary embodiments, and this embodiment will not be further described herein.

[0066] Obviously, each module or each step of the above disclosure may be implemented by a general-purpose computing device, and they may be concentrated in a single computing device, or distributed across a network consisting of multiple computing devices. They may also be implemented by program code executable by the computing device, whereby they may be stored in a storage device and executed by the computing device. And in some cases, the steps shown or described may be executed in a different order than here, or they may be created as respective integrated circuit modules, or multiple modules or steps among them may be created and implemented as a single integrated circuit module. Thus, the present disclosure is not limited to any specific combination of hardware and software.

[0067] As described above, these are merely preferred embodiments of the present disclosure and are not intended to limit the present disclosure. For those skilled in the art, various changes and variations are possible with the present disclosure. Any modifications, equivalent replacements, improvements, etc. made within the principles of the present disclosure should all be included within the protection scope of the present disclosure.

Claims

1. A V2X policy request method used for a user equipment UE, comprising: sending a registration request message to a network-side device, wherein the registration request message includes a vehicle-to-everything V2X policy request message. A method.

2. Sending a registration request message to a network-side device includes: when there is no home public land mobile network HPLMN in the UE or there is no V2X policy for the selected public land mobile network PLMN, including the V2X policy request message in the registration request message sent by the UE to an authentication management function AMF, where the UE supports V2X capabilities and V2X NR-PC5. The method according to claim 1.

3. After including the V2X policy request message in the registration request message sent by the UE to the AMF, the method further includes: the UE receiving a rejection message for the V2X policy request sent by the AMF, or the UE receiving a V2X policy sent by the AMF, where the V2X policy includes parameters such as whether a UE under the current PLMN coverage supports multicast encryption and an algorithm for obtaining a public key and a private key required for asymmetric encryption. The method according to claim 2.

4. After the UE receives the V2X policy sent by the AMF, the method further includes: when multicast encryption is supported under the current PLMN coverage, if the UE needs to join a UE group, the UE establishing a unicast link with the group creation UE of the UE group and obtaining a member identifier ID and a group ID from the group creation UE; the UE calculating a public key and a private key based on the algorithm for the public key and the private key required for the asymmetric encryption, the member ID, and the group ID, and distributing the public key to the group creation UE via the unicast link, and causing the group creation UE to distribute the public key of the UE to other members in the UE group. The method according to claim 3.

5. The method according to claim 4, further comprising the UE receiving public keys of other members within the UE group, which are transmitted via a unicast security policy by the group creation UE.

6. When the UE transmits multicast, the method further comprises performing encryption using the secret key of the UE, and when the UE receives multicast transmitted by other members within the UE group, performing decryption using public keys of other members within the UE group. The method according to claim 5.

7. A V2X policy request method, comprising: an authentication management function AMF receiving a registration request message transmitted by a user equipment UE, where the registration request message includes a vehicle-to-everything V2X policy request message. Method.

8. After the AMF receives the registration request message transmitted by the UE, the method further comprises: after successful registration of the UE, the AMF requesting the V2X policy from a policy coordination function PCF. The method according to claim 7.

9. After the AMF requests the V2X policy from the PCF, the method further comprises: when the PCF rejects the V2X policy request, the AMF receiving a V2X policy rejection message from the PCF and forwarding it to the UE; and when the PCF accepts the V2X policy request, the AMF receiving the V2X policy from the PCF and forwarding it to the UE, where the V2X policy includes parameters such as whether UEs under the current PLMN coverage support multicast encryption and an algorithm for obtaining public and secret keys required for asymmetric encryption. The method according to claim 8.

10. A V2X policy request apparatus for a user equipment UE, comprising: a transmission module for transmitting a registration request message to a network-side device, where the registration request message includes a vehicle-to-everything V2X policy request message. Apparatus.

11. a first receiving module for receiving a rejection message for the V2X policy request, transmitted by an authentication management function AMF. It further includes a second receiving module for receiving the V2X policy transmitted by the AMF, wherein the V2X policy includes parameters such as whether a UE under the current PLMN coverage supports multicast encryption and an algorithm for obtaining a public key and a private key required for asymmetric encryption. The device according to claim 10.

12. A V2X policy request device used for an authentication management function AMF, including a receiving module for receiving a registration request message transmitted by a user equipment UE, where the registration request message includes a vehicle-to-everything V2X policy request message. Device.

13. After successfully registering the UE, it further includes a request module for requesting the V2X policy from a point coordination function PCF. The device according to claim 12.

14. A computer-readable storage medium, in which a computer program is stored, where when the computer program is executed by a processor, the processor realizes the method according to any one of claims 1 to 6, or realizes the method according to any one of claims 7 to 9. Computer-readable storage medium.

15. An electronic device including a memory, a processor, and a computer program stored in the memory and executable on the processor, where when the processor executes the computer program, it realizes the method according to any one of claims 1 to 6, or realizes the method according to any one of claims 7 to 9. Electronic device.

Images