Terminal device configuration method, device, and communication device

Abstract

The present application discloses a method, an apparatus and a communication device for configuring a terminal device, the method including: a terminal device generating a second key based on a first key, encrypting and / or integrity protecting a certificate request message based on the second key, and sending a first request message, the first request message including the certificate request message encrypted and / or integrity protected by the second key. In one embodiment, the method for configuring the terminal device further includes the terminal device receiving a first response message from a server, and performing integrity verification and / or decryption on the first response message based on the second key to obtain a digital certificate carried in the first response message.

Description

[Technical Field]

[0001] (CROSS-REFERENCE TO RELATED APPLICATIONS) This application claims priority to a Chinese patent application filed with the China Patent Office on March 22, 2021, bearing application number 202110304444.4, and filed with the China Patent Office on October 19, 2021, bearing application number 202111217636.8, the entire contents of which are incorporated herein by reference.

[0002] The present application relates to the field of vehicle Internet technology, and more particularly to a method, apparatus and communication device for configuring a terminal device. [Background technology]

[0003] Cellular V2X (C-V2X: Cellular-Vehicle to X) transmits a large amount of real-time traffic information, including vehicle driving status, road condition events, and traffic light information, between vehicles, transportation facilities, and vehicle Internet management systems. This important traffic information is directly related to the safety of public transportation and the life safety of drivers and passengers, and fundamentally determines whether C-V2X technology can be adopted in the industrial sector.

[0004] To ensure the security of information, digital certificates are introduced, and the authenticity of users and devices in the C-V2X system, as well as the authenticity of transmitted information, are guaranteed based on the digital certificates. Therefore, ensuring the security of digital certificates is key to the success of C-V2X technology.

[0005] In the current production process, digital certificates must be configured offline during the production process of vehicles or vehicle Internet devices. This method has high production security requirements for automakers and C-V2X terminal equipment manufacturers. To meet the security requirements of the physical environment for offline filling, production lines must be modified or the equipment must be sent to a specialized security organization for filling, resulting in high investment costs, poor flexibility, high deployment difficulties, and high technical implementation difficulties.

[0006] In addition, using the existing standard Generic Bootstrapping Architecture (GBA) method, as shown in Figure 1, a secure connection can be established between the vehicle or vehicle Internet device and the CA server, and the C-V2X device can complete the digital certificate configuration online. However, the standard solution requires the network operator to provide GBA services to the Network Application Function (NAF) / Authentication Proxy (AP) network element for each CA server (the C-V2X Service Provider dummy box in Figure 1, which has one-to-one correspondence with the NAF / AP network element for the CA server (C-V2X Application Server in the figure)), which imposes significant network operation and maintenance costs on the operator. In addition, the GBA session key used for communication between the CA server and the vehicle Internet device is stored in the NAF / AP network element. Therefore, security operations such as message encryption / decryption and integrity protection are performed by the NAF / AP device. However, since the NAF / AP is developed in accordance with the security technical standards of the telecommunications industry, the CA server cannot flexibly use the GBA session key. The security operations performed may not necessarily meet the security technical requirements of the C-V2X vehicle Internet industry, making the industrial application of the GBA solution difficult.

[0007] Furthermore, completing digital certificate configuration using an online configuration method imposes very high design requirements on the security implementation of C-V2X devices. To ensure the security of digital certificates and confidential parameters on the device side, this information cannot be easily manipulated by client applications, nor can it be calculated or executed on the device's general-purpose central processing unit (CPU) or internal / external memory. Instead, it must be processed in a trusted security environment in combination with a key generation and acquisition method. However, existing configuration methods lack overall device-side security design and implementation, making it impossible to ensure the security of digital certificate configuration.

[0008] In short, how to securely and easily configure digital certificates and sensitive security parameters into C-V2X devices is currently a major challenge facing the C-V2X Internet of Vehicles industry in the security field. Summary of the Invention [Means for solving the problem]

[0009] The embodiments of the present application provide a method, an apparatus and a communication device for configuring a terminal device.

[0010] The technical solution of the embodiments of the present application can be realized as follows:

[0011] In a first aspect, an embodiment of the present application provides a method for configuring a terminal device, the method comprising: the terminal device generating a second key based on the first key and encrypting and / or integrity protecting the certificate request message based on the second key; sending a first request message, the first request message including the certificate request message encrypted and / or integrity protected with the second key.

[0012] In some alternative embodiments of the present application, the configuration method of the terminal device further includes the terminal device receiving a first response message from the server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message.

[0013] In some alternative embodiments of the present application, the terminal equipment includes an application client, a baseband chip, and a universal subscriber identity module (USIM); The terminal device generating a second key based on the first key and encrypting and / or integrity protecting the certificate request message based on the second key, the application client triggering, via the baseband chip, the USIM to generate a second key based on the first key; The application client generates a first certificate request message and sends the first certificate request message to the USIM via the baseband chip; the USIM generating a public-private key pair, adding a public key in the public-private key pair to the first certificate request message, and signing the first certificate request message using a private key in the public-private key pair to obtain a second certificate request message; the USIM encrypting and / or integrity protecting the second certificate request message based on the second key and adding a first verification value to the second certificate request message; The USIM sends the processed second certificate request message to the application client via the baseband chip.

[0014] In some alternative embodiments of the present application, sending the first request message includes the application client sending a first request message to a server, the first request message including the second certificate request message encrypted and / or integrity protected by the second key, and the first request message further including a bootstrap transaction identifier (B-TID) and / or a fully qualified domain name (FQDN) of the server.

[0015] In some alternative embodiments of the present application, the terminal device includes an application client, a baseband chip, and a USIM; receiving a first response message from the server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message, by the terminal device, the application client receiving a first response message from the server and sending the first response message to the USIM via the baseband chip; the USIM performing integrity verification and / or decryption on the first response message based on the second key; After the verification is passed, the USIM obtains the digital certificate carried in the first response message and stores the digital certificate in a security component.

[0016] In some alternative embodiments of the present application, the method for configuring the terminal device further includes the terminal device performing a Generic Bootstrapping Architecture (GBA) authentication process or an Application Oriented Authentication or Key Management (AKMA) authentication process to negotiate the first key with a network device.

[0017] In a second aspect, an embodiment of the present application further provides a method for configuring a terminal device, the method including: a server receiving a first request message from the terminal device, the first request message including a certificate request message encrypted and / or integrity protected by a second key; the server obtaining the second key from a network device, the second key being generated by the network device based on a first key; the server performs integrity verification and / or decryption on the first request message based on the second key, and issues a digital certificate after authentication of the first request message is completed; The server sends a first response message to the terminal device, the first response message including the digital certificate.

[0018] In some alternative embodiments of the present application, the server sending the first response message to the terminal device comprises: the server constructing a first response message that includes the digital certificate, encrypting and / or integrity protecting the first response message based on the second key, and adding a second verification value to the first response message; and transmitting the processed first response message to the terminal device.

[0019] In some alternative embodiments of the present application, the first request message further includes a Bootstrap Transaction Identifier (B-TID); The server obtaining the second key from the network device includes: the server querying whether a second key corresponding to the B-TID exists; If the result of the inquiry is that there is no second key corresponding to the B-TID, obtaining the second key from the network device.

[0020] In some alternative embodiments of the present application, the server obtaining the second key from the network device comprises: the server sending a second request message to the network device, the second request message being used to request the second key; The method includes receiving, by the server, a second response message sent from the network device, the second response message including the second key.

[0021] In a third aspect, an embodiment of the present application further provides a method for configuring a terminal device, the method including: the network device generating a second key based on a first key previously negotiated; and transmitting the second key to a server.

[0022] In some alternative embodiments of the present application, the configuration method for the terminal device further includes the network device negotiating the first key with the terminal device by performing a GBA authentication process or an AKMA authentication process with the terminal device.

[0023] In some alternative embodiments of the present application, the network device generating a second key based on the pre-negotiated first key and transmitting the second key to the server includes: receiving, by the network device, second request information sent from the server, the second request message being used to request the second key; The network device generates a second key based on the pre-negotiated first key and sends a second response message to the server, the second response message including the second key.

[0024] In a fourth aspect, an embodiment of the present application further provides a configuration device for a terminal device, the device comprising: a first generating unit; and a first communication unit; the first generating unit is configured to generate a second key based on the first key and to encrypt and / or integrity protect a certificate request message based on the second key; The first communication unit is configured to send a first request message, the first request message including the certificate request message encrypted and / or integrity protected by the second key.

[0025] In some alternative embodiments of the present application, the first communication unit further includes receiving a first response message from a server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message.

[0026] In some alternative embodiments of the present application, the first generating unit includes an application client, a baseband chip, and a USIM; the application client is configured to trigger, via the baseband chip, the USIM to generate a second key based on the first key, and further configured to generate a first certificate request message and send the first certificate request message to the USIM via the baseband chip; The USIM is configured to generate a public-private key pair, add a public key in the public-private key pair to the first certificate request message, sign the first certificate request message using a private key in the public-private key pair to obtain a second certificate request message, encrypt and / or integrity protect the second certificate request message based on the second key, add a first verification value to the second certificate request message, and send the second certificate request message encrypted and / or integrity protected by the second key to the application client via the baseband chip.

[0027] In some alternative embodiments of the present application, the application client is configured to send a first request message to the server via the first communication unit, the first request message including the second certificate request message encrypted and / or integrity protected by the second key, and the first request message further including a B-TID and / or a server FQDN.

[0028] In some alternative embodiments of the present application, the first generating unit includes an application client, a baseband chip, and a USIM; the application client is configured to receive a first response message from the server via the first communication unit and send the first response message to the USIM via the baseband chip; The USIM is configured to perform integrity verification and / or decryption on the first response message based on the second key, and after passing the verification, obtain a digital certificate carried in the first response message, and store the digital certificate in a security component.

[0029] In some alternative embodiments of the present application, the configuration device of the terminal equipment further comprises a first execution unit, the first execution unit being configured to perform a GBA authentication process or an AKMA authentication process and negotiate the first key with a network device.

[0030] In a fifth aspect, an embodiment of the present application further provides a configuration device for a terminal device, the device comprising: a second communication unit; and a first verification unit; the second communication unit is configured to receive a first request message from a terminal device, the first request message including a certificate request message encrypted and / or integrity protected by a second key; the first verification unit is configured to obtain the second key from a network device, and the second key is generated by the network device based on the first key; the first verification unit is further configured to perform integrity verification and / or decryption on the first request message based on the second key, and issue a digital certificate after authentication of the first request message is completed; The second communication unit is further configured to send a first response message to the terminal device, where the first response message includes the digital certificate.

[0031] In some alternative embodiments of the present application, the second communication unit is configured to construct a first response message including the digital certificate, encrypt and / or integrity protect the first response message based on the second key, add a second verification value to the first response message, and transmit the processed first response message to the terminal device. In some alternative embodiments of the present application, the first request message further includes a Bootstrap Transaction Identifier (B-TID); The configuration device of the terminal equipment further includes a second execution unit, which is configured to inquire whether a second key corresponding to the B-TID exists, and if the inquiry result is that a second key corresponding to the B-TID does not exist, to obtain the second key from the network equipment via the second communication unit.

[0032] In a sixth aspect, an embodiment of the present application further provides a configuration device for a terminal device, the device comprising: a second generating unit; and a third communication unit; the second generating unit is configured to generate a second key based on a pre-negotiated first key; The third communication unit is configured to transmit the second key to a server.

[0033] In some alternative embodiments of the present application, the configuration device of the terminal device further comprises a third execution unit, the third execution unit being configured to negotiate the first key with the terminal device by performing a GBA authentication process or an AKMA authentication process with the terminal device.

[0034] In some alternative embodiments of the present application, the second generating unit is configured to generate a second key corresponding to each server based on a pre-negotiated first key; The third communication unit is configured to transmit the corresponding second key to each server, respectively.

[0035] In a seventh aspect, an embodiment of the present application further provides a method for configuring a terminal device, the method including: generating a second key based on a first key, encrypting and / or integrity protecting part or all of a first message based on the second key, and transmitting the first message.

[0036] In some alternative embodiments of the present application, the configuration method of the terminal device further includes the terminal device receiving a second message from the server and performing integrity verification and / or decryption on the second message based on the second key.

[0037] In some alternative embodiments of the present application, the terminal equipment includes an application client, a baseband chip, and a universal subscriber identity module (USIM); The terminal device generating a second key based on the first key and encrypting and / or integrity protecting a part or all of the first message based on the second key is the application client triggering, via the baseband chip, the USIM to generate a second key based on the first key; the application client generating a first message and sending the first message to the USIM via the baseband chip; the USIM encrypting and / or integrity protecting part or all of the first message based on the second key; The USIM transmits the processed first message to the application client via the baseband chip.

[0038] In some alternative embodiments of the present application, sending the first message includes the application client sending the first message to a server; The first message includes a Bootstrap Transaction Identifier (B-TID) and / or a Fully Qualified Domain Name (FQDN) of the server, or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID) and / or an FQDN.

[0039] In some alternative embodiments of the present application, the terminal equipment includes an application client, a baseband chip, and a universal subscriber identity module (USIM); The terminal device receiving a second message from a server and performing integrity verification and / or decryption on the second message based on the second key, the application client receiving a second message from the server and sending the second message to the USIM via the baseband chip; The USIM performs integrity verification and / or decryption on the second message based on the second key.

[0040] In an eighth aspect, an embodiment of the present application further provides a method for configuring a terminal device, the method comprising: receiving, by a server, a first message from a terminal device, part or all of the first message being encrypted and / or integrity protected with a second key; the server obtaining the second key from a network device, the second key being generated by the network device based on a first key; The server performs integrity verification and / or decryption on the first message based on the second key.

[0041] In some alternative embodiments of the present application, the method for configuring the terminal device further includes the server encrypting and / or integrity protecting part or all of a second message based on the second key, and transmitting the second message.

[0042] In some alternative embodiments of the present application, the first message further includes a Bootstrap Transaction Identifier (B-TID) or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID); The server obtaining the second key from the network device includes: the server querying whether a second key corresponding to the B-TID or the A-KID exists; If the result of the inquiry is that there is no second key corresponding to the B-TID, obtaining the second key from the network device.

[0043] In a ninth aspect, an embodiment of the present application further provides a configuration device for a terminal device, the device comprising: a third generating unit; and a fourth communication unit; the third generating unit is configured to generate a second key based on the first key, and to encrypt and / or integrity protect part or all of the first message based on the second key; The fourth communication unit is configured to transmit a first message.

[0044] In some alternative embodiments of the present application, the fourth communication unit is further configured to receive a second message from a server and perform integrity verification and / or decryption on the second message based on the second key.

[0045] In some alternative embodiments of the present application, the third generating unit includes an application client, a baseband chip, and a universal subscriber identity module (USIM); the application client is configured to trigger, via the baseband chip, the USIM to generate a second key based on the first key, and further configured to generate a first message and send the first message to the USIM via the baseband chip; The USIM is configured to encrypt and / or integrity protect part or all of the first message based on the second key, and is further configured to transmit the processed first message to the application client via the baseband chip.

[0046] In some alternative embodiments of the present application, the application client is further configured to send the first message to a server; The first message includes a Bootstrap Transaction Identifier (B-TID) and / or a Fully Qualified Domain Name (FQDN) of the server, or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID) and / or an FQDN.

[0047] In some alternative embodiments of the present application, the third generating unit includes an application client, a baseband chip, and a universal subscriber identity module (USIM); the application client is configured to receive a second message from the server and send the second message to the USIM via the baseband chip; The USIM is configured to perform integrity verification and / or decryption on the second message based on the second key.

[0048] In a tenth aspect, an embodiment of the present application further provides a configuration device for a terminal device, the device comprising: a fifth communication unit; and a second verification unit; the fifth communication unit is configured to receive a first message from a terminal device, part or all of the first message being encrypted and / or integrity protected by a second key; The second verification unit is configured to obtain the second key from a network device, the second key being generated by the network device based on the first key, and the second verification unit is further configured to perform integrity verification and / or decryption on the first message based on the second key.

[0049] In some alternative embodiments of the present application, the component of the terminal device further comprises a fourth generating unit, the fourth generating unit configured to encrypt and / or integrity protect part or all of the second message based on the second key; The fifth communication unit is further configured to transmit a second message.

[0050] In some alternative embodiments of the present application, the first message further includes a Bootstrap Transaction Identifier (B-TID) or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID); The configuration device of the terminal device further comprises a fourth execution unit, and the fourth execution unit is configured to inquire whether a second key corresponding to the B-TID or the A-KID exists; The second verification unit is configured to obtain the second key from the network device via the fifth communication unit when the inquiry result obtained by the fourth execution unit is that there is no second key corresponding to the B-TID or the A-KID.

[0051] In an eleventh aspect, the present embodiment further provides a computer-readable storage medium having stored thereon a computer program, the program being configured to, when executed by a processor, implement the steps of the method according to the first, second, third, seventh or eighth aspect of the present embodiment.

[0052] In a twelfth aspect, an embodiment of the present application further provides a communication device, the communication device comprising a memory, a processor, and a computer program stored in the memory and executable by the processor, the computer program executing the program causing the processor to implement steps of the method according to the first, second, third, seventh or eighth aspect of the embodiment of the present application.

[0053] In the terminal device configuration method, apparatus, and communication device provided by the embodiments of the present application, the terminal device generates a second key based on a first key, encrypts and / or integrity protects a certificate request message based on the second key, and sends a request message, the request message including the certificate request message encrypted and / or integrity protected by the second key; a server receives the request message from the terminal device, the request message including the certificate request message encrypted and / or integrity protected by the second key, obtains the second key from a network device, the second key is generated by the network device based on the first key, and performs integrity verification and / or decryption on the request message based on the second key, issues an electronic certificate after authentication of the request message is completed, and sends a response message to the terminal device, the response message including the electronic certificate. When adopting the technical solutions of the embodiments of the present application, the security configuration of the digital certificate of the C-V2X terminal equipment can be achieved with "one touch" based on the GBA mechanism, without the need to change the security environment of the production line or to have a professional security organization perform the filling work, thereby improving the flexibility of the digital certificate configuration and reducing the deployment difficulty and investment costs. The present invention provides, for example, the following items. (Item 1) A method for configuring a terminal device, comprising: the terminal device generating a second key based on the first key and encrypting and / or integrity protecting the certificate request message based on the second key; A method for configuring a terminal device, comprising: sending a first request message, the first request message including the certificate request message encrypted and / or integrity protected by the second key. (Item 2) The method for configuring the terminal device includes: The method further includes the terminal device receiving a first response message from the server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message. Item 1. A method for configuring a terminal device according to item 1. (Item 3) the terminal device includes an application client, a baseband chip, and a universal subscriber identity module (USIM); The terminal device generating a second key based on the first key and encrypting and / or integrity protecting the certificate request message based on the second key, the application client triggering, via the baseband chip, the USIM to generate a second key based on the first key; The application client generates a first certificate request message and sends the first certificate request message to the USIM via the baseband chip; the USIM generating a public-private key pair, adding a public key in the public-private key pair to the first certificate request message, and signing the first certificate request message using a private key in the public-private key pair to obtain a second certificate request message; the USIM encrypting and / or integrity protecting the second certificate request message based on the second key and adding a first verification value to the second certificate request message; and transmitting the processed second certificate request message by the USIM to the application client via the baseband chip. Item 1. A method for configuring a terminal device according to item 1. (Item 4) transmitting the first request message the application client sending a first request message to a server, the first request message including the second certificate request message encrypted and / or integrity protected by the second key; the first request message further includes a Bootstrap Transaction Identifier (B-TID) and / or a fully qualified domain name (FQDN) of the server; A method for configuring a terminal device according to item 3. (Item 5) The terminal device includes an application client, a baseband chip, and a USIM; receiving a first response message from the server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message, by the terminal device, the application client receiving a first response message from the server and sending the first response message to the USIM via the baseband chip; the USIM performing integrity verification and / or decryption on the first response message based on the second key; After passing the verification, the USIM obtains the digital certificate carried in the first response message and stores the digital certificate in a security component. Item 2. A method for configuring a terminal device according to item 2. (Item 6) The method for configuring the terminal device includes: The method further includes the terminal device performing a Generic Bootstrapping Architecture (GBA) authentication process or an Application-Oriented Authentication or Key Management (AKMA) authentication process to negotiate the first key with a network device. Item 1. A method for configuring a terminal device according to item 1. (Item 7) A method for configuring a terminal device, comprising: receiving, by a server, a first request message from a terminal device, the first request message including a certificate request message encrypted and / or integrity protected by a second key; the server obtaining the second key from a network device, the second key being generated by the network device based on a first key; the server performs integrity verification and / or decryption on the first request message based on the second key, and issues a digital certificate after authentication of the first request message is completed; The method of configuring a terminal device includes: the server sending a first response message to the terminal device, the first response message including the digital certificate. (Item 8) The server transmitting a first response message to the terminal device includes: the server constructing a first response message that includes the digital certificate, encrypting and / or integrity protecting the first response message based on the second key, and adding a second verification value to the first response message; transmitting the processed first response message to the terminal device; Item 7. A method for configuring a terminal device according to item 7. (Item 9) the first request message further includes a Bootstrap Transaction Identifier (B-TID); The server obtaining the second key from the network device includes: the server querying whether a second key corresponding to the B-TID exists; If the result of the inquiry is that there is no second key corresponding to the B-TID, obtaining the second key from the network device. Item 7. A method for configuring a terminal device according to item 7. (Item 10) The server obtaining the second key from the network device includes: the server sending a second request message to the network device, the second request message being used to request the second key; receiving, by the server, a second response message transmitted from the network device, the second response message including the second key; Item 7. A method for configuring a terminal device according to item 7. (Item 11) A method for configuring a terminal device, comprising: generating a second key based on the pre-negotiated first key, and transmitting the second key to the server; (Item 12) The method for configuring the terminal device includes: The method further includes negotiating the first key with the terminal device by performing a Generic Bootstrapping Architecture (GBA) authentication process or an Application-Oriented Authentication or Key Management (AKMA) authentication process with the terminal device. Item 12. A method for configuring a terminal device according to item 11. (Item 13) The network device generates a second key based on a first key that has been pre-negotiated, and transmits the second key to a server, the network device generating a second key corresponding to each server based on the first key negotiated in advance, and transmitting the corresponding second key to each server; Item 12. A method for configuring a terminal device according to item 11. (Item 14) The network device generates a second key based on a first key that has been pre-negotiated, and transmits the second key to a server, receiving, by the network device, second request information sent from the server, the second request message being used to request the second key; the network device generating a second key based on the pre-negotiated first key and sending a second response message to the server, the second response message including the second key. A method for configuring a terminal device according to any one of items 11 to 13. (Item 15) A component device of a terminal device, comprising: a first generating unit; and a first communication unit; the first generating unit is configured to generate a second key based on the first key and to encrypt and / or integrity protect a certificate request message based on the second key; A configuration device for a terminal device, wherein the first communication unit is configured to send a first request message, the first request message including the certificate request message encrypted and / or integrity protected by the second key. (Item 16) the first communication unit is further configured to receive a first response message from a server, perform integrity verification and / or decryption on the first response message based on the second key, and obtain a digital certificate carried in the first response message. A component of the terminal equipment described in item 15. (Item 17) The first generating unit includes an application client, a baseband chip, and a universal subscriber identity module (USIM); the application client is configured to trigger, via the baseband chip, the USIM to generate a second key based on the first key, and further configured to generate a first certificate request message and send the first certificate request message to the USIM via the baseband chip; the USIM is configured to generate a public-private key pair, add a public key in the public-private key pair to the first certificate request message, sign the first certificate request message using a private key in the public-private key pair to obtain a second certificate request message, encrypt and / or integrity protect the second certificate request message based on the second key, add a first verification value to the second certificate request message, and send the second certificate request message encrypted and / or integrity protected by the second key to the application client via the baseband chip. A component of the terminal equipment described in item 15. (Item 18) the application client is configured to send a first request message to a server via the first communication unit, the first request message including the second certificate request message encrypted and / or integrity protected by the second key, the first request message further including a Bootstrap Transaction Identifier (B-TID) and / or a Fully Qualified Domain Name (FQDN) of the server; A component of the terminal equipment described in item 17. (Item 19) The first generating unit includes an application client, a baseband chip, and a universal subscriber identity module (USIM); the application client is configured to receive a first response message from the server via the first communication unit and send the first response message to the USIM via the baseband chip; the USIM is configured to perform integrity verification and / or decryption on the first response message based on the second key, obtain a digital certificate carried in the first response message after the verification is successful, and store the digital certificate in a security component. A component of the terminal equipment described in item 16. (Item 20) The component device of the terminal device further includes a first execution unit; The first execution unit is configured to execute a Generic Bootstrapping Architecture (GBA) authentication process or an Application Oriented Authentication or Key Management (AKMA) authentication process to negotiate the first key with a network device. A component of the terminal equipment described in item 15. (Item 21) A component device of a terminal device, comprising: a second communication unit; and a first verification unit; the second communication unit is configured to receive a first request message from a terminal device, the first request message including a certificate request message encrypted and / or integrity protected by a second key; the first verification unit is configured to obtain the second key from a network device, where the second key is generated by the network device based on the first key; and further configured to perform integrity verification and / or decryption on the first request message based on the second key, and issue a digital certificate after authentication of the first request message is completed; The second communication unit is further configured to send a first response message to the terminal device, the first response message including the digital certificate. (Item 22) the second communication unit is configured to construct a first response message including the digital certificate, encrypt and / or integrity protect the first response message based on the second key, add a second verification value to the first response message, and send the processed first response message to the terminal device. A component of the terminal equipment described in item 21. (Item 23) the first request message further includes a Bootstrap Transaction Identifier (B-TID); The configuration device of the terminal device further includes a second execution unit, which is configured to inquire whether a second key corresponding to the B-TID exists, and if the inquiry result is that a second key corresponding to the B-TID does not exist, to obtain the second key from the network device via the second communication unit. A component of the terminal equipment described in item 21. (Item 24) A component device of a terminal device, comprising: a second generating unit; and a third communication unit; the second generating unit is configured to generate a second key based on a pre-negotiated first key; The third communication unit is configured to transmit the second key to a server. (Item 25) The component device of the terminal device further includes a third execution unit; the third execution unit is configured to negotiate the first key with the terminal device by performing a Generic Bootstrapping Architecture (GBA) authentication process or an Application Oriented Authentication or Key Management (AKMA) authentication process with the terminal device; A component of the terminal equipment described in item 24. (Item 26) the second generating unit is configured to generate a second key corresponding to each server based on a pre-negotiated first key; the third communication unit is configured to send the corresponding second key to each server, respectively; A component of the terminal equipment described in item 24. (Item 27) A method for configuring a terminal device, comprising: the terminal device generating a second key based on the first key and encrypting and / or integrity protecting part or all of the first message based on the second key; and transmitting a first message. (Item 28) The method for configuring the terminal device includes: The method further includes the terminal device receiving a second message from a server and performing integrity verification and / or decryption on the second message based on the second key. Item 27. A method for configuring a terminal device according to item 27. (Item 29) the terminal device includes an application client, a baseband chip, and a universal subscriber identity module (USIM); The terminal device generating a second key based on the first key and encrypting and / or integrity protecting a part or all of the first message based on the second key is the application client triggering, via the baseband chip, the USIM to generate a second key based on the first key; the application client generating a first message and sending the first message to the USIM via the baseband chip; the USIM encrypting and / or integrity protecting part or all of the first message based on the second key; and transmitting the processed first message by the USIM to the application client via the baseband chip. Item 27. A method for configuring a terminal device according to item 27. (Item 30) transmitting the first message the application client sending the first message to a server; the first message further includes a Bootstrap Transaction Identifier (B-TID) and / or a Fully Qualified Domain Name (FQDN) of the server, or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID) and / or an FQDN; Item 29. A method for configuring a terminal device according to item 29. (Item 31) the terminal device includes an application client, a baseband chip, and a universal subscriber identity module (USIM); The terminal device receiving a second message from a server and performing integrity verification and / or decryption on the second message based on the second key, the application client receiving a second message from the server and sending the second message to the USIM via the baseband chip; and performing integrity verification and / or decryption on the second message based on the second key by the USIM. Item 29. A method for configuring a terminal device according to item 28. (Item 32) A method for configuring a terminal device, comprising: receiving, by a server, a first message from a terminal device, part or all of the first message being encrypted and / or integrity protected with a second key; the server obtaining the second key from a network device, the second key being generated by the network device based on a first key; The server performs integrity verification and / or decryption on the first message based on the second key. (Item 33) The method for configuring the terminal device includes: the server encrypting and / or integrity protecting part or all of a second message based on the second key; sending a second message. Item 33. A method for configuring a terminal device according to item 32. (Item 34) the first message further includes a Bootstrap Transaction Identifier (B-TID) or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID); The server obtaining the second key from the network device includes: the server querying whether a second key corresponding to the B-TID or the A-KID exists; If the result of the inquiry is that there is no second key corresponding to the B-TID, obtaining the second key from the network device. Item 33. A method for configuring a terminal device according to item 32. (Item 35) A component of a terminal device, comprising: a third generating unit; and a fourth communication unit; the third generating unit is configured to generate a second key based on the first key, and to encrypt and / or integrity protect part or all of the first message based on the second key; The fourth communication unit is configured to transmit a first message. (Item 36) the fourth communication unit is further configured to receive a second message from a server and perform integrity verification and / or decryption on the second message based on the second key. A component of the terminal equipment described in item 35. (Item 37) the third generating unit includes an application client, a baseband chip, and a universal subscriber identity module (USIM); the application client is configured to trigger, via the baseband chip, the USIM to generate a second key based on the first key, and further configured to generate a first message and send the first message to the USIM via the baseband chip; the USIM is configured to encrypt and / or integrity protect part or all of the first message based on the second key, and to transmit the processed first message to the application client via the baseband chip; A component of the terminal equipment described in item 35. (Item 38) the application client is further configured to send the first message to a server; the first message further includes a Bootstrap Transaction Identifier (B-TID) and / or a Fully Qualified Domain Name (FQDN) of the server, or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID) and / or an FQDN; A component of the terminal equipment described in item 37. (Item 39) the third generating unit includes an application client, a baseband chip, and a universal subscriber identity module (USIM); the application client is configured to receive a second message from the server and send the second message to the USIM via the baseband chip; the USIM is configured to perform integrity verification and / or decryption on the second message based on the second key. A component of the terminal equipment described in item 36. (Item 40) A component device of a terminal device, comprising: a fifth communication unit; and a second verification unit; the fifth communication unit is configured to receive a first message from a terminal device, part or all of the first message being encrypted and / or integrity protected by a second key; A configuration device of a terminal device, wherein the second verification unit is configured to obtain the second key from a network device, the second key being generated by the network device based on the first key, and further configured to perform integrity verification and / or decryption on the first message based on the second key. (Item 41) The component device of the terminal device further includes a fourth generating unit; the fourth generating unit is configured to encrypt and / or integrity protect part or all of a second message based on the second key; the fifth communication unit is further configured to transmit a second message; A component of the terminal equipment described in item 40. (Item 42) the first message further includes a Bootstrap Transaction Identifier (B-TID) or includes an Application Oriented Authentication or Key Management (AKMA) Key Identifier (A-KID); The configuration device of the terminal device further comprises a fourth execution unit, and the fourth execution unit is configured to inquire whether a second key corresponding to the B-TID or the A-KID exists; the second verification unit is configured to obtain the second key from the network device via the fifth communication unit when the inquiry result obtained by the fourth execution unit is that there is no second key corresponding to the B-TID or the A-KID; A component of the terminal equipment described in item 40. (Item 43) A computer-readable storage medium having a computer program stored thereon, The computer program, when executed by a processor, implements the steps of the method according to any one of items 1 to 6, or When the program is executed by a processor, it realizes the steps of the method according to any one of items 7 to 10, or When the program is executed by a processor, it realizes the steps of the method according to any one of items 11 to 14, or When the program is executed by a processor, it performs the steps of the method according to any one of items 27 to 31, or A computer-readable storage medium that, when executed by a processor, implements the steps of the method according to any one of items 32 to 34. (Item 44) A communications device comprising: a memory; a processor; and a computer program stored in the memory and executable by the processor; When the processor executes the program, the processor performs the steps of the method according to any one of items 1 to 6, or When the processor executes the program, the processor performs the steps of the method according to any one of items 7 to 10, or When the processor executes the program, the processor performs the steps of the method according to any one of items 11 to 14, or When the processor executes the program, the processor performs the steps of the method according to any one of items 27 to 31, or A communications device in which the processor, when executing the program, implements the steps of the method described in any one of items 32 to 34. [Brief explanation of the drawings]

[0054] [Figure 1] 1 is a schematic diagram of the GBA architecture.

[0055] [Figure 2] 1 is a flowchart 1 of a method for configuring a terminal device according to an embodiment of the present application;

[0056] [Figure 3] 1 is a schematic diagram of a GBA expansion architecture according to an embodiment of the present application;

[0057] [Figure 4] 1 is a schematic diagram of an option architecture of a terminal device according to an embodiment of the present application;

[0058] [Figure 5] 2 is a flowchart 2 of a method for configuring a terminal device according to an embodiment of the present application;

[0059] [Figure 6] 3 is a flowchart 3 of a method for configuring a terminal device according to an embodiment of the present application;

[0060] [Figure 7A] 1 is an interaction flowchart 1 of a terminal device configuration method according to an embodiment of the present application; [Figure 7B]1 is an interaction flowchart 1 of a terminal device configuration method according to an embodiment of the present application;

[0061] [Figure 8] 1 is a schematic diagram illustrating the configuration of a component device of a terminal device according to an embodiment of the present invention.

[0062] [Figure 9] 2 is a schematic diagram illustrating the configuration of the components of the terminal device according to the embodiment of the present invention. FIG.

[0063] [Figure 10] 3 is a schematic diagram showing the configuration of the components of the terminal device according to the embodiment of the present invention; FIG.

[0064] [Figure 11] 4 is a flowchart 4 of a method for configuring a terminal device according to an embodiment of the present application;

[0065] [Figure 12] 5 is a flowchart 5 of a method for configuring a terminal device according to an embodiment of the present application;

[0066] [Figure 13] 2 is an interaction flowchart 2 of a terminal device configuration method according to an embodiment of the present application;

[0067] [Figure 14] 4 is a schematic diagram showing the configuration of the components of the terminal device according to the embodiment of the present invention. FIG.

[0068] [Figure 15] 5 is a schematic diagram showing the configuration of the components of the terminal device according to the embodiment of the present application.

[0069] [Figure 16] FIG. 1 is a schematic diagram illustrating a hardware configuration of a communication device according to an embodiment of the present application. DETAILED DESCRIPTION OF THE INVENTION

[0070] The present application will now be described in more detail with reference to the drawings and specific embodiments.

[0071] An embodiment of the present application provides a method for configuring a terminal device. Figure 2 is a flowchart 1 of the method for configuring a terminal device according to an embodiment of the present application. As shown in Figure 2, the method includes the following steps:

[0072] In step 101, the terminal device generates a second key based on the first key, and encrypts and / or integrity protects the certificate request message based on the second key.

[0073] In step 102, a first request message is sent, the first request message including the certificate request message encrypted and / or integrity protected by the second key.

[0074] The terminal device configuration method (hereinafter referred to as the method) of this embodiment is applied to a terminal device, and the terminal device may specifically be a vehicle Internet terminal device (which may also be called a C-V2X Device). In some alternative embodiments, the vehicle Internet terminal device may be, for example, an OBU (On Board Unit), an RSU (Road Side Unit), etc.; in other alternative embodiments, the vehicle Internet terminal device may be a pedestrian handheld device, a wearable device, etc.

[0075] In some alternative embodiments of the present application, the method further includes the terminal device performing a GBA authentication process or an Authentication and Key Management for Applications (AKMA) authentication process to negotiate the first key with a network device.

[0076] Specifically, the network device here may be a NAF or AP in the GBA authentication process, and furthermore, in the AKMA authentication process, the network device may be a Network Exposure Function (NEF), which is used to expose network functions for use by other network elements.

[0077] One possible embodiment in which the terminal pre-negotiates the first key with the network device (here taken as an example of a C-V2X device based on the GBA authentication process) is as follows:

[0078] The C-V2X device performs AKA authentication with the BSF, and after the BSF returns a 200 OK response, the C-V2X device generates a GBA session key, i.e., the first key. When the C-V2X device subsequently accesses the NAF / AP, the NAF / AP requests the BSF to negotiate the generation of the same GBA session key, i.e., the first key. The NAF / AP then provides GBA services to a C-V2X service provider (e.g., a C-V2X application server). The NAF / AP obtains the GBA session key, i.e., the first key, from the BSF, thereby completing the first key negotiation process between the terminal and the network equipment.

[0079] When a C-V2X device needs to interact with a server for a service message (e.g., to apply for a digital certificate), the C-V2X device initiates an application request to the server. At this time, the server accesses the NAF / AP via a secure connection pre-established in the network equipment, requests the NAF / AP to generate a second key for this service based on the first key, and obtains the generated second key. Based on the second key, the C-V2X terminal and the server can perform security processing such as encryption and integrity protection on the interacting service messages, which corresponds to establishing a secure communication channel between the C-V2X terminal and the server.

[0080] Here, the server here may be a C-V2X application server, which may be a CA server (CA is a Certificate Authority). In this architecture, the CA server may be an enrolment CA server or an authorization CA server. That is, if the C-V2X device applies for an enrolment certificate, the server is an enrolment CA server (ECA), and if the C-V2X applies for an authorization certificate, application certificate, or identity certificate, the server is an authorization CA server (ACA). The CA server may be deployed by the MNO itself or a third party, and may provide certificate services to the C-V2X device.

[0081] Here, establishing a secure communication channel between the C-V2X terminal and the server involves the terminal device obtaining a first key after passing the GBA authentication process and then generating a second key based on the first key. Meanwhile, the server side can obtain the second key from the network device (the network device NAF / AP negotiates the first key with the terminal in advance, and when the server needs the second key, generates the second key based on the first key and returns the second key to the server; this process will be described in detail later). In this way, both the terminal device and the server obtain the second key and securely protect and send / receive messages based on the second key, thereby establishing an actual secure channel (also called a secure connection, secure link, etc.) between the terminal device and the server, which is used to effectively protect messages sent and received based on the second key.

[0082] The first key here may also be called a shared session key, and a second key is generated based on the first key, and the second key may also be called an application session key or a session key.

[0083] Note that the terminal device to which the method is applied may be arranged in the GBA extended architecture shown in Fig. 3. In the extended architecture, the network device NAF / AP is shared by a small number of C-V2X application servers (e.g., CA servers). (Referring to the C-V2X Service Provider dummy box in Fig. 3, the dummy box does not include a NAF / AP network element, and the NAF / AP network element is arranged on the network operator (MNO: Mobile Network Operator) side, and multiple CA servers (C-V2X Application Servers in the figure) share the NAF / AP network element.) Naturally, multiple CA servers sharing one NAF / AP network element can significantly reduce deployment costs and ease maintenance difficulties.

[0084] Furthermore, based on the GBA session key (e.g., Ks_int_NAF) provided by the Bootstrapping Server Function (BSF) during the security association process for GBA bootstrap, the network device NAF / AP further obtains the GBA application session key (Ks_int_NAF) of each C-V2X application server (e.g., CA server). * (expressed as K * At the same time, the C-V2X device also shares the same K * is obtained locally, and then transmitted to the upper layer C-V2X Application Client. * In this way, the CA server and the C-V2X device share the same GBA application session key K * The CA server and the C-V2X device share the K *to achieve mutual authentication, protect transmitted messages, establish a secure channel, etc., and then use the shared GBA application session key K * can be used to secure the application and issuance process for C-V2X certificates.

[0085] The method of this embodiment allows users to configure digital certificates using a "one-touch" trigger. Specifically, the user can easily trigger the terminal to start the certificate configuration operation by clicking a trigger through the terminal's human interface or other interface software. After receiving the trigger command, the terminal automatically completes operations such as access authentication, secure channel establishment, key generation, digital certificate application, and subsequent digital certificate download and secure storage with the server, thereby achieving initial security configuration of the terminal device. Compared to existing offline and online configuration methods, this method has a higher degree of automation, lower application and maintenance costs, fewer manual steps, and is easier to disseminate.

[0086] In some alternative embodiments of the present application, the terminal equipment includes an application client (which may also be referred to as a C-V2X application client), a baseband chip (which may also be referred to as a device modem, which is used to access a 4G or 5G network), and a Universal Subscriber Identity Module (USIM). and the USIM encrypting and / or integrity protecting the second certificate request message based on the second key; and the USIM transmitting the processed second certificate request message to the application client via the baseband chip.

[0087] Here, the second key may consist of only one key or multiple keys (i.e., the multiple keys are all generated based on the first key and are collectively referred to as the second key). In one possible embodiment, the second key consists of multiple keys, for example, an encryption key and / or an integrity protection key. Of course, it may also include other types of keys according to actual needs, and these will not be described again here. Furthermore, the process of the USIM encrypting the second certificate request message based on the second key may include the USIM encrypting the plaintext second certificate request message using an encryption key in the second key to generate a ciphertext. And / or the process of the USIM integrity protecting the second certificate request message based on the second key may include the USIM integrity protecting the message using an integrity protection key in the second key, for example, calculating a first verification value on the encrypted message using the integrity protection key, and then adding the calculated first verification value to the second certificate request message. Here, optionally, the first verification value may be a Hash-based Message Authentication Code (HMAC) value, and exemplarily, the USIM may calculate the first verification value based on some bits in the message. Note that "adding the calculated first verification value to the second certificate request message" is actually a step in a message integrity protection process, and this step is emphasized to more clearly explain how to subsequently protect the second certificate request message.

[0088] FIG. 4 is a schematic diagram of an optional architecture of a terminal device according to an embodiment of the present application. As shown in FIG. 4, the terminal device may include an application layer, user libraries, a Linux kernel, and a hardware layer. Here, the application layer may include a CA management application and a V2X application. The user libraries may include a GBA interface library, a USIM interface library, a Hardware Security Module (HSM) interface library, and an LTE-V2X interface library. The hardware layer may include an HSM, an LTE-V2X communication assembly, and an LTE-Uu communication assembly. The LTE-Uu communication assembly may include a baseband chip and a USIM. Here, the LTE-Uu communication assembly, the LTE-V2X communication assembly, and the HSM may be realized as separate modules or components or may be packaged into one module / assembly, but this does not affect the logical functional division thereof.

[0089] In this example, the CA management application (i.e., CA application client) is control software that enables a terminal device (e.g., a C-V2X terminal device) to realize "initial security one-touch configuration" and is responsible for logical control of the entire service process. The V2X application (also referred to as a C-V2X application) is a service application module that enables a terminal device to realize V2X direct communication via the PC5 / V5 interface and is responsible for controlling the sending and receiving of direct communication service messages. The V2X application accesses the LTE-V2X communication assembly in the hardware layer by calling the LTE-V2X interface library and realizes C-V2X service interaction with other terminal devices.

[0090] The GBA interface library, USIM interface library, and HSM interface library are call interfaces that the underlying hardware modules of the terminal open to higher-level applications, and are used to call the GBA secure access authentication function supported by the LTE-Uu communication assembly, the digital certificate management application function and security function provided by the USIM, and the secure storage and calculation function provided by the HSM, respectively.

[0091] Of course, the configuration architecture of the terminal device in the embodiment of the present application is not limited to that shown in FIG. 4, and other architecture forms may be within the protection scope of the embodiment of the present application.

[0092] The application client in this embodiment is responsible for the function of realizing the CA management application and for managing the digital certificates of the terminal devices, and specifically, can refer to the CA management application in FIG.

[0093] In this embodiment, the application client triggers the USIM to generate a second key based on the first key by calling the baseband chip and the USIM interface library. The application client generates a first certificate request message based on a "one-touch trigger," calls a USIM reconfiguration certificate request interface (i.e., a first USIM interface), and sends the first certificate request message to the USIM via the baseband chip. Of course, the first USIM interface in this embodiment is not limited to the USIM reconfiguration certificate request interface, and other interface names for requesting a reconfiguration certificate are also within the scope of protection of the embodiments of the present application. After receiving the first certificate request message, the USIM generates a public-private key pair based on a random number generator within its UICC (Universal Integrated Circuit Card), completes the certificate request message in accordance with the protocol format requirements of the C-V2X-related specifications, adds the public key in the public-private key pair to the first certificate request message, and signs the first certificate request message using the private key in the public-private key pair to obtain a second certificate request message, where the USIM can encrypt and / or integrity protect the second certificate request based on the second key. Then, the USIM sends the processed second certificate request message to the application client via the baseband chip and via an interface library.

[0094] Here, the UICC is secure hardware with a security level of EAL4+, which can realize USIM functions and ensure the security of Ks_int_NAF (i.e., the first key). Specifically, the UICC can be understood as a general-purpose architecture or a security carrier. When USIM functions are implemented in this general-purpose architecture, the USIM functions are realized, i.e., it becomes a USIM. In practice, the UICC can implement many applications, i.e., the architecture can support the implementation of many functions. In the embodiment of the present application, the USIM is implemented, so the USIM also has high security. Furthermore, operations such as certificate public-private key pair generation, cryptographic calculation, and secure storage are performed within the USIM, effectively ensuring terminal security. Security risks such as the leakage of confidential information due to key calculation and storage in insecure devices such as the terminal CPU or memory are avoided. Furthermore, by performing the above security operations using an existing USIM as the terminal's security device, the addition of new security hardware to the terminal is avoided, thereby reducing the hardware implementation cost of the terminal.

[0095] For example, the digital certificate in this embodiment may be called an enrollment certificate (EC) and is used to identify a trusted terminal device, so it is necessary to realize the initial security configuration of the digital certificate on the terminal device in a secure manner. Correspondingly, the server in this embodiment may be an ECA server, i.e., an authorized CA server.

[0096] In some alternative embodiments of the present application, sending the first request message includes the application client sending a first request message to a server, the first request message including the second certificate request message encrypted and / or integrity protected by the second key, and the first request message further including a Bootstrapping-Transaction Identifier (B-TID) and / or a Fully Qualified Domain Name (FQDN) of the server.

[0097] In some alternative embodiments of the present application, the configuration method of the terminal device further includes the terminal device receiving a first response message from the server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message.

[0098] In this embodiment, the first response message may be carried by a HyperText Transfer Protocol (HTTP) message, for example, an HTTP 200 OK message.

[0099] In some alternative embodiments of the present application, the terminal device includes an application client, a baseband chip, and a USIM, and the terminal device receiving a first response message from the server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining the digital certificate carried in the first response message includes the application client receiving the first response message from the server and sending the first response message to the USIM via the baseband chip, the USIM performing integrity verification and / or decryption on the first response message based on the second key, and after the verification is successful, the USIM obtaining the digital certificate carried in the first response message and storing the digital certificate in a security component.

[0100] In this embodiment, the application client receives a first response message from the CA server, invokes a USIM security verification interface (i.e., a second USIM interface), and sends the first response message to the USIM via the baseband chip. Of course, the second USIM interface in this embodiment is not limited to a USIM security verification interface, and other interfaces used for security verification are also within the scope of protection of the embodiments of the present application. The USIM performs integrity verification and / or decryption on the first response message based on the second key, where the first response message carries a second verification value, and the integrity verification is to verify the second verification value carried in the first response message. Optionally, the second verification value may be an HMAC value. For example, the USIM calculates a verification value based on several bits in the message, and then compares the verification value with the second verification value. If they match, the integrity verification is successful. After the verification is successful, the USIM obtains the digital certificate carried in the first response message.

[0101] In this embodiment, the USIM stores the digital certificate in a security component. Exemplarily, the USIM (which may include an HSM) is a local security entity / module of the terminal device, providing a reliable security environment for data calculation, storage, and processing. To ensure the security of V2X service data, keys (e.g., secret parameters such as a first key and a public-private key pair), digital certificates, and related calculations should generally be processed by a local security entity / module of the terminal device, thereby ensuring security in the digital certificate security configuration process of the C-V2X terminal device.

[0102] Based on the above embodiment, the embodiment of the present application further provides a configuration method for a terminal device. Figure 5 is a flowchart 2 of the configuration method for a terminal device according to the embodiment of the present application. As shown in Figure 5, the method includes the following steps:

[0103] In step 201, the server receives a first request message from a terminal device, the first request message including a certificate request message encrypted and / or integrity protected by a second key.

[0104] In step 202, the second key is obtained from a network device, the second key being generated by the network device based on the first key.

[0105] In step 203, the first request message is subjected to integrity verification and / or decryption based on the second key, and a digital certificate is issued after the first request message is authenticated.

[0106] In step 204, a first response message is sent to the terminal device, where the first response message includes the digital certificate.

[0107] In this embodiment, with the user's "one-touch" trigger, the terminal device can automatically complete operations such as server access authentication and secure channel establishment, key generation and digital certificate application, and subsequent digital certificate download and secure storage based on the GBA technology mechanism or the AKMA authentication mechanism, thereby realizing the initial security configuration of the terminal device.

[0108] In this embodiment, the server receives a first request message from the terminal device through the established secure channel. Illustratively, the server can receive the first request message from the terminal device through a network device, i.e., the first request message is sent by the terminal device, reaches the network device, and then is sent by the network device to the server.

[0109] In this embodiment, the first request message includes a certificate request message encrypted and / or integrity protected by a second key, so the server needs to obtain the second key. Exemplarily, the server obtains the second key from the network device. During the GBA authentication process or the AKMA authentication process by the terminal device, the terminal device negotiates the first key with the network device, and the first key may also be referred to as a shared session key.

[0110] In some alternative embodiments, the server obtaining the second key from the network device includes the server sending a second request message to the network device, the second request message being used to request the second key, and the server receiving a second response message sent from the network device, the second response message including the second key.

[0111] In this embodiment, the server can send a second request message to the network device, and the second request message is used to request a second key. After receiving the second request message, the network device generates a second key based on the first key previously negotiated, and then sends a second response message to the server, and the second key is included in the second response message, so that the server obtains the second key.

[0112] In some other alternative embodiments, after receiving a first request message for requesting a digital certificate sent from a terminal device, the network device may generate a second key based on a first key previously negotiated, and transmit the second key to the server in the process of transmitting the first request message to the server.

[0113] In some alternative embodiments of the present application, the first request message further includes a B-TID, and the server obtaining the second key from the network device includes the server querying whether a second key corresponding to the B-TID exists, and if the query result is that a second key corresponding to the B-TID does not exist, obtaining the second key from the network device.

[0114] In this embodiment, the server may obtain a second key corresponding to the B-TID in advance. In this case, after receiving the first request message, the server may first inquire whether a second key corresponding to the B-TID exists via the B-TID carried in the first request message. If the inquiry result indicates that a second key corresponding to the B-TID does not exist, the server may obtain the second key from the network device. If a second key corresponding to the B-TID exists, the server may directly obtain the second key corresponding to the B-TID.

[0115] In this embodiment, the message sent from the terminal device is encrypted and / or integrity protected by the second key, so after the server obtains the second key, it performs integrity verification and / or decryption on the first request message based on the second key, and issues an electronic certificate after completing authentication of the first request message.

[0116] In this embodiment, the certificate request message further includes a first verification value, and the first verification value is HMAC Alternatively, the server may calculate a verification value based on some bits in the first request message, and then compare the verification value with the first verification value. If they match, it indicates that the integrity verification has passed.

[0117] In some alternative embodiments of the present application, the server sending the first response message to the terminal device includes the server constructing a first response message including the digital certificate, encrypting and / or integrity protecting the first response message based on the second key, adding a second verification value to the first response message, and sending the processed first response message to the terminal device. Similarly, adding the second verification value here is also part of the integrity protection process for the first response message, and in these embodiments, the step of adding the second verification value is emphasized to more clearly explain how to subsequently process the first response message.

[0118] In this embodiment, after issuing the digital certificate, the server constructs a first response message (or certificate response message) according to the protocol format requirements of the C-V2X related specifications, calculates a second verification value based on some bits in the first response message, adds the second verification value to the first response message, and sends the processed first response message to the terminal device. Exemplarily, the first response message may be carried by an HTTP message, for example, an HTTP 200 OK message.

[0119] Based on the above embodiment, the embodiment of the present application further provides a configuration method for a terminal device. Figure 6 is a flowchart 3 of the configuration method for a terminal device according to the embodiment of the present application. As shown in Figure 6, the method includes the following steps:

[0120] In step 301, the network device generates a second key based on a pre-negotiated first key.

[0121] In step 302, the second key is sent to a server.

[0122] In this embodiment, the network device may specifically be a NAF / AP. The terminal device performs a GBA authentication process or an AKMA authentication process, and initiates the establishment of a secure access connection (or a secure channel, a secure link, etc.) with the server. After the authentication is completed, the terminal device has negotiated a first key with the network device, and the first key may also be called a shared session key.

[0123] In some alternative embodiments, the network device may receive a second request message from the server, the second request message being used to request a second key, the network device generating the second key based on the pre-negotiated first key, and then transmitting a second response message to the server, the second response message including the second key, thereby allowing the server to obtain the second key. In other alternative embodiments, the network device may receive a first request message from a terminal device to request a digital certificate, then generate a second key based on the pre-negotiated first key, and transmit the second key to the server in the process of transmitting the first request message to the server.

[0124] In some alternative embodiments of the present application, the method further includes negotiating the first key with the network device terminal device by performing a GBA authentication process or an AKMA authentication process with the terminal device.

[0125] When adopting the technical solutions of the embodiments of the present application, the security configuration of the digital certificate of the C-V2X terminal equipment can be achieved with "one touch" based on the GBA mechanism, without the need to change the security environment of the production line or to have a professional security organization perform the filling work, thereby improving the flexibility of the digital certificate configuration and reducing the deployment difficulty and investment costs.

[0126] Hereinafter, a method for configuring a terminal device according to an embodiment of the present invention will be described with reference to a specific application scenario.

[0127] In this example, a case will be described in which the terminal device is a C-V2X device and the network device is a NAF / AP. Here, the C-V2X device includes a USIM, a baseband chip, and an application client. The baseband chip may also be referred to as a device modem, and the application client may also be referred to as a C-V2X application client. The CA server in the above example is referred to as an application server or a C-V2X application server in this example. Figures 7A and 7B are interaction flowcharts 1 of a terminal device configuration method according to an embodiment of the present application. As shown in Figures 7A and 7B, the method includes the following steps:

[0128] In step 401, the C-V2X application client initiates a GBA activation request to the baseband chip.

[0129] When the C-V2X device needs to be initialized and a digital certificate configured, the application client invokes the underlying baseband chip via the GBA interface library to initiate the GBA authentication process and initiate the establishment of a secure access connection to a CA server (e.g., ECA server).

[0130] In step 402, a GBA authentication process is performed to negotiate a shared session key Ks_int_NAF (ie, the first key in the above embodiment) with the NAF / AP.

[0131] In step 403, the baseband chip sends a GBA response to the C-V2X application client in response to the GBA activation request.

[0132] In steps 404 to 408, if the GBA extension technology is adopted, the C-V2X application client sends a message to the USIM by calling an interface, i.e., a USIM interface library (e.g., a USIM reconfiguration certificate request interface), so that the USIM obtains an application session key Ks_int_NAF based on the Ks_int_NAF. * (i.e., the second key), and the USIM sends a message to the C-V2X application client via the baseband chip and interface return, i.e., by calling the USIM interface library, to send the C-V2X application client the application session key K * has already been generated.

[0133] For example, a message transmitted by a C-V2X application client to a USIM may carry a B-TID, an IMPI, and a NAF identifier (ID). After receiving the message, the USIM derives an application session key K based on Ks_int_NAF. * Generate.

[0134] In steps 409 to 410, the C-V2X application client forms a certificate request message (i.e., the first certificate request message described above) and prepares to apply for a digital certificate from the CA server. The C-V2X application client transmits a message to the USIM via the baseband chip by calling an interface, i.e., calling the USIM reconfiguration certificate request interface, and the transmitted message carries the prepared certificate request message (i.e., the first certificate request message in the described embodiment).

[0135] In step 411, after receiving the certificate request message, the USIM generates a public-private key pair, adds the public key in the public-private key pair to the certificate request message, signs the certificate request message using the private key in the public-private key pair to obtain a second certificate request message, encrypts and / or integrity protects the second certificate request message based on the second key, and adds an HMAC value to the second certificate request message.

[0136] Specifically, the USIM performs the following operations: 1) Using the random number generator inside the UICC, the public and private key pair required for the EC digital certificate is generated. 2) Completing the certificate request message and adding the public key in the generated public-private key pair according to the protocol requirements of the C-V2X related specifications. 3) Sign the certificate request message using the private key in the public-private key pair. 4) Application Session Key K * and appends the HMAC value to the message to obtain a second certificate request message.

[0137] In steps 412 and 413, the USIM transmits a message to the C-V2X application client by returning the baseband chip and interface, i.e., by calling the USIM interface library, and the transmitted message includes the application session key K * The second certificate request message includes a second certificate request message encrypted and / or integrity protected by

[0138] In step 414, the C-V2X application client sends a request message to the CA server, the request message including K * The second certificate request message is protected by the .certificateID and carries information such as the B-TID and Server FQDN.

[0139] Here, exemplarily, the request message is transmitted to the CA server by the NAF / AP.

[0140] In steps 415 to 417, the CA server interacts with the NAF / AP via a pre-established secure channel and sends the NAF / AP an application session key K based on Ks_int_NAF. * and generate an application session key K * and related information thereof. The related information is, for example, an application session key K * This includes survival time of the

[0141] Here, the NAF / AP sends the application session key K to the CA server via an HTTP 200 OK response message. * and related information can be transmitted.

[0142] Here, the request message sent from the CA server to the NAF / AP also includes information such as the B-TID and the server FQDN.

[0143] In step 418, the CA server generates the application session key K* After obtaining the application session key K * and after the request message is authenticated, issues a digital certificate, constructs a response message including the digital certificate, and generates an application session key K. * and encrypts and / or integrity protects the response message based on the HMAC value and adds an HMAC value to the response message.

[0144] Specifically, the CA server can perform the following operations: 1) Application Session Key K * to verify the HMAC value of the request message and decrypt the message. 2) Perform authorization verification on the certificate request message, and if the authorization verification is passed, issue a digital certificate for the C-V2X device. 3) Construct a response message in accordance with the protocol requirements of the C-V2X related specifications, and the response message includes the issued digital certificate. 4) Application Session Key K * encrypts and integrity protects the response message using and adds an HMAC value to the response message.

[0145] In step 419, the CA server transmits the application session key K to the C-V2X application client. * , and returns a response message protected by the HTTP 200 OK message.

[0146] In steps 420 and 421, the C-V2X application client calls an interface, i.e., calls a USIM security verification interface, and transmits a message to the USIM through the baseband chip. The transmitted message includes the above-mentioned application session key K * The response message is protected by

[0147] In steps 422 to 424, the USIM receives the application session key K * After the verification is successful, the USIM securely stores the digital certificate issued by the CA server in the security component and transmits a result status indication to the C-V2X application client by the baseband chip via the return interface.

[0148] The embodiment of the present application further provides a component device of the terminal device, which is applied to the terminal device. Figure 8 is a schematic diagram 1 showing the configuration of the component device of the terminal device of the embodiment of the present application. As shown in Figure 8, the device includes a first generating unit 11 and a first communication unit 12; the first generating unit 11 is configured to generate a second key based on the first key and to encrypt and / or integrity protect the certificate request message based on the second key; The first communication unit 12 is configured to send a first request message, the first request message including the certificate request message encrypted and / or integrity protected by the second key.

[0149] In some alternative embodiments of the present application, the first communication unit 12 is further configured to receive a first response message from a server, perform integrity verification and / or decryption on the first response message based on the second key, and obtain a digital certificate carried in the first response message.

[0150] In some alternative embodiments of the present application, the first generating unit 11 includes an application client, a baseband chip, and a USIM; the application client is configured to trigger, via the baseband chip, the USIM to generate a second key based on the first key, and further configured to generate a first certificate request message and send the first certificate request message to the USIM via the baseband chip; The USIM is configured to generate a public-private key pair, add a public key in the public-private key pair to the first certificate request message, sign the first certificate request message using a private key in the public-private key pair to obtain a second certificate request message, encrypt and / or integrity protect the second certificate request message based on the second key, add a first verification value to the second certificate request message, and send the second certificate request message encrypted and / or integrity protected by the second key to the application client via the baseband chip.

[0151] In some alternative embodiments of the present application, the application client is configured to send a first request message to the server via the first communication unit 12, the first request message including the second certificate request message encrypted and / or integrity protected by the second key, and the first request message further including a B-TID and / or a server FQDN.

[0152] In some alternative embodiments of the present application, the first generating unit 11 includes an application client, a baseband chip, and a USIM; the application client is configured to receive a first response message from the server via the first communication unit 12, and send the first response message to the USIM via the baseband chip; The USIM is configured to perform integrity verification and / or decryption on the first response message based on the second key, and after passing the verification, obtain a digital certificate carried in the first response message, and store the digital certificate in a security component.

[0153] In some alternative embodiments of the present application, the configuration device of the terminal equipment further comprises a first execution unit, the first execution unit being configured to perform a GBA authentication process or an AKMA authentication process and negotiate the first key with a network device.

[0154] In the embodiment of the present application, the first generating unit 11, the first communication unit 12, and the first execution unit of the device can be realized in actual applications by a central processing unit (CPU), a digital signal processor (DSP), a microcontroller (MCU) or a field-programmable gate array (FPGA), combined with a communication assembly (including a basic communication kit, an operating system, a communication module, standardized interfaces and protocols, etc.) and a transceiver antenna.

[0155] The present embodiment further provides a configuration device of a terminal device applied to a server. Figure 9 is a schematic diagram 2 showing the configuration of the configuration device of a terminal device according to the present embodiment. As shown in Figure 9, the device includes a second communication unit 21 and a verification unit 22: The second communication unit 21 is adapted to receive a first request message from a terminal device, the first request message comprising a certificate request message encrypted and / or integrity protected by a second key.

[0156] the verification unit 22 is configured to obtain the second key from the network device, where the second key is generated by the network device based on the first key; and further configured to perform integrity verification and / or decryption on the first request message based on the second key, and issue a digital certificate after authentication of the first request message is completed; The second communication unit 21 is further configured to send a first response message to the terminal device, where the first response message includes the digital certificate.

[0157] In some alternative embodiments of the present application, the second communication unit 21 is configured to construct a first response message including the digital certificate, encrypt and / or integrity protect the first response message based on the second key, add a second verification value to the first response message, and transmit the processed first response message to the terminal device.

[0158] In some alternative embodiments of the present application, the first request message further includes a B-TID; The configuration device of the terminal equipment further includes a second execution unit, which is configured to inquire whether a second key corresponding to the B-TID exists, and if the inquiry result is that a second key corresponding to the B-TID does not exist, to obtain the second key from the network equipment via the second communication unit.

[0159] In some alternative embodiments of the present application, the second communication unit 21 is configured to: send a second request message to the network device, where the second request message is used to request the second key; and receive a second response message sent from the network device, where the second response message includes the second key.

[0160] In the embodiment of the present application, the second communication unit 21, the verification unit 22, and the second execution unit in the device can be realized by a CPU, a DSP, an MCU, or an FPGA in practical applications, in combination with a communication assembly (including a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna.

[0161] The embodiment of the present application further provides a configuration device for a terminal device applied to a network device. Figure 10 is a schematic diagram 3 showing the configuration of the configuration device for a terminal device according to the embodiment of the present application. As shown in Figure 10, the device includes a second generating unit 31 and a third communication unit 32; the second generating unit 31 is configured to generate a second key based on a pre-negotiated first key; The third communication unit 32 is configured to transmit the second key to a server.

[0162] In some alternative embodiments of the present application, the configuration device of the terminal device further comprises a third execution unit, the third execution unit being configured to negotiate the first key with the terminal device by performing a GBA authentication process or an AKMA authentication process with the terminal device.

[0163] In some alternative embodiments of the present application, the second generating unit 31 is configured to generate a second key corresponding to each server based on a pre-negotiated first key; The third communication unit 32 is configured to send the corresponding second key to each server respectively.

[0164] In some alternative embodiments of the present application, the third communication unit 32 is configured to receive second request information sent from the server, where the second request message is used to request the second key, and to send a second response message to the server, where the second response message includes the second key generated by the second generation unit 31.

[0165] In the embodiment of the present application, the second generating unit 31, the third communication unit 32, and the third execution unit in the device can be realized by a CPU, a DSP, an MCU, or an FPGA in practical applications, in combination with a communication assembly (including a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna.

[0166] It should be noted that, when the terminal device configuration device provided by the above embodiments performs configuration, only the division of each of the above program modules is taken as an example for description, but in actual application, the above processes can be assigned to be completed by different program modules as needed, that is, the internal structure of the device can be divided into different program modules to complete all or part of the above processes. In addition, the terminal device configuration device provided by the above embodiments belongs to the same concept as the embodiment of the terminal device configuration method, and its specific implementation process can be referred to the embodiment of the method, and will not be repeated here.

[0167] The embodiment of the present application further provides a method for configuring a terminal device. Figure 11 is a flowchart 4 of the method for configuring a terminal device according to the embodiment of the present application. As shown in Figure 11, the method includes the following steps:

[0168] In step 501, the terminal device generates a second key based on the first key, and encrypts and / or integrity protects part or all of a first message based on the second key.

[0169] In step 502, a first message is sent.

[0170] The terminal device configuration method (hereinafter referred to as the method) of this embodiment is applied to a terminal device, and the terminal device may specifically be a vehicle Internet terminal device (also referred to as a C-V2X Device). In some alternative embodiments, the vehicle Internet terminal device may be, for example, an OBU, an RSU, etc.; in other alternative embodiments, the vehicle Internet terminal device may be a pedestrian handheld device, a wearable device, etc.

[0171] In some alternative embodiments of the present application, the method further includes: performing a GBA authentication process or an AKMA authentication process on the terminal device to negotiate the first key with a network device. For specific processes, please refer to the detailed description of the terminal device configuration method in the above embodiments, and will not be described again here.

[0172] In some alternative embodiments of the present application, the terminal device includes an application client, a baseband chip, and a USIM, and the terminal device generating a second key based on a first key and encrypting and / or integrity protecting part or all of a first message based on the second key includes the application client triggering, via the baseband chip, the USIM to generate the second key based on the first key; the application client generating a first message and sending the first message to the USIM via the baseband chip; the USIM encrypting and / or integrity protecting part or all of the first message based on the second key; and the USIM sending the processed first message to the application client via the baseband chip.

[0173] In this embodiment, the second key may consist of only one key or may consist of multiple keys (i.e., the multiple keys here are all generated based on the first key and are collectively referred to as the second key). In one possible embodiment, the second key consists of multiple keys, for example, may include an encryption key and / or an integrity protection key, and of course, may include other types of keys according to actual needs, which will not be described again here. Furthermore, the USIM performs encryption and / or integrity protection on part or all of the first message based on the second key. For specific processes of performing the encryption and / or integrity protection, please refer to the descriptions in the above embodiments, and the description will not be repeated here.

[0174] In this embodiment, the first message may be any message, information, etc. sent from the terminal device to the server.

[0175] In some alternative embodiments of the present application, sending the first message includes the application client sending the first message to a server, and the first message further includes a B-TID and / or a FQDN of the server, or an AKMA key identifier (A-KID) and / or a FQDN.

[0176] In some alternative embodiments of the present application, the configuration method of the terminal device further includes the terminal device receiving a second message from the server and performing integrity verification and / or decryption on the second message based on the second key.

[0177] In this embodiment, the second message may be any message, information, etc. sent from the server to the terminal device.

[0178] In some alternative embodiments of the present application, the terminal device includes an application client, a baseband chip, and a USIM, and the terminal device receiving a second message from a server and performing integrity verification and / or decryption on the second message based on the second key includes the application client receiving the second message from the server and sending the second message to the USIM via the baseband chip, and the USIM performing integrity verification and / or decryption on the second message based on the second key.

[0179] In this embodiment, the second message is received from the application client server, a USIM security verification interface is called, and the second message is sent to the USIM via the baseband chip. Of course, the interface in this embodiment is not limited to the USIM security verification interface, and other interfaces used for security verification are also within the scope of protection of the embodiments of the present application. The USIM performs integrity verification and / or decryption on the second message based on the second key. For specific processes of the integrity verification and / or decryption, please refer to the descriptions in the previous embodiments and will not be repeated here. Furthermore, the USIM returns plaintext information and / or processing results obtained by decryption to the application client.

[0180] Based on the above-mentioned embodiments, the embodiment of the present application further provides a configuration method for a terminal device. Figure 12 is a flowchart 4 of the configuration method for a terminal device according to the embodiment of the present application. As shown in Figure 12, the method includes the following steps:

[0181] In step 601, a server receives a first message from a terminal device, part or all of the first message being encrypted and / or integrity protected with a second key.

[0182] In step 602, the server obtains the second key from a network device, the second key being generated by the network device based on the first key.

[0183] In step 603, the server performs integrity verification and / or decryption on the first message based on the second key.

[0184] In this embodiment, with the user's "one-touch" trigger, the terminal device can automatically complete operations such as server access authentication, secure channel establishment, and key generation based on the GBA technology mechanism or the AKMA authentication mechanism, to realize the initial security configuration of the terminal device.

[0185] In this embodiment, the server receives a first message from the terminal device through the established secure channel. Illustratively, the server can receive the first message from the terminal device through a network device, i.e., a first request message is sent by the terminal device and reaches the network device, and then the first message is sent by the network device to the server.

[0186] In this embodiment, since a part or all of the first message is encrypted and / or integrity protected by a second key, the server needs to obtain the second key. Exemplarily, the server obtains the second key from the network device. During the GBA authentication process or the AKMA authentication process by the terminal device, the terminal device negotiates the first key with the network device, which may also be referred to as the first key agreement session key.

[0187] In some alternative embodiments, the server obtaining the second key from the network device includes the server sending a third message to the network device, the third message being used to request the second key, and the server receiving a fourth message sent from the network device, the fourth message including the second key.

[0188] In this embodiment, the server can send a third message to the network device, and the third message is used to request a second key. After receiving the third message, the network device generates a second key based on the pre-negotiated first key, and then sends a fourth message to the server, and the fourth message includes the second key, so the server obtains the second key.

[0189] In some other alternative embodiments, after receiving a first message sent from a terminal device, the network device may generate a second key based on the first key previously negotiated, and transmit the second key to the server in the process of transmitting the first message to the server.

[0190] In some alternative embodiments of the present application, the first message further includes a B-TID or includes an AKMA key identifier (A-KID), and the server obtaining the second key from the network device includes the server querying whether a second key corresponding to the B-TID or the A-KID exists, and if the query result is that a second key corresponding to the B-TID does not exist, obtaining the second key from the network device.

[0191] In this embodiment, the server may obtain a second key corresponding to the B-TID in advance. In this case, after receiving the first request message, the server may first inquire whether a second key corresponding to the B-TID exists via the B-TID carried in the first request message. If the inquiry result indicates that a second key corresponding to the B-TID does not exist, the server may obtain the second key from the network device. If a second key corresponding to the B-TID exists, the server may directly obtain the second key corresponding to the B-TID.

[0192] In some alternative embodiments of the present application, the method for configuring the terminal device further includes the server encrypting and / or integrity protecting part or all of a second message based on the second key, and transmitting the second message.

[0193] In this embodiment, when the server sends a second message to the terminal device, it constructs the second message in accordance with the protocol format requirements of the relevant specifications, and specifically, encrypts and / or integrity protects part or all of the second message based on the second key. For the specific process of encrypting and / or integrity protecting the second message, please refer to the description in the previous embodiment, and the description will not be repeated here.

[0194] Hereinafter, a method for configuring a terminal device according to an embodiment of the present invention will be described with reference to a specific application scenario.

[0195] In this example, a case where the terminal device is a UE and the network device is an AF will be described as an example. Here, the UE includes a USIM, a baseband chip, and an application client, where the baseband chip may be referred to as a device modem, the application client may be referred to as a C-V2X application client, and the server in the above example is referred to as an application server or a C-V2X application server in this example. Figure 13 is an interaction flowchart 2 of a terminal device configuration method according to an embodiment of the present application. As shown in Figure 13, the method includes the following steps:

[0196] In step 701, the UE activates AKMA.

[0197] When the C-V2X device needs to be initialized and a digital certificate configured, the application client calls the underlying baseband chip via the GBA interface library to initiate the GBA authentication process and begin establishing a secure access connection to a CA server (e.g., an ECA server).

[0198] In step 702, an AKMA authentication process is performed to authenticate the AF and the shared session key K AF(i.e., the first key in the previous example).

[0199] In step 703, the UE receives a shared session key K AF Get.

[0200] In steps 704 and 705, the UE receives a shared session key K AF Based on the application session key K * and generate an application session key K * to encrypt and / or integrity protect messages (uplink messages).

[0201] For example, the application client sends a message to the USIM via the baseband chip, and the message can carry information such as the B-TID. After receiving the message, the USIM sends a shared session key K AF Based on the application session key K * and generate an application session key K * and encrypting or integrity-protecting part or all of the message using the above, and transmitting the processed message to the application client via the baseband chip.

[0202] In step 706, the UE sends a message (i.e., an uplink message) to the application server, the message including the application session key K * The QoS policy carries uplink messages protected by the QoS policy and information such as the B-TID and the server FQDN.

[0203] Here, exemplarily, the message is transmitted to the application server via the AF.

[0204] In steps 707 to 709, the application server interacts with the AF via a pre-established secure channel and provides the AF with a shared session key K AFBased on the application session key K * and generate an application session key K * and related information thereof. The related information is, for example, an application session key K * This includes survival time of the

[0205] Here, the AF sends the application session key K to the application server via an HTTP 200 OK response message. * and related information can be transmitted.

[0206] Here, the request message sent from the application server to the AF may also include information such as the B-TID and the server FQDN.

[0207] In step 710, the application server receives the application session key K * After obtaining the application session key K * performs integrity verification and / or decryption on the message using

[0208] The above is the uplink message transmission process between the terminal and the application server.

[0209] In step 711, the application server receives the application session key K * to encrypt and / or integrity protect messages (downlink messages).

[0210] In step 712, the application server sends a message (downlink message) to the UE.

[0211] In step 713, the UE receives the application session key K * performs integrity verification and / or decryption on the message using

[0212] In step 714, an application session key K is transmitted between the UE and the application server. * can be used to transmit uplink and downlink messages securely.

[0213] Based on the above-mentioned embodiment, the embodiment of the present application further provides a configuration device of a terminal device, which is applied to a terminal device. Figure 14 is a schematic diagram 4 showing the configuration of the configuration device of a terminal device according to the embodiment of the present application. As shown in Figure 14, the device includes: a third generating unit 51 and a fourth communication unit 52; the third generation unit 51 is configured to generate a second key based on the first key, and to encrypt and / or integrity protect part or all of the first message based on the second key; The fourth communication unit 52 is configured to transmit a first message.

[0214] In some alternative embodiments of the present application, the fourth communication unit 52 is further configured to receive a second message from a server and perform integrity verification and / or decryption on the second message based on the second key.

[0215] In some alternative embodiments of the present application, the third generating unit 51 includes an application client, a baseband chip, and a USIM; the application client is configured to trigger, via the baseband chip, the USIM to generate a second key based on the first key, and further configured to generate a first message and send the first message to the USIM via the baseband chip; The USIM is configured to encrypt and / or integrity protect part or all of the first message based on the second key, and is further configured to transmit the processed first message to the application client via the baseband chip.

[0216] In some alternative embodiments of the present application, the application client is further configured to send the first message to a server; The first message further includes a B-TID and / or a server FQDN, or includes an AKMA key identifier (A-KID) and / or an FQDN.

[0217] In some alternative embodiments of the present application, the third generating unit 51 includes an application client, a baseband chip, and a USIM; the application client is configured to receive a second message from the server and send the second message to the USIM via the baseband chip; The USIM is configured to perform integrity verification and / or decryption on the second message based on the second key.

[0218] In the embodiment of the present application, the third generation unit 51 and the fourth communication unit 52 in the device can be realized by a CPU, a DSP, an MCU or an FPGA in practical application, in combination with a communication assembly (including a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna.

[0219] The embodiment of the present application further provides a configuration device of a terminal device applied to a server. Figure 15 is a schematic diagram showing the configuration of the configuration device of a terminal device according to the embodiment of the present application. 5 As shown in FIG. 15, the device includes a fifth communication unit 61 and a second verification unit 62; the fifth communication unit 61 is configured to receive a first message from a terminal device, part or all of the first message being encrypted and / or integrity protected by a second key; The second verification unit 62 is configured to obtain the second key from a network device, the second key being generated by the network device based on the first key, and is further configured to perform integrity verification and / or decryption on the first message based on the second key.

[0220] In some alternative embodiments of the present application, the component of the terminal device further comprises a fourth generating unit, the fourth generating unit configured to encrypt and / or integrity protect part or all of the second message based on the second key; The fifth communication unit 61 is further configured to send a second message.

[0221] In some alternative embodiments of the present application, the first message includes a B-TID or includes an AKMA key identifier (A-KID); The configuration device of the terminal device further comprises a fourth execution unit, and the fourth execution unit is configured to inquire whether a second key corresponding to the B-TID or the A-KID exists; The second verification unit 62 is configured to obtain the second key from the network device via the fifth communication unit 61 when the inquiry result obtained by the fourth execution unit is that there is no second key corresponding to the B-TID or the A-KID.

[0222] In the embodiment of the present application, the fifth communication unit 61, the second verification unit 62, and the third execution unit in the device can be realized by a CPU, a DSP, an MCU, or an FPGA in practical applications, in combination with a communication assembly (including a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna.

[0223] It should be noted that, when the terminal device configuration device provided by the above embodiments performs configuration, only the division of each of the above program modules is taken as an example for description, but in actual application, the above processes can be assigned to be completed by different program modules as needed, that is, the internal structure of the device can be divided into different program modules to complete all or part of the above processes. In addition, the terminal device configuration device provided by the above embodiments belongs to the same concept as the embodiment of the terminal device configuration method, and its specific implementation process can be referred to the embodiment of the method, and will not be repeated here.

[0224] An embodiment of the present application further provides a communications device. Fig. 16 is a schematic diagram showing a hardware configuration of a communications device according to an embodiment of the present application. As shown in Fig. 16, the communications device includes a memory 42, a processor 41, and a computer program stored in the memory 42 and executable by the processor 41. When the processor 41 executes the program, it performs steps of a configuration method for a terminal device that is applicable to a terminal device described in the embodiment of the present application, or when the processor 41 executes the program, it performs steps of a configuration method for a terminal device that is applicable to a server described in the embodiment of the present application, or when the processor 41 executes the program, it performs steps of a configuration method for a terminal device that is applicable to a network device described in the embodiment of the present application.

[0225] Optionally, the communication device may further include one or more network interfaces 43. It is understood that each component in the communication device is coupled via a bus system 44. It is understood that the bus system 44 is used to realize the connection communication between these components. The bus system 44 includes a power bus, a control bus, and a status signal bus in addition to a data bus. However, for clarity of explanation, various buses are represented as the bus system 44 in FIG. 16.

[0226] It is understood that memory 42 may be volatile or nonvolatile memory, or may include both volatile and nonvolatile memory. Here, nonvolatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), ferromagnetic random access memory (FRAM), flash memory, magnetic memory, compact disc, or compact disc read-only memory (CD-ROM), and magnetic memory may be magnetic disk memory or magnetic tape memory. Volatile memory may be random access memory (RAM) used as an external cache.By way of illustrative, but not limiting example, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), SyncLink dynamic random access memory (SLDRAM), direct memory bus random access memory (DRRAM), etc. Memory 42 as described in the embodiments herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0227] The above-described methods disclosed in the embodiments of the present application may be applied to or realized by the processor 41. The processor 41 may be an integrated circuit chip with signal processing functions. In the implementation process, each step of the above-described method embodiments may be completed by an integrated logic circuit in the form of hardware within the processor 41 or instructions in the form of software. The above-described processor 41 may be a general-purpose processor, a DSP, or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, etc. The processor 41 may implement or execute each method, step, and logic block diagram disclosed in the embodiments of the present application. The general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of the present application may be performed directly by a hardware decoding processor or by a combination of hardware and software modules within the decoding processor. The software modules may be located in a storage medium, which may be located in the memory 42. The processor 41 reads information stored in the memory 42 and completes the above-described method steps in combination with the hardware.

[0228] In an exemplary embodiment, the communications device may be implemented by one or more Application Specific Integrated Circuits (ASICs), DSPs, Programmable Logic Devices (PLDs), Complex Programmable Logic Devices (CPLDs), FPGAs, general-purpose processors, controllers, MCUs, microprocessors, or other electronic elements to perform the methods described above.

[0229] In an exemplary embodiment, the present application further provides a computer-readable storage medium, such as a memory 42 for a computer program, which can be executed by a processor 41 of the communication device to perform and complete the steps of the above method. The computer-readable storage medium may be a memory, such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic memory, optical disk, or CD-ROM, or may be various devices including one or any combination of the above memories.

[0230] An embodiment of the present application further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, realizes steps of a configuration method for a terminal device that is applied to a terminal device described in an embodiment of the present application, or when executed by a processor, realizes steps of a configuration method for a terminal device that is applied to a server described in an embodiment of the present application, or when executed by a processor, realizes steps of a configuration method for a terminal device that is applied to a network device described in an embodiment of the present application.

[0231] The methods disclosed in the several method embodiments provided herein can be combined in any manner without conflict to obtain new method embodiments.

[0232] The features disclosed in the several product embodiments provided herein may be combined in any non-conflicting manner to obtain new product embodiments.

[0233] Features disclosed in any method or apparatus embodiment provided herein may be combined in any non-conflicting manner to obtain new method or apparatus embodiments.

[0234] In some embodiments provided herein, the disclosed devices and methods may be implemented in other ways. The device embodiments described above are merely exemplary, and the division of the units is merely a logical division of functions. In actual implementation, other division methods may exist, for example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not implemented. Furthermore, the mutual coupling or direct coupling or communication connection between each component shown or described may be an indirect coupling or communication connection via some interfaces, devices, or units, which may be electrical, mechanical, or other forms.

[0235] The units described as the separate components may or may not be physically separated, and the components shown as units may or may not be physical units, may be located in one place, or may be distributed across multiple network units, and some or all of the units may be selected according to actual needs to achieve the purpose of the technical solution of this embodiment.

[0236] In addition, the functional units in each embodiment of the present application may all be integrated into a single second processing unit, each unit may be used individually as a single unit, or two or more units may be integrated into a single unit. The integrated unit may be embodied in the form of hardware or a combination of hardware and software functional units.

[0237] Those skilled in the art will understand that all or part of the steps of the above-mentioned method embodiments can be completed by hardware associated with program instructions, and the program can be stored in a computer-readable storage medium, which, when executed, performs the steps of the above-mentioned method embodiments, and the storage medium includes various media that can store program code, such as removable storage, ROM, RAM, magnetic memory, or optical disk.

[0238] Alternatively, the above-mentioned integrated units of the present application may be realized in the form of software functional modules and stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the essential parts of the technical solutions of the embodiments of the present application, i.e., the parts that contribute to the prior art, can be embodied in the form of a software product, and the computer software product is stored in one storage medium and includes several instructions for causing one computer device (which may be a personal computer, a server, a network device, etc.) to execute all or part of the methods described in each embodiment of the present application. The aforementioned storage medium includes various media capable of storing program code, such as removable storage, ROM, RAM, magnetic memory, or optical disk.

[0239] The above content is merely a specific embodiment of the present application, and the protection scope of the present application is not limited thereto. Any modifications or replacements that can be easily thought of by those skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A method for configuring a terminal device, the method comprising: a Universal Subscriber Identity Module (USIM) of the terminal device negotiating a first key with the network device; the USIM of the terminal device generating a second key based on the first key, and the USIM of the terminal device encrypting and / or integrity protecting a certificate request message based on the second key; the USIM of the terminal device sending a message to a client of the terminal device, the message including the certificate request message encrypted and / or integrity protected by the second key; the terminal device client sending a first request message to a server, the first request message including the certificate request message encrypted and / or integrity protected by the second key, the first request message further including a bootstrap transaction identifier (B-TID) and a server fully qualified domain name (FQDN); A method for configuring a terminal device, comprising:

2. The method for configuring the terminal device includes:

2. The method for configuring a terminal device according to claim 1, further comprising the terminal device receiving a first response message from a server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message.

3. the terminal device includes a baseband chip; The USIM of the terminal device generates a second key based on the first key, and the USIM of the terminal device encrypts and / or integrity protects a certificate request message based on the second key, the client triggering, via the baseband chip, the USIM to generate a second key based on the first key; the client generating a first certificate request message and sending the first certificate request message to the USIM via the baseband chip; the USIM generating a public-private key pair, adding the public key in the public-private key pair to the first certificate request message, and signing the first certificate request message using the private key in the public-private key pair to obtain a second certificate request message; the USIM encrypting and / or integrity protecting the second certificate request message based on the second key, wherein the USIM encrypting and / or integrity protecting the second certificate request message includes the USIM adding a first verification value to the second certificate request message; the USIM sending the processed second certificate request message to the client via the baseband chip; 2. The method of claim 1, comprising:

4. the terminal device includes a baseband chip; receiving a first response message from the server, performing integrity verification and / or decryption on the first response message based on the second key, and obtaining a digital certificate carried in the first response message by the terminal device; The client receives a first response message from the server and sends the first response message to the USIM via the baseband chip; the USIM performs integrity verification and / or decryption on the first response message based on the second key; After passing the verification, the USIM obtains the digital certificate carried in the first response message and stores the digital certificate in a security component.

3. The method of claim 2, comprising:

5. The method for configuring the terminal device includes:

2. The method of claim 1, further comprising the terminal device performing a Generic Bootstrapping Architecture (GBA) authentication process or an Application Oriented Authentication or Key Management (AKMA) authentication process to negotiate the first key with a network device.

6. An information transmission method for security settings of an electronic certificate, the information transmission method for security settings of the electronic certificate comprising: receiving, by a server, a first request message from a terminal device, the first request message including a certificate request message encrypted and / or integrity protected by a second key, the first request message further including a bootstrap transaction identifier (B-TID) and a fully qualified domain name (FQDN) of the server; The server obtains the second key from a network device, the server transmitting a second request message to the network device to request the second key, the second request message including a B-TID and an FQDN, and the server receiving the second response message transmitted by the network device and including the second key; the server performs integrity verification and / or decryption on the first request message based on the second key; Including, When the server receives the first request message, the method for configuring the terminal device includes: issuing a digital certificate after the first request message has been authenticated; the server sending a first response message to the terminal device, the first response message including the digital certificate; The information transmission method for security setting of an electronic certificate further includes:

7. The server transmitting a first response message to the terminal device includes: the server constructing a first response message that includes the digital certificate and encrypting and / or integrity protecting the first response message based on the second key, wherein the server encrypting and / or integrity protecting the first response message includes the server adding a second verification value to the first response message; transmitting the processed first response message to the terminal device; 7. The method of transmitting information for security configuration of a digital certificate according to claim 6, comprising:

8. The server obtaining the second key from the network device includes: the server querying whether a second key corresponding to the B-TID exists; If the result of the inquiry is that there is no second key corresponding to the B-TID, acquiring the second key from the network device.

7. The method of transmitting information for security configuration of a digital certificate according to claim 6, comprising:

9. An information transmission method for security settings of an electronic certificate, the information transmission method for security settings of the electronic certificate comprising: The network device negotiating a first key with a Universal Subscriber Identity Module (USIM) of the terminal device; receiving, by the network device, a second request message including a Bootstrap Transaction Identifier (B-TID) and a server Fully Qualified Domain Name (FQDN); generating a second key based on the first key by the network device; An information transmission method for security configuration of an electronic certificate, comprising the step of transmitting the second key from the network device to the server.

10. The network device negotiating the first key with the USIM of the terminal device includes:

10. The information transmission method for security configuration of an electronic certificate according to claim 9, further comprising the network device negotiating the first key with the USIM of the terminal device by performing a Generic Bootstrapping Architecture (GBA) authentication process or an Application Oriented Authentication or Key Management (AKMA) authentication process with the USIM of the terminal device.

11. The network device generating a second key based on a first key negotiated in advance and transmitting the second key to a server includes:

10. The information transmission method for security settings of an electronic certificate according to claim 9, further comprising the step of: the network device generating a second key corresponding to each server based on a first key negotiated in advance; and transmitting the corresponding second key to each server.

12. The network device generating a second key based on a first key negotiated in advance and transmitting the second key to a server includes: receiving, by the network device, second request information sent from the server, the second request message being used to request the second key; the network device generating a second key based on the pre-negotiated first key and sending a second response message to the server, the second response message including the second key; 12. The method for transmitting information for security setting of the digital certificate according to claim 9, comprising:

13. A communications device, the communications device comprising: a memory; a processor; and a computer program stored in the memory and executable by the processor; The processor, when executing the program, implements the method according to any one of claims 1 to 5, or When the processor executes the program, the processor implements the method according to any one of claims 6 to 8, or A communications device, wherein the processor, when executing the program, implements the method according to any one of claims 9 to 12.

Images