Terminal positioning method, terminal positioning system, storage medium, and electronic device

Abstract

[0009] The present disclosure provides a terminal positioning method and system, a storage medium, and an electronic device. The terminal positioning method includes the steps of: receiving a positioning request for requesting positioning of a target terminal; verifying a target device identifier in response to the positioning request; and, if the target device identifier is successfully verified, obtaining encryption information assigned to the target terminal, the encryption information including a target private key and a target algorithm corresponding to the target private key; and transmitting the encryption information to the target terminal and the target algorithm in the encryption information to the positioning server assigned to the target terminal, so that the target terminal and the positioning server use the encryption information to obtain location information of the target terminal. The present disclosure solves the problem of terminal information leakage caused by unauthorized interception of the terminal positioning information and achieves the effect of ensuring the security of data transmission during positioning.

Description

[Technical Field]

[0001] (CROSS-REFERENCE TO RELATED APPLICATIONS) This application claims priority to Chinese patent application number 202011312290.5, filed on November 20, 2020, the entire contents of which are incorporated herein by reference.

[0002] TECHNICAL FIELD The embodiments of the present disclosure relate to the field of communications, and in particular to a terminal positioning method, a terminal positioning system, a storage medium, and an electronic device. [Background technology]

[0003] While using a terminal, it is necessary to constantly obtain its geographical location. Typically, terminal positioning relies on traditional positioning devices such as GPS and the Beidou system. With the development of communication technology, terminal positioning can now be completed without relying on traditional positioning devices.

[0004] In conventional positioning methods that do not rely on a positioning device, a positioning server (ESMLC / GMLC) mainly calculates and evaluates received positioning information to calculate the geographical location of the terminal and feeds back the geographical location to the terminal. The entire positioning process is completed with the joint participation of the terminal, radio access device, core network device, and positioning server. The positioning information required by the positioning server to calculate the address location of the terminal mainly includes the geographical location information of the radio access device and measurement data of the terminal.

[0005] Although data interaction between the core network device and the positioning server is performed via the Internet, there is no security mechanism for data transmission between the core network device and the positioning server, i.e., the security of the transmission of positioning information data and positioning result data between the terminal and the positioning server is not ensured. Therefore, a malicious positioning device can easily intercept the complete measurement data provided by the terminal, and can achieve the purpose of monitoring the terminal and obtaining the terminal's privacy data by evaluating the terminal's location information through an algorithm.

[0006] In the related positioning method, there is no complete security mechanism between the terminal and the positioning server, so the secure transmission of positioning information data and positioning result data cannot be ensured. If the positioning information and positioning results are intercepted by an unauthorized positioning device, the unauthorized positioning device can illegally monitor the terminal and illegally obtain the terminal's private data, resulting in the leakage of terminal information. Summary of the Invention

[0007] According to an embodiment of the present disclosure, there is provided a terminal positioning method including: a step of acquiring a positioning request for requesting positioning of a target terminal, the step including in the positioning request a terminal identifier of the target terminal and a target device identifier of a transmitting device that triggers the positioning request; a step of verifying the target device identifier in response to the positioning request; and a step of acquiring encrypted information assigned to the target terminal if the target device identifier is successfully verified, the encrypted information including a target private key and a target algorithm corresponding to the target private key; and a step of transmitting the encrypted information to the target terminal and transmitting the target algorithm in the encrypted information to a positioning server assigned to the target terminal so that the target terminal and the positioning server use the encrypted information to acquire location information of the target terminal.

[0008] According to an embodiment of the present disclosure, a terminal positioning method is provided, including: a step of receiving assigned encryption information when a core network device responds to a positioning request and successfully verifies a target device identifier, wherein the positioning request includes a terminal identifier of a target terminal requesting positioning and the target device identifier of a transmitting device that triggers the positioning request, and the encryption information includes a target private key and a target algorithm corresponding to the target private key; a step of receiving a usage level of the target private key, converting the target private key based on the usage level, and obtaining a positioning private key; and a step of encrypting positioning parameters using the positioning private key, and transmitting the encrypted positioning parameters to a positioning server, so that the positioning server uses the positioning parameters to obtain location information of the target terminal.

[0009] According to an embodiment of the present disclosure, a terminal positioning method is provided, including: a step of receiving an assigned target algorithm when a core network device responds to a positioning request and successfully verifies a target device identifier, wherein the positioning request includes a terminal identifier of a target terminal requesting positioning and the target device identifier of a transmitting device that triggers the positioning request; a step of obtaining the target private key corresponding to the target algorithm from a locally stored mapping relationship, assigning a usage level to the target private key, transmitting the usage level to the target terminal, and converting the target private key based on the usage level to obtain a positioning private key; a step of obtaining the positioning parameters by decrypting the positioning parameters using the positioning private key when encrypted positioning parameters transmitted from the target terminal are received; and a step of calculating location information of the target terminal based on the positioning parameters, and transmitting the location information encrypted using the positioning private key to the target terminal.

[0010] According to an embodiment of the present disclosure, there is provided a terminal positioning system including a target terminal, a core network device, and a positioning server, wherein the core network device is configured to obtain a positioning request for requesting positioning of the target terminal, verify a target device identifier in response to the positioning request, and if the target device identifier is successfully verified, obtain encryption information assigned to the target terminal, send the encryption information to the target terminal, and send the target algorithm in the encryption information to the positioning server assigned to the target terminal, wherein the positioning request includes a terminal identifier of the target terminal and the target device identifier of a calling device that triggers the positioning request, the encryption information includes a target private key and a target algorithm corresponding to the target private key, and the positioning server receives the target algorithm and obtains the target private key corresponding to the target algorithm from a mapping relationship stored locally, and The present invention further provides a terminal positioning system configured to assign a usage level to a private key, transmit the usage level to the target terminal, convert the target private key based on the usage level, obtain a positioning private key, receive encrypted positioning parameters, decrypt using the positioning private key to obtain the positioning parameters, calculate location information of the target terminal based on the positioning parameters, and transmit the location information encrypted using the positioning private key to the target terminal, wherein the target terminal is configured to receive the encryption information and the usage level of the target private key, convert the target private key based on the usage level, obtain the positioning private key, encrypt the positioning parameters using the positioning private key, transmit the encrypted positioning parameters to a positioning server, and receive the encrypted location information and decrypt using the positioning private key to obtain the location information.

[0011] According to an embodiment of the present disclosure, there is further provided a computer-readable storage medium storing a computer program that, when executed by a processor, performs the steps of any one of the method embodiments described above.

[0012] According to an embodiment of the present disclosure, there is further provided an electronic device including a memory storing a computer program and a processor configured to execute the computer program to perform the steps of any one of the method embodiments described above. [Brief explanation of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram illustrating a hardware configuration for applying a terminal positioning method according to an embodiment of the present disclosure. [Figure 2] FIG. 1 is a diagram illustrating an application environment of a terminal positioning method according to an embodiment of the present disclosure. [Figure 3] 1 is a flowchart illustrating a terminal positioning method according to an embodiment of the present disclosure. [Figure 4] 1 is a flowchart illustrating a terminal positioning method according to an embodiment of the present disclosure. [Figure 5] FIG. 2 illustrates interactions of a mobile terminal positioning method according to an embodiment of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0014] Hereinafter, the embodiments of the present disclosure will be described in detail based on the examples with reference to the drawings.

[0015] In addition, terms such as "first" and "second" in the specification and claims of this disclosure and the above drawings are used to distinguish between similar objects and do not necessarily describe a specific order or priority.

[0016] The method embodiments provided in the embodiments of the present disclosure may be implemented in a mobile terminal, a computer terminal, or a similar computing device. Taking the mobile terminal as an example, FIG. 1 is a hardware configuration block diagram of the terminal positioning method of the embodiments of the present disclosure. As shown in FIG. 1, the mobile terminal may include one or more (only one is shown in FIG. 1) processors 102 (the processors 102 may include, but are not limited to, processing devices such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data. The mobile terminal may further include a transmission device 106 and an input / output device 108 for communication functions.

[0017] Those skilled in the art will appreciate that the configuration shown in Figure 1 is merely schematic and is not intended to limit the configuration of the mobile terminal. For example, the mobile terminal may include more or fewer components than those shown in Figure 1, or may have a different configuration than that shown in Figure 1.

[0018] The memory 104 can be used to store computer programs, for example, software programs and modules of application software such as a computer program corresponding to the terminal positioning method in this embodiment, and the processor 102 executes the computer programs stored in the memory 104 to perform various functional applications and data processing, i.e., to realize the terminal positioning method described above.

[0019] The memory 104 may include high-speed random access memory and may further include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include memory located remotely from the processor 102, which may be connected to the mobile terminal via a network. Examples of such networks include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0020] The transmission device 106 transmits and receives data via a network. An example of the network may include a wireless network provided by a communication vendor of the mobile terminal. In one example, the transmission device 106 includes a network interface controller (NIC) that can be connected to other network devices via a base station and thereby communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (RF) module for communicating with the Internet wirelessly.

[0021] An embodiment of the present application can be implemented on a network architecture shown in Fig. 2, which includes a terminal 100, a core network device 200, a network 300, and a positioning server 400. The terminal 100 performs data interaction with the core network device 200 via a wireless access device, and the core network device 200 transmits data of the terminal 100 to the positioning server 400 via the network 300. The positioning server 400 transmits data to the terminal 100 via the network 300, with the core network device 200 acting as a relay.

[0022] In this embodiment, a terminal positioning method is provided that is implemented in the above network architecture. Figure 3 is a flowchart of the terminal positioning method according to the embodiment of the present disclosure. As shown in Figure 3, the terminal positioning method includes the following steps S302 to S308.

[0023] In step S302, a positioning request for requesting positioning of the target terminal is obtained, and the positioning request includes the terminal identifier of the target terminal and the target device identifier of the transmitting device that triggers the positioning request.

[0024] In step S304, in response to the positioning request, the target device identifier is verified.

[0025] In step S306, if the target device identifier is successfully verified, obtain encryption information assigned to the target terminal, where the encryption information includes a target private key and a target algorithm corresponding to the target private key.

[0026] In step S308, the encryption information is sent to the target terminal, and the target algorithm in the encryption information is sent to the positioning server assigned to the target terminal, so that the target terminal and the positioning server use the encryption information to obtain location information of the target terminal.

[0027] Through the above steps, when the core network device receives a positioning request, it verifies the device identifier of the source of the positioning request, and if the device identifier is successfully verified, it assigns a private key and algorithm to the terminal and the positioning server, so that the terminal and the positioning server use the private key and algorithm to encrypt interaction data, thereby improving data security when the terminal and the positioning server transmit positioning data, and solving the problem of unauthorized acquisition of transmitted data caused by the lack of a security mechanism in data transmission between the terminal and the positioning server.

[0028] Furthermore, since only the algorithm is sent to the positioning server that transmits data via the network, the private key is prevented from being obtained during network transmission, and the security of the private key is ensured, thereby further ensuring the security of the transmission of encrypted data and preventing the private key from being illegally obtained. This solves the problems of insecure data transmission during positioning, which can lead to the leakage of terminal information, unauthorized monitoring of the terminal, and the leakage of terminal privacy data caused by the illegal interception of the terminal's positioning information.

[0029] The device that issues the positioning request is not limited here. The core network device may execute the above steps, but is not limited to this. The core network device includes at least a mobility management entity and a home location register.

[0030] In some embodiments, verifying the target device identifier in response to the positioning request includes searching for the target device identifier in a locally stored device identifier list, determining that the target device identifier has been successfully verified if the target device identifier is found in the device identifier list, and determining that verification of the target device identifier has failed and rejecting the positioning request if the target device identifier is not found in the device identifier list.

[0031] The core network device stores a device identifier list. The device identifier list includes terminal identifiers of terminals that are authorized to issue positioning requests and server identifiers of positioning servers. Identifiers present in the device identifier list are considered to be devices that are authorized to issue positioning requests. If a target device identifier can be found in the device identifier list, it is determined that the transmitting device corresponding to the target device identifier is authorized to issue positioning requests, and the target device identifier has been successfully verified.

[0032] If the target device identifier cannot be found in the device identifier list stored in the core network device, it is determined that the transmitting device corresponding to the target device identifier is not qualified to transmit a positioning request and is an invalid transmitting device. If the transmitting device that transmitted the positioning request is invalid, the positioning request is rejected and the private key and algorithm acquisition work is not performed.

[0033] Through the above steps, before assigning encryption information to the terminal and the positioning server, the authenticity of the device that sent the positioning request is verified, and encryption information is assigned to the terminal and the positioning server only if the device identifier of the sending device is searchable in the device identifier list and it is determined that the transmission of the positioning request is authentic. By verifying the authenticity of the positioning request, the security of data transmission during positioning is further ensured.

[0034] In some embodiments, if the target equipment identifier is successfully verified, obtaining cryptographic information assigned to the target terminal comprises sending an assignment request to a home location register via a mobility management entity, and obtaining a target private key assigned to the target terminal by the home location register and a target algorithm corresponding to the target private key.

[0035] In some embodiments, a mobility management entity in a core network device that implements the above-mentioned terminal positioning method obtains a positioning request, and in response to the positioning request, sends an allocation request to a home location register, and upon receiving the allocation request, the home location register verifies the target equipment identifier, and if the target equipment identifier is successfully verified, the home location register obtains a target private key and a target algorithm and sends the target private key and the target algorithm to the mobility management entity, whereby the mobility management entity sends the target private key and the target algorithm to the target terminal and sends only the target algorithm to the positioning server.

[0036] In the core network device, the device identifier list is stored in a home location register. The mobility management entity is responsible for distributing the symmetric private key and the symmetric algorithm.

[0037] In some embodiments, obtaining the encryption information assigned to the target terminal includes assigning a positioning server to the target terminal, determining a target private key corresponding to the positioning server from a private key corresponding to the target terminal, determining a target algorithm based on the target private key, and determining the target private key and the target algorithm as encryption information.

[0038] In some embodiments, the device identifier list stores a terminal identifier, a positioning server identifier, a private key, and an algorithm. The private key and the algorithm have an association relationship, and it is possible to determine a private key to obtain a corresponding algorithm, while it is also possible to determine an algorithm to obtain a corresponding private key. In this embodiment, an example is given in which a private key is determined and a corresponding algorithm is obtained.

[0039] In some embodiments, the private key is obtained by searching using a terminal identifier and a positioning server identifier. There is no fixed association between a terminal and a positioning server, and a terminal can establish data transmission with multiple positioning servers, and a positioning server can similarly establish data transmission with multiple terminals.

[0040] In some embodiments, the positioning server is a positioning server assigned to the target terminal by the core network device based on the terminal identifier of the target terminal in the positioning request, for calculating the location information of the target terminal.

[0041] In some embodiments, when the mobility management entity in the core network device obtains a positioning request, it assigns a positioning server to the target terminal and adds the terminal identifier of the target terminal, the target equipment identifier, and the server identifier of the positioning server assigned to the target terminal to the allocation request.

[0042] In some embodiments, the private key, the terminal identifier, and the positioning server identifier have an association relationship in the device identifier list of the home location register in the core network device. When both the terminal identifier and the positioning server identifier are determined, the corresponding private key is searched for according to the correspondence relationship in the device identifier list.

[0043] In some embodiments, if the home location register receives the allocation request and successfully verifies the target device identifier, it searches for a private key corresponding to the target terminal identifier using the terminal identifier of the target terminal, and then determines a target private key from the private key corresponding to the target terminal identifier using the server identifier of the positioning server, and determines a target algorithm using the target private key.

[0044] In some embodiments, as shown in FIG. 4, the encryption information acquisition flow includes the following steps S402 to S412.

[0045] In step S402, the mobility management entity allocates a positioning server to the target terminal in response to the positioning request.

[0046] In step S404, the mobility management entity adds the terminal identifier, the target equipment identifier, and the positioning server identifier to an allocation request, and sends the allocation request to the home location register.

[0047] In step S406, the home location register determines whether the target device identifier exists in the device identifier list.

[0048] If the determination result in step S406 is YES, step S408 is executed, whereas if the determination result in step S406 is NO, step S412 is executed.

[0049] In step S408, the home location register determines a private key corresponding to the terminal identifier in the device identifier list according to the terminal identifier, determines a target private key corresponding to the server identifier of the positioning server from the private key, and determines a target algorithm according to the target private key.

[0050] In step S410, the home location register determines a symmetric private key and a symmetric algorithm as encryption information and sends them to the mobility management entity.

[0051] In step S412, the home location register determines that the target equipment identifier is invalid and notifies the mobility management entity of the invalidity message, which causes the mobility management entity to reject the positioning request.

[0052] Through the above steps, a device identifier list is stored in the home location register of the core network device. If the originating device is successfully verified, the device identifier list is searched for a target private key and a target algorithm using the terminal identifier and the positioning server identifier, and the private key and algorithm are associated with the terminal and the positioning server. When the same terminal transmits data with different positioning servers, different private keys and algorithms are used, thereby enhancing the security of the private key and algorithm themselves and further improving the security of data transmission during positioning.

[0053] In some embodiments, the terminal positioning method includes, after a step of transmitting encryption information to the target terminal and transmitting a target algorithm in the encryption information to a positioning server assigned to the target terminal, the target terminal receives the usage level of the target private key sent from the positioning server, converts the target private key based on the usage level, and obtains the positioning private key; The target terminal further includes a step of encrypting the positioning parameters using a positioning private key so that the positioning server uses the positioning parameters to obtain location information of the target terminal, and transmitting the encrypted positioning parameters to the positioning server.

[0054] In some embodiments, the terminal positioning method includes, after a step of transmitting encryption information to the target terminal and transmitting a target algorithm in the encryption information to a positioning server assigned to the target terminal, When the positioning server receives the target algorithm, it obtains a target private key corresponding to the target algorithm from a locally stored mapping relationship, assigns a usage level to the target private key, sends the usage level to the target terminal, and converts the target private key according to the usage level to obtain a positioning private key; When the positioning server receives the encrypted positioning parameters transmitted from the target terminal, the positioning server decrypts the encrypted positioning parameters using the positioning private key to obtain the positioning parameters; The method further includes a step in which the positioning server calculates position information of the target terminal based on the positioning parameters, and transmits the position information encrypted using the positioning private key to the target terminal.

[0055] The mapping relationship stored in the positioning server is a relationship list between the private key and the algorithm corresponding to the positioning server. The private key and the algorithm correspond to each other, and the target algorithm only has a mapping relationship with the target private key. The target algorithm is searched for in the relationship list, and the target private key corresponding to the target algorithm is obtained.

[0056] When the positioning server obtains the target private key, it determines a usage level for the target private key. The usage level indicates the conversion accuracy of the target private key, and is transmitted to the target terminal. The determination of the usage level may depend on, but is not limited to, the accuracy of the target private key and the complexity of the target private key. The usage level may be, but is not limited to, an improvement in the accuracy of the private key, an increase in the complexity of the private key, or a variation of the private key.

[0057] In this embodiment, the specific types of the private key and algorithm are not limited, and the specific type of the usage level of the private key is not limited.

[0058] The positioning server and the target terminal locally convert the target private key based on the conversion accuracy to obtain a positioning private key. The positioning private key and the target algorithm are encryption methods used by the positioning server and the target terminal to encrypt data during positioning.

[0059] When the target terminal obtains the positioning private key, it uses the positioning private key and the target algorithm to encrypt positioning parameters required for positioning calculations and transmits the encrypted positioning parameters to the positioning server. The positioning server uses the positioning private key and the target algorithm to decrypt the encrypted positioning parameters, obtains the target terminal's location information through calculation and evaluation, and transmits the encrypted location information using the positioning private key and the target algorithm to the target terminal. The target terminal obtains the location information by decrypting it using the positioning private key and the target algorithm, completing positioning of the target terminal.

[0060] Through the above steps, the core network device only needs to send the target algorithm to the positioning server via the network, and the positioning server searches for the corresponding target private key in its local relationship list, determines the usage level based on the target private key, and sends the usage level to the target terminal. The target terminal and the positioning server then locally convert the target private key based on the usage level to obtain a positioning private key, and encrypt the positioning data using the positioning private key and the target algorithm.

[0061] Encryption not only enhances the security of data transmission during positioning, but also prevents the target private key from being intercepted by transmitting only the target algorithm to the positioning server, and further prevents the data encryption method from being illegally intercepted by locally generating the positioning private key for data encryption according to the usage level, ensuring the security of positioning data during transmission and avoiding interception and decryption caused by data insecurity.

[0062] In this embodiment, a terminal positioning method executed by the terminal includes: receiving, by the core network device in response to the positioning request, if the target device identifier is successfully verified, assigned encryption information, wherein the positioning request includes a terminal identifier of the target terminal requesting positioning and a target device identifier of the originating device triggering the positioning request, and the encryption information includes a target private key and a target algorithm corresponding to the target private key; receiving a usage level of the target private key, and converting the target private key according to the usage level to obtain a positioning private key; a step of encrypting the positioning parameters using a positioning private key so that the positioning server acquires location information of the target terminal using the positioning parameters, and transmitting the encrypted positioning parameters to the positioning server.

[0063] The positioning private key is a target private key that has been changed based on the usage level. When the target private key and usage level are determined, the resulting positioning private key is fixed. The target terminal generates the positioning private key locally, thereby ensuring the security of the positioning private key itself.

[0064] Through the above steps, before the target terminal transmits the positioning parameters, the core network equipment verifies the target device identifier in response to the positioning request and assigns encryption information to the target terminal; the target terminal generates a positioning secret key based on the usage level and the target secret key, encrypts the positioning parameters using the positioning secret key and the target algorithm, and transmits the encrypted positioning parameters, thereby making the positioning parameters less susceptible to unauthorized interception, improving security during the transmission of the positioning parameters, preventing the positioning parameters from being unauthorized interception, and solving the problems of unauthorized monitoring of the terminal and leakage of the terminal's privacy data caused by insecure data transmission during positioning.

[0065] In this embodiment, a terminal positioning method executed by the positioning server includes: receiving an assigned target algorithm when the core network device responds to the positioning request and successfully verifies the target device identifier, the positioning request including the terminal identifier of the target terminal requesting positioning and the target device identifier of the originating device triggering the positioning request; Obtaining a target private key corresponding to a target algorithm from a locally stored mapping relationship, assigning a usage level to the target private key, sending the usage level to the target terminal, and converting the target private key according to the usage level to obtain a positioning private key; When the encrypted positioning parameters transmitted from the target terminal are received, the encrypted positioning parameters are decrypted using the positioning private key to obtain the positioning parameters; calculating position information of the target terminal based on the positioning parameters, and transmitting the encrypted position information to the target terminal using a positioning private key.

[0066] The target private key is obtained by the positioning server by consulting a relationship list stored in itself, which indicates the mapping relationship between private keys and algorithms. The positioning server only needs to receive data via the network and receive the target algorithm, ensuring the security of the target private key. Even if the target algorithm is intercepted, the interceptor cannot determine the corresponding private key, and therefore cannot decrypt the data encrypted by the positioning server.

[0067] The usage level is a variation manner of the target private key determined by the positioning server based on the target private key.

[0068] The positioning private key is a target private key that has been changed based on the usage level. Once the target private key and usage level are determined, the resulting positioning private key is fixed. The positioning server ensures the security of the positioning private key itself by locally generating the positioning private key.

[0069] Ensuring the security of the object private key and the positioning private key increases the security of the encrypted data transmitted by the positioning server during positioning.

[0070] Through the above steps, only if the target device identifier is successfully verified, the positioning server receives the target algorithm, locally obtains a target private key according to the mapping relationship between the private key and the algorithm, determines a usage level for the target private key, locally generates a positioning private key according to the target private key and the usage level, decrypts the positioning parameters using the positioning private key and the target algorithm, obtains location information, and encrypts the location information before sending it to the target terminal.

[0071] The security of data transmission is ensured by encrypting the location information, and a method for locally storing the mapping relationship is used to protect the target private key from unauthorized interception during network transmission. At the same time, a method for locally generating the positioning private key is used to further protect the security of the positioning private key used to encrypt data, thereby increasing the security of data transmission during positioning and preventing terminal information from being leaked due to unauthorized interception of data during transmission.

[0072] In this embodiment, a terminal positioning system is provided, which includes a target terminal, a core network device, and a positioning server.

[0073] The core network device is configured to obtain a positioning request for requesting positioning of a target terminal, and in response to the positioning request, verify a target device identifier, and if the target device identifier is successfully verified, obtain encryption information assigned to the target terminal, send the encryption information to the target terminal, and send a target algorithm in the encryption information to a positioning server assigned to the target terminal, wherein the positioning request includes the terminal identifier of the target terminal and the target device identifier of the originating device that triggers the positioning request, and the encryption information includes a target private key and a target algorithm corresponding to the target private key.

[0074] The positioning server is configured to receive a target algorithm, obtain a target private key corresponding to the target algorithm from a locally stored mapping relationship, assign a usage level to the target private key, transmit the usage level to the target terminal, convert the target private key based on the usage level, obtain a positioning private key, receive encrypted positioning parameters, obtain the positioning parameters by decrypting them using the positioning private key, calculate location information of the target terminal based on the positioning parameters, and transmit the location information encrypted using the positioning private key to the target terminal.

[0075] The target terminal is configured to receive encryption information and a usage level of the target private key, convert the target private key based on the usage level, obtain a positioning private key, encrypt the positioning parameters using the positioning private key, transmit the encrypted positioning parameters to the positioning server, and then receive the encrypted location information and obtain the location information by decrypting it using the positioning private key.

[0076] In the above-mentioned terminal positioning system, when a core network device receives a positioning request, it verifies the device identifier of the source of the positioning request. If the device identifier is successfully verified, it assigns a private key and algorithm to the terminal and the positioning server, and the terminal and the positioning server then use the private key and algorithm to encrypt interaction data, thereby improving data security when the terminal and the positioning server transmit positioning data, and solving the problem of unauthorized acquisition of transmitted data caused by the lack of a security mechanism in data transmission between the terminal and the positioning server.

[0077] Furthermore, since only the algorithm is transmitted to the positioning server that transmits data via the network, the private key is prevented from being obtained during network transmission, and the security of the private key is ensured, thereby further ensuring the security of the transmission of encrypted data, preventing the private key from being obtained illegally, and solving the problems of unauthorized monitoring of the terminal and leakage of the terminal's privacy data caused by insecure data transmission during positioning.

[0078] In some embodiments, as shown in FIG. 5, taking the terminal 100 sending a positioning request to position itself as an example, the interaction process of the above terminal positioning method includes the following steps S502 to S538.

[0079] In step S502, a positioning request is transmitted. The terminal 100 transmits the positioning request to the core network device 200, and the mobility management entity 220 in the core network device 200 receives the positioning request. The positioning request includes a target device identifier of the sender of the positioning request (i.e., the terminal 100) and a terminal identifier of the terminal 100 indicating the terminal to be positioned. In this embodiment, the target device identifier and the terminal identifier are the same, and both are the identifiers of the terminal 100.

[0080] In step S504, a positioning server is allocated: Upon receiving the positioning request, the mobility management entity 220 allocates to the terminal 100 a positioning server 400 that calculates its location information.

[0081] In step S506, an allocation request is sent. The mobility management entity 220 sends an allocation request to the home location register 240, and includes the terminal identifier of the terminal 100 and the server identifier of the positioning server 400 in the allocation request.

[0082] In step S508, verification is performed: the home location register 240 searches for the terminal identifier of the terminal 100 in its device identifier list and determines that the terminal identifier of the terminal 100 exists in the device identifier list.

[0083] In step S510, encryption information is acquired. Home location register 240 acquires a private key corresponding to the terminal identifier using the terminal identifier of terminal 100, determines that the target private key corresponding to the server identifier in the private key is Key1, determines that the target algorithm is Alg1 based on the target private key Key1, and determines the target private key Key1 and the target algorithm Alg1 as encryption information.

[0084] In step S512, the encryption information is transmitted: the home location register 240 transmits the symmetric private key Key1 and the symmetric algorithm Alg1 to the mobility management entity 220;

[0085] In step S514, the symmetric private key and the symmetric algorithm are transmitted. The mobility management entity 220 transmits the received symmetric private key Key1 and the symmetric algorithm Alg1 to the terminal 100.

[0086] In step S516, the target algorithm is transmitted. The mobility management entity 220 transmits the target algorithm Alg1 to the positioning server 400.

[0087] In step S518, the object private key is obtained: Upon receiving the object algorithm Alg1, the positioning server 400 searches its local relation list for the object private key Key1 associated with the object algorithm Alg1.

[0088] In step S520, the usage level is determined. After determining the target private key Key1, the positioning server 400 determines that the usage level corresponding to the target private key Key1 is usage level X.

[0089] In step S522, the usage level is transmitted. The positioning server 400 transmits the usage level X to the terminal 100.

[0090] In step S524, a positioning secret key is generated. The terminal 100 and the positioning server 400 each locally generate a positioning secret key Key00 based on the target secret key Key1 and the usage level X.

[0091] In step S526, the positioning parameters are encrypted. The terminal 100 encrypts the positioning parameters using the positioning secret key Key00 and the target algorithm Alg1, and acquires the encrypted positioning parameters.

[0092] In step S528, the terminal 100 transmits the encrypted positioning parameters to the positioning server 400.

[0093] In step S530, the positioning parameters are decrypted. The positioning server 400 uses the positioning secret key Key00 and the target algorithm Alg1 to decrypt the received encrypted positioning parameters and obtain the positioning parameters.

[0094] In step S532, the positioning server 400 calculates and evaluates the positioning information based on the positioning parameters, and obtains the positioning information indicating the location where the terminal 100 is located.

[0095] In step S534, the positioning server 400 encrypts the positioning information using the positioning secret key Key00 and the target algorithm Alg1, and acquires the encrypted positioning information.

[0096] In step S536, the positioning server 400 transmits the encrypted position information to the terminal 100.

[0097] In step S538, the location information is obtained by decryption. After obtaining the encrypted location information, the terminal 100 performs a decryption process using the positioning secret key Key00 and the target algorithm Alg1 to obtain location information indicating its own location.

[0098] As described in the above embodiments, the methods according to the above-described embodiments can be realized through software and necessary general-purpose hardware flash forms, and of course can also be realized by hardware. However, it will be apparent to those skilled in the art that the former is a more appropriate embodiment in many cases. Based on this understanding, the technical solution of the present disclosure, in its essence or in part contributing to the related art, can be embodied in the form of a software product, and this computer software product is stored in a storage medium (e.g., ROM / RAM, magnetic disk, optical disk) containing some instructions for causing a terminal device (which may be a mobile phone, computer, server, network device, etc.) to execute the method according to each embodiment of the present disclosure.

[0099] An embodiment of the present disclosure further provides a computer-readable storage medium storing a computer program that, when executed by a processor, performs the steps of any one of the method embodiments described above.

[0100] In some embodiments, the computer-readable storage medium may include, but is not limited to, various media capable of storing a computer program, such as a USB flash disk, a read-only memory (ROM), a random access memory (RAM), a portable hard disk, a magnetic disk, or an optical disk.

[0101] An embodiment of the present disclosure further provides an electronic device including a memory storing a computer program and a processor configured to execute the computer program to perform the steps of any one of the method embodiments described above.

[0102] In some embodiments, the electronic device may further include a transmission device coupled to the processor, and an input / output device coupled to the processor.

[0103] For specific examples in this embodiment, reference can be made to the examples described in the above-mentioned embodiments and exemplary embodiments, but the description thereof will be omitted here in this embodiment.

[0104] It will be apparent to those skilled in the art that each module or step of the present disclosure described above can be implemented by a general-purpose computing device, can be integrated into a single computing device, or can be distributed across a network of multiple computing devices, can be implemented by program code executable by a computing device, and can be stored in a storage device and executed by a computing device, and in some cases, the steps shown or described can be performed in a different order from that described above, and can be implemented by fabricating each module into an integrated circuit module, or by fabricating multiple modules or steps into a single integrated circuit module. Thus, the present disclosure is not limited to any specific combination of hardware and software.

[0105] The above are merely illustrative examples of the present disclosure and are not intended to limit the present disclosure. Those skilled in the art can make various modifications and variations to the present disclosure. Any modifications, equivalent replacements, improvements, etc. based on the principles of the present disclosure should fall within the scope of protection of the present disclosure.

Claims

1. obtaining a positioning request for requesting positioning of a target terminal, the positioning request including a terminal identifier of the target terminal and a target device identifier of a transmitting device that triggers the positioning request; verifying the target device identifier in response to the positioning request; if the target device identifier is successfully verified, obtaining encryption information assigned to the target terminal, the encryption information including a target private key and a target algorithm corresponding to the target private key; transmitting the encryption information to the target terminal, and transmitting the target algorithm in the encryption information to a positioning server assigned to the target terminal, so that the target terminal and the positioning server use the encryption information to obtain location information of the target terminal; Terminal positioning method.

2. The step of verifying the target device identifier in response to the positioning request comprises: searching for the target device identifier in a locally stored device identifier list; determining that the target device identifier has been successfully verified if the target device identifier is found in the device identifier list; If the target device identifier is not found in the device identifier list, determining that verification of the target device identifier has failed and rejecting the positioning request. The terminal positioning method according to claim 1 .

3. If the target device identifier is successfully verified, the step of obtaining encryption information assigned to the target terminal includes: sending an allocation request to a home location register via a mobility management entity; obtaining the symmetric private key assigned to the target terminal by the home location register and the symmetric algorithm corresponding to the symmetric private key; The terminal positioning method according to claim 1 .

4. The step of obtaining encryption information assigned to the target terminal comprises: assigning the positioning server to the target terminal; determining the target private key corresponding to the positioning server from a private key corresponding to the target terminal; determining the symmetric algorithm based on the symmetric private key; determining the symmetric private key and the symmetric algorithm as the encryption information; The terminal positioning method according to claim 1 .

5. After the step of transmitting the encryption information to the target terminal and transmitting the target algorithm in the encryption information to a positioning server assigned to the target terminal, the target terminal receives a usage level of the target private key transmitted from the positioning server, converts the target private key based on the usage level, and obtains a positioning private key; The target terminal further includes a step of encrypting the positioning parameters using the positioning private key so that the positioning server uses the positioning parameters to acquire the location information of the target terminal, and transmitting the encrypted positioning parameters to the positioning server. The terminal positioning method according to claim 1 .

6. After the step of transmitting the encryption information to the target terminal and transmitting the target algorithm in the encryption information to a positioning server assigned to the target terminal, When the positioning server receives the target algorithm, it obtains the target private key corresponding to the target algorithm from a locally stored mapping relationship, assigns a usage level to the target private key, sends the usage level to the target terminal, and converts the target private key according to the usage level to obtain a positioning private key; When the positioning server receives the encrypted positioning parameters transmitted from the target terminal, the positioning server decrypts the encrypted positioning parameters using the positioning private key to obtain the positioning parameters; The positioning server calculates the location information of the target terminal based on the positioning parameters, and transmits the location information encrypted using the positioning private key to the target terminal. The terminal positioning method according to claim 1 .

7. receiving, by the core network device in response to a positioning request, if the target device identifier is successfully verified, assigned encryption information, wherein the positioning request includes a terminal identifier of a target terminal requesting positioning and the target device identifier of a calling device triggering the positioning request, and the encryption information includes a target private key and a target algorithm corresponding to the target private key; receiving a usage level of the target private key, and converting the target private key according to the usage level to obtain a positioning private key; encrypting the positioning parameters using the positioning private key so that the positioning server acquires location information of the target terminal using the positioning parameters, and transmitting the encrypted positioning parameters to the positioning server; Terminal positioning method.

8. receiving an assigned target algorithm when the core network device responds to a positioning request and successfully verifies the target device identifier, the positioning request including a terminal identifier of a target terminal requesting positioning and the target device identifier of a calling device triggering the positioning request; Obtaining a target private key corresponding to the target algorithm from a locally stored mapping relationship, assigning a usage level to the target private key, sending the usage level to the target terminal, and converting the target private key based on the usage level to obtain a positioning private key; When the encrypted positioning parameters transmitted from the target terminal are received, the encrypted positioning parameters are decrypted using the positioning private key to obtain the positioning parameters; calculating location information of the target terminal based on the positioning parameters, and transmitting the location information encrypted using the positioning private key to the target terminal; Terminal positioning method.

9. A terminal positioning system including a target terminal, a core network device, and a positioning server, the core network device is configured to obtain a positioning request for requesting positioning of the target terminal; verify a target device identifier in response to the positioning request; if the target device identifier is successfully verified, obtain encryption information assigned to the target terminal, send the encryption information to the target terminal, and send a target algorithm in the encryption information to a positioning server assigned to the target terminal; the positioning request includes a terminal identifier of the target terminal and the target device identifier of a calling device that triggers the positioning request; and the encryption information includes a target private key and a target algorithm corresponding to the target private key; the positioning server is configured to receive the target algorithm, obtain the target private key corresponding to the target algorithm from a locally stored mapping relationship, assign a usage level to the target private key, send the usage level to the target terminal, convert the target private key based on the usage level, obtain a positioning private key, receive encrypted positioning parameters, decrypt using the positioning private key to obtain the positioning parameters, calculate location information of the target terminal based on the positioning parameters, and send the location information encrypted using the positioning private key to the target terminal; the target terminal receives the encryption information and the usage level of the target private key, converts the target private key based on the usage level, obtains a positioning private key, encrypts the positioning parameters using the positioning private key, transmits the encrypted positioning parameters to a positioning server, receives the encrypted location information, and obtains the location information by decrypting it using the positioning private key. Terminal positioning system.

10. A computer-readable medium storing a computer program that, when executed by a processor, executes the terminal positioning method according to any one of claims 1 to 8. storage medium.

11. a memory storing a computer program; and a processor configured to execute the computer program to perform the terminal positioning method according to any one of claims 1 to 8, electronic equipment.

Images