Communication system, core network, and communication method

Abstract

This network node comprises a receiving unit that receives signed data from a terminal, and a control unit that determines whether to utilize the received data on the basis of previously stored information that indicates the authenticity of the terminal.

Description

[Technical Field]

[0001] The present invention relates to a network node, a core network, and a communication method in a wireless communication system. [Background technology]

[0002] In NR (New Radio) (also referred to as "5G"), the successor system to LTE (Long Term Evolution), a network architecture is being considered that includes 5GC (5G Core Network), which corresponds to EPC (Evolved Packet Core), which is the core network in the LTE (Long Term Evolution) network architecture, and NG-RAN (Next Generation - Radio Access Network), which corresponds to E-UTRAN (Evolved Universal Terrestrial Radio Access Network), which is the RAN (Radio Access Network) in the LTE network architecture (for example, Non-Patent Document 1).

[0003] In some use cases of NR or 6G, technologies are being considered to collect data such as sensor data from multiple data sources such as terminals and application data servers, and use the data for machine learning, etc. [Prior art documents] [Non-patent literature]

[0004] [Non-Patent Document 1] 3GPP TS 23.501 V17.2.0(2021-09) Summary of the Invention [Problem to be solved by the invention]

[0005] Malicious devices can generate malicious data with the aim of misleading machine learning, etc. However, conventional approaches have a problem in that the reliability of data sources is not sufficiently verified when collecting data.

[0006] The present invention has been made in view of the above-mentioned points, and an object of the present invention is to improve the reliability of data sources in data collection using a wireless communication system. [Means for solving the problem]

[0007] According to the disclosed technology, there is provided a communication system including a core network including a first network node and a second network node, and a terminal, wherein the first network node includes a receiving unit that receives from the terminal a terminal certificate for certifying a combination of a terminal manufacturer, a terminal identification number, and a terminal public key, and a control unit that generates information indicating the authenticity of the terminal based on a result of checking the validity of the terminal certificate, and the second network node includes a receiving unit that receives signed data from the terminal, and a control unit that generates the received data based on the information indicating the authenticity of the terminal generated by the control unit included in the first network node. machine and a control unit that determines whether to collect for learning, wherein the terminal comprises a transmitting unit that transmits the terminal certificate to the first network node and transmits the signed data to the second network node. [Effects of the Invention]

[0008] The disclosed technology provides a technology that makes it possible to improve the reliability of data sources in data collection using a wireless communication system. [Brief explanation of the drawings]

[0009] [Figure 1] 1 is a diagram illustrating a wireless communication system according to an embodiment of the present invention. [Figure 2]FIG. 1 is a diagram illustrating an example of a configuration of a core network according to an embodiment of the present invention. [Figure 3] FIG. 10 is a sequence diagram showing an example of the flow of a terminal authenticity information generation process according to an embodiment of the present invention. [Figure 4] FIG. 10 is a sequence diagram showing an example of a flow of a terminal authenticity confirmation process according to an embodiment of the present invention. [Figure 5] FIG. 2 is a diagram illustrating an example of a functional configuration of a base station according to an embodiment of the present invention. [Figure 6] FIG. 2 is a diagram illustrating an example of a functional configuration of a terminal according to an embodiment of the present invention. [Figure 7] FIG. 2 is a diagram illustrating an example of a hardware configuration of a base station or a terminal according to an embodiment of the present invention. [Figure 8] 1 is a diagram showing an example of a configuration of a vehicle according to an embodiment of the present invention; DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Note that the embodiment described below is an example, and the embodiment to which the present invention is applied is not limited to the following embodiment.

[0011] In operation of the wireless communication system according to the embodiment of the present invention, existing technologies may be used as appropriate. The existing technologies include, but are not limited to, existing NR or LTE. Furthermore, the term "LTE" used in this specification has a broad meaning including LTE-Advanced and systems subsequent to LTE-Advanced (e.g., NR) unless otherwise specified.

[0012] Furthermore, in the embodiments of the present invention described below, terms used in existing LTE, such as SS (Synchronization signal), PSS (Primary SS), SSS (Secondary SS), PBCH (Physical broadcast channel), PRACH (Physical random access channel), PDCCH (Physical Downlink Control Channel), PDSCH (Physical Downlink Shared Channel), PUCCH (Physical Uplink Control Channel), and PUSCH (Physical Uplink Shared Channel), are used. This is for convenience of description, and similar signals, functions, etc. may be referred to by other names. Furthermore, the above-mentioned terms in NR correspond to NR-SS, NR-PSS, NR-SSS, NR-PBCH, NR-PRACH, etc. However, even signals used in NR are not necessarily designated as "NR-".

[0013] Furthermore, in the embodiments of the present invention, the duplex method may be a TDD (Time Division Duplex) method, an FDD (Frequency Division Duplex) method, or other methods (for example, Flexible Duplex, etc.).

[0014] Furthermore, in the embodiments of the present invention, "configuring" radio parameters and the like may mean that predetermined values ​​are pre-configured, or that radio parameters notified from a base station or a terminal are set.

[0015] (System Configuration) FIG. 1 is a diagram illustrating a wireless communication system according to an embodiment of the present invention. As shown in Fig. 1, a wireless communication system according to an embodiment of the present invention includes a base station 10 and a terminal 20. Although Fig. 1 shows one base station 10 and one terminal 20, this is an example, and there may be a plurality of each.

[0016] The base station 10 is a communication device that provides one or more cells and performs wireless communication with the terminal 20. The physical resources of a wireless signal are defined in the time domain and the frequency domain, and the time domain may be defined by the number of Orthogonal Frequency Division Multiplexing (OFDM) symbols, and the frequency domain may be defined by the number of subcarriers or the number of resource blocks. Furthermore, a TTI (Transmission Time Interval) in the time domain may be a slot, or a TTI may be a subframe.

[0017] The base station 10 transmits a synchronization signal and system information to the terminal 20. The synchronization signal is, for example, NR-PSS and NR-SSS. The system information is transmitted, for example, via the NR-PBCH and is also referred to as broadcast information. The synchronization signal and system information may be referred to as an SSB (SS / PBCH block). As shown in FIG. 1 , the base station 10 transmits control signals or data to the terminal 20 via DL (Downlink) and receives control signals or data from the terminal 20 via UL (Uplink). Both the base station 10 and the terminal 20 are capable of transmitting and receiving signals by performing beamforming. Furthermore, both the base station 10 and the terminal 20 are capable of applying MIMO (Multiple Input Multiple Output) communication to DL or UL. Furthermore, both the base station 10 and the terminal 20 may communicate via a secondary cell (SCell) and a primary cell (PCell) using Carrier Aggregation (CA). Furthermore, the terminal 20 may perform communication via a primary cell of the base station 10 and a primary secondary cell group cell (PSCell: Primary SCG Cell) of another base station 10 using DC (Dual Connectivity).

[0018] The terminal 20 is a communication device equipped with a wireless communication function, such as a smartphone, a mobile phone, a tablet, a wearable terminal, or an M2M (Machine-to-Machine) communication module. As shown in FIG. 1, the terminal 20 receives control signals or data from the base station 10 via DL and transmits control signals or data to the base station 10 via UL, thereby utilizing various communication services provided by the wireless communication system. The terminal 20 also receives various reference signals transmitted from the base station 10 and measures the propagation path quality based on the reception results of the reference signals. The terminal 20 may also be referred to as a UE, and the base station 10 may also be referred to as a gNB.

[0019] 2 is a diagram illustrating an example of a core network configuration according to an embodiment of the present invention. The wireless communication system includes a Next Generation Radio Access Network (NG-RAN) 10, a terminal 20, a core network 30, and a Data Network (DN) 40.

[0020] The core network 30 is a network including an exchange, a subscriber information management device, etc. The core network 30 includes a network node that realizes a U-Plane function and a group of network nodes that realizes a group of C-Plane functions.

[0021] The U-Plane function is a function that executes transmission and reception processing of user data. A network node that realizes the U-Plane function is, for example, a UPF (User plane function). The UPF is a network node that has functions such as a PDU (Protocol Data Unit) session point to the outside for interconnection with the DN 40, packet routing and forwarding, and user plane QoS (Quality of Service) handling. The UPF controls the transmission and reception of data between the DN 40 and the terminal 20. The UPF and the DN 40 may be composed of one or more network slices.

[0022] The C-Plane function group is a function group that executes a series of control processes for establishing communications, etc. The network node group that realizes the C-Plane function group includes, for example, an Access and Mobility Management Function (AMF) 310, a User Data Repository (UDR) 320, a Unified Data Management (UDM) 330, and a Network Repository Function (NRF) 340. Note that the network node group that realizes the C-Plane function group may also include other network nodes such as a Network Exposure Function (NEF), an Authentication Server Function (AUSF), a Policy Control Function (PCF), an Application Function (AF), and a Session Management Function (SMF).

[0023] The NG-RAN 10 is a RAN connected to the NR core network 30. The RAN is a network node that is communicably connected between the core network 30 and the terminal 20 and includes a base station, a line control device, etc. The NG-RAN 10 is communicably connected to the AMF 310 and the UPF. Note that, hereinafter, the base station 10 is also referred to as the NG-RAN 10.

[0024] The AMF 310 is a network node that has functions such as terminating the RAN interface, terminating the NAS (Non-Access Stratum), managing registration, connection, reachability, and mobility. The NRF 340 is a network node that has a function to discover NF (Network Function) instances that provide services. The UDM 330 is a network node that manages subscriber data and authentication data. The UDM 330 is connected to the UDR 320 that holds the data.

[0025] The SMF is a network node that has functions such as session management, IP (Internet Protocol) address allocation and management for terminals 20, DHCP (Dynamic Host Configuration Protocol) function, ARP (Address Resolution Protocol) proxy, and roaming function. The NEF is a network node that has the function of notifying other NFs (Network Functions) of capabilities and events. The PCF is a network node that has the function of controlling network policies. The AF is a network node that has the function of controlling application servers.

[0026] (Outline of this embodiment) In this embodiment, information indicating the authenticity of a terminal (hereinafter referred to as terminal authenticity information) is generated before data collection, and the procedure for confirming the authenticity of the terminal using the terminal authenticity information during data collection will be described.

[0027] As a preparation step prior to the process of generating device authenticity information, the device manufacturer receives a device certificate from the certificate issuer. The device certificate is data that certifies the combination of three elements: the device manufacturer, the device identification number, and the device public key. The device identification number is identification information used to identify the device. The device public key is public key data that is generated for each device.

[0028] The certificate issuer signs the device certificate with a private key (certificate issuer private key) used to authenticate itself. The device manufacturer then receives the device private key corresponding to the device certificate from the certificate issuer. The device private key is private key data generated for each device, and is generated in pair with the device public key.

[0029] The certificate issuer also distributes a public key (certificate issuer public key) for authenticating itself to each device. That is, the network nodes included in the core network 30 are able to use the certificate issuer public key.

[0030] The terminal private key and the terminal public key may be generated by the terminal manufacturer or by the certificate issuer, and the certificate issuer and the terminal manufacturer are able to use the terminal private key and the terminal public key on the server devices that they manage.

[0031] A terminal manufacturer sets one terminal certificate and a corresponding terminal private key for one terminal. Note that the terminal certificate may be configured so that it cannot be changed or removed after being set in the terminal. Furthermore, the terminal private key may be configured so that it is kept secret within the terminal and cannot be displayed on the terminal's screen or read from application programs installed on the terminal.

[0032] 3 is a sequence diagram showing an example of the flow of a terminal authenticity information generation process according to an embodiment of the present invention. The terminal authenticity information generation process is executed in a registration procedure when starting to use a terminal, or before or after the registration procedure.

[0033] The terminal 20 transmits the terminal certificate to the NF-X 350 (step S11). The NF-X 350 is one of the network nodes included in the core network 30.

[0034] The NF-X 350 receives the terminal certificate from the terminal and checks the validity of the terminal certificate using the certificate issuer public key (step S12).

[0035] When the NF-X350 confirms that the terminal certificate is valid, it requests the DN40 to confirm the terminal certificate and terminal information (e.g., information including the PEI, terminal type, etc.). The DN40 may be, for example, a server device (terminal manufacturer server) managed by the terminal manufacturer. The DN40 confirms the validity of the terminal information (step S14) and transmits information indicating the confirmation result to the NF-X350 (step S15).

[0036] When the NF-X350 receives information indicating that the validity of the terminal information has been confirmed from the DN40, it stores the terminal authenticity information in the UDM330 (step S16). The terminal authenticity information is information indicating the authenticity of the terminal, and is, for example, information indicating a list of trusted terminals. The terminal authenticity information may be in any format, and may be, for example, information added as a flag to the subscriber information corresponding to the trusted terminal.

[0037] Note that the terminal 20 may initiate the mobile registration procedure when the combination of the USIM and the terminal is changed. The terminal authenticity information generation process may be executed during the mobile registration procedure, or before or after the mobile registration procedure.

[0038] The NF-X 350 is an example of a network node (first network node) that generates terminal authenticity information.

[0039] The NF-X 350 or other network nodes refer to the terminal authenticity information stored in the UDM 330 as necessary. Specifically, the network nodes refer to the terminal authenticity information to verify the source of data, which will be described later. In addition, when multiple terminals perform some kind of collaborative work, the network nodes may refer to the terminal authenticity information when selecting terminals to participate in the collaborative work.

[0040] 4 is a sequence diagram showing an example of the flow of a terminal authenticity confirmation process according to an embodiment of the present invention. The terminal authenticity confirmation process is executed by the NF-X 350 or another network node (hereinafter referred to as the NF-Y 360) to confirm the authenticity of the terminal in order to verify the data source.

[0041] The terminal 20 generates data using a sensor or the like, and signs the generated data with its own terminal private key (step S21). Then, the terminal 20 transmits the signed data to the NF-Y 360 (step S22). Here, when transmitting the signed data, the terminal 20 transmits the set terminal certificate to the NF-Y 360.

[0042] When the NF-Y 360 receives the signed data, it uses the certificate issuer public key to verify the validity of the transmitted terminal certificate (step S23). Then, when the NF-Y 360 confirms that the terminal certificate is valid, it uses the terminal public key corresponding to the verified terminal certificate to verify the validity of the signature (step S24).

[0043] The NF-Y 360 uses the terminal identification number corresponding to the confirmed terminal certificate to refer to the terminal authenticity information stored in the UDM 330 (step S25), and confirms the authenticity of the terminal 20 (step S26).

[0044] When the NF-Y 360 verifies that the terminal 20 is authentic, the NF-Y 360 or other network nodes utilize the data received from the terminal 20 for processing such as machine learning.

[0045] The NF-Y 360 is an example of a network node (second network node) that determines whether or not to utilize received data based on terminal authenticity information.

[0046] Furthermore, the terminal 20 is an example of a data source. In the present embodiment, an example has been shown in which the data source is the terminal 20, but the data source may be another device. For example, the data source may be a server device that provides data generated by executing an application program.

[0047] According to this embodiment, a network node that collects data can verify the authenticity of the data source, such as a terminal that transmits the data, based on information indicating the authenticity of the data source that is generated before receiving the data.

[0048] In the above-described embodiment, the information indicating the authenticity of the data source may be information indicating that the data source is not authentic. In this case, if the NF-Y360 confirms that the data source is not authentic, it may not utilize the data transmitted from the data source. In other words, the NF-Y360 may utilize the data transmitted from the data source unless it is confirmed that the data source is not authentic. This allows the network node that collects data to more flexibly select the level of reliability required of the data source.

[0049] (Device configuration) Next, a description will be given of examples of the functional configurations of the base station 10, the terminal 20, and various network nodes that perform the processes and operations described above. The base station 10, the terminal 20, and various network nodes include functions for performing the above-described embodiments. However, the base station 10, the terminal 20, and various network nodes may each include only a portion of the functions of the embodiments.

[0050] <Base Station 10 and Network Nodes> FIG. 5 is a diagram showing an example of the functional configuration of base station 10. As shown in FIG. 5, base station 10 has a transmitting unit 110, a receiving unit 120, a setting unit 130, and a control unit 140. The functional configuration shown in FIG. 5 is merely an example. As long as the operations according to the embodiment of the present invention can be performed, the names of the functional divisions and functional units may be any. Note that a network node may have the same functional configuration as base station 10. Furthermore, a network node having multiple different functions in the system architecture may be composed of multiple network nodes separated by function.

[0051] The transmitter 110 has a function of generating a signal to be transmitted to the terminal 20 or another network node and transmitting the signal by wire or wirelessly. The receiver 120 has a function of receiving various signals transmitted from the terminal 20 or another network node and acquiring, for example, information of a higher layer from the received signal.

[0052] The setting unit 130 stores preset setting information and various setting information to be transmitted to the terminal 20 in a storage device, and reads the information from the storage device as needed. The content of the setting information includes, for example, settings related to communication using NTN.

[0053] As described in the embodiment, the control unit 140 performs processing related to communication using NTN. The control unit 140 also performs processing related to communication with the terminal 20. The control unit 140 also performs processing related to geographical position verification of the terminal 20. A functional unit related to signal transmission in the control unit 140 may be included in the transmitting unit 110, and a functional unit related to signal reception in the control unit 140 may be included in the receiving unit 120.

[0054] <Terminal 20> FIG. 6 is a diagram showing an example of the functional configuration of the terminal 20. As shown in FIG. 6, the terminal 20 has a transmitting unit 210, a receiving unit 220, a setting unit 230, and a control unit 240. The functional configuration shown in FIG. 6 is merely an example. As long as the operations according to the embodiment of the present invention can be performed, the functional divisions and names of the functional units may be any. The USIM attached to the terminal 20 may have the transmitting unit 210, the receiving unit 220, the setting unit 230, and the control unit 240, similar to the terminal 20.

[0055] The transmitter 210 generates a transmission signal from transmission data and transmits the transmission signal wirelessly. The receiver 220 receives various signals wirelessly and acquires higher layer signals from the received physical layer signals. The receiver 220 also has a function of receiving NR-PSS, NR-SSS, NR-PBCH, DL / UL control signals, reference signals, etc. transmitted from a network node.

[0056] The setting unit 230 stores various setting information received from the network node by the receiving unit 220 in a storage device, and reads it out from the storage device as needed. The setting unit 230 also stores setting information that is set in advance.

[0057] The network node and core network of this embodiment may be configured as the network node and core network shown in the following items. Also, the following communication method may be implemented.

[0058] <Configuration of this embodiment> (Section 1) a receiving unit for receiving signed data from a terminal; and a control unit that determines whether or not to utilize the received data based on information indicating the authenticity of the terminal that is stored in advance. Network node. (Section 2) the receiving unit receives a terminal certificate from the terminal for certifying a combination of a terminal manufacturer, a terminal identification number, and a terminal public key; the control unit confirms the validity of the signature of the data based on the terminal certificate. 2. The network node of claim 1. (Section 3) A core network comprising a first network node and a second network node, The first network node: a receiving unit that receives a terminal certificate from the terminal for certifying a combination of the terminal manufacturer, the terminal identification number, and the terminal public key; a control unit that generates information indicating the authenticity of the terminal based on a result of checking the validity of the terminal certificate; The second network node: a receiving unit for receiving signed data from a terminal; a control unit that determines whether to utilize the received data based on information indicating the authenticity of the terminal generated by the control unit included in the first network node, Core network. (Section 4) receiving signed data from the terminal; and determining whether to utilize the received data based on information indicating the authenticity of the terminal that is stored in advance. The communication method implemented by network nodes.

[0059] Any of the above configurations provides a technique that enables improving the reliability of a data source in data collection using a wireless communication system. According to paragraph 2, the validity of a data signature can be confirmed based on a terminal certificate. According to paragraph 3, information indicating the authenticity of a terminal can be generated based on the result of confirming the validity of the terminal certificate.

[0060] (Hardware configuration) The block diagrams (FIGS. 5 and 6) used to explain the above embodiments show functional blocks. These functional blocks (components) are realized by any combination of at least one of hardware and software. Furthermore, the method for realizing each functional block is not particularly limited. That is, each functional block may be realized using one device that is physically or logically coupled, or may be realized using two or more devices that are physically or logically separated and connected directly or indirectly (for example, using wires, wirelessly, etc.). The functional block may be realized by combining the one device or the multiple devices with software.

[0061] Functions include, but are not limited to, judgment, determination, judgment, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, resolution, selection, election, establishment, comparison, assumption, expectation, consideration, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocation, mapping, and assignment. For example, a functional block (component) that performs transmission is called a transmitting unit or transmitter. As mentioned above, there are no particular limitations on how these functions are implemented.

[0062] For example, a network node, a terminal 20, etc. according to an embodiment of the present disclosure may function as a computer that performs processing of the wireless communication method of the present disclosure. FIG. 7 is a diagram illustrating an example of a hardware configuration of a base station 10 and a terminal 20 according to an embodiment of the present disclosure. The network node may have the same hardware configuration as the base station 10. The USIM may have the same hardware configuration as the terminal 20. The above-described base station 10 and terminal 20 may be physically configured as a computer device including a processor 1001, a storage device 1002, an auxiliary storage device 1003, a communication device 1004, an input device 1005, an output device 1006, a bus 1007, etc.

[0063] In the following description, the term "apparatus" can be read as a circuit, a device, a unit, etc. The hardware configuration of the base station 10 and the terminal 20 may be configured to include one or more of the apparatuses shown in the drawings, or may be configured to exclude some of the apparatuses.

[0064] Each function in the base station 10 and the terminal 20 is realized by loading predetermined software (programs) onto hardware such as the processor 1001, the memory device 1002, etc., so that the processor 1001 performs calculations, controls communication by the communication device 1004, and controls at least one of reading and writing data in the memory device 1002 and the auxiliary memory device 1003.

[0065] The processor 1001 controls the entire computer by running, for example, an operating system. The processor 1001 may be configured as a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic unit, a register, etc. For example, the above-mentioned control unit 140, control unit 240, etc. may be realized by the processor 1001.

[0066] Furthermore, the processor 1001 reads programs (program codes), software modules, data, etc. from at least one of the auxiliary storage device 1003 and the communication device 1004 into the storage device 1002, and executes various processes in accordance with the programs. The programs used are those that cause a computer to execute at least some of the operations described in the above-described embodiments. For example, the control unit 140 of the base station 10 shown in FIG. 5 may be implemented by a control program stored in the storage device 1002 and executed by the processor 1001. Furthermore, for example, the control unit 240 of the terminal 20 shown in FIG. 6 may be implemented by a control program stored in the storage device 1002 and executed by the processor 1001. While the above-described various processes have been described as being executed by one processor 1001, they may also be executed simultaneously or sequentially by two or more processors 1001. The processor 1001 may be implemented by one or more chips. The programs may be transmitted from a network via a telecommunications line.

[0067] The storage device 1002 is a computer-readable recording medium and may be configured, for example, by at least one of a read-only memory (ROM), an erasable programmable ROM (EPROM), an electrically erasable programmable ROM (EEPROM), a random access memory (RAM), etc. The storage device 1002 may also be called a register, a cache, a main memory, etc. The storage device 1002 can store executable programs (program codes), software modules, etc. for implementing a communication method according to an embodiment of the present disclosure.

[0068] The secondary storage device 1003 is a computer-readable recording medium, and may be, for example, at least one of an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray disc), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy disk, a magnetic strip, etc. The above-mentioned storage medium may be, for example, a database, a server, or other suitable medium including at least one of the storage device 1002 and the secondary storage device 1003.

[0069] The communication device 1004 is hardware (transmission / reception device) for communicating between computers via at least one of a wired network and a wireless network, and is also referred to as, for example, a network device, a network controller, a network card, or a communication module. The communication device 1004 may be configured to include a high-frequency switch, a duplexer, a filter, a frequency synthesizer, etc. to realize at least one of frequency division duplex (FDD) and time division duplex (TDD). For example, a transmission / reception antenna, an amplifier unit, a transmission / reception unit, a transmission path interface, etc. may be realized by the communication device 1004. The transmission / reception unit may be implemented as a transmission unit and a reception unit that are physically or logically separated.

[0070] The input device 1005 is an input device (for example, a keyboard, a mouse, a microphone, a switch, a button, a sensor, etc.) that receives input from the outside. The output device 1006 is an output device (for example, a display, a speaker, an LED lamp, etc.) that outputs to the outside. The input device 1005 and the output device 1006 may be integrated into one device (for example, a touch panel).

[0071] Furthermore, each device such as the processor 1001 and the storage device 1002 is connected by a bus 1007 for communicating information. The bus 1007 may be configured using a single bus, or may be configured using different buses between each device.

[0072] Furthermore, base station 10 and terminal 20 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, processor 1001 may be implemented using at least one of these pieces of hardware.

[0073] Fig. 8 shows an example configuration of a vehicle 2001. As shown in Fig. 8, the vehicle 2001 includes a drive unit 2002, a steering unit 2003, an accelerator pedal 2004, a brake pedal 2005, a shift lever 2006, front wheels 2007, rear wheels 2008, an axle 2009, an electronic control unit 2010, various sensors 2021 to 2029, an information service unit 2012, and a communication module 2013. Each aspect / embodiment described in the present disclosure may be applied to a communication device mounted on the vehicle 2001, and may be applied to the communication module 2013, for example.

[0074] The drive unit 2002 is configured, for example, by an engine, a motor, or a hybrid of an engine and a motor. The steering unit 2003 includes at least a steering wheel (also called a handle), and is configured to steer at least one of the front wheels and the rear wheels based on the operation of the steering wheel operated by the user.

[0075] The electronic control unit 2010 is composed of a microprocessor 2031, a memory (ROM, RAM) 2032, and a communication port (IO port) 2033. Signals are input to the electronic control unit 2010 from various sensors 2021 to 2029 provided in the vehicle 2001. The electronic control unit 2010 may also be called an ECU (Electronic Control Unit).

[0076] The signals from the various sensors 2021 to 2029 include a current signal from a current sensor 2021 that senses the current of the motor, a rotation speed signal of the front and rear wheels obtained by a rotation speed sensor 2022, an air pressure signal of the front and rear wheels obtained by an air pressure sensor 2023, a vehicle speed signal obtained by a vehicle speed sensor 2024, an acceleration signal obtained by an acceleration sensor 2025, an accelerator pedal depression amount signal obtained by an accelerator pedal sensor 2029, a brake pedal depression amount signal obtained by a brake pedal sensor 2026, a shift lever operation signal obtained by a shift lever sensor 2027, and a detection signal for detecting obstacles, vehicles, pedestrians, etc. obtained by an object detection sensor 2028.

[0077] The information service unit 2012 is composed of various devices, such as a car navigation system, an audio system, speakers, a television, and a radio, for providing various types of information such as driving information, traffic information, and entertainment information, and one or more ECUs for controlling these devices. The information service unit 2012 uses information obtained from external devices via the communication module 2013, etc., to provide various types of multimedia information and multimedia services to the occupants of the vehicle 2001.

[0078] The driving assistance system unit 2030 is composed of various devices that provide functions for preventing accidents and reducing the driver's driving burden, such as a millimeter-wave radar, a LiDAR (Light Detection and Ranging), a camera, a positioning locator (e.g., GNSS, etc.), map information (e.g., high-definition (HD) map, autonomous vehicle (AV) map, etc.), a gyro system (e.g., an IMU (Inertial Measurement Unit), an INS (Inertial Navigation System), etc.), an AI (Artificial Intelligence) chip, and an AI processor, as well as one or more ECUs that control these devices. The driving assistance system unit 2030 also transmits and receives various information via the communication module 2013 to realize the driving assistance function or the autonomous driving function.

[0079] The communication module 2013 can communicate with the microprocessor 2031 and components of the vehicle 2001 via the communication port. For example, the communication module 2013 transmits and receives data via the communication port 2033 to and from the drive unit 2002, steering unit 2003, accelerator pedal 2004, brake pedal 2005, shift lever 2006, front wheels 2007, rear wheels 2008, axle 2009, microprocessor 2031 and memory (ROM, RAM) 2032 in the electronic control unit 2010, and sensors 2021 to 29, which are provided in the vehicle 2001.

[0080] The communication module 2013 is a communication device that can be controlled by the microprocessor 2031 of the electronic control unit 2010 and can communicate with an external device. For example, it transmits and receives various information to and from the external device via wireless communication. The communication module 2013 may be located either inside or outside the electronic control unit 2010. The external device may be, for example, a base station, a mobile station, or the like.

[0081] The communication module 2013 transmits, via wireless communication to an external device, a current signal from the current sensor that is input to the electronic control unit 2010. The communication module 2013 also transmits, via wireless communication to an external device, the rotation speed signals of the front and rear wheels acquired by a rotation speed sensor 2022, the air pressure signals of the front and rear wheels acquired by an air pressure sensor 2023, the vehicle speed signal acquired by a vehicle speed sensor 2024, the acceleration signal acquired by an acceleration sensor 2025, the accelerator pedal depression amount signal acquired by an accelerator pedal sensor 2029, the brake pedal depression amount signal acquired by a brake pedal sensor 2026, the shift lever operation signal acquired by a shift lever sensor 2027, and the detection signals for detecting obstacles, vehicles, pedestrians, etc. acquired by an object detection sensor 2028, which are input to the electronic control unit 2010.

[0082] The communication module 2013 receives various information (traffic information, traffic signal information, inter-vehicle information, etc.) transmitted from external devices and displays it on an information service unit 2012 provided in the vehicle 2001. The communication module 2013 also stores the various information received from the external devices in a memory 2032 that can be used by the microprocessor 2031. Based on the information stored in the memory 2032, the microprocessor 2031 may control the drive unit 2002, steering unit 2003, accelerator pedal 2004, brake pedal 2005, shift lever 2006, front wheels 2007, rear wheels 2008, axle 2009, sensors 2021 to 2029, etc. provided in the vehicle 2001.

[0083] (Supplementary explanation of the embodiment) Although the embodiments of the present invention have been described above, the disclosed invention is not limited to such embodiments, and those skilled in the art will understand various modifications, alterations, alternatives, and substitutions. While specific numerical examples have been used to facilitate understanding of the invention, unless otherwise specified, these numerical values ​​are merely examples, and any appropriate values ​​may be used. The division of items in the above description is not essential to the present invention; two or more items may be combined as needed, and items described in one item may apply to items described in another item (unless inconsistent). The boundaries between functional units or processing units in the functional block diagram do not necessarily correspond to the boundaries between physical components. The operations of multiple functional units may be performed by a single physical component, or the operations of a single functional unit may be performed by multiple physical components. The order of the processing steps described in the embodiments may be reversed as long as there is no contradiction. For convenience of processing description, the base station 10 and terminal 20 have been described using functional block diagrams. However, such devices may be implemented using hardware, software, or a combination thereof. The software operated by the processor of the base station 10 in accordance with an embodiment of the present invention and the software operated by the processor of the terminal 20 in accordance with an embodiment of the present invention may each be stored in random access memory (RAM), flash memory, read-only memory (ROM), EPROM, EEPROM, registers, hard disk (HDD), removable disk, CD-ROM, database, server or any other suitable storage medium.

[0084] Furthermore, the notification of information is not limited to the aspects / embodiments described in the present disclosure, and may be performed using other methods. For example, the notification of information may be performed by physical layer signaling (e.g., Downlink Control Information (DCI), Uplink Control Information (UCI)), higher layer signaling (e.g., Radio Resource Control (RRC) signaling, Medium Access Control (MAC) signaling, broadcast information (Master Information Block (MIB), System Information Block (SIB)), other signals, or a combination thereof. Furthermore, the RRC signaling may be referred to as an RRC message, and may be, for example, an RRC Connection Setup message, an RRC Connection Reconfiguration message, or the like.

[0085] Each aspect / embodiment described in the present disclosure may be any of the following: LTE (Long Term Evolution), LTE-Advanced (LTE-A), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), 6th generation mobile communication system (6G), xth generation mobile communication system (xG) (xG (x is, for example, an integer or decimal number)), FRA (Future Radio Access), NR (new Radio), New radio access (NX), Future generation radio access (FX), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE The present invention may be applied to at least one of systems using 802.20, UWB (Ultra-Wideband), Bluetooth (registered trademark), or other appropriate systems, and next-generation systems that are extended, modified, created, or defined based on these systems. The present invention may also be applied to a combination of multiple systems (e.g., a combination of at least one of LTE and LTE-A with 5G).

[0086] The order of the procedures, sequences, flowcharts, etc. of each aspect / embodiment described herein may be changed unless it is consistent. For example, the methods described in this disclosure present elements of various steps using an example order and are not limited to the particular order presented.

[0087] In this specification, a specific operation that is described as being performed by the base station 10 may also be performed by its upper node in some cases. In a network consisting of one or more network nodes having the base station 10, it is clear that various operations performed for communication with the terminal 20 may be performed by at least one of the base station 10 and another network node other than the base station 10 (such as, but not limited to, an MME or an S-GW). Although the above example illustrates a case where there is one other network node other than the base station 10, the other network node may be a combination of multiple other network nodes (such as an MME and an S-GW).

[0088] The information, signals, etc. described in the present disclosure may be output from a higher layer (or a lower layer) to a lower layer (or a higher layer), or may be input / output via multiple network nodes.

[0089] Input and output information may be stored in a specific location (for example, memory) or may be managed using a management table. Input and output information may be overwritten, updated, or added to. Output information may be deleted. Input information may be sent to another device.

[0090] In the present disclosure, the determination may be made based on a value represented by one bit (0 or 1), a Boolean value (true or false), or a numerical comparison (e.g., comparison with a predetermined value).

[0091] Software shall be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc., whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise.

[0092] Software, instructions, information, etc. may also be transmitted or received over a transmission medium. For example, if software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and / or wireless technologies (such as infrared, microwave), then these wired and / or wireless technologies are included within the definition of transmission media.

[0093] The information, signals, etc. described in this disclosure may be represented using any of a variety of different technologies. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof.

[0094] Note that terms explained in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings. For example, at least one of a channel and a symbol may be a signal (signaling). Furthermore, a signal may be a message. Furthermore, a component carrier (CC) may be called a carrier frequency, a cell, a frequency carrier, etc.

[0095] As used in this disclosure, the terms "system" and "network" are used interchangeably.

[0096] Furthermore, the information, parameters, etc. described in the present disclosure may be expressed using absolute values, may be expressed using relative values ​​from a predetermined value, or may be expressed using other corresponding information. For example, a radio resource may be indicated by an index.

[0097] The names used for the above-described parameters are not intended to be limiting in any way. Furthermore, the mathematical expressions using these parameters may differ from those explicitly disclosed in this disclosure. The various channels (e.g., PUCCH, PDCCH, etc.) and information elements may be identified by any suitable names, and therefore the various names assigned to these various channels and information elements are not intended to be limiting in any way.

[0098] In this disclosure, terms such as "base station (BS)," "radio base station," "base station," "fixed station," "NodeB," "eNodeB (eNB)," "gNodeB (gNB)," "access point," "transmission point," "reception point," "transmission / reception point," "cell," "sector," "cell group," "carrier," and "component carrier" may be used interchangeably. Base stations may also be referred to by terms such as macrocell, small cell, femtocell, and picocell.

[0099] A base station can accommodate one or more (e.g., three) cells. When a base station accommodates multiple cells, the overall coverage area of ​​the base station can be divided into multiple smaller areas, and each smaller area can be provided with communication service by a base station subsystem (e.g., a small indoor base station (RRH: Remote Radio Head)). The term "cell" or "sector" refers to a part or the entire coverage area of ​​a base station and / or base station subsystem that provides communication service within this coverage.

[0100] In this disclosure, the terms "Mobile Station (MS)," "user terminal," "User Equipment (UE)," "terminal," etc. may be used interchangeably.

[0101] A mobile station may also be referred to by those skilled in the art as a subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, or some other suitable terminology.

[0102] At least one of the base station and the mobile station may be called a transmitting device, a receiving device, a communication device, etc. At least one of the base station and the mobile station may be a device mounted on a mobile body, or the mobile body itself. The mobile body may be a vehicle (e.g., a car, an airplane, etc.), an unmanned mobile body (e.g., a drone, an autonomous vehicle, etc.), or a robot (manned or unmanned). At least one of the base station and the mobile station may also include devices that do not necessarily move during communication operations. For example, at least one of the base station and the mobile station may be an IoT (Internet of Things) device such as a sensor.

[0103] Furthermore, a base station in the present disclosure may be read as a user terminal. For example, the aspects / embodiments of the present disclosure may be applied to a configuration in which communication between a base station and a user terminal is replaced with communication between a plurality of terminals 20 (which may be called, for example, D2D (Device-to-Device) or V2X (Vehicle-to-Everything)). In this case, the terminal 20 may be configured to have the functions of the base station 10 described above. Furthermore, terms such as "uplink" and "downlink" may be read as terms corresponding to terminal-to-terminal communication (for example, "side"). For example, terms such as an uplink channel and a downlink channel may be read as a side channel.

[0104] Similarly, the user terminal in the present disclosure may be read as a base station, in which case the base station may be configured to have the functions of the user terminal described above.

[0105] As used in this disclosure, the terms "determining" and "determining" may encompass a wide variety of actions. "Determining" and "determining" may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up, searching, inquiring (e.g., searching in a table, database, or other data structure), ascertaining, and the like. "Determining" and "determining" may also include receiving (e.g., receiving information), transmitting (e.g., sending information), input, output, accessing (e.g., accessing data in memory), and the like. Furthermore, "judgment" and "decision" can include regarding resolving, selecting, choosing, establishing, comparing, etc. as having been "judged" or "decided." In other words, "judgment" and "decision" can include regarding some action as having been "judged" or "decided." Furthermore, "judgment (decision)" can be interpreted as "assuming," "expecting," "considering," etc.

[0106] The terms "connected," "coupled," or any variation thereof, refer to any direct or indirect connection or coupling between two or more elements, and may include the presence of one or more intermediate elements between two elements that are "connected" or "coupled" to each other. The coupling or connection between elements may be physical, logical, or a combination thereof. For example, "connected" may be read as "access." As used in this disclosure, two elements may be considered to be "connected" or "coupled" to each other using one or more wires, cables, and / or printed electrical connections, as well as electromagnetic energy having wavelengths in the radio frequency range, microwave range, and optical (both visible and invisible) range, as some non-limiting and non-exhaustive examples.

[0107] The reference signal may be abbreviated as RS (Reference Signal) or may be called a pilot depending on the applicable standard.

[0108] As used in this disclosure, the phrase "based on" does not mean "based only on," unless expressly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

[0109] As used in this disclosure, any reference to an element using a designation such as "first," "second," etc. does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed or that the first element must in some way precede the second element.

[0110] The "means" in the configuration of each of the above devices may be replaced with "part," "circuit," "device," etc.

[0111] When used in this disclosure, the terms "include," "including," and variations thereof are intended to be inclusive, similar to the term "comprising." Furthermore, when used in this disclosure, the term "or" is not intended to be an exclusive or.

[0112] A radio frame may be composed of one or more frames in the time domain. Each of the one or more frames in the time domain may be called a subframe. A subframe may further be composed of one or more slots in the time domain. A subframe may have a fixed time length (e.g., 1 ms) that is independent of numerology.

[0113] Numerology may be communication parameters that apply to at least one of transmission and reception of a signal or channel, such as subcarrier spacing (SCS), bandwidth, symbol length, cyclic prefix length, transmission time interval (TTI), number of symbols per TTI, radio frame structure, specific filtering operations performed by the transceiver in the frequency domain, and specific windowing operations performed by the transceiver in the time domain.

[0114] A slot may be composed of one or more symbols (such as an Orthogonal Frequency Division Multiplexing (OFDM) symbol or a Single Carrier Frequency Division Multiple Access (SC-FDMA) symbol) in the time domain. A slot may be a time unit based on numerology.

[0115] A slot may include multiple minislots. Each minislot may consist of one or multiple symbols in the time domain. A minislot may also be called a subslot. A minislot may consist of fewer symbols than a slot. A PDSCH (or PUSCH) transmitted in a time unit larger than a minislot may be called PDSCH (or PUSCH) mapping type A. A PDSCH (or PUSCH) transmitted using a minislot may be called PDSCH (or PUSCH) mapping type B.

[0116] The radio frame, subframe, slot, minislot, and symbol all represent time units for transmitting signals, and may be referred to by other names corresponding to the radio frame, subframe, slot, minislot, and symbol.

[0117] For example, one subframe may be called a transmission time interval (TTI), multiple consecutive subframes may be called a TTI, or one slot or one minislot may be called a TTI. That is, at least one of the subframe and the TTI may be a subframe (1 ms) in existing LTE, a period shorter than 1 ms (for example, 1-13 symbols), or a period longer than 1 ms. Note that the unit representing the TTI may be called a slot, minislot, etc. instead of a subframe.

[0118] Here, TTI refers to, for example, the smallest time unit for scheduling in wireless communication. For example, in an LTE system, a base station performs scheduling to allocate wireless resources (such as frequency bandwidth and transmission power that can be used by each terminal 20) to each terminal 20 in TTI units. Note that the definition of TTI is not limited to this.

[0119] The TTI may be a transmission time unit for a channel-encoded data packet (transport block), a code block, a code word, etc., or may be a processing unit for scheduling, link adaptation, etc. When a TTI is given, the time interval (e.g., the number of symbols) to which a transport block, a code block, a code word, etc. is actually mapped may be shorter than the TTI.

[0120] When one slot or one minislot is called a TTI, one or more TTIs (i.e., one or more slots or one or more minislots) may be the minimum time unit for scheduling. Also, the number of slots (minislots) constituting the minimum time unit for scheduling may be controlled.

[0121] A TTI having a time length of 1 ms may be called a regular TTI (TTI in LTE Rel. 8-12), normal TTI, long TTI, regular subframe, normal subframe, long subframe, slot, etc. A TTI shorter than a regular TTI may be called a shortened TTI, short TTI, partial or fractional TTI, shortened subframe, short subframe, minislot, subslot, slot, etc.

[0122] In addition, a long TTI (e.g., a normal TTI, a subframe, etc.) may be interpreted as a TTI having a time length of more than 1 ms, and a short TTI (e.g., a shortened TTI, etc.) may be interpreted as a TTI having a TTI length shorter than the TTI length of a long TTI and equal to or greater than 1 ms.

[0123] A resource block (RB) is a resource allocation unit in the time domain and frequency domain, and may include one or more consecutive subcarriers in the frequency domain. The number of subcarriers included in an RB may be the same regardless of numerology, for example, 12. The number of subcarriers included in an RB may also be determined based on numerology.

[0124] The time domain of an RB may include one or more symbols and may have a length of one slot, one minislot, one subframe, or one TTI. One TTI, one subframe, etc. may each be composed of one or more resource blocks.

[0125] Note that one or more RBs may also be called a physical resource block (PRB), a sub-carrier group (SCG), a resource element group (REG), a PRB pair, an RB pair, or the like.

[0126] Furthermore, a resource block may be composed of one or more resource elements (REs). For example, one RE may be a radio resource region of one subcarrier and one symbol.

[0127] A Bandwidth Part (BWP) (which may also be referred to as a fractional bandwidth) may represent a subset of contiguous common resource blocks (RBs) for a given numerology on a given carrier, where the common RBs may be identified by their index relative to a common reference point of the carrier. PRBs may be defined in a given BWP and numbered within that BWP.

[0128] The BWP may include a BWP for UL (UL BWP) and a BWP for DL ​​(DL BWP). One or more BWPs may be set for the terminal 20 within one carrier.

[0129] At least one of the configured BWPs may be active, and the terminal 20 may not expect to transmit or receive a predetermined signal / channel outside the active BWP. Note that the terms "cell," "carrier," and the like in this disclosure may be read as "BWP."

[0130] The above-described structures of radio frames, subframes, slots, minislots, symbols, etc. are merely examples. For example, the number of subframes included in a radio frame, the number of slots per subframe or radio frame, the number of minislots included in a slot, the number of symbols and RBs included in a slot or minislot, the number of subcarriers included in an RB, the number of symbols in a TTI, the symbol length, the cyclic prefix (CP) length, etc. may be variously changed.

[0131] In this disclosure, where articles are added by translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are in the plural form.

[0132] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "coupled" may also be interpreted in the same way as "different."

[0133] Each aspect / embodiment described in this disclosure may be used alone, in combination, or switched depending on the implementation. Furthermore, notification of predetermined information (e.g., notification that "X is true") is not limited to being done explicitly, but may be done implicitly (e.g., by not notifying the predetermined information).

[0134] Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended to be illustrative and does not have any limiting meaning on the present disclosure. [Explanation of symbols]

[0135] 10 Base station (NG-RAN) 110 Transmitter 120 Receiver 130 Setting section 140 Control Unit 20 terminals 30 Core Network 40DN 210 Transmitter 220 Receiving unit 230 Setting Section 240 Control Unit 310 AMF 320 UDR 330 UDM 340 NRF 350 NF-X 360 NF-Y 1001 processor 1002 Storage device 1003 Auxiliary storage device 1004 Communication equipment 1005 Input Device 1006 Output Device 2001 Vehicle 2002 Drive unit 2003 Steering Section 2004 accelerator pedal 2005 brake pedal 2006 Shift Lever 2007 front wheel 2008 rear wheel 2009 Axle 2010 Electronic Control Unit 2012 Information Services Department 2013 Communication Module 2021 Current Sensor 2022 RPM Sensor 2023 Air Pressure Sensor 2024 Vehicle speed sensor 2025 Acceleration Sensor 2026 Brake pedal sensor 2027 Shift lever sensor 2028 Object Detection Sensor 2029 Accelerator pedal sensor 2030 Driving Assistance Systems Department 2031 microprocessor 2032 memory (ROM, RAM) 2033 Communication port (IO port)

Claims

1. A communication system comprising: a core network comprising a first network node and a second network node; and a terminal, The first network node: a receiving unit that receives a terminal certificate from the terminal for certifying a combination of a terminal manufacturer, a terminal identification number, and a terminal public key; a control unit that generates information indicating the authenticity of the terminal based on a result of checking the validity of the terminal certificate; The second network node: a receiving unit for receiving signed data from the terminal; a control unit that determines whether to collect the received data for machine learning based on information indicating the authenticity of the terminal generated by the control unit included in the first network node; the terminal includes a transmitting unit configured to transmit the terminal certificate to the first network node and to transmit the signed data to the second network node; Communication system.

2. A core network comprising a first network node and a second network node, The first network node: a receiving unit that receives a terminal certificate from the terminal for certifying a combination of the terminal manufacturer, the terminal identification number, and the terminal public key; a control unit that generates information indicating the authenticity of the terminal based on a result of checking the validity of the terminal certificate; The second network node: a receiving unit for receiving signed data from the terminal; and a control unit that determines whether to collect the received data for machine learning based on information indicating the authenticity of the terminal generated by the control unit included in the first network node. Core network.

3. A communication method executed by a communication system including a core network including a first network node and a second network node, and a terminal, the method comprising: the first network node receiving from the terminal a terminal certificate attesting to a combination of a terminal manufacturer, a terminal identification number, and a terminal public key; generating information indicating authenticity of the terminal based on a result of checking the validity of the terminal certificate by the first network node; receiving signed data from the terminal by the second network node; The second network node determines whether to collect the received data for machine learning based on information indicating the authenticity of the terminal generated by the first network node; the terminal sending the terminal certificate to the first network node and sending the signed data to the second network node; Equipped with Communication method.

Images