Communication method and apparatus, and storage medium

Abstract

The present disclosure provides a communication method and apparatus, and a storage medium. The method comprises: sending a first message, wherein the first message comprises an information set protected by a first security material, wherein the information set is used for determining information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; and the first terminal and the second terminal are end UEs during the U2U discovery and / or U2U link establishment process, the first security material is determined on the basis of a first identifier, and the first identifier is used for indicating a proximity communication service Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. By using the method in the present disclosure, when a protected information set is transmitted, a receiving end can successfully perform decryption to acquire the information set, thereby avoiding the situation where "a receiving end cannot successfully decrypt an information set", and ensuring that a U2U discovery and / or U2U link establishment process can be successfully executed.

Description

Communication method, device and storage medium Technical Field

[0001] The present disclosure relates to the field of communication technologies, and in particular to a communication method, device, and storage medium. Background Art

[0002] In a communication system, terminals typically transmit a direct discovery set (DDS) to enable device-to-device (UE-to-UE, U2U) discovery and / or U2U link establishment. Optionally, to ensure communication security, the DDS typically requires encryption protection. The security materials used to protect the DDS are referred to as direct discovery security materials.

[0003] However, the question of how the receiving end finds the corresponding direct discovery security material when decrypting the direct discovery set it obtains is currently unclear, which will result in the receiving end being unable to successfully decrypt the direct discovery set, making the U2U discovery and / or U2U link establishment process unable to be successfully executed.

[0004] Summary of the Invention

[0005] The present disclosure provides a communication method, device, and storage medium.

[0006] In a first aspect, an embodiment of the present disclosure provides a communication method, which is applied to a device-to-device U2U discovery and / or U2U link establishment process, and is executed by a first terminal, including:

[0007] A first message is sent, where the first message includes an information set protected by a first security material; wherein the information set is used to determine information of the first terminal and / or the second terminal during U2U discovery and / or U2U link establishment; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, where the first identifier is used to indicate a proximity communication service Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process.

[0008] In a second aspect, an embodiment of the present disclosure provides a communication method, which is applied to a U2U discovery and / or U2U link establishment process, and is executed by a relay terminal, including:

[0009] receiving a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process; the first security material is determined based on a first identifier, the first identifier being used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process;

[0010] A second message is sent based on the first message.

[0011] In a third aspect, an embodiment of the present disclosure provides a communication method, which is applied to a U2U discovery and / or U2U link establishment process, and is executed by a second terminal, the method including:

[0012] receiving a second message, the second message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process; the first security material is determined based on a first identifier, the first identifier being used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process;

[0013] Decryption is performed to obtain the information set.

[0014] In a fourth aspect, an embodiment of the present disclosure provides a communication device, including:

[0015] A transceiver module is configured to send a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) during a U2U discovery and / or U2U link establishment process, the first security material is determined based on a first identifier, and the first identifier is used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process.

[0016] In a fifth aspect, an embodiment of the present disclosure provides a communication device, including:

[0017] a transceiver module, configured to receive a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process; the first security material is determined based on a first identifier, the first identifier being used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process;

[0018] A processing module is used to send a second message based on the first message.

[0019] In a sixth aspect, an embodiment of the present disclosure provides a communication device, including:

[0020] a transceiver module, configured to receive a second message, the second message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process; the first security material is determined based on a first identifier, the first identifier being used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process;

[0021] The processing module is used for decrypting and obtaining the information set.

[0022] In a seventh aspect, an embodiment of the present disclosure provides a communication device, which includes a processor. When the processor calls a computer program in a memory, the method described in any one of the first to third aspects above is executed.

[0023] In an eighth aspect, an embodiment of the present disclosure provides a communication device, which includes a processor and an interface circuit, wherein the interface circuit is used to receive code instructions and transmit them to the processor, and the processor is used to run the code instructions to enable the device to execute the method described in any one of the first to third aspects above.

[0024] In the ninth aspect, an embodiment of the present disclosure provides a communication system, which includes the communication device described in any one of the fourth to sixth aspects, or the system includes the communication device described in the seventh aspect, or the system includes the communication device described in the eighth aspect.

[0025] In the tenth aspect, an embodiment of the present invention provides a computer-readable storage medium for storing instructions used by the above-mentioned network device, and when the instructions are executed, the terminal device executes the method described in any one of the above-mentioned aspects from the first to the third aspects.

[0026] In an eleventh aspect, the present disclosure further provides a computer program product comprising a computer program, which, when executed on a computer, enables the computer to execute the method described in any one of the first to third aspects above.

[0027] In a twelfth aspect, the present disclosure provides a chip system comprising at least one processor and an interface for supporting a network device in implementing the functions described in any one of aspects 1 to 3, such as determining or processing at least one of the data and information involved in the above method. In one possible design, the chip system further comprises a memory for storing computer programs and data necessary for the source slave node. The chip system may be composed of a chip or may include a chip and other discrete components.

[0028] In a thirteenth aspect, the present disclosure provides a computer program, which, when executed on a computer, enables the computer to execute the method described in any one of the first to third aspects above. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] The above and / or additional aspects and advantages of the present disclosure will become apparent and readily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0030] FIG1 is a schematic diagram of the architecture of a communication system provided by an embodiment of the present disclosure;

[0031] FIG2 is a flow chart of a communication method provided by an embodiment of the present disclosure;

[0032] FIG3 is a flow chart of a communication method provided by yet another embodiment of the present disclosure;

[0033] FIG4 is a flow chart of a communication method provided by yet another embodiment of the present disclosure;

[0034] FIG5 is a flow chart of a communication method provided by yet another embodiment of the present disclosure;

[0035] FIG6 is a flow chart of a communication method provided by yet another embodiment of the present disclosure;

[0036] FIG7 is a flow chart of a communication method provided by yet another embodiment of the present disclosure;

[0037] FIG8 is a flow chart of a communication method in a Model A scenario provided by an embodiment of the present disclosure;

[0038] FIG9 is a flow chart of a communication method in a Model B scenario provided by an embodiment of the present disclosure;

[0039] FIG10 is a flow chart of a communication method in an integrated discovery scenario provided by an embodiment of the present disclosure;

[0040] FIG11 is a schematic structural diagram of a communication device provided in yet another embodiment of the present disclosure;

[0041] FIG12 is a schematic structural diagram of a communication device provided in yet another embodiment of the present disclosure;

[0042] FIG13 is a schematic structural diagram of a communication device provided by yet another embodiment of the present disclosure;

[0043] FIG14 is a schematic structural diagram of a communication device provided in an embodiment of the present application;

[0044] FIG15 is a schematic structural diagram of a chip provided in accordance with an embodiment of the present disclosure. DETAILED DESCRIPTION

[0045] Exemplary embodiments will be described in detail herein, with examples illustrated in the accompanying drawings. In the following description, when referring to the drawings, identical numerals in different figures represent identical or similar elements, unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all possible implementations consistent with the present disclosure. Rather, they are merely examples of apparatuses and methods consistent with certain aspects of the present disclosure, as detailed in the appended claims.

[0046] The terms used in the embodiments of the present disclosure are for the purpose of describing specific embodiments only and are not intended to limit the embodiments of the present disclosure. The singular forms "a," "an," and "the" used in the embodiments of the present disclosure and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" as used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0047] It should be understood that although the terms first, second, third, etc. may be used to describe various information in the embodiments of the present disclosure, such information should not be limited to these terms. These terms are only used to distinguish signals of the same type from each other. For example, without departing from the scope of the embodiments of the present disclosure, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the words "if" and "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0048] The embodiments of the present disclosure are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present disclosure, and should not be understood as limiting the present disclosure.

[0049] In order to better understand a communication method disclosed in an embodiment of the present disclosure, the communication system to which the embodiment of the present disclosure is applicable is first described below.

[0050] Please refer to Figure 1, which is a schematic diagram of the architecture of a communication system provided by an embodiment of the present disclosure. The communication system may include but is not limited to multiple terminals (terminals), and the multiple terminals may be, for example, a first terminal, a relay terminal, and a second terminal, wherein the first terminal and the second terminal may be end terminals (End UE) in the U2U discovery process, and the relay terminal may implement relaying between the first terminal and the second terminal. Optionally, the number and form of devices shown in Figure 1 are used for example and do not constitute a limitation on the embodiment of the present disclosure. In actual applications, one or more first terminals, or one or more second terminals, or one or more relay terminals may be included. Optionally, the communication system shown in Figure 1 takes a first terminal, a second terminal, and a relay terminal as an example.

[0051] It should be noted that the technical solutions of the embodiments of the present disclosure can be applied to various communication systems, such as long-term evolution (LTE) systems, fifth-generation (5G) mobile communication systems, 5G new radio (NR) systems, or other future new mobile communication systems.

[0052] The terminal in the embodiments of the present disclosure (such as the first terminal, the second terminal, and the relay terminal mentioned above) can be an entity on the user side for receiving or transmitting signals, such as a mobile phone. It can also be called a terminal device, user equipment (UE), mobile station (MS), mobile terminal device (MT), etc. The terminal can be a car with communication function, a smart car, a mobile phone, a wearable device, a tablet computer (Pad), a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in smart grid, a wireless terminal device in transportation safety, a wireless terminal device in smart city, a wireless terminal device in smart home, etc. The embodiments of the present disclosure do not limit the specific technology and specific device form adopted by the terminal.

[0053] It can be understood that the communication system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution provided by the embodiment of the present disclosure. Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution provided by the embodiment of the present disclosure is also applicable to similar technical problems.

[0054] In addition, in order to facilitate understanding of the embodiments of the present disclosure, the following points are explained.

[0055] First, in the present disclosure, unless there is any contradiction, each step in any embodiment or example can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment or example can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment or example can be arbitrarily exchanged. In addition, the optional methods or optional examples in a certain embodiment or example can be arbitrarily combined; in addition, the various embodiments or examples can be arbitrarily combined. For example, some or all steps of different embodiments or examples can be arbitrarily combined, and a certain embodiment or example can be arbitrarily combined with the optional methods or optional examples of other embodiments or examples.

[0056] Second, regarding the description methods of the present disclosure such as "A or B", "A and / or B", "at least one of A and B", "A in one case, B in another case", "in response to one case A, in response to another case B", etc., at least one of the following schemes may be included according to the situation: executing A independently of B, that is, A in some embodiments; executing B independently of A, that is, B in some embodiments; selectively executing A and B, that is, selecting to execute from A and B in some embodiments; executing both A and B, that is, A and B in some embodiments.

[0057] Third, each element, each row, or each column in the table involved in the present disclosure can be implemented as an independent embodiment, and the combination of any elements, any rows, and any columns can also be implemented as an independent embodiment.

[0058] Fourth, in some implementation modes or examples, “including A”, “comprising A”, “used to indicate A” and “carrying A” in this disclosure can be interpreted as directly carrying A or indirectly indicating A.

[0059] Fifth, in some implementation modes or examples, "in response to...", "in the case of...", "at the time of...", "when...", "if...", "if...", etc. in the present disclosure can be replaced with each other.

[0060] The communication method, device, and storage medium provided by the embodiments of the present disclosure are described in detail below with reference to the accompanying drawings.

[0061] FIG2 is a flow chart of a communication method provided by an embodiment of the present disclosure. The method is executed by a first terminal. As shown in FIG2 , the communication method may include the following steps:

[0062] Step 201: Send a first message.

[0063] Optionally, in some embodiments, the first message may include an information set protected by a first security material; optionally, in some embodiments, the information set may be used to determine information of the first terminal and / or the second terminal during U2U discovery and / or U2U link establishment; wherein the first terminal and the second terminal may be end terminals (End UE) during U2U discovery and / or U2U link establishment. In some embodiments, the information set may, for example, be a direct discovery set. The information set may include at least one of the following: user information corresponding to the first terminal (e.g., a user information identification (User Info ID)) and user information corresponding to the second terminal.

[0064] Optionally, in some embodiments, the first security material may be, for example, direct discovery security materials or discovery security materials associated with a Prose application or Prose service. The first security material may be determined based on a first identifier, which may be used to indicate a Proximity Based Service (Prose) application or Prose service associated with the U2U discovery and / or U2U link establishment process. Optionally, in some embodiments, the first identifier may include at least one of the following:

[0065] Prose logo;

[0066] Query Code;

[0067] Response CodeResponse Code;

[0068] Restricted CodeRestricted Code.

[0069] Optionally, in some embodiments, different first identifiers may be used to indicate different Prose applications or Prose services, and different first identifiers may be associated with different first security materials, wherein the association between the first identifier and the first security material may be obtained by the first terminal from the network device. Furthermore, the first terminal may utilize the first security material associated with the first identifier corresponding to the "Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process" to protect the information set during the U2U discovery and / or U2U link establishment process, thereby achieving communication security.

[0070] Optionally, in some embodiments, the sending of the first message may include: broadcasting the first message; or sending the first message to the relay terminal (for example, the first terminal unicasts the first message to the relay terminal).

[0071] Optionally, in some embodiments, the first terminal sends a first message to send the "information set protected by the first security material" in the first message to the second terminal. When the second terminal receives the information set protected by the first security material, it can first determine the first identifier corresponding to the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process, and then decrypt and obtain the information set based on the first security material corresponding to the first identifier, so that the U2U discovery and / or U2U link establishment process can be successfully executed based on the decrypted information set.

[0072] Optionally, in some other embodiments, the above-mentioned first message may also include a first identifier, so that the first identifier is also sent to the second terminal. At this time, the second terminal can directly determine the first security material based on the received first identifier and decrypt the information set, so as to achieve the smooth execution of the U2U discovery and / or U2U link establishment process based on the decrypted information set.

[0073] It should be noted that, in some embodiments, the U2U discovery and / or U2U link establishment process may correspond to multiple different scenarios, wherein the situation of the first message may be different in different scenarios. Optionally, in some embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: mode Model A, the first message may be unicast sent by the first terminal to the relay terminal, and, under Model A, the initiating terminal of the U2U discovery and / or U2U link establishment process may be referred to as: announcing terminal (announcing 5G ProSe End UE), and the initiated terminal of the U2U discovery and / or U2U link establishment process may be referred to as: monitoring terminal (monitoring 5G ProSe End UE). For example, in some embodiments, the first terminal may be announcing 5G ProSe End UE, and the second terminal may be monitoring 5G ProSe End UE.

[0074] Optionally, in some other embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: mode Model B, the first message may be broadcast or unicast to the relay terminal. Optionally, the first message may be a solicitation message or a response message. In addition, under Model B, the initiating terminal of the U2U discovery and / or U2U link establishment process may be referred to as a discoverer terminal (discoverer 5G ProSe End UE), and the initiated terminal of the U2U discovery and / or U2U link establishment process may be referred to as a discovered terminal (discoveree 5G ProSe End UE). Optionally, when the first terminal is a discoverer 5G ProSe End UE and the second terminal is a discoveree 5G ProSe End UE, the first message may be broadcast. In this case, the first message is a solicitation message; when the first terminal is a discoveree 5G ProSe End UE and the second terminal is a discoverer 5G ProSe End UE, the first message may be broadcast. In this case, the first message is a solicitation message; when the first terminal is a discoveree 5G ProSe End UE and the second terminal is a discoverer 5G ProSe End UE, the first message may be broadcast. In this case, the first message is a solicitation message; when the first terminal is a discoveree 5G ProSe End UE and the second terminal is a discoverer 5G ProSe End UE, the first message may be broadcast. In this case, the first message is a solicitation message; when the first terminal is a discoveree 5G ProSe End UE and the second terminal is a discoverer 5G ProSe End UE, the first message may be broadcast. In this case, the first message is a solicitation message. When the first message is sent to the relay terminal, the first message may be unicast to the relay terminal. In this case, the first message is a response message.

[0075] Optionally, in some further embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: integrated discovery, the first message may be broadcast, optionally, the first message may be a direct communication request (DCR), and, under integrated discovery, the initiating terminal of the U2U discovery and / or U2U link establishment process may be called: source terminal (Source 5G ProSe End UE), and the initiated terminal of the U2U discovery and / or U2U link establishment process may be called: target terminal (Target 5G ProSe End UE), optionally, in some embodiments, the first terminal may be the Source 5G ProSe End UE, and the second terminal may be the Target 5G ProSe End UE.

[0076] Optionally, in some embodiments, the first message may further include at least one of the following:

[0077] The validity period of the information set;

[0078] A relay indication, where the relay indication is used to instruct the relay terminal to relay and forward the first message;

[0079] ProSe service information;

[0080] Security capabilities, which are used to determine the security algorithms during U2U discovery and / or U2U link establishment;

[0081] U2U Discovery set;

[0082] Relay service code (RSC).

[0083] Optionally, in some embodiments, the above-mentioned first message may also be protected by a second security material. Optionally, in some embodiments, the second security material may be a security material associated with the RSC. The second security material may be, for example, a U2U relay discovery security material (U2U relay discovery security material). For a detailed introduction to the second security material, please refer to the existing standard description.

[0084] To summarize, in the communication method provided by the embodiment of the present disclosure, during the U2U discovery and / or U2U link establishment process, the first terminal will send a first message, and the first message includes an information set protected by a first security material; wherein the information set is used to determine the information of the first terminal and / or the second terminal during the U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) during the U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. It can be seen that in the method of the embodiment of the present disclosure, the first security material used to protect the information set during the U2U discovery and / or U2U link establishment process is determined by the first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. Thus, after receiving the information set protected by the first security material, the second terminal, acting as the receiving end, can first determine the first identifier and then use the first security material corresponding to the first identifier to decrypt the received "information set protected by the first security material" to obtain the information set sent by the first terminal. Using the disclosed method to transmit the protected information set allows the receiving end to successfully decrypt and obtain the information set, thereby avoiding the situation where the receiving end is unable to successfully decrypt the information set and ensuring the successful execution of the U2U discovery and / or U2U link establishment process.

[0085] FIG3 is a flow chart of a communication method provided by an embodiment of the present disclosure. The method is executed by a first terminal. As shown in FIG3 , the communication method may include the following steps:

[0086] Step 301: Send a first message, where the first message also includes a first identifier.

[0087] For a detailed description of step 301 , please refer to the above embodiment description.

[0088] In summary, in the communication method provided by the embodiments of the present disclosure, during the U2U discovery and / or U2U link establishment process, the first terminal will send a first identifier and an information set protected by a first security material. The second terminal, acting as the receiving end, will receive the first identifier and the information set protected by the first security material. At this time, the second terminal can directly decrypt the received "information set protected by the first security material" based on the first security material corresponding to the received first identifier to obtain the information set sent by the first terminal. Therefore, when the protected information set is transmitted using the method of the present disclosure, the receiving end can successfully decrypt and obtain the information set, thereby avoiding the situation where "the receiving end cannot successfully decrypt the information set", ensuring that the U2U discovery and / or U2U link establishment process can be successfully executed.

[0089] FIG4 is a flow chart of a communication method provided by an embodiment of the present disclosure. The method is executed by a relay terminal. As shown in FIG4 , the communication method may include the following steps:

[0090] Step 401: Receive a first message.

[0091] Optionally, the relay terminal may receive a first message sent by at least one first terminal. For a detailed description of the first message, reference may be made to the above embodiment.

[0092] Optionally, in some embodiments, the above-mentioned “receiving the first message” may include receiving a broadcast first message; or receiving a first message sent by the first terminal (for example, receiving the first message unicasted by the first terminal to the relay terminal).

[0093] Optionally, in some embodiments, the first message may be different in different scenarios. Optionally, in some embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: Mode A, the relay terminal may receive the first message unicasted by the first terminal. In this case, the first terminal may be, for example, an announcing 5G ProSe End UE, and the second terminal may be, for example, a monitoring 5G ProSe End UE.

[0094] Optionally, in some other embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: mode Model B, the relay terminal may receive a broadcast first message or receive a first message unicasted by the first terminal, where the first message may be, for example, a solicitation message or a response message. Optionally, when the first terminal is a discoverer 5G ProSe End UE and the second terminal is a discoveree 5G ProSe End UE, the first message may be broadcasted, in which case the first message is a solicitation message; when the first terminal is a discoveree 5G ProSe End UE and the second terminal is a discoverer 5G ProSe End UE, the first message may be unicasted to the relay terminal, in which case the first message is a response message.

[0095] Optionally, in some further embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is integrated discovery, the relay terminal may receive a broadcasted first message, which may be, for example, a DCR. Optionally, the first terminal may be, for example, a Source 5G ProSe End UE, and the second terminal may be, for example, a Target 5G ProSe End UE.

[0096] Step 402: Send a second message based on the first message.

[0097] Optionally, in some embodiments, after receiving the first message, the relay terminal may first determine the second security material, decrypt the first message based on the second security material, perform integrity and confidentiality verification on the first message, and, if the verification succeeds, send the second message based on the first message. For information on how the relay terminal determines the second security material, please refer to the description of existing standards.

[0098] Optionally, in some embodiments, the method in which the relay terminal sends the second message based on the first message may include:

[0099] Step a: Determine the second message based on the first message.

[0100] Optionally, in some embodiments, the above-mentioned “determining the second message based on the first message” may include at least one of the following:

[0101] Aggregating part or all of the first messages received from at least one first terminal to obtain a second message;

[0102] Add user information corresponding to the relay terminal to the first message to obtain a second message;

[0103] The relay indication in the first message is deleted to obtain a second message.

[0104] It can be seen that, in some embodiments, the second message may include an information set protected by the first security material. Alternatively, the second message may further include a first identifier.

[0105] Step b: Send the second message.

[0106] Optionally, in some embodiments, the second message may also be protected by the aforementioned second security material.

[0107] Optionally, in some embodiments, the sending of the second message may include: broadcasting the second message; or sending the second message to the second terminal (for example, the relay terminal unicasts the second message to the second terminal).

[0108] Optionally, in some embodiments, the second message may be different in different scenarios. Optionally, in some embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: Mode A, the relay terminal broadcasts a second message, which may be, for example, an announcement message. In this case, the first terminal may be, for example, an announcing 5G ProSe End UE, and the second terminal may be, for example, a monitoring 5G ProSe End UE.

[0109] Optionally, in some other embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: mode Model B, the relay terminal may broadcast a second message or unicast the second message to the second terminal, and the second message may be, for example, a request message (Solicitation message) or a response message (Response message). Optionally, when the first terminal is a discoverer 5G ProSe End UE and the second terminal is a discoveree 5G ProSe End UE, the second message may be broadcast, in which case the second message is a request message (Solicitation message); when the first terminal is a discoveree 5G ProSe End UE and the second terminal is a discoverer 5G ProSe End UE, the second message may be unicast from the relay terminal to the second terminal, in which case the second message is a response message (Response message).

[0110] Optionally, in some further embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is integrated discovery, the relay terminal may broadcast a second message, which may be, for example, a DCR. Optionally, the first terminal may be, for example, a Source 5G ProSe End UE, and the second terminal may be, for example, a Target 5G ProSe End UE.

[0111] In summary, in the communication method provided by the embodiments of the present disclosure, during the U2U discovery and / or U2U link establishment process, the relay terminal receives a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of the first terminal and / or the second terminal during the U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) during the U2U discovery and / or U2U link establishment process, the first security material is determined based on a first identifier, the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process, and then the relay terminal sends a second message based on the first message, wherein the second message may include the information set protected by the first security material. Therefore, it can be seen that in the method of the embodiments of the present disclosure, the first security material used to protect the information set during the U2U discovery and / or U2U link establishment process is determined by the first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. Thus, after receiving the information set protected by the first security material, the second terminal, acting as the receiving end, can first determine the first identifier and then use the first security material corresponding to the first identifier to decrypt the received "information set protected by the first security material" to obtain the information set sent by the first terminal. Using the disclosed method to transmit the protected information set allows the receiving end to successfully decrypt and obtain the information set, thereby avoiding the situation where the receiving end is unable to successfully decrypt the information set and ensuring the successful execution of the U2U discovery and / or U2U link establishment process.

[0112] FIG5 is a flow chart of a communication method provided by an embodiment of the present disclosure. The method is executed by a relay terminal. As shown in FIG5 , the communication method may include the following steps:

[0113] Step 501: Receive a first message, where the first message also includes a first identifier.

[0114] Step 502: Send a second message based on the first message, where the second message also includes a first identifier.

[0115] For a detailed description of steps 501 - 502 , please refer to the above embodiment description.

[0116] In summary, in the communication method provided by the embodiments of the present disclosure, during the U2U discovery and / or U2U link establishment process, the relay terminal will send a first identifier and an information set protected by a first security material. The second terminal, acting as the receiving end, will receive the first identifier and the information set protected by the first security material. At this time, the second terminal can directly decrypt the received "information set protected by the first security material" based on the first security material corresponding to the received first identifier to obtain the information set sent by the first terminal. Therefore, when the protected information set is transmitted using the method of the present disclosure, the receiving end can successfully decrypt and obtain the information set, thereby avoiding the situation where "the receiving end cannot successfully decrypt the information set", ensuring that the U2U discovery and / or U2U link establishment process can be successfully executed.

[0117] FIG6 is a flow chart of a communication method provided by an embodiment of the present disclosure. The method is executed by a second terminal. As shown in FIG6 , the communication method may include the following steps:

[0118] Step 601: Receive a second message.

[0119] Optionally, in some embodiments, the second message may include an information set protected by a first security material; wherein the information set is used to determine information of the first terminal and / or the second terminal during the U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process.

[0120] Optionally, the second message may further include a first identifier, and the second message may further be protected by a second security material.

[0121] For detailed description of the first security material, the first identifier, and the second message, please refer to the above embodiment description.

[0122] Optionally, in some embodiments, the receiving of the second message may include: receiving a broadcast second message; or receiving a second message sent by a relay terminal (eg, the relay terminal unicasts the second message to the second terminal).

[0123] Optionally, in some embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: mode Model A, the second terminal can receive a broadcast second message, which can be an announcement message. At this time, the first terminal can, for example, be an announcing 5G ProSe End UE, and the second terminal can, for example, be a monitoring 5G ProSe End UE.

[0124] Optionally, in some other embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: mode Model B, the second terminal may receive a broadcast second message or receive a second message unicasted by the relay terminal, and the second message may be, for example, a request message (Solicitation message) or a response message (Response message). Optionally, when the first terminal is a discoverer 5G ProSe End UE and the second terminal is a discoveree 5G ProSe End UE, the second message may be broadcast, in which case the second message is a request message (Solicitation message); when the first terminal is a discoveree 5G ProSe End UE and the second terminal is a discoverer 5G ProSe End UE, the second message may be unicasted to the second terminal, in which case the second message is a response message (Response message).

[0125] Optionally, in some further embodiments, when the scenario corresponding to the U2U discovery and / or U2U link establishment process is: integrated discovery, the second terminal may receive a broadcast second message, which may be, for example, a DCR. Optionally, the first terminal may be, for example, a Source 5G ProSe End UE, and the second terminal may be, for example, a Target 5G ProSe End UE.

[0126] Step 602: Decrypt and obtain an information set.

[0127] Optionally, in some embodiments, since the second message is protected by a second security material, upon receiving the second message, the second terminal may first determine the second security material, decrypt the second message based on the second security material, perform integrity and confidentiality verification on the second message, and, if the verification succeeds, decrypt the message to obtain the information set. For information on how the relay terminal determines the second security material, please refer to the description in existing standards.

[0128] Optionally, in some embodiments, the method for the second terminal to decrypt and obtain the information set may include:

[0129] Step 1: Determine the first identifier.

[0130] Optionally, the first identifier may be determined based on relevant information during the U2U discovery and / or U2U link establishment process, or, when the second message includes the first identifier, the first identifier may be directly determined from the second message.

[0131] Step 2: determining a first security material based on the first identifier;

[0132] Optionally, the second terminal may obtain an association relationship between the first identifier and the first security material from the network device in advance, and determine the first security material based on the association relationship and the first identifier determined in step 1 above.

[0133] Step 3: Decrypt the information set protected by the first security material based on the first security material to obtain the information set.

[0134] In summary, in the communication method provided by the embodiment of the present disclosure, during the U2U discovery and / or U2U link establishment process, the second terminal will receive a second message, and the second message includes an information set protected by a first security material; wherein the information set is used to determine the information of the first terminal and / or the second terminal during the U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. It can be seen that in the method of the embodiment of the present disclosure, the first security material used to protect the information set during the U2U discovery and / or U2U link establishment process is determined by the first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. Thus, after receiving the information set protected by the first security material, the second terminal, acting as the receiving end, can first determine the first identifier and then use the first security material corresponding to the first identifier to decrypt the received "information set protected by the first security material" to obtain the information set sent by the first terminal. Using the disclosed method to transmit the protected information set allows the receiving end to successfully decrypt and obtain the information set, thereby avoiding the situation where the receiving end is unable to successfully decrypt the information set and ensuring the successful execution of the U2U discovery and / or U2U link establishment process.

[0135] FIG7 is a flow chart of a communication method provided by an embodiment of the present disclosure. The method is executed by a second terminal. As shown in FIG7 , the communication method may include the following steps:

[0136] Step 701: Receive a second message, where the second message also includes a first identifier.

[0137] Step 702: Decrypt and obtain an information set based on the first identifier.

[0138] For a detailed description of steps 701 - 702 , please refer to the above embodiment description.

[0139] In summary, in the communication method provided by the embodiments of the present disclosure, during the U2U discovery and / or U2U link establishment process, a second terminal receives a first identifier and an information set protected by a first security material. The second terminal can then directly decrypt the received "information set protected by the first security material" based on the first security material corresponding to the received first identifier to obtain the information set sent by the first terminal. Using the method of the present disclosure to transmit the protected information set allows the receiving terminal to successfully decrypt and obtain the information set, thereby avoiding the situation where the receiving terminal is unable to successfully decrypt the information set and ensuring the successful execution of the U2U discovery and / or U2U link establishment process.

[0140] The following is an introduction to the above method.

[0141] FIG8 is a flow chart of a communication method in a Model A scenario provided by an embodiment of the present disclosure. As shown in FIG8 , the method may include:

[0142] 1a. The monitoring 5G ProSe End UE (i.e., the second terminal) and the announcing 5G ProSe End UE (i.e., the first terminal) are provided with security materials associated with the ProSe application or ProSe service (i.e., the direct discovery security material and the first security material described above in the figure);

[0143] 1b. The monitoring 5G ProSe End UE, announcing 5G ProSe End UE and 5G ProSe UE-to-UE Relay (i.e., relay terminal) are provided with security materials associated with the RSC (i.e., the relay discovery security material in the figure and the second security material in the aforementioned content).

[0144] 2. The announcing 5G ProSe End UE shall use the security material associated with the ProSe service identifier or query code or response code or restricted code (i.e., the aforementioned first identification, e.g., the ProSe identifier) ​​(i.e., the aforementioned first security material) to protect the direct discovery set (i.e., the aforementioned information set). The 5G ProSe UE-to-UE Relay (i.e., the aforementioned relay terminal) obtains the ProSe service identifier and RSC and the protected direct discovery set (i.e., the aforementioned information set protected by the first security material) from the nearby announcing 5G ProSe End UE (e.g., via a previous 5G ProSe UE-to-UE Relay discovery or 5G ProSe UE-to-UE Relay communication process). When 5G ProSe UE-to-UE Relay discovery is used to deliver the direct discovery set, the announcing 5G ProSe End UE shall include the protected direct discovery set in the discovery message (i.e., the aforementioned first message), which is protected by the security material associated with the RSC (i.e., the aforementioned second security material). The 5G ProSe UE-to-UE Relay shall store the protected direct discovery set, its validity period and ProSe service identifier.

[0145] 3. When broadcasting a notification message, the 5G ProSe UE-to-UE Relay shall include a valid protected direct discovery set list (i.e., a list consisting of information sets protected by the first security material of at least one first terminal) and a ProSe service identifier in the notification message (i.e., the aforementioned second message), and use the security material associated with the RSC to protect the notification message. Then, the 5G ProSe UE-to-UE Relay sends the notification message.

[0146] 4. Upon receiving the notification message from the 5G ProSe UE-to-UE Relay, the monitoring 5G ProSe End UE will use the security material associated with the RSC to decrypt and / or verify the received notification message. If the verification is successful, the monitoring 5G ProSe End UE retrieves the corresponding direct security material based on the ProSe service identifier in the notification message. The monitoring 5G ProSe End UE will then extract the direct discovery set from the notification message and use the security material associated with the ProSe service identifier to decrypt and / or verify the direct discovery set.

[0147] FIG9 is a flow chart of a communication method in a Model B scenario provided by an embodiment of the present disclosure. As shown in FIG9 , the method may include:

[0148] 0. Provide security materials associated with the Prose application or ProSe service (i.e., the direct discovery security material in the figure or the first security material in the above embodiment) to the discoverer 5G ProSe End UE and UE and discoveree 5G ProSe End UE.

[0149] The security material associated with the RSC (i.e., the relay discovery security material in the figure or the second security material in the above embodiment) is provided to the discoverer 5G ProSe End UE, the discoveree 5G ProSe End UE and the 5G ProSe UE-to-UE Relay.

[0150] 1. The discoverer 5G ProSe End UE will use the security material associated with the ProSe service identifier (e.g., ProSe identifier) ​​to protect the direct discovery set. The direct discovery set should include the user information ID of the discoverer 5G ProSe End UE and the user information ID of the discoveree 5G ProSe End UE. Then, the discoverer 5G ProSe End UE will include the ProSe service identifier and the protected direct discovery set in the request message (i.e., the first message mentioned above) and use the security material associated with the RSC to protect the request message. The request message is sent to the 5G ProSe UE-to-UE Relay.

[0151] 2. Upon receiving a 5G ProSe UE-to-UE Relay discovery request message from the discoverer 5G ProSe End UE, the 5G ProSe UE-to-UE Relay shall use the security material associated with the RSC to decrypt and / or verify the received UE-to-UE relay discovery request message.

[0152] If the verification is successful, the 5G ProSe UE-to-UE relay will modify the UE-to-UE relay discovery request message to include the user information ID of the 5G ProSe UE-to-UE relay.

[0153] The security material associated with the RSC is used to protect the 5G ProSe UE-to-UE Relay discovery request message (ie, the aforementioned second message).

[0154] Then, the 5G ProSe UE-to-UE Relay sends the message to the discoveree 5G ProSe End UE.

[0155] 3. The discoveree 5G ProSe End UE shall use the security material associated with the RSC to decrypt and / or authenticate the received UE-to-UE Relay Discovery Request message.

[0156] If the verification is successful, based on the ProSe service identifier in the request message, the discoveree 5G ProSe End UE retrieves the corresponding direct security material. The discoveree 5G ProSe End UE then extracts the protected direct discovery set from the message and uses the security material associated with the ProSe service identifier to decrypt and / or verify the direct discovery set.

[0157] The discoveree 5G ProSe End UE shall use the security material associated with the ProSe service identifier to protect the direct discovery set. The discoveree 5G ProSe End UE shall then include the ProSe service identifier and the protected direct discovery set in the UE-to-UE Relay Discovery Response message and use the security material associated with the RSC to protect the UE-to-UE Relay Discovery Response message (i.e., the first message mentioned above). The discoveree 5G ProSe End UE shall reply to the 5G ProSe UE-to-UE Relay with the UE-to-UE Relay Discovery Response message.

[0158] 4. Upon receiving the UE-to-UE Relay Discovery Response message from the discoveree 5G ProSe End UE, the 5G ProSe UE-to-UE Relay shall use the security material associated with the RSC to decrypt and / or verify the received UE-to-UE Relay Discovery Response message.

[0159] If the verification is successful, the 5G ProSe UE-to-UE Relay sends a UE-to-UE Relay Discovery Response message to the discoverer 5G ProSe End UE.

[0160] Upon receiving the UE-to-UE Relay Discovery Response message, the discoverer 5G ProSe End UE shall use the security material associated with the RSC to decrypt and / or verify the UE-to-UE Relay Discovery Response message.

[0161] If the verification is successful, the discoverer 5G ProSe End UE retrieves the corresponding direct security material based on the ProSe service identifier in the response message. The discoverer 5G ProSe End UE then extracts the protected direct discovery set from the UE-to-UE relay discovery response message and uses the security material associated with the ProSe service identifier to decrypt and / or verify the direct discovery set.

[0162] FIG10 is a flow chart of a communication method in an integrated discovery scenario provided by an embodiment of the present disclosure. As shown in FIG10 , the method may include:

[0163] 0. Provide security materials associated with the Prose application or ProSe service (i.e., the direct discovery security material in the figure or the first security material in the above embodiment) to the Source 5G ProSe End UE (i.e., UE-1 in the figure, or, the first terminal mentioned above) and the Target 5G ProSe End UE (i.e., UE-2 in the figure, or, the second terminal mentioned above).

[0164] The Source 5G ProSe End UE, the Target 5G ProSe End UE and the 5G ProSe UE-to-UE Relay (i.e., Relay-1, Relay-1 in the figure, or the aforementioned relay terminal) are provided with security materials associated with the RSC (i.e., the relay discovery security material in the figure or the second security material in the above embodiment).

[0165] 1. UE-1 wants to establish unicast communication with UE-2 and broadcasts a direct communication request. UE-1 constructs a DCR message, including a direct discovery set, a U2U discovery set, and other fields, such as security information, relay indication (relay_indication), ProSe service information, and RSC. The source Prose UE uses the direct security material associated with the Prose service identifier (e.g., Prose identifier) ​​to protect the direct discovery set, and uses the U2U relay security material associated with the RSC to protect the entire DCR message (i.e., the first message mentioned above).

[0166] 2. Upon receiving a direct communication request with a relay indication from UE-1, the relay terminals (here, Relay-1 and Relay-2) may decide to participate in the process. If the integrity verification succeeds, the relay terminal removes the relay indication and constructs another DCR message (i.e., the second message described above) as in step 1.

[0167] 3. When UE-2 receives a DCR from one or more relay terminals, it descrambles / decrypts the message using the discovery security parameters associated with the RSC and verifies the integrity of the received DCR message. If verification is successful, UE-2 retrieves the corresponding direct security material based on the ProSe service identifier in the DCR message. UE-2 then decrypts the direct security material and verifies the integrity of the direct discovery set.

[0168] 4. If necessary, security is established between UE-2 and the selected 5G ProSe UE-to-UE relay (here relay-1).

[0169] 5. UE-2 replies with a Direct Communication Accept (DCA) message to Relay-1.

[0170] 6. For IP traffic, allocate an IPv6 prefix or IPv4 address to UE-2.

[0171] 7. If necessary, establish security between UE-1 and relay-1.

[0172] 8. Relay-1 responds to UE-1 with DCA.

[0173] 9. For IP traffic, allocate an IPv6 prefix or IPv4 address to UE-1.

[0174] FIG11 is a schematic structural diagram of a communication device provided by an embodiment of the present disclosure. As shown in FIG11 , the device may include:

[0175] A transceiver module is configured to send a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) during a U2U discovery and / or U2U link establishment process, the first security material is determined based on a first identifier, and the first identifier is used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process.

[0176] In summary, in the communication device provided in the embodiment of the present disclosure, during the U2U discovery and / or U2U link establishment process, the first terminal will send a first message, and the first message includes an information set protected by a first security material; wherein the information set is used to determine the information of the first terminal and / or the second terminal during the U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. It can be seen that in the method of the embodiment of the present disclosure, the first security material used to protect the information set during the U2U discovery and / or U2U link establishment process is determined by the first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. Thus, after receiving the information set protected by the first security material, the second terminal, acting as the receiving end, can first determine the first identifier and then use the first security material corresponding to the first identifier to decrypt the received "information set protected by the first security material" to obtain the information set sent by the first terminal. Using the disclosed method to transmit the protected information set allows the receiving end to successfully decrypt and obtain the information set, thereby avoiding the situation where the receiving end is unable to successfully decrypt the information set and ensuring the successful execution of the U2U discovery and / or U2U link establishment process.

[0177] Optionally, in one embodiment of the present disclosure, the first message also includes the first identifier.

[0178] Optionally, in an embodiment of the present disclosure, the first identifier includes at least one of the following:

[0179] Prose logo;

[0180] Query Code;

[0181] Response CodeResponse Code;

[0182] Restricted CodeRestricted Code.

[0183] Optionally, in one embodiment of the present disclosure, the transceiver module is further configured to:

[0184] broadcasting the first message; or

[0185] Send the first message to the relay terminal.

[0186] Optionally, in one embodiment of the present disclosure, the first message is protected by a second security material, and the second security material is a security material associated with a relay service code RSC.

[0187] Optionally, in an embodiment of the present disclosure, the information set includes at least one of the following:

[0188] User information corresponding to the first terminal;

[0189] User information corresponding to the second terminal.

[0190] FIG12 is a schematic diagram of the structure of a communication device provided by an embodiment of the present disclosure. As shown in FIG12 , the device may include:

[0191] a transceiver module, configured to receive a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process; the first security material is determined based on a first identifier, the first identifier being used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process;

[0192] A processing module is used to send a second message based on the first message.

[0193] In summary, in the communication device provided by the embodiment of the present disclosure, during the U2U discovery and / or U2U link establishment process, the relay terminal receives a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of the first terminal and / or the second terminal during the U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) during the U2U discovery and / or U2U link establishment process, the first security material is determined based on a first identifier, the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process, and then the relay terminal sends a second message based on the first message, wherein the second message may include the information set protected by the first security material. Therefore, it can be seen that in the method of the embodiment of the present disclosure, the first security material used to protect the information set during the U2U discovery and / or U2U link establishment process is determined by the first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. Thus, after receiving the information set protected by the first security material, the second terminal, acting as the receiving end, can first determine the first identifier and then use the first security material corresponding to the first identifier to decrypt the received "information set protected by the first security material" to obtain the information set sent by the first terminal. Using the disclosed method to transmit the protected information set allows the receiving end to successfully decrypt and obtain the information set, thereby avoiding the situation where the receiving end is unable to successfully decrypt the information set and ensuring the successful execution of the U2U discovery and / or U2U link establishment process.

[0194] Optionally, in one embodiment of the present disclosure, the first message also includes the first identifier.

[0195] Optionally, in one embodiment of the present disclosure, the second message includes the information set protected by the first security material.

[0196] Optionally, in one embodiment of the present disclosure, the second message also includes the first identifier.

[0197] Optionally, in one embodiment of the present disclosure, the transceiver module is further configured to:

[0198] receiving the first broadcast message; or

[0199] receiving the first message sent by the first terminal;

[0200] The transceiver module is also used for:

[0201] broadcasting the second message; or

[0202] Send the second message to the second terminal.

[0203] Optionally, in an embodiment of the present disclosure, both the first message and the second message are protected by a second security material, and the second security material is a security material associated with the RSC.

[0204] FIG13 is a schematic diagram of the structure of a communication device provided by an embodiment of the present disclosure. As shown in FIG13 , the device may include:

[0205] a transceiver module, configured to receive a second message, the second message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process; the first security material is determined based on a first identifier, the first identifier being used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process;

[0206] The processing module is used for decrypting and obtaining the information set.

[0207] In summary, in the communication device provided in the embodiment of the present disclosure, during the U2U discovery and / or U2U link establishment process, the second terminal will receive a second message, and the second message includes an information set protected by a first security material; wherein the information set is used to determine the information of the first terminal and / or the second terminal during the U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. It can be seen that in the method of the embodiment of the present disclosure, the first security material used to protect the information set during the U2U discovery and / or U2U link establishment process is determined by the first identifier, and the first identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process. Thus, after receiving the information set protected by the first security material, the second terminal, acting as the receiving end, can first determine the first identifier and then use the first security material corresponding to the first identifier to decrypt the received "information set protected by the first security material" to obtain the information set sent by the first terminal. Using the disclosed method to transmit the protected information set allows the receiving end to successfully decrypt and obtain the information set, thereby avoiding the situation where the receiving end is unable to successfully decrypt the information set and ensuring the successful execution of the U2U discovery and / or U2U link establishment process.

[0208] Optionally, in one embodiment of the present disclosure, the second message also includes the first identifier.

[0209] Optionally, in an embodiment of the present disclosure, the second message is protected by a second security material, and the second security material is a security material associated with the RSC;

[0210] The device is also used for:

[0211] determining the second security material;

[0212] The second message is decrypted based on the second security material, and integrity and confidentiality verification is performed on the second message.

[0213] Optionally, in one embodiment of the present disclosure, the processing module is further configured to:

[0214] determining the first security material based on the first identifier;

[0215] The information set protected by the first security material is decrypted based on the first security material to obtain the information set.

[0216] Optionally, in one embodiment of the present disclosure, the transceiver module is further configured to:

[0217] receiving the second broadcast message; or

[0218] Receive the second message sent by the relay terminal.

[0219] Please refer to Figure 14, which is a schematic diagram of the structure of a communication device 1400 provided in an embodiment of the present application. Communication device 1400 can be a network device or a terminal device, or a chip, chip system, or processor that supports the network device to implement the above method. It can also be a chip, chip system, or processor that supports the terminal device to implement the above method. This device can be used to implement the method described in the above method embodiment. For details, please refer to the description of the above method embodiment.

[0220] The communication device 1400 may include one or more processors 1401. The processor 1401 may be a general-purpose processor or a dedicated processor. For example, it may be a baseband processor or a central processing unit. The baseband processor may be used to process communication protocols and communication data, and the central processing unit may be used to control the communication device (e.g., a base station, a baseband chip, a terminal device, a terminal device chip, a DU or CU, etc.), execute computer programs, and process computer program data.

[0221] Optionally, the communication device 1400 may further include one or more memories 1402, on which a computer program 1404 may be stored. The processor 1401 executes the computer program 1404 to cause the communication device 1400 to perform the method described in the above method embodiment. Optionally, the memory 1402 may also store data. The communication device 1400 and the memory 1402 may be provided separately or integrated together.

[0222] Optionally, the communication device 1400 may further include a transceiver 1405 and an antenna 1406. The transceiver 1405 may be referred to as a transceiver unit, a transceiver, or a transceiver circuit, etc., and is configured to implement transceiver functions. The transceiver 1405 may include a receiver and a transmitter. The receiver may be referred to as a receiver or a receiving circuit, etc., and is configured to implement a receiving function; the transmitter may be referred to as a transmitter or a transmitting circuit, etc., and is configured to implement a transmitting function.

[0223] Optionally, the communication device 1400 may further include one or more interface circuits 1406. The interface circuit 1406 is configured to receive code instructions and transmit the code instructions to the processor 1401. The processor 1401 executes the code instructions to enable the communication device 1400 to perform the method described in the above method embodiment.

[0224] In one implementation, processor 1401 may include a transceiver for implementing receiving and transmitting functions. For example, the transceiver may be a transceiver circuit, an interface, or an interface circuit. The transceiver circuit, interface, or interface circuit for implementing the receiving and transmitting functions may be separate or integrated. The transceiver circuit, interface, or interface circuit may be used for reading and writing code / data, or may be used for transmitting or delivering signals.

[0225] In one implementation, processor 1401 may store a computer program 1403. Computer program 1403, when executed on processor 1401, may cause communication device 1400 to perform the method described in the above method embodiment. Computer program 1403 may be embedded in processor 1401, in which case processor 1401 may be implemented by hardware.

[0226] In one implementation, the communication device 1400 may include a circuit that can implement the functions of sending, receiving, or communicating in the aforementioned method embodiments. The processor and transceiver described in this application can be implemented on an integrated circuit (IC), an analog IC, a radio frequency integrated circuit RFIC, a mixed signal IC, an application specific integrated circuit (ASIC), a printed circuit board (PCB), an electronic device, etc. The processor and transceiver can also be manufactured using various IC process technologies, such as complementary metal oxide semiconductor (CMOS), N-type metal oxide semiconductor (nMetal-oxide-semiconductor, NMOS), P-type metal oxide semiconductor (positive channel metal oxide semiconductor, PMOS), bipolar junction transistor (bipolar junction transistor, BJT), bipolar CMOS (BiCMOS), silicon germanium (SiGe), gallium arsenide (GaAs), etc.

[0227] The communication device described in the above embodiments may be a network device or a terminal device, but the scope of the communication device described in this application is not limited thereto, and the structure of the communication device may not be limited to FIG14. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be:

[0228] (1) An independent integrated circuit (IC), or chip, or chip system or subsystem;

[0229] (2) a collection of one or more ICs, optionally including a storage component for storing data and computer programs;

[0230] (3) ASIC, such as modem;

[0231] (4) Modules that can be embedded in other devices;

[0232] (5) Receivers, terminal devices, intelligent terminal devices, cellular phones, wireless devices, handheld devices, mobile units, vehicle-mounted devices, network devices, cloud devices, artificial intelligence devices, etc.;

[0233] (6)Others, etc.

[0234] For the case where the communication device can be a chip or a chip system, please refer to the schematic diagram of the chip structure shown in Figure 15. The chip shown in Figure 15 includes a processor 1501 and an interface 1502. Optionally, the number of processors 1501 can be one or more, and the number of interfaces 1502 can be multiple.

[0235] Optionally, the chip further includes a memory 1503, which is used to store necessary computer programs and data.

[0236] Those skilled in the art will also appreciate that the various illustrative logical blocks and steps listed in the embodiments of the present application can be implemented by electronic hardware, computer software, or a combination of both. Whether such functions are implemented by hardware or software depends on the specific application and the design requirements of the entire system. Those skilled in the art may use various methods to implement the described functions for each specific application, but such implementation should not be construed as exceeding the scope of protection of the embodiments of the present application.

[0237] The present application also provides a readable storage medium having instructions stored thereon, which implement the functions of any of the above method embodiments when executed by a computer.

[0238] The present application also provides a computer program product, which implements the functions of any of the above method embodiments when executed by a computer.

[0239] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs. When the computer program is loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program can be transmitted from one website, computer, server or data center to another website, computer, server or data center via a wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) method. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a high-density digital video disc (DVD)), or a semiconductor medium (eg, a solid state disk (SSD)).

[0240] Those skilled in the art will understand that the various numerical numbers such as first and second involved in this application are only for the convenience of description and are not used to limit the scope of the embodiments of this application, and also indicate the order of precedence.

[0241] In this application, at least one can also be described as one or more, and multiple can be two, three, four or more, which is not limited in this application. In the embodiments of this application, for a technical feature, the technical features in the technical feature are distinguished by "first", "second", "third", "A", "B", "C" and "D", and there is no order of precedence or size between the technical features described by "first", "second", "third", "A", "B", "C" and "D".

[0242] The correspondences shown in the tables in this application can be configured or predefined. The values ​​of the signals in each table are merely examples and can be configured to other values, which are not limited by this application. When configuring the correspondences between the configuration information and the parameters, it is not necessarily required to configure all the correspondences shown in the tables. For example, in the tables in this application, the correspondences shown in certain rows may not be configured. For another example, appropriate modifications and adjustments can be made based on the above tables, such as splitting, merging, etc. The names of the parameters shown in the titles of the above tables may also use other names that can be understood by the communication device, and the values ​​or representations of the parameters may also use other values ​​or representations that can be understood by the communication device. When implementing the above tables, other data structures may also be used, such as arrays, queues, containers, stacks, linear lists, pointers, linked lists, trees, graphs, structures, classes, heaps, hash tables or hash tables, etc.

[0243] The predefined in this application may be understood as defined, predefined, stored, pre-stored, pre-negotiated, pre-configured, solidified, or pre-burned.

[0244] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0245] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0246] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A communication method, characterized in that: The method is applied to a device-to-device U2U discovery and / or U2U link establishment process, and the method is executed by a first terminal, and the method includes: A first message is sent, wherein the first message includes an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) during a U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate a proximity communication service Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process.

2. The method according to claim 1, characterized in that The first message also includes the first identifier.

3. The method according to claim 1 or 2, characterized in that The first identifier includes at least one of the following: Prose logo; Query Code; Response CodeResponse Code; Restricted CodeRestricted Code.

4. The method according to any one of claims 1 to 3, characterized in that: The sending of the first message comprises: broadcasting the first message; or The first message is sent to the relay terminal.

5. The method according to any one of claims 1 to 4, characterized in that: The first message is protected by a second security material, and the second security material is a security material associated with a relay service code RSC.

6. The method according to any one of claims 1 to 5, characterized in that: The information set includes at least one of the following: User information corresponding to the first terminal; User information corresponding to the second terminal.

7. A communication method, characterized in that: The method is applied to a U2U discovery and / or U2U link establishment process, and the method is executed by a relay terminal. The method includes: Receive a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal in a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process, the first security material is determined based on a first identifier, and the first identifier is used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process; A second message is sent based on the first message.

8. The method according to claim 7, characterized in that The first message also includes the first identifier.

9. The method according to claim 7 or 8, characterized in that The second message includes the set of information protected by the first security material.

10. The method according to claim 9, characterized in that The second message also includes the first identifier.

11. The method according to any one of claims 7 to 10, characterized in that: The receiving of the first message comprises: receiving the first broadcast message; or Receiving the first message sent by the first terminal; The sending of the second message comprises: broadcasting the second message; or The second message is sent to the second terminal.

12. The method according to any one of claims 7 to 11, characterized in that: The first message and the second message are both protected by a second security material, where the second security material is a security material associated with the RSC.

13. A communication method, characterized in that: The method is applied to a U2U discovery and / or U2U link establishment process, and the method is executed by a second terminal, and the method includes: receiving a second message, the second message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or a U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in the U2U discovery and / or U2U link establishment process, the first security material is determined based on a first identifier, and the first The identifier is used to indicate the Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process; Decryption is performed to obtain the information set.

14. The method according to claim 13, characterized in that The second message also includes the first identifier.

15. The method according to claim 13 or 14, characterized in that The second message is protected by a second security material, the second security material being a security material associated with the RSC; The method further comprises: determining the second security material; The second message is decrypted based on the second security material, and integrity and confidentiality of the second message are verified.

16. The method according to any one of claims 13 to 15, characterized in that: The decryption to obtain the information set includes: determining the first security material based on the first identifier; The information set protected by the first security material is decrypted based on the first security material to obtain the information set.

17. The method according to any one of claims 13 to 16, characterized in that: The receiving the second message comprises: receiving the second broadcast message; or Receive the second message sent by the relay terminal.

18. A communication device, characterized in that: include: A transceiver module, used to send a first message, the first message including an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal during a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) during a U2U discovery and / or U2U link establishment process, the first security material is determined based on a first identifier, and the first identifier is used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process.

19. A communication device, characterized in that: include: A transceiver module, configured to receive a first message, wherein the first message includes an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal in a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in a U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process; A processing module is used to send a second message based on the first message.

20. A communication device, characterized in that: include: A transceiver module, configured to receive a second message, wherein the second message includes an information set protected by a first security material; wherein the information set is used to determine information of a first terminal and / or a second terminal in a U2U discovery and / or U2U link establishment process; the first terminal and the second terminal are end terminals (End UE) in a U2U discovery and / or U2U link establishment process, and the first security material is determined based on a first identifier, and the first identifier is used to indicate a Prose application or Prose service associated with the U2U discovery and / or U2U link establishment process; The processing module is used for decrypting and obtaining the information set.

21. A communication device, characterized in that: The device includes a processor and a memory, wherein a computer program is stored in the memory, and the processor executes the computer program stored in the memory so that the device performs the method according to any one of claims 1 to 6, any one of claims 7 to 12, and any one of claims 13 to 17.

22. A communication device, characterized in that: include: processor and interface circuitry, wherein The interface circuit is used to obtain code instructions and transmit them to the processor; The processor is used to run the code instructions to perform the method according to any one of claims 1 to 6, claims 7 to 12, and claims 13 to 17.

23. A computer-readable storage medium for storing instructions, which, when executed, enable the method of any one of claims 1 to 6, claims 7 to 12, and claims 13 to 17 to be implemented.

Images