Information processing method, terminal, communication system, and storage medium

Abstract

An information processing method, a terminal, a communication system, and a storage medium. The information processing method comprises: a first terminal determines a first security key on the basis of a first certificate, and sends an SLPP message that undergoes security protection using the first security key.

Description

Information processing method, terminal, communication system and storage medium Technical Field

[0001] The present disclosure relates to the field of communication technologies, and in particular to an information processing method, a terminal, a communication system, and a storage medium. Background Art

[0002] With the continuous development of wireless communication technology, various networks can realize more and more functions; and ranging / sidelink (SL) positioning service has become an important research topic.

[0003] Summary of the Invention

[0004] The embodiments of the present disclosure need to solve the problem of secure communication between terminals without the help of network functions.

[0005] The embodiments of the present disclosure provide an information processing method, a terminal, a communication system, and a storage medium.

[0006] According to a first aspect of an embodiment of the present disclosure, an information processing method is proposed, including:

[0007] The first terminal determines a first security key based on the first credential;

[0008] A Sidelink Positioning Protocol (SLPP) message is sent that is secured using a first security key.

[0009] According to a second aspect of the embodiments of the present disclosure, an information processing method is proposed, including:

[0010] The second terminal receives the SLPP message, where the SLPP message is securely protected using the first security key;

[0011] determining a second security key based on the second credential;

[0012] At least one of integrity verification and confidentiality verification is performed on the SLPP message using the second security key.

[0013] According to a third aspect of the embodiments of the present disclosure, an information processing method is proposed, including:

[0014] The first terminal determines a first security key based on the first credential;

[0015] The first terminal sends a SLPP message to the second terminal using a first security key for security protection;

[0016] The second terminal determines a second security key based on the second credential;

[0017] The second terminal uses the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message.

[0018] According to a fourth aspect of an embodiment of the present disclosure, a first terminal is provided, including:

[0019] A first processing module configured to determine a first security key based on the first credential;

[0020] The first transceiver module is configured to send an SLPP message that is securely protected by a first security key.

[0021] According to a fifth aspect of an embodiment of the present disclosure, a second terminal is provided, including:

[0022] A first transceiver module is configured to receive an SLPP message; wherein the SLPP message is securely protected using a first security key;

[0023] a second processing module configured to determine a second security key based on the second credential;

[0024] The second processing module is configured to perform at least one of integrity verification and confidentiality verification on the SLPP message using the second security key.

[0025] According to a sixth aspect of an embodiment of the present disclosure, a first terminal is proposed, comprising: one or more processors; wherein the first terminal is configured to execute an optional implementation of the first aspect.

[0026] According to a seventh aspect of an embodiment of the present disclosure, a second terminal is proposed, comprising: one or more processors; wherein the second terminal is configured to execute an optional implementation of the second aspect.

[0027] According to the eighth aspect of an embodiment of the present disclosure, a communication system is proposed, comprising: a first terminal, and a second terminal; wherein the first terminal is configured to execute the method described in the optional implementation manner of the first aspect, and the second terminal is configured to execute the method described in the optional implementation manner of the second aspect.

[0028] According to the ninth aspect of an embodiment of the present disclosure, a storage medium is proposed, wherein the storage medium stores instructions. When the instructions are executed on a communication device, the communication device executes the method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0029] The embodiments of the present disclosure can improve the security of communication between terminals without the help of network functions. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure, the following drawings required for describing the embodiments are introduced. The following drawings are only some embodiments of the present disclosure and do not impose specific limitations on the protection scope of the present disclosure.

[0031] FIG1 is a schematic structural diagram of an information processing system according to an embodiment of the present disclosure.

[0032] FIG2 is an interactive schematic diagram illustrating an information processing method according to an embodiment of the present disclosure.

[0033] FIG3A is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0034] FIG3B is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0035] FIG4A is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0036] FIG4B is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0037] FIG5 is a flow chart showing an information processing method according to an embodiment of the present disclosure.

[0038] FIG6 is a schematic diagram showing a key hierarchy of different key layers according to an embodiment of the present disclosure.

[0039] FIG7A is a schematic structural diagram of a first device according to an embodiment of the present disclosure.

[0040] FIG7B is a schematic structural diagram of a second device according to an embodiment of the present disclosure.

[0041] FIG8A is a schematic structural diagram of a communication device provided according to an embodiment of the present disclosure.

[0042] FIG8B is a schematic structural diagram of a chip provided according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0043] The present disclosure provides an information processing method.

[0044] In a first aspect, an embodiment of the present disclosure provides an information processing method, including:

[0045] The first terminal determines a first security key based on the first credential;

[0046] Sending an SLPP message secured by using the first security key.

[0047] In the above embodiment, the first terminal determines the first security key based on the first credential and uses the first security key to securely protect the SLPP message, thereby reducing the leakage and / or tampering of the information content carried in the SLPP message and improving the security of the SLPP message. Furthermore, because the first terminal can determine the first security key and send SLPP messages protected by the first security key without the assistance of other network functions, this embodiment can achieve secure communication of SL transmission between the first terminal and other terminals without the assistance of network functions.

[0048] In conjunction with some embodiments of the first aspect, in some embodiments, the first credential is a pre-configured long-term credential.

[0049] In the above embodiment, the first credential is a pre-configured long-term credential. Therefore, the first credential is valid, and thus the first security key determined by the first credential is also valid. Furthermore, if the terminal receiving the SLPP message is also pre-configured with the long-term credential, this facilitates decoding of the SLPP message by the terminal receiving the SLPP message.

[0050] In conjunction with some embodiments of the first aspect, in some embodiments, sending a Sidelink Positioning Protocol (SLPP) message secured using a first security key includes one of the following:

[0051] Multicasting an SLPP message secured by a first security key;

[0052] Broadcast an SLPP message secured by using the first security key.

[0053] In the above embodiment, the SLPP message may be a multicast message or a broadcast message, thereby achieving the security of the multicast or broadcast SLPP message.

[0054] In conjunction with some embodiments of the first aspect, in some embodiments, determining the first security key based on the first credential includes:

[0055] generating a first intermediate key based on the first credential;

[0056] generating a second intermediate key based on the first intermediate key;

[0057] Based on the second intermediate key, a first security key is generated.

[0058] In the above embodiment, the first security key can be obtained by generating a multi-layer key through the first credential, thereby further improving the security of the SLPP message.

[0059] In conjunction with some embodiments of the first aspect, in some embodiments, the first security key includes at least one of the following:

[0060] A first confidentiality key, used to protect the confidentiality of SLPP messages;

[0061] The first integrity key is used to perform integrity protection on the SLPP message.

[0062] In the above embodiment, different types of first security keys can implement different types of security protection for SLPP messages; for example, the first confidentiality key can implement confidentiality protection for SLPP messages, and / or the first integrity key can implement integrity protection for SLPP messages.

[0063] In conjunction with some embodiments of the first aspect, in some embodiments, generating a first intermediate key based on the first credential includes one of the following:

[0064] Generate a first intermediate key based on the first credential and the first identifier, wherein the first identifier is used to identify a target group for broadcast or multicast;

[0065] Generate a first intermediate key based on the first credential, the first identifier, and the second identifier; wherein the second identifier is used to identify the first intermediate key;

[0066] A first intermediate key is generated based on the first credential, the first identifier, the second identifier, and the first parameter.

[0067] In the above embodiment, the first intermediate key can be determined in a variety of ways, thereby adapting to more application scenarios. In addition, the generation of the first intermediate key is at least based on the first identifier, thereby improving the security of communication between the first terminal and the target group.

[0068] In combination with some embodiments of the first aspect, in some embodiments, the SLPP message is a broadcast message, and the first identifier is a broadcast target address; wherein the broadcast target address is used to identify the broadcast object of the broadcast; or, the SLPP message is a multicast message, and the first identifier is a group identifier, and the group identifier is used to indicate the group to which the first terminal belongs.

[0069] In the above embodiment, if the SLPP message is a broadcast message, the security of communication between the first terminal and the broadcast object can be improved; or if the SLPP message is a multicast message, the security of communication between the first terminal and the terminals in the group to which the first terminal belongs can be improved.

[0070] In conjunction with some embodiments of the first aspect, in some embodiments, the first parameter includes at least one of the following:

[0071] The first character string is used to indicate the type of SLPP message;

[0072] The length of the first string;

[0073] The length of the first identifier;

[0074] The length of the second identifier.

[0075] In the above embodiment, the first intermediate key can be generated by the first identifier and the first parameter. Different first intermediate keys are generated based on different first parameters, thereby ensuring the security of the first intermediate key and enabling flexible generation of the first intermediate key.

[0076] In conjunction with some embodiments of the first aspect, in some embodiments, generating the second intermediate key based on the first intermediate key includes one of the following:

[0077] Generate a second intermediate key based on the first intermediate key and the third identifier, wherein the third identifier is used to identify the first terminal;

[0078] A second intermediate key is generated based on the first intermediate key, the third identifier, and the second parameter.

[0079] In the above embodiment, the second intermediate key can be determined in a variety of ways, thereby adapting to more application scenarios. In addition, the second intermediate key is generated based on at least the third identifier, thereby improving the security of communication between the first terminal and members of the terminal group.

[0080] In conjunction with some embodiments of the first aspect, in some embodiments, the second parameter includes at least one of the following:

[0081] The length of the third identifier;

[0082] a fourth identifier, used to identify the second intermediate key;

[0083] the length of the fourth identifier;

[0084] First logo;

[0085] The length of the first identifier.

[0086] In the above embodiment, the second intermediate key can be generated by the first intermediate key and the second parameter. Different second intermediate keys are generated based on different second parameters, thereby ensuring the security of the second intermediate key and enabling flexible generation of the second intermediate key.

[0087] In conjunction with some embodiments of the first aspect, in some embodiments, generating a first security key from a second intermediate key includes:

[0088] Generate a first security key based on the second intermediate key and a third parameter, wherein the third parameter includes at least one of the following:

[0089] A first indicator, used to indicate the key type;

[0090] First indicator length;

[0091] Algorithm identifier, used to indicate the confidentiality algorithm and / or integrity algorithm;

[0092] The length of the algorithm identifier.

[0093] In the above embodiment, the first security key can be generated by the second intermediate key, and the second intermediate key is determined based on the first intermediate key, and the first intermediate key is determined based on the first certificate, so that the first security key can be generated by multi-layer keys, thereby improving the security of the first security key.

[0094] Furthermore, the first security key is generated by the second intermediate key and the third parameter. Different first security keys are generated based on different third parameters, thereby ensuring the security of the first security key and enabling flexible generation of the first security key.

[0095] In combination with some embodiments of the first aspect, in some embodiments, the SLPP message includes: a first message authentication code (MAC); wherein the first MAC is determined based on the first integrity key; the first MAC is used by the second terminal to verify the integrity of the SLPP message.

[0096] In the above embodiment, the first MAC is a verification code for integrity verification, which helps the second terminal receiving the SLPP message to perform integrity verification on the SLPP message.

[0097] In conjunction with some embodiments of the first aspect, in some embodiments, the SLPP message includes at least one of the following:

[0098] The first identifier is used to identify the target group of the broadcast or multicast;

[0099] A second identifier, used to identify the first intermediate key;

[0100] A third identifier, used to identify the first terminal;

[0101] a fourth identifier, used to identify the second intermediate key;

[0102] The fifth identifier is used to indicate the type of the SLPP message.

[0103] In the above embodiment, the first identifier, second identifier, third identifier, fourth identifier and fifth identifier included in the SLPP message are conducive to the second terminal receiving the SLPP message to determine the key used for integrity verification and / or confidentiality verification of the SLPP message.

[0104] In combination with some embodiments of the first aspect, in some embodiments, the method includes: pre-configuring at least one of a confidentiality algorithm and an integrity algorithm.

[0105] In the above embodiment, the confidentiality algorithm and / or integrity algorithm is pre-configured and valid, thereby generating a valid first security key. Furthermore, if the second terminal receiving the SLPP message is also pre-configured with the same confidentiality algorithm and / or integrity algorithm, this facilitates the second terminal's confidentiality and / or integrity verification of the SLPP message.

[0106] In combination with some embodiments of the first aspect, in some embodiments, based on the number of bits of the first credential being less than the first value, one or more first numerical values ​​are filled in the first credential to obtain a first credential with a number of bits of the first value; or, based on the number of bits of the first credential being greater than the first value, the first credential is truncated to obtain a first credential with a number of bits of the first value.

[0107] In the above embodiment, the first credential may be truncated or padded to obtain the first credential with the first value as the bit number, so that the first credential can maintain the valid bits of the uniform first value.

[0108] In combination with some embodiments of the first aspect, in some embodiments, the SLPP message is used for the second terminal to perform at least one of integrity verification and confidentiality verification using a second security key; the second security key is determined by the second terminal based on the second credential.

[0109] In the above embodiment, the second terminal can perform at least one of integrity verification and confidentiality verification on the SLPP message based on the second security key; in this way, the information content carried in the SLPP message can be successfully obtained without the help of network functions, thereby reducing the leakage and / or tampering of the information content carried in the SLPP message.

[0110] In conjunction with some embodiments of the first aspect, in some embodiments, the second credential is a pre-configured long-term credential.

[0111] In the above embodiment, the second credential is a pre-configured long-term credential. Therefore, the second credential is valid, and thus the first security key determined by the second credential is also valid. Furthermore, if the second credential is the same as the first credential, the second terminal can decode SLPP messages.

[0112] In combination with some embodiments of the first aspect, in some embodiments, the second security key is determined based on the fourth intermediate key; the fourth intermediate key is determined based on the third intermediate key; and the third intermediate key is determined based on the second credential.

[0113] In the above embodiment, the second security key is determined by multiple keys, thereby further improving the security of the SLPP message.

[0114] In conjunction with some embodiments of the first aspect, in some embodiments, the second security key includes at least one of the following:

[0115] A second confidentiality key is used to verify the confidentiality of the SLPP message;

[0116] Second integrity key; used to verify the integrity of SLPP messages.

[0117] In the above embodiment, different types of the second security key can implement different decoding processing of the SLPP message. For example, the confidentiality of the SLPP message can be verified by the second confidentiality key, and / or the integrity of the SLPP message can be verified by the second integrity key, thereby successfully decoding the SLPP message.

[0118] In conjunction with some embodiments of the first aspect, in some embodiments, the third intermediate key is determined based on one of the following:

[0119] The second credential and the first identifier;

[0120] The second certificate, the first identifier, and the second identifier;

[0121] The second credential, the first identifier, the second identifier, and the first parameter;

[0122] Among them, the first identifier is used to identify the target group of broadcast or multicast; the second identifier is used to identify the first intermediate key; the first parameter includes at least one of the following: a first string, the length of the first string, the length of the first identifier, and the length of the second identifier; the first string is used to indicate the type of SLPP message.

[0123] In the above embodiment, the third intermediate key can be determined in a variety of ways, thereby adapting to more application scenarios. In addition, different third intermediate keys can be generated based on different first parameters, thereby ensuring the security of the third intermediate key and allowing for flexible generation of the third intermediate key.

[0124] In conjunction with some embodiments of the first aspect, in some embodiments, the fourth intermediate key is determined based on one of the following:

[0125] a third intermediate key and a third identifier;

[0126] The third intermediate key, the third identifier, and the second parameter are determined;

[0127] The third identifier is used to identify the first terminal; the second parameter includes at least one of the following: the length of the third identifier, the fourth identifier, the length of the fourth identifier, the first identifier, and the length of the first identifier; the fourth identifier is used to identify the second intermediate key.

[0128] In the above embodiment, the fourth intermediate key can be determined in a variety of ways, thereby adapting to more application scenarios. In addition, different fourth intermediate keys can be generated based on different second parameters, thereby ensuring the security of the fourth intermediate key and allowing for flexible generation of the fourth intermediate key.

[0129] In combination with some embodiments of the first aspect, in some embodiments, the second security key is determined based on the fourth intermediate key and the third parameter; wherein the third parameter includes at least one of the following: a first indicator, a first indicator length, an algorithm identifier, and a length of the algorithm identifier; the first indicator is used to indicate the key type; the algorithm identifier is used to indicate the confidentiality algorithm and / or the integrity algorithm.

[0130] In the above embodiment, the second security key can be generated using a fourth intermediate key. This fourth intermediate key is determined based on the third intermediate key, which is determined based on the second credential. This allows the second security key to be generated using multiple layers of keys, improving the security of the second security key. Furthermore, by generating the second security key using the fourth intermediate key and the third parameter, different second security keys can be generated based on different third parameters, thereby ensuring the security of the second security key and enabling flexible generation of the second security key.

[0131] In a second aspect, an embodiment of the present disclosure provides an information processing method, including:

[0132] The second terminal receives the SLPP message, where the SLPP message is securely protected using the first security key;

[0133] determining a second security key based on the second credential;

[0134] At least one of integrity verification and confidentiality verification is performed on the SLPP message using the second security key.

[0135] In conjunction with some embodiments of the second aspect, in some embodiments, the second credential is a pre-configured long-term credential.

[0136] In conjunction with some embodiments of the second aspect, in some embodiments, receiving a Sidelink Positioning Protocol (SLPP) message includes one of the following:

[0137] Receiving an SLPP message multicast by the first terminal;

[0138] Receive the SLPP message broadcast by the first terminal.

[0139] In conjunction with some embodiments of the second aspect, in some embodiments, the SLPP message includes at least one of the following:

[0140] The first identifier is used to identify the target group of the broadcast or multicast;

[0141] A second identifier, used to identify the first intermediate key;

[0142] A third identifier, used to identify the first terminal;

[0143] a fourth identifier, used to identify the second intermediate key;

[0144] The fifth identifier is used to indicate the type of the SLPP message.

[0145] In combination with some embodiments of the second aspect, in some embodiments, the SLPP message is a broadcast message, and the first identifier is a broadcast target address; wherein the broadcast target address is used to identify the broadcast object of the broadcast; or, the SLPP message is a multicast message, and the first identifier is a group identifier, and the group identifier is used to indicate the group to which the first terminal is located.

[0146] In conjunction with some embodiments of the second aspect, in some embodiments, determining the second security key based on the second credential includes:

[0147] generating a third intermediate key based on the second credential;

[0148] generating a fourth intermediate key based on the third intermediate key;

[0149] Based on the fourth intermediate key, a second security key is generated.

[0150] In conjunction with some embodiments of the second aspect, in some embodiments, the second security key includes at least one of the following:

[0151] A second confidentiality key is used to verify the confidentiality of the SLPP message;

[0152] Second integrity key; used to verify the integrity of SLPP messages.

[0153] In conjunction with some embodiments of the second aspect, in some embodiments, generating a third intermediate key based on the second credential includes one of the following:

[0154] generating a third intermediate key based on the second credential and the first identifier;

[0155] generating a third intermediate key based on the second credential, the first identifier, and the second identifier;

[0156] A third intermediate key is generated based on the second credential, the first identifier, the second identifier, and the first parameter.

[0157] In conjunction with some embodiments of the second aspect, in some embodiments, the first parameter includes at least one of the following:

[0158] The first character string is used to indicate the type of SLPP message;

[0159] The length of the first string;

[0160] The length of the first identifier;

[0161] The length of the second identifier.

[0162] In conjunction with some embodiments of the second aspect, in some embodiments, generating a fourth intermediate key based on the third intermediate key includes one of the following:

[0163] generating a fourth intermediate key based on the third intermediate key and the third identifier;

[0164] A fourth intermediate key is generated based on the third intermediate key, the third identifier, and the second parameter.

[0165] In conjunction with some embodiments of the second aspect, in some embodiments, the second parameter includes at least one of the following:

[0166] The length of the third identifier;

[0167] Fourth logo;

[0168] the length of the fourth identifier;

[0169] First logo;

[0170] The length of the first identifier.

[0171] In conjunction with some embodiments of the second aspect, in some embodiments, generating a second security key based on the fourth intermediate key includes:

[0172] Generate a second security key based on the fourth intermediate key and the third parameter, wherein the third parameter includes at least one of the following:

[0173] A first indicator, used to indicate the key type;

[0174] First indicator length;

[0175] Algorithm identifier, used to indicate the confidentiality algorithm and / or integrity algorithm;

[0176] The length of the algorithm identifier.

[0177] In conjunction with some embodiments of the second aspect, in some embodiments, the SLPP message includes a first message authentication code MAC; wherein the first MAC is determined by the first terminal based on the first integrity key;

[0178] Using the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message includes: determining that the integrity verification of the SLPP message is passed based on the second MAC being the same as the first MAC; wherein the second MAC is determined by the second terminal based on the second integrity key.

[0179] In combination with some embodiments of the second aspect, in some embodiments, the number of bits of the second credential is less than the first value, and one or more first numerical values ​​are filled in the second credential to obtain a second credential with a number of bits of the first value; or, the number of bits of the second credential is greater than the first value, and the second credential is truncated to obtain a second credential with a number of bits of the first value.

[0180] In combination with some embodiments of the second aspect, in some embodiments, the first security key is determined based on the second intermediate key; the second intermediate key is determined based on the first intermediate key; and the first intermediate key is determined based on the first credential.

[0181] In conjunction with some embodiments of the second aspect, in some embodiments, the first credential is a pre-configured long-term credential.

[0182] In conjunction with some embodiments of the second aspect, in some embodiments, the first security key includes at least one of the following:

[0183] A first confidentiality key, used to protect the confidentiality of SLPP messages;

[0184] The first integrity key is used to perform integrity protection on the SLPP message.

[0185] In conjunction with some embodiments of the second aspect, in some embodiments, the first intermediate key is determined based on one of the following:

[0186] First credential and first identification;

[0187] a first credential, a first identifier, and a second identifier;

[0188] The first credential, the first identifier, the second identifier, and the first parameter;

[0189] The first parameter includes at least one of the following: a first character string, a length of the first character string, a length of the first identifier, and a length of the second identifier; the first character string is used to indicate a type of the SLPP message.

[0190] In conjunction with some embodiments of the second aspect, in some embodiments, the second intermediate key is determined based on one of the following:

[0191] a first intermediate key and a third identifier;

[0192] a first intermediate key, a third identifier, and a second parameter;

[0193] The second parameter includes at least one of the following: the length of the third identifier, the fourth identifier, the length of the fourth identifier, the first identifier, and the length of the first identifier; the fourth identifier is used to identify the second intermediate key.

[0194] In combination with some embodiments of the second aspect, in some embodiments, the first security key is determined based on the second intermediate key and a third parameter; wherein the third parameter includes at least one of the following: a first indicator, a first indicator length, an algorithm identifier, and a length of the algorithm identifier; the first indicator is used to indicate the key type; the algorithm identifier is used to indicate the confidentiality algorithm and / or the integrity algorithm.

[0195] In a third aspect, the present disclosure provides an information processing method, including:

[0196] The first terminal determines a first security key based on the first credential;

[0197] The first terminal sends a SLPP message to the second terminal using a first security key for security protection;

[0198] The second terminal determines a second security key based on the second credential;

[0199] The second terminal uses the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message.

[0200] In a fourth aspect, an embodiment of the present disclosure provides a first terminal, including:

[0201] A first processing module configured to determine a first security key based on the first credential;

[0202] The first transceiver module is configured to send an SLPP message that is securely protected by a first security key.

[0203] In a fifth aspect, an embodiment of the present disclosure provides a second terminal, including:

[0204] A first transceiver module is configured to receive an SLPP message; wherein the SLPP message is securely protected using a first security key;

[0205] a second processing module configured to determine a second security key based on the second credential;

[0206] The second processing module is configured to perform at least one of integrity verification and confidentiality verification on the SLPP message using the second security key.

[0207] In a sixth aspect, an embodiment of the present disclosure proposes a first terminal, comprising: one or more processors; wherein the first terminal is used to execute an optional implementation method of the first aspect.

[0208] In a seventh aspect, an embodiment of the present disclosure proposes a second terminal, comprising: one or more processors; wherein the second terminal is used to execute an optional implementation method of the second aspect.

[0209] In an eighth aspect, an embodiment of the present disclosure proposes a communication system, comprising: a first terminal, and a second terminal; wherein the first terminal is configured to execute the method described in the optional implementation manner of the first aspect, and the second terminal is configured to execute the method described in the optional implementation manner of the second aspect.

[0210] In the ninth aspect, an embodiment of the present disclosure proposes a storage medium, which stores instructions. When the instructions are executed on a communication device, the communication device executes the method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0211] In the tenth aspect, an embodiment of the present disclosure proposes a program product. When the program product is executed by a communication device, the communication device executes the method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0212] In the eleventh aspect, an embodiment of the present disclosure proposes a computer program, which, when running on a computer, enables the computer to execute the information processing method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0213] In the twelfth aspect, an embodiment of the present disclosure proposes a chip or a chip system; the chip or chip system includes a processing circuit configured to execute the method described in the optional implementation of the above-mentioned first aspect, second aspect and third aspect.

[0214] It is understood that the first terminal, second terminal, communication system, storage medium, program product, computer program, chip, or chip system described above are all used to perform the methods provided in the embodiments of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the corresponding methods and will not be repeated here. It is understood that the communication device includes the first device and / or the network device.

[0215] The present disclosure provides an information processing method, a first terminal, a second terminal, a communication system, and a storage medium. In some embodiments, the terms information processing method and communication method are interchangeable, the terms information processing device and communication device are interchangeable, and the terms information processing system and communication system are interchangeable.

[0216] The embodiments of the present disclosure are not exhaustive and are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined. For example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

[0217] In each embodiment of the present disclosure, unless otherwise specified or provided for, the terms and / or descriptions between the embodiments are consistent and can be used interchangeably. The technical features in different embodiments can be combined to form new embodiments based on their inherent logical relationships.

[0218] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

[0219] In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular, such as "a", "an", "the", "above", "said", "the", "the", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun following the article may be understood as a singular expression or a plural expression.

[0220] In the embodiments of the present disclosure, “plurality” refers to two or more.

[0221] In some embodiments, the terms "at least one," "one or more," "a plurality of," "multiple," etc. may be used interchangeably.

[0222] In some embodiments, descriptions such as "at least one of A and B," "A and / or B," "A in one case, B in another case," or "in response to one case A, in response to another case B" may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed); and in some embodiments, A and B (both A and B are executed). The above is also applicable when there are more branches such as A, B, and C.

[0223] In some embodiments, "A or B" and other descriptions may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed). The above is also applicable when there are more branches such as A, B, C, etc.

[0224] The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects and do not constitute any restriction on the position, order, priority, quantity or content of the description objects. For the statement of the description object, please refer to the description in the context of the claims or embodiments, and no unnecessary restriction should be constituted due to the use of prefixes. For example, if the description object is a "field", the ordinal number before the "field" in the "first field" and the "second field" does not limit the position or order between the "fields". "First" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and the "second field". For another example, if the description object is a "level", the ordinal number before the "level" in the "first level" and the "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number and can be one or more. Taking "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes can be the same or different. For example, if the description object is "device", then the "first device" and the "second device" can be the same device or different devices, and their types can be the same or different; for another example, if the description object is "information", then the "first information" and the "second information" can be the same information or different information, and their contents can be the same or different.

[0225] In some embodiments, “including A,” “comprising A,” “used to indicate A,” and “carrying A” can be interpreted as directly carrying A or indirectly indicating A.

[0226] In some embodiments, terms such as "in response to...", "in response to determining...", "in the case of...", "at the time of...", "when...", "if...", "if...", etc. can be used interchangeably.

[0227] In some embodiments, terms such as "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not less than", and "above" can be replaced with each other, and terms such as "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "not more than", "lower than", "lower than or equal to", "not higher than", and "below" can be replaced with each other.

[0228] In some embodiments, devices, etc. can be interpreted as physical or virtual, and their names are not limited to the names recorded in the embodiments. Terms such as "device", "equipment", "device", "circuit", "network element", "node", "function", "unit", "section", "system", "network", "chip", "chip system", "entity", and "subject" can be used interchangeably.

[0229] In some embodiments, "network" can be interpreted as devices included in the network (eg, access network equipment, core network equipment, etc.).

[0230] In some embodiments, the terms "access network device (AN device)", "radio access network device (RAN device)", "base station (BS)", "radio base station" "fixed station", "node", "access point", "transmission point (TP)", "reception point (RP)", "transmission / reception point (TRP)", "panel", "antenna panel", "antenna array", "cell", "macro cell", "small cell", "femto cell", "pico cell", "sector", "cell group", "carrier", "component carrier", "bandwidth part (BWP)" and the like may be used interchangeably.

[0231] In some embodiments, the terms "terminal", "terminal device", "user equipment (UE)", "user terminal", "mobile station (MS)", "mobile terminal (MT)", subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, etc. can be used interchangeably.

[0232] In some embodiments, the access network device, the core network device, or the network device can be replaced by a terminal. For example, the various embodiments of the present disclosure can also be applied to a structure in which the communication between the access network device, the core network device, or the network device and the terminal is replaced by communication between multiple terminals (for example, it can also be called device-to-device (D2D), vehicle-to-everything (V2X), etc.). In this case, it can also be set as a structure in which the terminal has all or part of the functions of the access network device. In addition, language such as "uplink" and "downlink" can also be replaced by language corresponding to communication between terminals (for example, "side"). For example, uplink channels, downlink channels, etc. can be replaced by side channels, and uplinks, downlinks, etc. can be replaced by side links.

[0233] In some embodiments, the terminal may be replaced by an access network device, a core network device, or a network device. In this case, the access network device, the core network device, or the network device may have a structure that has all or part of the functions of the terminal.

[0234] In some embodiments, obtaining data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

[0235] In some embodiments, data, information, etc. may be obtained with the user's consent.

[0236] In addition, each element, each row, or each column in the table of the embodiment of the present disclosure can be implemented as an independent embodiment, and the combination of any elements, any rows, and any columns can also be implemented as an independent embodiment.

[0237] FIG1 is a schematic diagram showing the structure of an information processing system 100 according to an embodiment of the present disclosure. As shown in FIG1 , the information processing system 100 may include: a terminal 101. Optionally, the information processing system 100 may include a network device 102.

[0238] In some embodiments, the network device 102 may include at least one of an access network device and a core network device.

[0239] In some embodiments, the terminal 101 includes, for example, a mobile phone, a wearable device, an Internet of Things (IOT) device or terminal, a car with communication function, a smart car, a tablet computer (Pad), a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, and at least one of a wireless terminal device in a smart home, but is not limited thereto.

[0240] In some embodiments, the access network device is, for example, a node or device that accesses a terminal to a wireless network. The access network device may include an evolved NodeB (eNB), a next generation evolved NodeB (ng-eNB), a next generation NodeB (gNB), a node B (NB), a home node B (HNB), a home evolved nodeB (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an open base station (Open RAN), a cloud base station (Cloud RAN), a base station in other communication systems, and at least one of an access node in a wireless fidelity (WiFi) system, but is not limited thereto.

[0241] In some embodiments, the technical solution of the present disclosure can be applied to the Open RAN architecture. In this case, the interfaces between or within the access network devices involved in the embodiments of the present disclosure can be transformed into internal interfaces of the Open RAN, and the processes and information interactions between these internal interfaces can be implemented through software or programs.

[0242] In some embodiments, the access network device can be composed of a centralized unit (CU) and a distributed unit (DU), where the CU can also be called a control unit. The CU-DU structure can be used to split the protocol layer of the access network device, with the functions of some protocol layers centrally controlled by the CU, and the functions of the remaining part or all of the protocol layers distributed in the DU, which is centrally controlled by the CU, but is not limited to this.

[0243] In some embodiments, the core network device may be a single device including a first network element, a second network element, etc., or may be a plurality of devices or a group of devices, each including all or part of the first network element and the second network element. The network element may be virtual or physical. The core network may include, for example, at least one of an evolved packet core (EPC), a 5G core network (5GCN), and a next generation core (NGC).

[0244] It can be understood that the information processing system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution provided by the embodiment of the present disclosure. Ordinary technicians in this field can know that with the evolution of system architecture and the emergence of new business scenarios, the technical solution provided by the embodiment of the present disclosure is also applicable to similar technical problems.

[0245] The following embodiments of the present disclosure may be applied to the information processing system 100 shown in FIG1 , or a portion thereof, but are not limited thereto. The entities shown in FIG1 are illustrative only. The information processing system may include all or a portion of the entities shown in FIG1 , or may include other entities outside of FIG1 . The number and form of the entities may be arbitrary. The connection relationships between the entities are illustrative only. The entities may be connected or disconnected, and the connection may be in any manner, including direct or indirect, wired or wireless.

[0246] The embodiments of the present disclosure can be applied to Long Term Evolution (LTE), LTE-Advanced (LTE-A), LTE-Beyond (LTE-B), SUPER 3G, IMT-Advanced, 4th generation mobile communication system (4G), 5th generation mobile communication system (5G), 5G new radio (NR), future radio access (FRA), new radio access technology (RAT), new radio (NR), new radio access (NX), future generation radio access (FX), Global System for Mobile communications (GSM (registered trademark)), CDMA2000, Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, Ultra-WideBand (UWB), Bluetooth (registered trademark), Public Land Mobile Network (PLMN) networks, Device-to-Device (D2D) systems, Machine-to-Machine (M2M) systems, Internet of Things (IoT) systems, Vehicle-to-Everything (V2X), systems utilizing other communication methods, and next-generation systems based on and extending these methods. Furthermore, multiple systems may be combined (for example, a combination of LTE or LTE-A with 5G).

[0247] In some embodiments, a key issue in the security of current ranging / SL positioning services is the protection of broadcast / multicast Sidelink Positioning Protocol (SLPP) signaling, which may include, for example, SL positioning capabilities, SL positioning assistance data, and location information. Since SL positioning capabilities and SL positioning assistance data are information used to obtain ranging results (i.e., location information), they should be integrity-protected to prevent tampering. S1 positioning capabilities and location information involve the privacy of the UE involved and should be encrypted to protect the UE's privacy.

[0248] In some embodiments, there are various solutions for protecting broadcast / multicast SLPP messages, all of which require network function assistance for key provisioning. To support legacy V2X applications deployed without network function assistance for discovery and communication between V2X UEs, a method for V2X UEs to support security protection of multicast SLPP messages without network function assistance is needed.

[0249] FIG2 is an interactive diagram of an information processing method according to an embodiment of the present disclosure. As shown in FIG2 , the present disclosure embodiment relates to an information processing method for an information processing system 100, and the method includes:

[0250] Step S2101: The first terminal obtains first information.

[0251] Optionally, the first terminal obtains the first information according to a protocol, or the first terminal obtains the first information from a protocol. Optionally, the protocol may be a wireless communication protocol, or the protocol may be a protocol negotiated between the first terminal and the second terminal.

[0252] Optionally, the first terminal obtains the first information in response to user input.

[0253] Optionally, the first terminal predefines or preconfigures the first information.

[0254] In some embodiments, the first information is used to determine a first security key.

[0255] In some embodiments, the name of the first information is not limited, and it can be, for example, security information or security material.

[0256] In some embodiments, the first information includes at least one of the following: a first credential, a confidentiality algorithm, and an integrity algorithm.

[0257] Optionally, the first credential may include at least one of the following: a long-term credential, a root key, a symmetric key, and a public / private key pair.

[0258] Optionally, the confidentiality algorithm is an algorithm for confidentiality protection and / or confidentiality verification.

[0259] Optionally, the integrity algorithm is an algorithm used for integrity protection and / or integrity verification.

[0260] In some embodiments, the first terminal fills one or more first values ​​in the first credential based on the number of bits of the first credential being less than the first value to obtain the first credential with the first value in number of bits.

[0261] In some embodiments, the first terminal intercepts the first credential to obtain a first credential with a bit number of the first value based on the number of bits of the first credential being greater than the first value. Alternatively, bits in the first credential are intercepted to obtain the first credential with a bit number of the first value. Exemplarily, low-order bits in the first credential may be intercepted to obtain the first credential with a bit number of the first value.

[0262] Optionally, the first value may be any numerical value.

[0263] Optionally, the first value is a predetermined value, for example, 128, 256, or 512.

[0264] Optionally, the first value may be 0. Optionally, the first value may be other values.

[0265] Exemplarily, the length of the first credential is n bits; if n is greater than 256, the first credential is truncated to retain the 256-bit key; or, if n is less than 256, the first credential is padded with all zeros to form a 256-bit key.

[0266] Step S2102: The first terminal determines a first security key.

[0267] In some embodiments, the first security key is used to securely protect the SLPP message. Optionally, the security protection includes at least one of: confidentiality protection and integrity protection. The confidentiality protection may be encryption protection. Optionally, the SLPP message may be any broadcast message or multicast message. Optionally, the SLPP message may be a Sidelink Positioning Protocol message or a Sidelink Positioning Signaling message.

[0268] In some embodiments, the first terminal determines a first security key based on the first information.

[0269] In some embodiments, the first terminal determines a first security key based on the first credential.

[0270] In some embodiments, the first security key includes at least one of: a first confidentiality key and a first integrity key. Optionally, the first confidentiality key is used to protect the confidentiality of the SLPP message. Optionally, the first integrity key is used to protect the integrity of the SLPP message.

[0271] In some embodiments, the first confidentiality key may be used to verify the confidentiality of the SLPP message; and the first integrity key may be used to verify the integrity of the SLPP message.

[0272] In some embodiments, the name of the first confidentiality key is not limited, and it can be, for example, an encryption key, a groupcast encryption key (Groupcast Encryption Key), a broadcast encryption key (Broadcasted Encryption Key), an SLPP groupcast encryption key (SLPP Groupcast Encryption Key, SLPGEK), or an SLPP broadcast encryption key (SLPP Broadcasted Encryption Key, SLPBEK), etc.

[0273] In some embodiments, the name of the first integrity key is not limited, and it can be, for example, a groupcast integrity key (Groupcast Integrity Key), a broadcast integrity key (Broadcasted Integrity Key), an SLPP groupcast integrity key (SLPP Groupcast Integrity Key, SLPGIK), or an SLPP broadcast integrity key (SLPP Broadcasted Integrity Key, SLPBIK).

[0274] In some embodiments, determining the first security key based on the first credential includes: generating a first intermediate key based on the first credential; generating a second intermediate key based on the first intermediate key; and generating the first security key based on the second intermediate key.

[0275] Optionally, the first intermediate key corresponds to a target object or a terminal group. Optionally, the first intermediate key corresponds to a ranging / SL positioning service.

[0276] Optionally, the name of the first intermediate key is not limited, and it can be, for example, an intermediate groupcast key (Intermediate Groupcast Key), an intermediate broadcast key (Intermediate Broadcasted Key), an SLPP groupcast key (SLPP Groupcast Key, SLPGK), or an SLPP broadcast key (SLPP Broadcasted Key, SLPBK), etc.

[0277] Optionally, the second intermediate key corresponds to the terminal.

[0278] Optionally, the name of the second intermediate key is not limited, and it can be, for example, a traffic key (Traffic Key), a multicast traffic key (Groupcast Traffic Key), a broadcast traffic key (Broadcasted Traffic Key), a SLPP multicast traffic key (SLPP Groupcast Traffic Key, SLPGTK), or a SLPP broadcast traffic key (SLPP Broadcasted Traffic Key, SLPBTK), etc.

[0279] In some embodiments, a first intermediate key is generated based on the first credential and the first identifier.

[0280] In some embodiments, a first intermediate key is generated based on the first credential, the first identifier, and the second identifier.

[0281] In some embodiments, a first intermediate key is generated based on the first credential, the first identifier, the second identifier, and the first parameter.

[0282] Optionally, the first identifier is used to identify a target group of the broadcast or multicast.

[0283] Optionally, the SLPP message is a broadcast message, and the first identifier is a broadcast destination ID / Address. The broadcast destination ID / Address is used to identify a broadcast destination. Exemplarily, the broadcast destination is a terminal receiving the SLPP message. Exemplarily, the broadcast destination address can be a Layer 2 address.

[0284] Optionally, the SLPP message is a multicast message, and the first identifier is a group identifier (Group ID), which is used to indicate the group to which the first terminal belongs.

[0285] Optionally, the first identifier may be any string of at least one bit, a number, an index, etc. The first identifier may be any address information, etc.

[0286] Optionally, the second identifier is used to identify the first intermediate key.

[0287] Optionally, the second identifier may also be replaced based on a service identifier, wherein the service identifier is used to indicate the service to be transmitted. Exemplarily, the service identifier is used to indicate a ranging / SL positioning service.

[0288] Optionally, the name of the second identifier is not limited, and may be, for example, SLPGK ID or SLPBK ID, etc. The second identifier may be any character string or number of at least one bit.

[0289] Optionally, the first parameter includes at least one of the following: a first string, a length of the first string, a length of the first identifier, and a length of the second identifier, where the length refers to the number of bits occupied.

[0290] Optionally, the first string is used to indicate the type of the SLPP message. Exemplarily, the first string is used to indicate that the type of the SLPP message is a broadcast message, or the first string is used to indicate that the type of the SLPP message is a multicast message. The first string may be a string of at least one bit.

[0291] In some embodiments, a second intermediate key is generated based on the first intermediate key and the third identifier.

[0292] In some embodiments, a second intermediate key is generated based on the first intermediate key, the third identifier, and the second parameter.

[0293] In some embodiments, a second intermediate key is generated based on the first intermediate key, the third identifier, the fourth identifier, and the second parameter.

[0294] Optionally, the third identifier is used to identify the first terminal.

[0295] Optionally, the name of the third identifier is not limited, and may be, for example, a terminal identifier, a group member identifier (Group Member Identity), or a source layer 2 address. The third identifier may be any string, number, or index of at least one bit. The third identifier may be any address information, etc.

[0296] Optionally, the fourth identifier is used to identify the second intermediate key.

[0297] Optionally, the name of the fourth identifier is not limited, and it may be, for example, SLPGTK ID or SLPBTK ID.

[0298] Optionally, the second parameter includes at least one of the following: the length of the third identifier, the fourth identifier, the length of the fourth identifier, the first identifier, and the length of the first identifier. The length refers to the number of bits occupied.

[0299] In some embodiments, a first security key is generated based on the second intermediate key and a third parameter.

[0300] Optionally, the third parameter includes at least one of the following: a first indicator, a length of the first indicator, an algorithm identifier, and a length of the algorithm identifier, wherein the length refers to the number of bits occupied.

[0301] Optionally, the first indicator is used to indicate a key type. Exemplarily, the first indicator is used to indicate that the key type of the first security key is a confidentiality key; or the first indicator is used to indicate that the key type of the first security key is an integrity key. The first indicator may be a string of at least one bit.

[0302] Optionally, the algorithm identifier is used to indicate at least one of a confidentiality algorithm and an integrity algorithm. The algorithm identifier may be a string of at least one bit.

[0303] In some embodiments, the parameters used in the specific process of generating the first intermediate key, the second intermediate key, and the first security key may depend on a key derivation function (KDF).

[0304] Optionally, at least one of the first credential, the first identifier, the second identifier, and the first parameter is input into a KDF to generate a first intermediate key.

[0305] Optionally, at least one of the first intermediate key, the third identifier, the fourth identifier, and the second parameter is input into the KDF to generate a second intermediate key.

[0306] Optionally, the second intermediate key and the third parameter are input into a KDF to generate at least one of the first confidentiality key and the first integrity key.

[0307] In some embodiments, the first terminal generates a first MAC based on the first integrity key.

[0308] Optionally, the first MAC is used by the second terminal to verify the integrity of the SLPP message.

[0309] Optionally, the name of the first MAC is not limited, and it can be, for example, an integrity verification code.

[0310] Step S2103: The first terminal sends an SLPP message.

[0311] In some embodiments, the first terminal sends the SLPP message using the first security key for security protection. Optionally, the first terminal sends the SLPP message using the first integrity key for integrity protection and / or using the first confidentiality key for confidentiality protection.

[0312] In some embodiments, the second terminal receives the SLPP message sent by the first terminal.

[0313] In some embodiments, the first terminal multicasts an SLPP message secured by a first security key.

[0314] In some embodiments, the second terminal receives the SLPP message multicast by the first terminal.

[0315] In some embodiments, the first terminal broadcasts an SLPP message secured using a first security key.

[0316] In some embodiments, the second terminal receives the SLPP message broadcast by the first terminal.

[0317] In some embodiments, the name of the SLPP message is not limited, and it can be, for example, a broadcast SLPP message or a multicast SLPP message.

[0318] In some embodiments, the SLPP message includes at least one of the following: a first MAC, a first identifier, a second identifier, a third identifier, a fourth identifier, and a fifth identifier. Optionally, the fifth identifier is used to indicate the type of the SLPP message.

[0319] Step S2104: The second terminal obtains the second information.

[0320] Optionally, the second terminal obtains the second information according to the protocol, or the first terminal obtains the second information from the protocol.

[0321] Optionally, the second terminal obtains the second information in response to user input.

[0322] Optionally, the second terminal predefines or preconfigures the second information.

[0323] In some embodiments, the second information is used to determine a second security key.

[0324] In some embodiments, the name of the second information is not limited, and it can be, for example, security information or security material.

[0325] In some embodiments, the second information includes at least one of the following: a second credential, a confidentiality algorithm, and an integrity algorithm.

[0326] Optionally, the name of the second credential (long-term credentials) is not limited.

[0327] Optionally, the second credential may include at least one of the following: a long-term credential, a root key, a symmetric key, and a public / private key pair.

[0328] In some embodiments, the second credential is the same as the first credential, or the second credential is different from the first credential. Exemplarily, if the second credential is the same as the first credential, the second security key determined based on the second credential can successfully implement confidentiality verification and / or integrity verification of the SLPP message. Exemplarily, if the second credential is different from the first credential, the second security key determined based on the second credential cannot successfully implement confidentiality verification and / or integrity verification of the SLPP message.

[0329] In some embodiments, based on the number of bits of the second credential being less than the first value, the first terminal fills one or more first values ​​in the second credential to obtain a second credential with a bit number of the first value.

[0330] In some embodiments, the first terminal intercepts the second credential based on the number of bits of the second credential being greater than the first value to obtain a second credential with the first value of bits. Alternatively, bits in the second credential may be intercepted to obtain the second credential with the first value of bits. Exemplarily, low-order bits in the second credential may be intercepted to obtain the second credential with the first value of bits.

[0331] Exemplarily, the second credential has a length of n bits; if n is greater than 256, the second credential is truncated to retain the 256-bit key; or, if n is less than 256, the second credential is padded with all zeros to form a 256-bit key.

[0332] In some embodiments, the second terminal obtains the second information in the same manner as the first terminal obtains the first information.

[0333] Step S2105: The second terminal determines a second security key.

[0334] In some embodiments, the second security key is used to perform integrity verification and / or confidentiality verification on the SLPP message secured using the first security key.

[0335] In some embodiments, the second terminal determines a second security key based on the second information.

[0336] In some embodiments, the second terminal determines a second security key based on the second credential.

[0337] In some embodiments, the name of the second security key is not limited.

[0338] In some embodiments, the second security key includes at least one of: a second confidentiality key and a second integrity key. Optionally, the second confidentiality key is used to verify the confidentiality of the SLPP message. Optionally, the second integrity key is used to verify the integrity of the SLPP message.

[0339] In some embodiments, the second confidentiality key may be used to verify the confidentiality of the SLPP message; the second integrity key may be used to verify the integrity of the SLPP message.

[0340] In some embodiments, the name of the second confidentiality key is not limited, and it can be, for example, an encryption key, a groupcast encryption key (Groupcast Encryption Key), a broadcast encryption key (Broadcasted Encryption Key), an SLPP groupcast encryption key (SLPP Groupcast Encryption Key, SLPGEK), or an SLPP broadcast encryption key (SLPP Broadcasted Encryption Key, SLPBEK), etc.

[0341] In some embodiments, the name of the second integrity key is not limited, and it can be, for example, a groupcast integrity key (Groupcast Integrity Key), a broadcast integrity key (Broadcasted Integrity Key), an SLPP groupcast integrity key (SLPP Groupcast Integrity Key, SLPGIK), or an SLPP broadcast integrity key (SLPP Broadcasted Integrity Key, SLPBIK).

[0342] In some embodiments, determining the second security key based on the second credential includes: generating a third intermediate key based on the second credential; generating a fourth intermediate key based on the third intermediate key; and generating the second security key based on the fourth intermediate key.

[0343] In some embodiments, the second terminal determines the second security key in the same manner as the first terminal determines the second security key.

[0344] Optionally, the third intermediate key corresponds to the target object or the terminal group. Optionally, the third intermediate key corresponds to the ranging / SL positioning service.

[0345] Optionally, the name of the third intermediate key is not limited, and it can be, for example, an intermediate groupcast key (Intermediate Groupcast Key), an intermediate broadcast key (Intermediate Broadcasted Key), an SLPP groupcast key (SLPP Groupcast Key, SLPGK), or an SLPP broadcast key (SLPP Broadcasted Key, SLPBK), etc.

[0346] Optionally, the fourth intermediate key corresponds to the terminal.

[0347] Optionally, the name of the fourth intermediate key is not limited, and it may be, for example, a traffic key (Traffic Key), a multicast traffic key (Groupcast Traffic Key), a broadcast traffic key (Broadcasted Traffic Key), a SLPP multicast traffic key (SLPP Groupcast Traffic Key, SLPGTK), or a SLPP broadcast traffic key (SLPP Broadcasted Traffic Key, SLPBTK), etc.

[0348] In some embodiments, the third intermediate key is the same as the first intermediate key; or the third intermediate key is different from the first intermediate key.

[0349] In some embodiments, the fourth intermediate key is the same as the second intermediate key; or the fourth intermediate key is different from the second intermediate key.

[0350] In some embodiments, the first security key is the same as the second security key; or the first security key is different from the second security key.

[0351] In some embodiments, a third intermediate key is generated based on the second credential and the first identifier.

[0352] In some embodiments, a third intermediate key is generated based on the second credential, the first identifier, and the second identifier.

[0353] In some embodiments, a third intermediate key is generated based on the second credential, the first identifier, the second identifier, and the first parameter.

[0354] In some embodiments, the second terminal determines the third intermediate key in the same manner as the first terminal determines the first intermediate key.

[0355] In some embodiments, a fourth intermediate key is generated based on the third intermediate key and the third identifier.

[0356] In some embodiments, a fourth intermediate key is generated based on the third intermediate key, the third identifier, and the second parameter.

[0357] In some embodiments, a fourth intermediate key is generated based on the third intermediate key, the third identifier, the fourth identifier, and the second parameter.

[0358] In some embodiments, the second terminal determines the third intermediate key in the same manner as the first terminal determines the fourth intermediate key.

[0359] In some embodiments, a second security key is generated based on the fourth intermediate key and the third parameter.

[0360] In some embodiments, the parameters used in the specific process of generating the third intermediate key, the fourth intermediate key, and the second security key may depend on a key derivation function (KDF).

[0361] Optionally, at least one of the second credential, the first identifier, the second identifier, and the first parameter is input into the KDF to generate a third intermediate key.

[0362] Optionally, at least one of the third intermediate key, the third identifier, the fourth identifier, and the second parameter is input into the KDF to generate a fourth intermediate key.

[0363] Optionally, the fourth intermediate key and the third parameter are input into a KDF to generate at least one of a second confidentiality key and a second integrity key.

[0364] In some embodiments, the second terminal generates a second MAC based on the second integrity key.

[0365] Optionally, the second MAC is used by the second terminal to verify the integrity of the SLPP message.

[0366] Optionally, the name of the second MAC is not limited, and it can be, for example, an integrity verification code.

[0367] Step S2106: The second terminal processes the SLPP message.

[0368] Optionally, the SLPP message is securely protected using a first security key.

[0369] Optionally, processing the SLPP message includes at least one of the following: performing confidentiality verification on the SLPP message and performing integrity verification on the SLPP message. Optionally, the confidentiality verification may be decryption.

[0370] In some embodiments, the second terminal uses the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message.

[0371] In some embodiments, the second terminal determines that the integrity verification of the SLPP message passes based on the second MAC being the same as the first MAC. Optionally, the integrity verification of the SLPP message passes, ie, the integrity verification of the SLPP message succeeds.

[0372] In some embodiments, the second terminal determines that the integrity verification of the SLPP message fails based on the second MAC being the same as the first MAC. Optionally, the integrity verification of the SLPP message fails, that is, the integrity verification of the SLPP message fails.

[0373] In some embodiments, the names of information, etc. are not limited to the names described in the embodiments, and terms such as "information", "message", "signal", "signaling", "report", "configuration", "indication", "instruction", "command", "channel", "parameter", "domain", "field", "symbol", "symbol", "codeword", "codebook", "codeword", "codepoint", "bit", "data", "program", and "chip" can be used interchangeably.

[0374] In some embodiments, "obtain", "get", "get", "receive", "transmit", "bidirectional transmission", "send and / or receive" can be interchangeable, and can be interpreted as receiving from other entities, obtaining from protocols, obtaining from higher layers, obtaining by self-processing, autonomous implementation, etc.

[0375] In some embodiments, terms such as "send", "transmit", "report", "download", "transmit", "bidirectional transmission", "send and / or receive" can be used interchangeably.

[0376] In some embodiments, terms such as "certain", "preset", "preset", "setting", "indicated", "some", "any", and "first" can be interchangeable. "Specific A", "preset A", "preset A", "setting A", "indicated A", "some A", "any A", and "first A" can be interpreted as A pre-specified in a protocol, etc., or as A obtained through setting, configuration, or indication, etc., or as specific A, some A, any A, or first A, etc., but not limited to this.

[0377] In some embodiments, the determination or judgment can be performed by a value represented by 1 bit (0 or 1), or by a true or false value (Boolean value) represented by true or false, or by comparison of numerical values ​​(for example, comparison with a predetermined value), but is not limited thereto.

[0378] The information processing method involved in the embodiments of the present disclosure may include at least one of steps S2101 to S2107. For example, the combination of step S2102 and step S2103 can be implemented as an independent embodiment; the combination of step S2101, step S2102, and step S2103 can be implemented as an independent embodiment; the combination of step S2101, step S2102, step S2103, and step S2106 can be implemented as an independent embodiment; the combination of step S2103 and step S2106 can be implemented as an independent embodiment; the combination of step S2103, step S2105, and step S2106 can be implemented as an independent embodiment; the combination of step S2105 and step S2106 can be implemented as an independent embodiment; the combination of step S2104, step S2105, and step S2106 can be implemented as an independent embodiment; and the combination of steps S2101 to S2106 can be implemented as an independent embodiment.

[0379] In some embodiments, step S2101 and step S2104 can be executed simultaneously, or step S2104 can be executed before step S2101; step S2102 and step S2105 can be executed simultaneously, and step S2105 can be executed before step S2102; step S2103 and step S2105 can be executed simultaneously, or step S2105 can be executed before step S2103; step S2104 can be executed before step S2103; step S2104 can be executed before step S2101; step S2105 can be executed before step S2101; and so on.

[0380] In some embodiments, step S2101, step S2104, step S2105, and step S2106 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0381] In some embodiments, step S2101 , step S2102 , and step S2104 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0382] In some embodiments, step S2101 and step S2104 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0383] In some embodiments, reference may be made to other optional implementations described before or after the description corresponding to FIG. 2 .

[0384] FIG3A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG3A , the present disclosure embodiment relates to an information processing method, which is executed by a first terminal and includes:

[0385] Step S3101, obtain first information.

[0386] The optional implementation of step S3101 can refer to the optional implementation of step S2101 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0387] In some embodiments, the first terminal receives the first information sent by the network device, but is not limited thereto and may also receive the first information sent by other entities.

[0388] In some embodiments, the first terminal obtains first information specified by the protocol.

[0389] In some embodiments, the first terminal obtains the first information from an upper layer(s).

[0390] In some embodiments, the first terminal performs processing to obtain the first information.

[0391] Optionally, the first terminal pre-configures the first information.

[0392] In some embodiments, step S3101 is omitted, the first terminal autonomously implements the function indicated by the first information, or the above function is default or acquiescent.

[0393] Step S3102: Determine the first security key.

[0394] The optional implementation of step S3102 can refer to the optional implementation of step S2102 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0395] Optionally, the first security key is determined based on the first information.

[0396] Optionally, the first security key is determined based on the first credential.

[0397] Step S3103: Send SLPP message.

[0398] The optional implementation of step S3103 can refer to the optional implementation of step S2103 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0399] In some embodiments, the first terminal sends an SLPP message to the second terminal, but is not limited thereto and may also send an SLPP message to other entities.

[0400] The information processing method according to the embodiments of the present disclosure may include at least one of steps S3101 to S3103. For example, step S3102 may be implemented as an independent embodiment; step S3103 may be implemented as an independent embodiment; the combination of step S3102 and step S3103 may be implemented as an independent embodiment; and the combination of step S3101, step S3102, and step S3103 may be implemented as an independent embodiment.

[0401] In some embodiments, step S3101 and step S3103 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0402] In some embodiments, step S3101 and step S3102 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0403] In some embodiments, step S3101 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0404] FIG3B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG3B , the present disclosure embodiment relates to an information processing method, which is executed by a first terminal and includes:

[0405] Step S3201: Determine a first security key based on the first credential.

[0406] The optional implementation of step S3201 can be found in step S2102 in FIG. 2 , or the optional implementation of step S3102 in FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0407] Step S3202: Send an SLPP message that is protected by a first security key.

[0408] The optional implementation of step S3202 can be found in step S2103 in FIG. 2 , or the optional implementation of step S3103 in FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0409] In some embodiments, the first credential is a pre-configured long-term credential.

[0410] In some embodiments, sending a Sidelink Positioning Protocol (SLPP) message secured using a first security key comprises one of: multicasting the SLPP message secured using the first security key; and broadcasting the SLPP message secured using the first security key.

[0411] In some embodiments, determining the first security key based on the first credential includes: generating a first intermediate key based on the first credential; generating a second intermediate key based on the first intermediate key; and generating the first security key based on the second intermediate key.

[0412] In some embodiments, the first security key includes at least one of: a first confidentiality key for performing confidentiality protection on the SLPP message; and a first integrity key for performing integrity protection on the SLPP message.

[0413] In some embodiments, generating a first intermediate key based on the first credential includes one of:

[0414] Generate a first intermediate key based on the first credential and the first identifier, wherein the first identifier is used to identify a target group for broadcast or multicast;

[0415] Generate a first intermediate key based on the first credential, the first identifier, and the second identifier; wherein the second identifier is used to identify the first intermediate key;

[0416] A first intermediate key is generated based on the first credential, the first identifier, the second identifier, and the first parameter.

[0417] In some embodiments, the SLPP message is a broadcast message, and the first identifier is a broadcast target address; wherein the broadcast target address is used to identify the broadcast object of the broadcast; or, the SLPP message is a multicast message, and the first identifier is a group identifier, and the group identifier is used to indicate the group to which the first terminal belongs.

[0418] In some embodiments, the first parameter includes at least one of the following: a first character string for indicating the type of the SLPP message; a length of the first character string; a length of the first identifier; and a length of the second identifier.

[0419] In some embodiments, generating the second intermediate key based on the first intermediate key includes one of the following:

[0420] Generate a second intermediate key based on the first intermediate key and the third identifier, wherein the third identifier is used to identify the first terminal;

[0421] A second intermediate key is generated based on the first intermediate key, the third identifier, and the second parameter.

[0422] In some embodiments, the second parameter includes at least one of the following: a length of the third identifier; a fourth identifier for identifying the second intermediate key; a length of the fourth identifier; the first identifier; and a length of the first identifier.

[0423] In conjunction with some embodiments of the first aspect, in some embodiments, generating the first security key from the second intermediate key includes: generating the first security key based on the second intermediate key and a third parameter, wherein the third parameter includes at least one of the following:

[0424] A first indicator, used to indicate the key type;

[0425] First indicator length; Algorithm identifier, used to indicate confidentiality algorithm and / or integrity algorithm;

[0426] The length of the algorithm identifier.

[0427] In some embodiments, the SLPP message includes: a first MAC; wherein the first MAC is determined based on a first integrity key; and the first MAC is used by the second terminal to verify the integrity of the SLPP message.

[0428] In conjunction with some embodiments of the first aspect, in some embodiments, the SLPP message includes at least one of the following:

[0429] The first identifier is used to identify the target group of the broadcast or multicast;

[0430] A second identifier, used to identify the first intermediate key;

[0431] A third identifier, used to identify the first terminal;

[0432] a fourth identifier, used to identify the second intermediate key;

[0433] The fifth identifier is used to indicate the type of the SLPP message.

[0434] In some embodiments, the method includes pre-configuring at least one of a confidentiality algorithm and an integrity algorithm.

[0435] In some embodiments, if the number of bits in the first credential is less than the first value, one or more first values ​​are padded into the first credential to obtain a first credential with the first value of bits; or if the number of bits in the first credential is greater than the first value, the first credential is truncated to obtain a first credential with the first value of bits. Optionally, the first value is a predetermined value.

[0436] In some embodiments, the SLPP message is used by the second terminal to perform at least one of integrity verification and confidentiality verification using a second security key; the second security key is determined by the second terminal based on the second credential.

[0437] In some embodiments, the second credential is a pre-configured long-term credential.

[0438] In some embodiments, the second security key is determined based on a fourth intermediate key; the fourth intermediate key is determined based on a third intermediate key; and the third intermediate key is determined based on the second credential.

[0439] In some embodiments, the second security key includes at least one of the following:

[0440] A second confidentiality key is used to verify the confidentiality of the SLPP message;

[0441] Second integrity key; used to verify the integrity of SLPP messages.

[0442] In some embodiments, the third intermediate key is determined based on one of:

[0443] The second credential and the first identifier;

[0444] The second certificate, the first identifier, and the second identifier;

[0445] The second credential, the first identifier, the second identifier, and the first parameter;

[0446] Among them, the first identifier is used to identify the target group of broadcast or multicast; the second identifier is used to identify the first intermediate key; the first parameter includes at least one of the following: a first string, the length of the first string, the length of the first identifier, and the length of the second identifier; the first string is used to indicate the type of SLPP message.

[0447] In some embodiments, the fourth intermediate key is determined based on one of:

[0448] a third intermediate key and a third identifier;

[0449] The third intermediate key, the third identifier, and the second parameter are determined;

[0450] The third identifier is used to identify the first terminal; the second parameter includes at least one of the following: the length of the third identifier, the fourth identifier, the length of the fourth identifier, the first identifier, and the length of the first identifier; the fourth identifier is used to identify the second intermediate key.

[0451] In some embodiments, the second security key is determined based on a fourth intermediate key and a third parameter; wherein the third parameter includes at least one of the following: a first indicator, a first indicator length, an algorithm identifier, and a length of the algorithm identifier; the first indicator is used to indicate the key type; the algorithm identifier is used to indicate a confidentiality algorithm and / or an integrity algorithm.

[0452] The above embodiments may be implemented individually or in combination with each other. For optional implementations, please refer to the optional implementations of the steps in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0453] FIG4A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4A , the present disclosure embodiment relates to an information processing method, which is executed by a second terminal, and the method includes:

[0454] Step S4101, obtain SLPP message.

[0455] The optional implementation of step S4101 can refer to the optional implementation of step S2103 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0456] In some embodiments, the second terminal receives the SLPP message sent by the first terminal, but is not limited thereto and may also receive the SLPP message sent by other entities.

[0457] In some embodiments, the second terminal obtains an SLPP message specified by the protocol.

[0458] In some embodiments, the second terminal obtains the SLPP message from the upper layer(s).

[0459] In some embodiments, the second terminal performs processing to obtain the SLPP message.

[0460] Step S4102, obtaining second information.

[0461] The optional implementation of step S4102 can refer to the optional implementation of step S2104 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0462] In some embodiments, the second terminal receives the second information sent by the network device, but is not limited thereto and may also receive the second information sent by other entities.

[0463] In some embodiments, the second terminal obtains second information specified by the protocol.

[0464] In some embodiments, the second terminal obtains the second information from an upper layer(s).

[0465] In some embodiments, the second terminal performs processing to obtain the second information.

[0466] Optionally, the second terminal pre-configures the second information.

[0467] In some embodiments, step S3101 is omitted, the second terminal autonomously implements the function indicated by the second information, or the above function is default or acquiescent.

[0468] Step S4103: Determine the second security key.

[0469] The optional implementation of step S4103 can refer to the optional implementation of step S2105 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0470] Optionally, the second security key is determined based on the second information.

[0471] Optionally, the second security key is determined based on the second credential.

[0472] Step S4104: Process the SLPP message.

[0473] Optionally, processing the SLPP message includes at least one of: performing confidentiality verification on the SLPP message, and performing integrity verification on the SLPP message.

[0474] The optional implementation of step S4104 can refer to the optional implementation of step S2106 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0475] The information processing method involved in the embodiments of the present disclosure may include at least one of steps S4101 to S4104. For example, step S4103 may be implemented as an independent embodiment; step S4101 and step S4104 may be implemented as independent embodiments; the combination of step S4101, step S4103, and step S4101 may be implemented as an independent embodiment; and the combination of step S4101, step S4102, and step S4103 and step S4101 may be implemented as independent embodiments.

[0476] In some embodiments, step S4101 and step S4102 may be executed simultaneously, or step S4102 may precede step S4101; step S4101 and step S4103 may be executed simultaneously, or step S4103 may precede step S4101.

[0477] In some embodiments, step S4102 and step S4103 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0478] In some embodiments, step S4101, step S4102, and step S4104 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0479] In some embodiments, step S4101 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0480] FIG4B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4B , the embodiment of the present disclosure relates to an information processing method, which is executed by a first terminal and includes:

[0481] Step S4201, receiving SLPP message.

[0482] Optionally, the SLPP message is securely protected using a first security key;

[0483] The optional implementation of step S4201 can be found in step S2103 in FIG. 2 , or the optional implementation of step S4101 in FIG. 4A , and other related parts in the embodiments involved in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0484] Step S4202: Determine a second security key based on the second credential;

[0485] The optional implementation of step S4202 can be found in step S2105 in FIG. 2 or the optional implementation of step S4103 in FIG. 4A , as well as other related parts in the embodiments involved in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0486] Step S4203: Use the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message.

[0487] The optional implementation of step S4203 can be found in step S216 in FIG. 2 , or the optional implementation of step S4104 in FIG. 4A , and other related parts in the embodiments involved in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0488] In some embodiments, the second credential is a pre-configured long-term credential.

[0489] In some embodiments, receiving a Sidelink Positioning Protocol (SLPP) message includes one of: receiving an SLPP message multicast by the first terminal; and receiving an SLPP message broadcast by the first terminal.

[0490] In some embodiments, the SLPP message includes at least one of the following:

[0491] The first identifier is used to identify the target group of the broadcast or multicast;

[0492] A second identifier, used to identify the first intermediate key;

[0493] A third identifier, used to identify the first terminal;

[0494] a fourth identifier, used to identify the second intermediate key;

[0495] The fifth identifier is used to indicate the type of the SLPP message.

[0496] In some embodiments, the SLPP message is a broadcast message, and the first identifier is a broadcast target address; wherein the broadcast target address is used to identify the broadcast object of the broadcast; or, the SLPP message is a multicast message, and the first identifier is a group identifier, and the group identifier is used to indicate the group to which the first terminal belongs.

[0497] In some embodiments, determining the second security key based on the second credential includes: generating a third intermediate key based on the second credential; generating a fourth intermediate key based on the third intermediate key; and generating the second security key based on the fourth intermediate key.

[0498] In some embodiments, the second security key includes at least one of: a second confidentiality key used to perform confidentiality verification on the SLPP message; and a second integrity key used to perform integrity verification on the SLPP message.

[0499] In some embodiments, generating a third intermediate key based on the second credential includes one of:

[0500] generating a third intermediate key based on the second credential and the first identifier;

[0501] generating a third intermediate key based on the second credential, the first identifier, and the second identifier;

[0502] A third intermediate key is generated based on the second credential, the first identifier, the second identifier, and the first parameter.

[0503] In some embodiments, the first parameter includes at least one of the following: a first character string for indicating the type of the SLPP message; a length of the first character string; a length of the first identifier; and a length of the second identifier.

[0504] In some embodiments, generating a fourth intermediate key based on the third intermediate key includes one of the following:

[0505] generating a fourth intermediate key based on the third intermediate key and the third identifier;

[0506] A fourth intermediate key is generated based on the third intermediate key, the third identifier, and the second parameter.

[0507] In some embodiments, the second parameter includes at least one of: a length of the third identifier; a fourth identifier for indicating the second intermediate key; a length of the fourth identifier; the first identifier; and a length of the first identifier.

[0508] In some embodiments, generating a second security key based on the fourth intermediate key includes:

[0509] Generate a second security key based on the fourth intermediate key and the third parameter, wherein the third parameter includes at least one of the following:

[0510] A first indicator, used to indicate the key type;

[0511] First indicator length;

[0512] Algorithm identifier, used to indicate the confidentiality algorithm and / or integrity algorithm;

[0513] The length of the algorithm identifier.

[0514] In some embodiments, the SLPP message includes a first message authentication code MAC; wherein the first MAC is determined by the first terminal based on the first integrity key; at least one of integrity verification and confidentiality verification is performed on the SLPP message using the second security key, including: based on the second MAC being the same as the first MAC, determining that the integrity verification of the SLPP message is passed; wherein the second MAC is determined by the second terminal based on the second integrity key.

[0515] In some embodiments, the first security key is determined based on the second intermediate key; the second intermediate key is determined based on the first intermediate key; and the first intermediate key is determined based on the first credential.

[0516] In some embodiments, the first credential is a pre-configured long-term credential.

[0517] In some embodiments, the first security key includes at least one of the following:

[0518] A first confidentiality key, used to protect the confidentiality of SLPP messages;

[0519] The first integrity key is used to perform integrity protection on the SLPP message.

[0520] In some embodiments, the first intermediate key is determined based on one of:

[0521] First credential and first identification;

[0522] a first credential, a first identifier, and a second identifier;

[0523] The first credential, the first identifier, the second identifier, and the first parameter;

[0524] The first parameter includes at least one of the following: a first character string, a length of the first character string, a length of the first identifier, and a length of the second identifier; the first character string is used to indicate a type of the SLPP message.

[0525] In some embodiments, the second intermediate key is determined based on one of:

[0526] a first intermediate key and a third identifier;

[0527] a first intermediate key, a third identifier, and a second parameter;

[0528] The second parameter includes at least one of the following: the length of the third identifier, the fourth identifier, the length of the fourth identifier, the first identifier, and the length of the first identifier; the fourth identifier is used to identify the second intermediate key.

[0529] In some embodiments, the first security key is determined based on the second intermediate key and a third parameter; wherein the third parameter includes at least one of the following: a first indicator, a first indicator length, an algorithm identifier, and a length of the algorithm identifier; the first indicator is used to indicate the key type; the algorithm identifier is used to indicate a confidentiality algorithm and / or an integrity algorithm.

[0530] The above embodiments may be implemented individually or in combination with each other. For optional implementations, please refer to the optional implementations of the steps in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0531] FIG5 is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG5 , the embodiment of the present disclosure relates to an information processing method for a communication system, the method comprising:

[0532] Step S5101: The first terminal determines a first security key based on a first credential.

[0533] Optional implementations of step S5101 can be found in step S2102 of FIG. 2 , optional implementations of step S3102 of FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0534] Step S5102: The first terminal sends an SLPP message to the second terminal using a first security key for security protection.

[0535] The optional implementation of step S5102 can be found in step S2103 of FIG. 2 , the optional implementation of step S3103 of FIG. 3A , step S4101 of FIG. 4A , and other related parts in the embodiments involved in FIG. 2 , FIG. 3A , and FIG. 4A , which will not be repeated here.

[0536] Step S5103: The second terminal determines a second security key based on the second credential.

[0537] Optional implementations of step S5103 may refer to step S2105 in FIG. 2 , optional implementations of step S4103 in FIG. 4A , and other related parts in the embodiments involved in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0538] Step S5104: The second terminal uses the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message.

[0539] Optional implementations of step S5104 may refer to step S2106 in FIG. 2 , optional implementations of step S4104 in FIG. 4A , and other related parts in the embodiments involved in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0540] In some embodiments, the above method may include the method described in the above embodiments of the information processing system 100 side, the first terminal side, the second terminal side, etc., which will not be repeated here.

[0541] The present disclosure provides an information processing method, including:

[0542] Step S6101: Derivation of a multicast key or a broadcast key for an SLPP message.

[0543] Optionally, the multicast key or the broadcast key may be the first security key and / or the second security key in the previous implementation.

[0544] In some embodiments, as a security basis for vehicle-to-everything (V2X) or proximity communication service (ProSe) direct communication over PC5 unicast links, long-term credentials are provided to the V2X / ProSe UE; they can be symmetric keys or public / private key pairs provided by specific applications, that is, long-term credentials are associated with different V2X / ProSe applications.

[0545] In some embodiments, for V2X / ProSe communications, it can be assumed that long-term credentials are also provided to the UE by a specific ranging / SL positioning application (or service). An intermediate groupcast key (SLPGK) is derived based on the long-term credentials configured on the UE. The SLPGK is per ranging / SL positioning application (or service) and per group.

[0546] Exemplarily, the SLPGK is derived from the long-term credential based on a key derivation function (KDF). The parameters used to form the KDF input S are as follows:

[0547] The value of FC is to be determined;

[0548] P0 = "SLPGC" or "SLPBG";

[0549] L0 = length of "SLPGC" or "SLPBG" (for example, the length of the binary sequence 0x00 0x05 corresponding to SLPGC); P1 = SLPGK identifier;

[0550] L1=the length of the SLPGK identifier (for example, the length of the binary sequence 0x00 0x02 corresponding to the SLPGK identifier);

[0551] P2 = broadcast address identifier or group identifier (e.g., layer 2 destination address of a broadcast message or multicast message);

[0552] L2=the length of the broadcast address identifier or the group identifier (for example, the broadcast address identifier or the group identifier corresponds to the length of the binary sequence 0x00 0x03).

[0553] The input key of KDF is a long-term credential for a specific ranging / SL positioning application (or service).

[0554] For a long-term credential with a length of n bits, if n is greater than 256, the long-term credential will be truncated to retain the 256 least significant bits.

[0555] For a long-term credential of length n bits, where n is less than 256, the most significant bits of the long-term credential are padded with zeros to form a 256-bit key.

[0556] In some embodiments, the UE generates an SLPGTK (SLPP multicast service key) based on the key SLPGK. The SLPGTK is unique for each UE in the group. The calculation of the SLPGTK can reuse the method for calculating the SLPGK described above, but with the following changes:

[0557] The value of FC is to be determined;

[0558] P0 = broadcast UE identity or group member identity (e.g., layer 2 source address of the broadcast / multicast UE);

[0559] L0 = length of the broadcast UE identifier or group identifier member (for example, the length of the binary sequence 0x00 0x03 corresponding to the group identifier member); P1 = SLPGTK identifier;

[0560] L1=the length of the SLPGTK identifier (for example, the length of the binary sequence 0x00 0x02 corresponding to the SLPGTK identifier);

[0561] P2 = broadcast address identifier or group identifier (e.g., layer 2 destination address of a broadcast message or multicast message);

[0562] L2=the length of the broadcast address identifier or the group identifier (for example, the broadcast address identifier or the group identifier corresponds to the length of the binary sequence 0x00 0x03).

[0563] The input key of KDF is 256-bit SLPGK.

[0564] In some embodiments, the UE derives the SLPP multicast integrity key (SLPGIK) from the SLPGTK to protect the integrity of the SLPP messages and derives the SLPP multicast encryption key (SLPGEK) to encrypt the SLPP messages, with the following changes:

[0565] The value of FC is to be determined;

[0566] P0 = 0x00 if SLPGEK is being derived; 0x01 if SLPGIK is being derived;

[0567] L0 = length of P0 (e.g., the length of the binary sequence 0x00 0x01 corresponding to P0) P1 = confidentiality / integrity algorithm ID;

[0568] L1 = length of the confidentiality / integrity algorithm ID (for example, the length of the binary sequence 0x00 0x02 corresponding to the confidentiality / integrity algorithm ID).

[0569] The input key to the KDF should be 256-bit SLPGTK.

[0570] Optionally, the integrity algorithm and confidentiality algorithm used to protect the SLPP message are pre-configured on the UE.

[0571] In some embodiments, a key hierarchy of different key layers is shown in FIG6 , including long-term credentials, SLPGK, SLPGTK, SLPGEK, and SLPGIK. Optionally, the SKPGK can be generated based on the group identifier and the SLPGK identifier. Optionally, the SLPGTK can be generated based on the group member identifier, the SLPGTK identifier, and the group identifier.

[0572] SLPGK: The SL Positioning Group Key (SLPGK) is a 256-bit root key dedicated to a specific ranging / SL positioning application (for broadcast) or ranging / SL positioning group (for multicast). This SLPGK has an expiration date. Each SLPGK is identified by an SLPGK identifier. This allows multiple SLPGKs to be held simultaneously for a ranging / SL positioning application (for broadcast) or ranging / SL positioning group (for multicast).

[0573] SLPGTK: The SL Positioning Group Traffic Key (SLPGTK) is a 256-bit intermediate key derived by the UE from the SLPGK. Each UE's SLPGTK is different, ensuring that each UE generates a unique SLPTK to protect the messages it sends. Each SLPTK has an SLPTK identifier to identify it.

[0574] SLPGEK and SLPGIK: SL Positioning Group Encryption Key (SLPGEK) and SL Positioning Group Integrity Key (SLPGIK) are derived by the UE from the SLPGTK and are used to protect the confidentiality and integrity of SLPP broadcast or multicast messages, respectively.

[0575] Step S6102: SLPP message protection and verification.

[0576] In some embodiments, after constructing the SLPP message, the broadcast UE or the multicast UE uses the derived SLPGEK to encrypt sensitive information in the SLPP message, and uses the derived SLPGIK to calculate a MAC value of the SLPP message, which is sent together with the SLPP message.

[0577] In some embodiments, upon receiving a multicast or broadcast SLPP message, the recipient UE derives the SLPGK from the long-term certificate based on the received information contained in the SLPP message (e.g., the message type indicating "SLPP broadcast or multicast message," the SLPGK identifier or ranging / SL positioning service ID (or code), and the group identifier). The recipient UE further derives the SLPGTK from the SLPGK based on the received information in the SLPP message (e.g., the L2 source address of the broadcast UE or multicast UE, the SLPGTK identifier, and the group ID). The recipient UE derives the SLPGIK and SLPGEK from the SLPGTK based on the integrity algorithm and confidentiality algorithm configured on the UE.

[0578] In some embodiments, the recipient UE can verify the MAC value of the SLPP broadcast or multicast message and decrypt the encrypted portion of the SLPP broadcast or multicast message using the derived SLPGIK and SLPGEK.

[0579] Optionally, the broadcast UE or the multicast UE is the first terminal in the previous embodiment; the receiver UE may be the second terminal in the previous embodiment.

[0580] The information processing method involved in the embodiments of the present disclosure may include at least one of steps S6101 to S6103. For example, step S6101 may be implemented as an independent embodiment; step S6102 may be implemented as an independent embodiment; or a combination of steps S6101 and S6102 may be implemented as an independent embodiment.

[0581] In some embodiments, step S6101 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0582] In some embodiments, step S6102 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0583] The embodiments of the present disclosure further provide an apparatus for implementing any of the above methods. For example, an apparatus is provided, comprising units or modules for implementing each step performed by a terminal in any of the above methods. For another example, another apparatus is provided, comprising units or modules for implementing each step performed by a network device (e.g., an access network device, a core network function node, a core network device, etc.) in any of the above methods.

[0584] It should be understood that the division of the various units in the above device is merely a division of logical functions. In actual implementation, they may be fully or partially integrated into a physical entity, or they may be physically separated. In addition, the units in the device may be implemented in the form of a processor calling software: for example, the device includes a processor, the processor is connected to a memory, the memory stores computer instructions, and the processor calls the computer instructions stored in the memory to implement any of the above methods or implement the functions of the various units of the above device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory within the device or a memory outside the device. Alternatively, the units in the device can be implemented in the form of hardware circuits, and the functions of some or all of the units can be realized by designing the hardware circuits. The above-mentioned hardware circuits can be understood as one or more processors. For example, in one implementation, the above-mentioned hardware circuit is an application-specific integrated circuit (ASIC), and the functions of some or all of the above units are realized by designing the logical relationship of the components in the circuit. For another example, in another implementation, the above-mentioned hardware circuit can be implemented by a programmable logic device (PLD). Taking a field programmable gate array (FPGA) as an example, it can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by a configuration file, thereby realizing the functions of some or all of the above units. All units of the above devices can be implemented in the form of software called by the processor, or in the form of hardware circuits, or in part by software called by the processor, and the rest by hardware circuits.

[0585] In the embodiment of the present disclosure, the processor is a circuit with signal processing capability. In one implementation, the processor can be a circuit with instruction reading and execution capability, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP); in another implementation, the processor can implement certain functions through the logical relationship of the hardware circuit, and the logical relationship of the above hardware circuit is fixed or reconfigurable, such as a hardware circuit implemented by a processor as an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document and implementing the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0586] Figure 7A is a schematic diagram of the structure of a first terminal provided in an embodiment of the present disclosure. As shown in Figure 7A, the first terminal 7100 includes: at least one of a first processing module 7101 and a first transceiver module 7102. In some embodiments, the first processing module 7101 is configured to determine a first security key based on a first credential; and the first transceiver module 7102 is configured to send an SLPP message secured using the first security key. Optionally, the first processing module 7101 is configured to perform at least one of the processing steps (such as, but not limited to, steps S2101 and / or S2102) performed by the first terminal in any of the above methods, which are not further described here. Optionally, the first transceiver module 7102 is configured to perform at least one of the receiving and / or sending steps (such as, but not limited to, steps S2103) performed by the first terminal in any of the above methods, which are not further described here.

[0587] Figure 7B is a schematic diagram of the structure of a second terminal provided by an embodiment of the present disclosure. As shown in Figure 7B, the second terminal 7200 includes: at least one of a second transceiver module 7201 and a second processing module 7202. In some embodiments, the second transceiver module 7201 is configured to receive SLPP messages; and the second processing module 7202 is configured to determine a second security key and perform at least one of integrity verification and confidentiality verification on the SLPP message using the second security key. Optionally, the second transceiver module 7201 is configured to perform at least one of the sending and / or receiving steps (such as, but not limited to, step S2103) performed by the second terminal in any of the above methods, which are not further described here. Optionally, the second processing module 7202 is configured to perform at least one of the processing steps (such as, but not limited to, steps S2104 and / or S2105 and / or S2106) performed by the second terminal in any of the above methods, which are not further described here.

[0588] Figure 8A is a schematic diagram of the structure of a communication device 8100 provided in an embodiment of the present disclosure. Communication device 8100 can be a network device (e.g., an access network device or a core network device), a first terminal or a second terminal, etc., or a chip, chip system, or processor that supports a network device in implementing any of the above methods, or a chip, chip system, or processor that supports a terminal in implementing any of the above methods. Communication device 8100 can be used to implement the methods described in the above method embodiments. For details, please refer to the description of the above method embodiments.

[0589] As shown in Figure 8A, the communication device 8100 includes one or more processors 8101. The processor 8101 can be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor can be used to process communication protocols and communication data, and the central processing unit can be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute programs, and process program data. The processor 8101 is used to call instructions to enable the communication device 8100 to perform any of the above methods.

[0590] In some embodiments, the communication device 8100 further includes one or more memories 8102 for storing instructions. Optionally, all or part of the memories 8102 may be located outside the communication device 8100.

[0591] In some embodiments, the communication device 8100 further includes one or more transceivers 8103. When the communication device 8100 includes one or more transceivers 8103, the transceiver 8103 performs at least one of the communication steps such as sending and / or receiving in the above method (for example, at least one of steps S2101 to S2106, but not limited thereto), and the processor 8101 performs at least one of the other steps (for example, at least one of steps S2101 to S2106, but not limited thereto).

[0592] In some embodiments, a transceiver may include a receiver and a transmitter, which may be separate or integrated. Optionally, the terms transceiver, transceiver unit, transceiver, and transceiver circuit may be used interchangeably; the terms transmitter, transmitting unit, transmitter, and transmitting circuit may be used interchangeably; and the terms receiver, receiving unit, receiver, and receiving circuit may be used interchangeably.

[0593] Optionally, the communication device 8100 further includes one or more interface circuits 8104, which are connected to the memory 8102. The interface circuits 8104 can be used to receive signals from the memory 8102 or other devices, and can be used to send signals to the memory 8102 or other devices. For example, the interface circuits 8104 can read instructions stored in the memory 8102 and send the instructions to the processor 8101.

[0594] The communication device 8100 described in the above embodiment may be a network device or a first device, but the scope of the communication device 8100 described in the present disclosure is not limited thereto, and the structure of the communication device 8100 may not be limited by FIG. 8A. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: (1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data or computer programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, an in-vehicle device, a network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

[0595] FIG8B is a schematic diagram of the structure of a chip 8200 provided in an embodiment of the present disclosure. If the communication device 8100 can be a chip or a chip system, please refer to the schematic diagram of the structure of the chip 8200 shown in FIG8B , but the present disclosure is not limited thereto.

[0596] The chip 8200 includes one or more processors 8201 , and the chip 8200 is configured to execute any of the above methods.

[0597] In some embodiments, the chip 8200 further includes one or more interface circuits 8202, which are connected to the memory 8203. The interface circuits 8202 can be used to receive signals from the memory 8203 or other devices, and can be used to send signals to the memory 8203 or other devices. For example, the interface circuits 8202 can read instructions stored in the memory 8203 and send the instructions to the processor 8201.

[0598] In some embodiments, the interface circuit 8202 performs at least one of the communication steps such as sending and / or receiving in the above method, and the processor 8201 performs at least one of the other steps.

[0599] In some embodiments, terms such as interface circuit, interface, transceiver pin, and transceiver may be used interchangeably.

[0600] In some embodiments, the chip 8200 further includes one or more memories 8203 for storing instructions. Alternatively, all or part of the memories 8203 may be outside the chip 8200.

[0601] The present disclosure also proposes a storage medium having instructions stored thereon, which, when executed on the communication device 8100, causes the communication device 8100 to execute any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited thereto, and may also be a storage medium readable by other devices. Optionally, the storage medium may be a non-transitory storage medium, but is not limited thereto, and may also be a temporary storage medium.

[0602] The present disclosure also provides a program product, which, when executed by the communication device 8100, enables the communication device 8100 to perform any of the above methods. Optionally, the program product is a computer program product.

[0603] [Corrected 03.08.2023 according to Rule 26] The present disclosure also proposes a computer program which, when run on a computer, causes the computer to perform any of the above methods.

Claims

1. An information processing method, characterized in that: The method comprises: The first terminal determines a first security key based on the first credential; Send a Sidelink Positioning Protocol SLPP message that is securely protected using the first security key.

2. The method according to claim 1, characterized in that The first credential is a pre-configured long-term credential.

3. The method according to claim 1 or 2, characterized in that: The sending of a sidelink positioning protocol SLPP message protected by the first security key comprises one of the following: Multicasting the SLPP message secured by the first security key; The SLPP message secured by using the first security key is broadcasted.

4. The method according to any one of claims 1 to 3, characterized in that: The determining of the first security key based on the first credential includes: Based on the first credential, generating a first intermediate key; Based on the first intermediate key, generating a second intermediate key; Based on the second intermediate key, the first security key is generated.

5. The method according to claim 4, characterized in that The first security key includes at least one of the following: A first confidentiality key, used to perform confidentiality protection on the SLPP message; The first integrity key is used to perform integrity protection on the SLPP message.

6. The method according to claim 4 or 5, characterized in that: The step of generating a first intermediate key based on the first credential comprises one of the following: Generate the first intermediate key based on the first credential and the first identifier, wherein the first identifier is used to identify a target group for broadcast or multicast; Generate the first intermediate key based on the first credential, the first identifier and the second identifier; wherein the second identifier is used to identify the first intermediate key; Generate the first intermediate key based on the first credential, the first identifier, the second identifier and the first parameter; The first parameter includes at least one of the following: a first character string, a length of the first character string, a length of the first identifier, and a length of the second identifier; the first character string is used to indicate the type of the SLPP message.

7. The method according to claim 6, characterized in that The SLPP message is a broadcast message, and the first identifier is a broadcast target address; wherein the broadcast target address is used to identify a broadcast object of the broadcast; or, The SLPP message is a multicast message, and the first identifier is a group identifier, and the group identifier is used to indicate the group to which the first terminal belongs.

8. The method according to any one of claims 4 to 7, characterized in that: The step of generating a second intermediate key based on the first intermediate key comprises one of the following: Generate the second intermediate key based on the first intermediate key and the third identifier; wherein the third identifier is used to identify the first terminal; generating the second intermediate key based on the first intermediate key, the third identifier and the second parameter; The second parameter includes at least one of the following: the length of the third identifier, the fourth identifier, the length of the fourth identifier, the first identifier, and the length of the first identifier; the fourth identifier is used to identify the second intermediate key.

9. The method according to any one of claims 4 to 8, characterized in that: The generating the first security key based on the second intermediate key includes: The first security key is generated based on the second intermediate key and a third parameter, wherein the third parameter includes at least one of the following: A first indicator, used to indicate a key type; the first indicator length; Algorithm identifier, used to indicate the confidentiality algorithm and / or integrity algorithm; The length of the algorithm identifier.

10. The method according to any one of claims 5 to 9, characterized in that: The SLPP message includes at least one of the following: A first message authentication code MAC; wherein the first MAC is determined based on a first integrity key; the first MAC is used by the second terminal to verify the integrity of the SLPP message; The first identifier is used to identify the target group of the broadcast or multicast; A second identifier, used to identify the first intermediate key; A third identifier, used to identify the first terminal; A fourth identifier, used to identify the second intermediate key; The fifth identifier is used to identify the type of the SLPP message.

11. The method according to any one of claims 1 to 10, characterized in that: The method comprises: At least one of the confidentiality algorithm and the integrity algorithm is preconfigured.

12. The method according to any one of claims 1 to 11, characterized in that: The number of bits of the first credential is less than the first value, and one or more first numerical values ​​are filled in the first credential to obtain a first credential with a number of bits equal to the first value; or, The number of bits of the first credential is greater than the first value, and the first credential is truncated to obtain a first credential with a bit number of the first value.

13. An information processing method, characterized in that: The method comprises: The second terminal receives a Sidelink Positioning Protocol SLPP message, wherein the SLPP message is securely protected using a first security key; wherein the first security key is determined by the first terminal based on the first credential.

14. The method according to claim 13, wherein: The method further comprises: Based on the second credential, determining a second security key; At least one of integrity verification and confidentiality verification is performed on the SLPP message using the second security key.

15. The method according to claim 14, characterized in that The second credential is a pre-configured long-term credential.

16. The method according to claim 14 or 15, characterized in that The receiving side link positioning protocol SLPP message includes one of the following: Receiving the SLPP message multicasted by the first terminal; Receive the SLPP message broadcast by the first terminal.

17. The method according to any one of claims 14 to 16, characterized in that: The SLPP message includes at least one of the following: The first identifier is used to identify the target group of the broadcast or multicast; A second identifier, used to identify the first intermediate key; A third identifier, used to identify the first terminal; A fourth identifier, used to identify the second intermediate key; The fifth identifier is used to identify the type of the SLPP message.

18. The method according to claim 17, characterized in that The SLPP message is a broadcast message, and the first identifier is a broadcast target address; wherein the broadcast target address is used to identify a broadcast object of the broadcast; or, The SLPP message is a multicast message, and the first identifier is a group identifier, and the group identifier is used to indicate the group to which the first terminal belongs.

19. The method according to claim 17 or 18, characterized in that The determining of the second security key based on the second credential includes: Based on the second credential, generating a third intermediate key; Based on the third intermediate key, generating a fourth intermediate key; Based on the fourth intermediate key, the second security key is generated.

20. The method according to claim 19, wherein: The second security key includes at least one of the following: A second confidentiality key, used to verify the confidentiality of the SLPP message; A second integrity key; used to perform integrity verification on the SLPP message.

21. The method according to claim 19 or 20, characterized in that The step of generating a third intermediate key based on the second credential comprises one of the following: generating the third intermediate key based on the second credential and the first identifier; generating the third intermediate key based on the second credential, the first identifier and the second identifier; Generate the third intermediate key based on the second credential, the first identifier, the second identifier and the first parameter; The first parameter includes at least one of the following: a first character string, a length of the first character string, a length of the first identifier, and a length of the second identifier; the first character string is used to indicate a type of the SLPP message.

22. The method according to any one of claims 19 to 21, characterized in that The step of generating a fourth intermediate key based on the third intermediate key comprises one of the following: generating the fourth intermediate key based on the third intermediate key and the third identifier; generating the fourth intermediate key based on the third intermediate key, the third identifier, and the second parameter; The second parameter includes at least one of the following: the length of the third identifier, the fourth identifier, the length of the fourth identifier, the first identifier, and the length of the first identifier.

23. The method according to any one of claims 19 to 22, characterized in that The generating the second security key based on the fourth intermediate key includes: The second security key is generated based on the fourth intermediate key and a third parameter, wherein the third parameter includes at least one of the following: A first indicator, used to indicate a key type; the first indicator length; Algorithm identifier, used to indicate the confidentiality algorithm and / or integrity algorithm; The length of the algorithm identifier.

24. The method according to claim 18, characterized in that The SLPP message includes a first message authentication code MAC; wherein the first MAC is determined by the first terminal based on the first integrity key; The use of the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message includes: determining that the integrity verification of the SLPP message passes based on the second MAC being the same as the first MAC; wherein the second MAC is determined by the second terminal based on the second integrity key.

25. An information processing method, characterized in that: The method comprises: The first terminal determines a first security key based on the first credential; The first terminal sends a security protection sidelink positioning protocol SLPP message using the first security key to the second terminal; The second terminal determines a second security key based on the second credential; The second terminal uses the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message.

26. A first terminal, characterized in that: include: A first processing module configured to determine a first security key based on a first credential; The first transceiver module is configured to send a Side Link Positioning Protocol SLPP message that is security protected using the first security key.

27. A second terminal, characterized in that: include: A first transceiver module is configured to receive a sidelink positioning protocol SLPP message; wherein the SLPP message is secured using a first security key; A second processing module configured to determine a second security key based on the second credential; The second processing module is configured to use the second security key to perform at least one of integrity verification and confidentiality verification on the SLPP message.

28. A first terminal, characterized in that: include: one or more processors; Wherein, the first terminal is used to execute the information processing method according to any one of claims 1 to 12.

29. A second terminal, characterized in that: include: one or more processors; Wherein, the second terminal is used to execute the information processing method according to any one of claims 13 to 24.

30. A communication system, characterized in that: include: A first terminal and a second terminal; wherein the first terminal is configured to implement the information processing method according to any one of claims 1 to 12, and the second terminal is configured to implement the information processing method according to any one of claims 13 to 24.

31. A storage medium storing instructions, characterized in that: When the instruction is executed on the communication device, the communication device executes the information processing method according to any one of claims 1 to 12, or claims 13 to 24, or claim 25.

Images