Communication method and communication apparatus

Abstract

Provided is a communication method, comprising: when an access network device determines to use a security algorithm to carry out user plane confidentiality and integrity security protection, the access network device configures a security algorithm of a user plane and a security key suitable for the security algorithm. In addition, the access network device notifies, by means of first indication information, a terminal device to enable user plane integrity security protection and confidentiality security protection. By means of configuring the security algorithm of the user plane and the security key suitable for the security algorithm, the user plane can perform security protection on the basis of a security algorithm capable of achieving both confidentiality security protection and integrity security protection, thus avoiding security risks which exist when performing security protection of the user plane on the basis of combining a confidentiality security protection algorithm and an integrity security protection algorithm.

Description

Communication method and communication device

[0001] This application claims priority to the Chinese patent application filed with the China Patent Office on August 4, 2023, with application number 202310980095.7 and application name “Communication Method and Communication Device”, the entire contents of which are incorporated by reference into this application. Technical Field

[0002] The present application relates to the field of communications, and more particularly, to a communication method and a communication device. Background Art

[0003] When the access network device starts the access stratum (AS) security mode control procedure, the network side sends an AS security mode command (SMC) message to the terminal side. The terminal device responds to the AS SMC message and replies to the network side with an AS security mode complete (SMP) message.

[0004] Specifically, the terminal device and the access network device can negotiate a security protection algorithm based on the AS SMC process to protect messages transmitted between the terminal device and the network side. In addition, user plane security protection can be activated through the radio resource control (RRC) connection reconfiguration process. Currently, the confidentiality security protection algorithm and the integrity security protection algorithm can be negotiated in the AS SMC process. However, when confidentiality security protection and integrity security protection are required, the combination of the confidentiality security protection algorithm and the integrity security protection algorithm has security risks.

[0005] Summary of the Invention

[0006] The present application provides a communication method to improve the security of user plane message transmission.

[0007] In a first aspect, a communication method is provided, which may be executed by an access network device or a component (eg, a chip or circuit) of the access network device, and is not limited in this application.

[0008] The communication method includes: in the case of determining to use a security algorithm to perform user plane confidentiality and integrity security protection, configuring the security algorithm of the user plane and a security key applicable to the security algorithm; sending a first indication message to the terminal device, the first indication message is used to indicate the activation of user plane confidentiality and integrity security protection, wherein the security algorithm includes a part for confidentiality protection and a part for integrity protection, the security algorithm is used to perform user plane confidentiality and integrity security protection, and performing user plane confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the user plane message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user plane message. In the present application, performing user plane security protection can be understood as: performing security protection on user plane messages, for example, performing confidentiality and integrity security protection on messages transmitted on the user plane.

[0009] Based on the above scheme, when the access network device determines to use a security algorithm that can achieve both confidentiality security protection and integrity security protection to protect the user plane, the access network device configures the user plane security algorithm and a security key applicable to the security algorithm. The access network device can perform integrity security protection and confidentiality security protection of user plane messages based on the same security key, thereby avoiding the security risks of the combination of confidentiality security protection algorithm and integrity security protection algorithm, and improving the security of user plane message transmission.

[0010] For example, when user-plane messages require both integrity and confidentiality security protection, there is no need to perform security protection based on the integrity and confidentiality security algorithms, thereby avoiding the potential security risks inherent in the combination of the confidentiality and integrity security algorithms. The use of the confidentiality and integrity security algorithms to perform security protection on user-plane messages specifically includes: first performing integrity security protection on the user-plane messages based on the integrity security algorithm, and then using the integrity security protection result as an input parameter for the confidentiality security algorithm to perform confidentiality security protection on the user-plane messages. However, the confidentiality and integrity security algorithms used are independent, and when the integrity security protection result is used as an input parameter for confidentiality security protection, there may be algorithm splicing, which can lead to security risks.

[0011] In combination with the first aspect, in certain implementations of the first aspect, the method further includes: determining the use of the security algorithm for user plane confidentiality and integrity security protection based on at least one of the following information: capability information of the terminal device, user plane message security protection policy, algorithm negotiation results, or algorithm selection policy.

[0012] Based on the above scheme, the access network device can determine whether to use a security algorithm to perform security protection on the user plane based on different information. For example, the access network device considers the capability information of the terminal device and chooses to use a security algorithm to perform security protection on the user plane, thereby avoiding the selection of an inappropriate security algorithm, which may result in security protection failure during subsequent user plane message transmission. For another example, the access network device considers the security protection policy of the user plane and chooses to use a security algorithm to perform security protection on the user plane, and may select an algorithm that meets the security protection policy for user plane message transmission. For another example, the access network device considers the algorithm negotiation result and chooses to use a security algorithm to perform security protection on the user plane based on the algorithm negotiation result. The security algorithm can be selected directly based on the algorithm negotiation result, thereby avoiding re-execution of algorithm negotiation and reducing the complexity of the scheme.

[0013] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending second indication information to the terminal device, where the second indication information is used to indicate user plane confidentiality and integrity security protection based on the security algorithm.

[0014] Based on the above scheme, the access network device can notify the terminal device through the second indication information that the subsequently transmitted user-plane messages need to be securely protected based on the security algorithm, so that the terminal device can clarify the security protection method of the user-plane messages based on the second indication information. The terminal device can determine the security protection method of the user-plane messages without performing complex judgments, thereby reducing the implementation complexity of the terminal device.

[0015] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending a data radio bearer DRB identifier, a session identifier, or a distribution unit DU identifier corresponding to the second indication information to the terminal device.

[0016] Based on the above scheme, the access network device can send the DRB identifier, session identifier, or distribution unit DU identifier corresponding to the second indication information to the terminal device, indicating that the granularity of subsequent user plane security protection can be to configure a security protection algorithm and security key for a certain DRB, or to configure a security protection algorithm and security key for a certain session, and to configure a security protection algorithm and security key for a certain DU, etc., that is, the user plane security protection can be of different granularities, thereby improving the flexibility of the scheme.

[0017] In combination with the first aspect, in certain implementations of the first aspect, sending the second indication information to the terminal device includes: sending the second indication information to the terminal device when determining to use a security algorithm for user plane confidentiality and integrity security protection.

[0018] In combination with the first aspect, in certain implementations of the first aspect, before sending the first indication information to the terminal device, the method also includes: selecting the security algorithm for confidentiality and integrity security protection of the user plane; and sending the identifier of the security algorithm to the terminal device in the access layer security mode command AS SMC process.

[0019] In combination with the first aspect, in certain implementations of the first aspect, the sending of first indication information to the terminal device includes: sending a radio resource control RRC connection reconfiguration message to the terminal device, the RRC connection reconfiguration message including the first indication information.

[0020] In combination with the first aspect, in some implementations of the first aspect, the RRC connection reconfiguration message further includes an identifier of the security algorithm.

[0021] Based on the above solution, the access network device may include a security algorithm identifier in the RRC connection reconfiguration message sent to the terminal device. Alternatively, the access network device may have negotiated with the terminal device on the security algorithm to be used for user plane message security protection before sending the first indication information. This technical solution does not limit the timing of algorithm negotiation between the access network device and the terminal device, thereby increasing the flexibility of the solution.

[0022] In combination with the first aspect, in some implementations of the first aspect, the first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

[0023] In combination with the first aspect, in certain implementations of the first aspect, configuring the security algorithm of the user plane and the security key applicable to the security algorithm includes: configuring the security algorithm of the user plane and the security key applicable to the security algorithm in a packet data convergence layer protocol (Packet Data Convergence Protocol, PDCP) entity.

[0024] In combination with the first aspect, in certain implementations of the first aspect, an uplink user plane message is received from the terminal device, the integrity of the uplink user plane message is verified using the security key as the input key of the integrity protection part in the security algorithm, and the uplink user plane message is decrypted using the security key as the input key of the confidentiality protection part in the security algorithm.

[0025] Based on the above scheme, the access network equipment can perform confidentiality security protection and integrity security protection (such as integrity verification and decryption) of uplink user plane messages based on the same security key, thereby avoiding the security risks of the combination of confidentiality security protection algorithm and integrity security protection algorithm.

[0026] In a second aspect, a communication method is provided. The method may be executed by a terminal device or by a component of the terminal device (such as a chip or circuit), which is not limited in this application.

[0027] The communication method includes: receiving first indication information, where the first indication information is used to indicate activation of user plane confidentiality and integrity security protection; determining, based on the first indication information, to use a security algorithm for user plane confidentiality and integrity security protection, configuring the security algorithm for the user plane and a security key applicable to the security algorithm, wherein the security algorithm includes a part for confidentiality protection and a part for integrity protection, the security algorithm is used to perform user plane confidentiality and integrity security protection, and performing user plane confidentiality and integrity security protection includes: using the security key as an input key of the integrity protection part in the security algorithm to perform integrity protection on the user plane message, and using the security key as an input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user plane message.

[0028] In combination with the second aspect, in some implementations of the second aspect, the method further includes: receiving second indication information, where the second indication information is used to indicate that user plane confidentiality and integrity security protection is performed based on the security algorithm.

[0029] In combination with the second aspect, in some implementations of the second aspect, before receiving the first indication information, the method further includes: receiving an identifier of the security algorithm.

[0030] In combination with the second aspect, in certain implementations of the second aspect, the receiving of the first indication information includes: receiving a radio resource control RRC connection reconfiguration message in an access layer security mode command AS SMC process, the RRC connection reconfiguration message including the first indication information.

[0031] In combination with the second aspect, in certain implementations of the second aspect, the RRC connection reconfiguration message further includes an identifier of the security algorithm.

[0032] In combination with the second aspect, in certain implementations of the second aspect, the first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

[0033] In combination with the second aspect, in certain implementations of the second aspect, configuring the security algorithm of the user plane and the security key applicable to the security algorithm includes: configuring the security algorithm of the user plane and the security key applicable to the security algorithm in a packet data convergence layer protocol PDCP entity.

[0034] In combination with the second aspect, in certain implementations of the second aspect, the method further includes: receiving a downlink user plane message from a network end device, using the security key as the input key of the integrity protection part in the security algorithm to verify the integrity of the downlink user plane message, and using the security key as the input key of the confidentiality protection part in the security algorithm to decrypt the downlink user plane message.

[0035] The technical effects of the method shown in the above second aspect and its possible design can refer to the technical effects in the first aspect and its possible design.

[0036] In a third aspect, a communication device is provided for implementing the method described in the first aspect. The device includes a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0037] In a fourth aspect, a communication device is provided for implementing the method described in the second aspect. The device includes a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0038] In a fifth aspect, a communication method is provided. The method may be executed by an access network device or by a component of the access network device (eg, a chip or circuit), which is not limited in this application.

[0039] The communication method includes:

[0040] Determine an integrity security protection algorithm based on the selected security algorithm; when determining to activate user plane integrity security protection according to the security protection policy, configure the integrity security protection algorithm of the user plane and a security key applicable to the integrity security protection algorithm; send third indication information to the terminal device, the third indication information is used to indicate the activation of user plane integrity security protection; or,

[0041] Determine a confidentiality security protection algorithm based on the selected security algorithm; when determining to activate user plane confidentiality security protection according to the security protection policy, configure the confidentiality security protection algorithm of the user plane and a security key applicable to the confidentiality security protection algorithm; send third indication information to the terminal device, the third indication information is used to indicate the activation of user plane confidentiality security protection,

[0042] The security algorithm includes a part for confidentiality protection and a part for integrity protection. The security algorithm is used to perform confidentiality and integrity security protection. The confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm for integrity protection, and using the security key as the input key of the confidentiality protection part in the security algorithm for confidentiality protection.

[0043] Based on the above solution, the access network device determines whether to activate user plane integrity security protection or confidentiality security protection based on the security protection policy. If the negotiation result of the algorithm negotiation process is a security algorithm, the access network device can still determine the required integrity security protection algorithm or confidentiality security protection algorithm based on the security algorithm. This ensures that user plane security protection can still be achieved even if the algorithm negotiation result and the security protection policy do not match.

[0044] In combination with the fifth aspect, in certain implementations of the fifth aspect, the sending of third indication information to the terminal device includes: sending a radio resource control RRC connection reconfiguration message to the terminal device, the RRC connection reconfiguration message including the third indication information.

[0045] In combination with the fifth aspect, in certain implementations of the fifth aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm; or, before sending the third indication information to the terminal device, the method also includes: selecting the security algorithm for confidentiality and integrity security protection of the user plane; and sending the identifier of the security algorithm to the terminal device in the access layer security mode command AS SMC process.

[0046] Based on the above solution, the access network device can include the identifier of the security algorithm in the RRC connection reconfiguration message sent to the terminal device. Alternatively, the access network device can have negotiated with the terminal device through the AS SMC process regarding the security algorithm for user plane security protection before sending the third indication information. This technical solution does not limit the timing of algorithm negotiation between the access network device and the terminal device, thereby increasing the flexibility of the solution.

[0047] In combination with the fifth aspect, in certain implementations of the fifth aspect, the third indication information is status information of activating integrity security protection or activating confidentiality security protection.

[0048] In a sixth aspect, a communication method is provided. The method may be executed by a terminal device or by a component of the terminal device (such as a chip or circuit), which is not limited in this application.

[0049] The communication method includes: determining an integrity security protection algorithm based on a selected security algorithm; receiving third indication information, the third indication information being used to indicate activation of user plane integrity security protection; and configuring the integrity security protection algorithm of the user plane and a security key applicable to the integrity security protection algorithm when determining to use the integrity security protection algorithm for user plane integrity protection according to the third indication information;

[0050] or,

[0051] Determining a confidentiality security protection algorithm based on the selected security algorithm; receiving third indication information, the third indication information being used to instruct activation of user plane confidentiality security protection; when it is determined according to the third indication information to use the confidentiality security protection algorithm for user plane confidentiality security protection, determining the confidentiality security protection algorithm based on the security algorithm, and configuring the confidentiality security protection algorithm for the user plane and a security key applicable to the confidentiality security protection algorithm;

[0052] The security algorithm includes a part for confidentiality protection and a part for integrity protection. The security algorithm is used to perform user plane confidentiality and integrity security protection. The confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm for integrity protection, and using the security key as the input key of the confidentiality protection part in the security algorithm for confidentiality protection.

[0053] In combination with the sixth aspect, in certain implementations of the sixth aspect, the receiving of the third indication information includes: receiving a radio resource control RRC connection reconfiguration message, the RRC connection reconfiguration message including the third indication information.

[0054] In combination with the sixth aspect, in certain implementations of the sixth aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm; or, before sending the third indication information to the terminal device, the method also includes: receiving the identifier of the security algorithm from the access network device in the access layer security mode command AS SMC process.

[0055] In combination with the sixth aspect, in certain implementations of the sixth aspect, the RRC connection reconfiguration message also includes an identifier of the security algorithm.

[0056] In combination with the sixth aspect, in certain implementations of the sixth aspect, the third indication information is status information of activating integrity security protection or activating confidentiality security protection.

[0057] The technical effects of the method shown in the above sixth aspect and its possible design can refer to the technical effects in the fifth aspect and its possible design.

[0058] In a seventh aspect, a communication device is provided for implementing the method of the fifth aspect. The device includes a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0059] In an eighth aspect, a communication device is provided for implementing the method described in the sixth aspect. The device includes a transceiver unit and a processing unit, wherein the transceiver unit is used to send and receive information, and the processing unit is used to perform internal processing actions.

[0060] In the ninth aspect, a communication system is provided, comprising an access network device and a terminal device, wherein the access network device is used to execute the method shown in the first aspect above, and the terminal device executes the method shown in the second aspect above; or, the access network device is used to execute the method shown in the fifth aspect above, and the terminal device executes the method shown in the sixth aspect above.

[0061] In a tenth aspect, a communication device is provided, which includes: a memory for storing programs; a processor for executing the programs stored in the memory, and when the programs stored in the memory are executed, the processor is used to execute the methods provided in the above aspects.

[0062] In the eleventh aspect, the present application provides a processor for executing the methods provided in the above aspects. In the process of executing these methods, the process of sending the above information and obtaining / receiving the above information in the above methods can be understood as the process of the processor outputting the above information and the process of the processor receiving the input above information. When outputting the above information, the processor outputs the above information to the transceiver so that the transceiver can transmit it. After being output by the processor, the above information may also need to undergo other processing before reaching the transceiver. Similarly, when the processor receives the input above information, the transceiver obtains / receives the above information and inputs it into the processor. Furthermore, after the transceiver receives the above information, the above information may need to undergo other processing before being input into the processor.

[0063] Based on the above principles, for example, the receiving request message mentioned in the above method can be understood as the processor receiving input information.

[0064] For the operations such as transmission, sending and acquisition / reception involved in the processor, unless otherwise specified, or if they do not conflict with their actual functions or internal logic in the relevant descriptions, they can be more generally understood as processor output, reception, input and other operations, rather than the transmission, sending and receiving operations directly performed by the RF circuit and antenna.

[0065] During implementation, the processor may be a processor specifically configured to execute these methods, or may be a processor that executes computer instructions in a memory to execute these methods, such as a general-purpose processor. The memory may be a non-transitory memory, such as a read-only memory (ROM), which may be integrated with the processor on the same chip or disposed on separate chips. The embodiments of the present application do not limit the type of memory or the configuration of the memory and the processor.

[0066] In a twelfth aspect, a computer-readable storage medium is provided, which stores a program code for execution by a device, and the program code includes a program for executing the methods provided in the above aspects.

[0067] In a thirteenth aspect, a computer program product comprising instructions is provided, which, when run on a computer, enables the computer to execute the methods provided in the above aspects.

[0068] In a fourteenth aspect, a chip is provided, which includes a processor and a communication interface. The processor reads instructions stored in a memory through the communication interface to execute the methods provided in the above aspects.

[0069] Optionally, as an implementation method, the chip may further include a memory storing instructions, and the processor is used to execute the instructions stored in the memory. When the instructions are executed, the processor is used to execute the methods provided in the above aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0070] FIG1 is a schematic diagram of a network architecture 100 .

[0071] Figure 2 (a) and (b) are schematic diagrams of how the authentication encryption algorithm is used.

[0072] FIG3 is a schematic flow chart of an AS SMC process.

[0073] FIG4 is a schematic flow chart of a secure activation process of a UP message.

[0074] FIG5 is a schematic flow chart of a communication method provided in this application.

[0075] FIG6 is a schematic flow chart of another communication method provided in the present application.

[0076] FIG7 is a schematic flowchart of another communication method provided in the present application.

[0077] FIG8 is a schematic block diagram of a communication device 10 provided in an embodiment of the present application.

[0078] FIG9 is a schematic diagram of another communication device 20 provided in an embodiment of the present application.

[0079] FIG10 is a schematic diagram of a chip system 30 provided in an embodiment of the present application. DETAILED DESCRIPTION

[0080] The technical solution in this application will be described below with reference to the accompanying drawings.

[0081] The technical solutions provided in this application can be applied to various communication systems, such as new radio (NR) systems, long term evolution (LTE) systems, LTE frequency division duplex (FDD) systems, LTE time division duplex (TDD) systems, etc. The technical solutions provided in this application can also be applied to device-to-device (D2D) communication, vehicle-to-everything (V2X) communication, machine-to-machine (M2M) communication, machine type communication (MTC), and Internet of Things (IoT) communication systems or other communication systems.

[0082] In the communication system, the part operated by the operator can be called a public land mobile network (PLMN), or an operator network, etc. PLMN is a network established and operated by the government or an operator approved by it for the purpose of providing land mobile communication services to the public. It is mainly a public network in which mobile network operators (MNOs) provide mobile broadband access services to users. The PLMN described in the embodiment of the present application may specifically be a network that meets the requirements of the 3GPP standard, referred to as a 3GPP network. 3GPP networks generally include but are not limited to 5G networks, fourth-generation mobile communications (4th-generation, 4G) networks, and other future communication systems, such as (6th-generation, 6G) networks, etc. This technical solution is also applicable to SNPN (Stand-alone Non-Public Network).

[0083] For the convenience of description, the embodiments of the present application will be described using PLMN or 5G network as an example.

[0084] Figure 1 is a schematic diagram of a network architecture 100, using the 5G network architecture based on a service-oriented architecture for non-roaming scenarios as defined in the 3GPP standardization process as an example. As shown, the network architecture consists of three components: the terminal device, the DN, and the operator's PLMN. The following briefly describes the functions of the network elements in each component.

[0085] The terminal device part may include a terminal device 110, which may also be referred to as user equipment (UE). The terminal device 110 in this application is a device with wireless transceiver functions, which can communicate with one or more core network (CN) devices via an access network device (or also referred to as an access device) in a radio access network (RAN) 140. The terminal device 110 may also be referred to as an access terminal, terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, user agent or user device, etc. The terminal device 110 may be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; it may also be deployed on water (such as ships, etc.); it may also be deployed in the air (such as airplanes, balloons and satellites, etc.). The terminal device 110 may be a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a smart phone, a mobile phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), etc. Alternatively, the terminal device 110 may be a handheld device with wireless communication capabilities, a computing device, or other device connected to a wireless modem, an in-vehicle device, a wearable device, an unmanned aerial vehicle (UAV), or a terminal in the Internet of Things (IoT), the Internet of Vehicles (IoV), any terminal in a 5G network or future networks, a relay user device, or a terminal in a future evolving 6G network, etc. The relay user device may be, for example, a 5G residential gateway (RG). For example, the terminal device 110 can be a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, etc. The terminal device here refers to a 3GPP terminal. The embodiments of the present application do not limit the type or category of the terminal device. For ease of explanation, this application will be described later using UE as an example to refer to the terminal device.

[0086] The operator network PLMN part may include but is not limited to the (radio) access network (R)AN) 120 and the core network (CN) part.

[0087] (R)AN 120 can be considered a subnetwork of the operator network, serving as the implementation system between service nodes in the operator network and terminal device 110. To access the operator network, terminal device 110 first passes through (R)AN 120, which then connects to service nodes in the operator network. The access network device (RAN device) in the embodiment of the present application is a device that provides wireless communication functions for the terminal device 110, and can also be called a network device. The RAN device includes but is not limited to: the next generation node base station (gNB) in the 5G system, the evolved node B (eNB) in the long term evolution (LTE), the radio network controller (RNC), the node B (NB), the base station controller (BSC), the base transceiver station (BTS), the home base station (for example, home evolved node B, or home node B, HNB), the base band unit (BBU), the transmission point (TRP), the transmitting point (TP), the small base station device (pico), the mobile switching center, or the network device in the future network. In systems using different wireless access technologies, the name of the device with the access network device function may be different. For the convenience of description, in all embodiments of the present application, the above-mentioned device that provides wireless communication functions for the terminal device 110 is collectively referred to as the access network device or simply referred to as RAN or AN. It should be understood that this document does not limit the specific type of access network equipment.

[0088] The CN part may include but is not limited to the following NFs: user plane function (UPF) 130, network exposure function (NEF) 131, network function repository function (NRF) 132, policy control function (PCF) 133, unified data management function (UDM) 134, unified data repository function (UDR) 135, network data analytics function (NWDAF) 136, authentication server function (AUSF) 137, access and mobility management function (AMF) 138, and session management function (SMF) 139.

[0089] Data network DN 140, also known as a packet data network (PDN), is typically located outside of a carrier network, such as a third-party network. Of course, in some implementations, the DN may also be deployed by the carrier, meaning that the DN is part of a PLMN. This application does not restrict whether the DN is a PLMN. A carrier network PLMN can access multiple data network DNs 140, and various services can be deployed on the data network DN 140, providing data and / or voice services to the terminal device 110. For example, data network DN 140 may be the private network of a smart factory, where sensors installed in the workshop may be terminal devices 110. A control server for the sensors is deployed within data network DN 140, and the control server can provide services to the sensors. The sensors can communicate with the control server, obtain instructions from the control server, and transmit collected sensor data to the control server according to the instructions. For another example, data network DN 140 may be a company's internal office network, where the company's employees' mobile phones or computers may be terminal devices 110, allowing the employees' mobile phones or computers to access information and data resources on the company's internal office network. Terminal device 110 can establish a connection with the operator network through an interface provided by the operator network (e.g., N1) and use data and / or voice services provided by the operator network. Terminal device 110 can also access data network DN 140 through the operator network and use operator services deployed on data network DN 140 and / or services provided by third parties.

[0090] The following is a brief description of the NF functions included in CN.

[0091] 1. UPF 130 is a gateway provided by the operator, serving as the gateway for communication between the operator network and the data network DN 140. UPF 130 includes user-plane-related functions such as packet routing and transmission, packet inspection, service usage reporting, Quality of Service (QoS) processing, lawful interception, uplink packet inspection, and downlink packet storage.

[0092] 2. NEF 131 is a control plane function provided by the operator. It mainly enables third parties to use the services provided by the network, supports the network to open its capabilities, event and data analysis, provides PLMN security configuration information from external applications, and converts interactive information inside and outside the PLMN. It provides an API interface open to the operator network and provides interaction between external servers and internal operator networks.

[0093] 3. NRF 132 is a control plane function provided by the operator. It is used to maintain real-time information about network functions and services in the network. For example, it supports network service discovery, maintains the services supported by the NF profile of the NF instance, supports service discovery of the service communication proxy (SCP), maintains the SCP profile of the SCP instance, sends notifications about newly registered, deregistered, and updated NFs and SCPs, and maintains the health status of NF and SCP operations.

[0094] 4. PCF 133 is the control plane function provided by the operator. It supports a unified policy framework to govern network behavior, provide policy rules to other control functions, and provide contract information related to policy decisions.

[0095] 5. The UDM 134 is a control plane function provided by the operator and is responsible for storing information such as the subscriber permanent identifier (SUPI), the generic public subscription identifier (GPSI), and credentials of subscribers in the operator network. The SUPI is first protected for confidentiality during transmission, and the SUPI after confidentiality protection is called a hidden subscriber subscription identifier (SUCI). The information stored in the UDM 134 can be used for authentication and authorization of the terminal device 110 to access the operator network. The subscribers of the above-mentioned operator network can specifically be users who use services provided by the operator network, such as users who use China Telecom's subscriber identity module (SIM) cards or users who use China Mobile's SIM cards. The credential of the above-mentioned subscriber can be a small file storing long-term keys stored in the SIM card or information related to the confidentiality of the SIM card, which is used for authentication and / or authorization. It should be noted that permanent identifiers, credentials, security contexts, authentication data (cookies), and tokens are equivalent to verification / authentication and authorization-related information. In the embodiments of this application, no distinction or restriction is made for the sake of convenience of description.

[0096] 6. UDR 135 is a control plane function provided by the operator. It provides the UDM with the functions of storing and retrieving subscription data, the PCF with the functions of storing and retrieving policy data, and the user's NF group ID information.

[0097] 7. NWDAF 136 is a control plane function provided by the operator. Its primary function is to collect data from the NF, external application function (AF), and operations, administration, and maintenance (OAM) systems, and to provide NWDAF service registration, data exposure, and data analysis to the NF and AF. In this application, NWDAF is primarily responsible for security-related data analysis. Therefore, NWDAF can also be understood as a network element with security analysis capabilities. The term "NWDAF" is merely an example, and other network element names may be used in the future. This application does not limit this.

[0098] 8. AUSF 137 is a control plane function provided by the operator and is typically used for level 1 authentication, that is, authentication between the terminal device 110 (subscriber) and the operator's network. After receiving an authentication request initiated by the subscriber, AUSF 137 can authenticate and / or authorize the subscriber using the authentication information and / or authorization information stored in UDM 134, or generate authentication and / or authorization information for the subscriber through UDM 134. AUSF 137 can also provide the subscriber with feedback on the authentication and / or authorization information.

[0099] 9. AMF 138 is a control plane network function provided by the operator network, responsible for access control and mobility management of the terminal device 110 accessing the operator network, such as mobility status management, allocation of user temporary identity, authentication and authorization of users, etc.

[0100] The AMF 138 is used to establish a non-access stratum (NAS) connection with the UE and has the same 5G NAS security context as the UE. The 5G NAS security context includes the KAMF, the key identification information of the NAS layer key, the UE security capabilities, and the uplink NAS COUNT value and the downlink NAS COUNT value. The NAS layer keys include the NAS confidentiality security protection key and the NAS integrity security protection key, which are used for confidentiality security protection and integrity security protection of NAS messages, respectively.

[0101] 10. SMF 139 is a control plane network function provided by the operator network and is responsible for managing the PDU session of the terminal device 110. A PDU session is a channel for transmitting PDUs. The terminal device needs to transmit PDUs to and from the data network DN 140 through a PDU session. The SMF 139 is responsible for establishing, maintaining, and deleting PDU sessions. SMF 139 includes session management (such as session establishment, modification, and release, including tunnel maintenance between the user plane function UPF 130 and (R)AN 120), selection and control of the UPF 130, service and session continuity (SSC) mode selection, roaming, and other session-related functions.

[0102] 11. AF 141 is a control plane network function provided by the operator network. It is used to provide application layer information and can interact with the policy framework through network open function elements or directly interact with the policy framework to make policy decision requests. It can be located inside or outside the operator network.

[0103] It is understood that the above network elements or functions can be physical entities in hardware devices, software instances running on dedicated hardware, or virtualized functions instantiated on a shared platform (e.g., a cloud platform). Simply put, an NF can be implemented by hardware or software.

[0104] In Figure 1, Nnef, Nnrf, Npcf, Nudm, Nudr, Nnwdaf, Nausf, Namf, Nsmf, N1, N2, N3, N4, and N6 are interface serial numbers. For example, the meaning of the above interface serial numbers can be found in the meaning defined in the 3GPP standard protocol, and this application does not limit the meaning of the above interface serial numbers. It should be noted that the interface name between the various network functions in the figure is only an example. In a specific implementation, the interface name of the system architecture may also be other names, which is not limited by this application. In addition, the name of the message (or signaling) transmitted between the above network elements is only an example and does not constitute any limitation on the function of the message itself.

[0105] For ease of explanation, in the embodiments of this application, network functions (such as NEF 131…SMF 139) are collectively referred to as NFs. That is, the NFs described later in the embodiments of this application can be replaced with any network function. Furthermore, FIG1 schematically illustrates only some network functions, and the NFs described later are not limited to those shown in FIG1.

[0106] It should be understood that the above-mentioned network architecture applied to the embodiment of the present application is only a network architecture described from the perspective of service-oriented architecture. The network architecture applicable to the embodiment of the present application is not limited to this. Any network architecture that can realize the functions of the above-mentioned network elements is applicable to the embodiment of the present application.

[0107] It should also be understood that the AMF, SMF, UPF, NEF, AUSF, NRF, PCF, and UDM shown in the figure can be understood as network elements used to implement different functions in the core network, for example, they can be combined into network slices as needed. These core network network elements can be independent devices or integrated into the same device to implement different functions. This application does not limit the specific form of the above network elements.

[0108] It should also be understood that the above naming is defined only to facilitate the distinction between different functions and should not constitute any limitation to this application. This application does not exclude the possibility of adopting other naming in 5G networks and other future networks. For example, in a 6G network, some or all of the above network elements may continue to use the terminology used in 5G, or may adopt other names.

[0109] To facilitate understanding of the embodiments of the present application, some basic concepts involved in the present application are briefly explained.

[0110] 1. Activate security protection based on the confidentiality security protection algorithm: This refers to configuring the confidentiality security protection key and confidentiality security protection algorithm.

[0111] Furthermore, after activating security protection based on the confidentiality security protection algorithm, the sending end can use the confidentiality security protection key and the confidentiality security protection algorithm to perform confidentiality protection (e.g., encrypt) on the sent message; the receiving end can use the confidentiality security protection key and the confidentiality security protection algorithm to decrypt the received message (e.g., decrypt).

[0112] 2. Activate security protection based on the integrity security protection algorithm: This refers to configuring the integrity security protection key and integrity security protection algorithm.

[0113] Furthermore, after activating security protection based on the integrity security protection algorithm, the sender can use the integrity security protection key and the integrity security protection algorithm to perform integrity security protection on the sent message, that is, calculate the MAC used for integrity security protection; the receiver can use the integrity security protection key and the integrity security protection algorithm to perform integrity security verification on the received message, that is, determine whether the received MAC is correct.

[0114] 3. A security algorithm that can achieve both confidentiality security protection and integrity security protection: The security algorithm involved in this application that can achieve both confidentiality security protection and integrity security protection can be called an authenticated encryption algorithm. An authenticated encryption algorithm is an authenticated encryption with associated data (AEAD) algorithm. The AEAD algorithm (also known as the AEAD mode) can achieve both confidentiality security protection and integrity security protection of data. In other words, the AEAD algorithm can achieve both confidentiality security protection and integrity security protection of data at the same time. It can also be understood that the AEAD algorithm can achieve both confidentiality security protection and integrity security protection of data with a single key (AEAD key) as the input key.

[0115] For ease of understanding, the usage of the authentication encryption algorithm is briefly introduced in conjunction with (a) and (b) in Figure 2.

[0116] As can be seen from (a) and (b) in Figure 2, the authenticated encryption algorithm includes a part for confidentiality protection and a part for integrity protection.

[0117] As shown in Figure 2 (a), the sender can perform confidentiality protection (e.g., encryption) on the parameters to be protected based on the security key and the confidentiality-protected portion to obtain a ciphertext. Furthermore, the sender can perform an integrity protection operation on the parameters to be protected based on the security key, the integrity-protected portion, and the ciphertext to obtain a MAC. The parameters to be protected are transmitted to the receiver in plaintext.

[0118] For example, the sender uses the parameters to be protected for confidentiality and the security key as inputs for the confidentiality protection portion, performs confidentiality protection, and then outputs ciphertext. Furthermore, the sender uses the ciphertext, the security key, and the parameters to be protected for integrity as inputs for the integrity protection portion, and performs integrity protection to obtain a MAC. It is understood that the ciphertext obtained after the confidentiality protection is performed on the parameters to be protected for confidentiality is also integrity-protected. That is, the parameters to be protected for confidentiality are both protected for confidentiality and integrity.

[0119] As shown in Figure 2 (b), the receiving end can perform an integrity protection operation based on the security key, the parameter to be integrity verified, the received ciphertext, and the integrity-protected portion to obtain a MAC. It should be understood that, in the absence of a security attack, the parameter to be integrity verified is also the parameter to be integrity-protected. Furthermore, the receiving end can de-confidentialize (e.g., decrypt) the ciphertext based on the security key, the ciphertext, and the confidentiality-protected portion to obtain a de-confidentialized parameter (e.g., the plaintext obtained by decrypting the ciphertext). It should be understood that, in the absence of a security attack, the de-confidentialized parameter is also the parameter to be confidentiality-protected.

[0120] For example, the receiving end uses the received parameters to be integrity verified, the security key, and the ciphertext as the input for the integrity protection part, performs an integrity protection operation to obtain a MAC, and compares the obtained MAC with the received MAC to ensure consistency, thereby implementing integrity security protection (e.g., integrity verification). The receiving end can also use the ciphertext and security key as the input for the confidentiality protection part, perform a confidentiality deprotection operation (e.g., decryption), and then output the deconfidentiality protected parameters.

[0121] From the above, we can see that for the sender, confidentiality protection is encryption; for the receiver, integrity protection is integrity verification, and confidentiality protection is decryption.

[0122] Exemplarily, if the authenticated encryption algorithm shown in (a) and (b) in FIG2 is an AEAD algorithm.

[0123] For the sender, the input to the AEAD algorithm includes plaintext (e.g., the parameters to be protected for confidentiality shown in (a) of Figure 2), additional authenticated data (AAD) (e.g., the parameters to be protected for integrity shown in (a) of Figure 2), and an AEAD key (e.g., the security key shown in (a) of Figure 2). The plaintext portion is encrypted with the AEAD key to produce ciphertext (e.g., the ciphertext shown in (a) of Figure 2), which serves as the input for the integrity protection portion. The AAD portion is protected for integrity but not for confidentiality. The output of the AEAD algorithm includes the ciphertext portion and the MAC portion. The AEAD key can be used for both confidentiality and integrity protection and can therefore be referred to as a single key.

[0124] For the receiving end, the input of the AEAD algorithm includes ciphertext, AAD, and AEAD key. Among them, the ciphertext, AAD, and AEAD key will be used as the input of the integrity protection part, and the ciphertext and AEAD key will be used as the input of the encryption protection part.

[0125] Exemplarily, AAD can be carried in a message as plain text and transmitted between the sender and the receiver, or it can be a known parameter shared by the sender and the receiver.

[0126] In this application, the following relationships exist between the authentication encryption algorithm, the integrity security protection algorithm, and the confidentiality security protection algorithm:

[0127] 1) The authentication encryption algorithm can be used to determine the corresponding integrity security protection algorithm.

[0128] As an optional method, the authenticated encryption algorithm is used to determine the corresponding integrity security protection algorithm, including:

[0129] An authenticated encryption algorithm with the confidentiality-protected portion of the algorithm cleared can be considered an integrity-protected algorithm. This can be understood as a null scheme. When the confidentiality-protected portion is cleared, the input parameters to the confidentiality-protected portion and the ciphertext output of the confidentiality-protected portion are identical, meaning the confidentiality-protected portion is not protected.

[0130] Optionally, the integrity security protection algorithm determined in this way can also be called the integrity security protection algorithm of the authenticated encryption algorithm.

[0131] Alternatively, an authenticated encryption algorithm is used to determine the corresponding integrity security algorithm, including:

[0132] According to the preset rules, the integrity security protection algorithm corresponding to the authentication encryption algorithm is determined. The preset rules can be the correspondence between the authentication encryption algorithm and the integrity security protection algorithm. For example, the correspondence between the integrity security protection algorithm and the authentication encryption algorithm can be: the SNOW-AEAD algorithm corresponds to the SNOW integrity security protection algorithm, the ZUC-AEAD algorithm corresponds to the ZUC integrity security protection algorithm, the AES-AEAD algorithm corresponds to the AES integrity security protection algorithm, and so on. Then the SNOW-AEAD algorithm and the correspondence can determine the SNOW integrity security protection algorithm, the ZUC-AEAD algorithm and the correspondence can determine the ZUC integrity security protection algorithm, and the others are similar and will not be repeated. In addition, the correspondence between the integrity security protection algorithm and the authentication encryption algorithm can also be called the mapping relationship between the integrity security protection algorithm and the authentication encryption algorithm, which is not limited in this application.

[0133] For example, the method of omitting the confidentiality protection portion of the authenticated encryption algorithm to obtain the integrity security protection algorithm is called mapping, which is not limited in this application. Therefore, the authenticated encryption algorithm can be used to determine the corresponding integrity security protection algorithm, which can also be understood as the authenticated encryption algorithm can be used to map the corresponding integrity security protection algorithm.

[0134] 2) The authentication encryption algorithm can be used to determine the corresponding confidentiality security protection algorithm.

[0135] As an optional method, the authenticated encryption algorithm is used to determine the corresponding confidentiality security protection algorithm, including:

[0136] An authenticated encryption algorithm with the integrity protection portion cleared can be considered a confidentiality-protected security algorithm. This "null scheme" can be understood as a "null scheme." When the integrity protection portion is cleared, the output MAC is a constant (e.g., all zeros), indicating that the integrity protection portion is not protected.

[0137] Optionally, the confidentiality security protection algorithm determined in this way can also be called a confidentiality security protection algorithm of an authenticated encryption algorithm.

[0138] Alternatively, an authenticated encryption algorithm is used to determine the corresponding confidentiality security protection algorithm, including:

[0139] According to the preset rules, the encryption algorithm corresponding to the authentication encryption algorithm is determined. The preset rules can be the correspondence between the authentication encryption algorithm and the encryption algorithm. For example, the correspondence between the confidentiality security protection algorithm and the authentication encryption algorithm can be: the SNOW-AEAD algorithm corresponds to the SNOW confidentiality security protection algorithm, the ZUC-AEAD algorithm corresponds to the ZUC confidentiality security protection algorithm, the AES-AEAD algorithm corresponds to the AES confidentiality security protection algorithm, and so on. Then the SNOW-AEAD algorithm and the corresponding relationship can determine the SNOW confidentiality security protection algorithm, the ZUC-AEAD algorithm and the corresponding relationship can determine the ZUC confidentiality security protection algorithm, and the others are similar and will not be repeated. In addition, the correspondence between the confidentiality security protection algorithm and the authentication encryption algorithm can also be called the mapping relationship between the confidentiality security protection algorithm and the authentication encryption algorithm, which is not limited in this application.

[0140] For example, the method of omitting the integrity protection portion of the authentication encryption algorithm to obtain the confidentiality security protection algorithm is called mapping, which is not limited in this application. Therefore, the authentication encryption algorithm can be used to determine the corresponding confidentiality security protection algorithm, which can also be understood as the authentication encryption algorithm can be used to map the corresponding confidentiality security protection algorithm.

[0141] 3) The integrity security protection algorithm can be used to determine the corresponding authentication encryption algorithm.

[0142] Exemplarily, the integrity security protection algorithm is used to determine the corresponding authentication encryption algorithm, including:

[0143] According to preset rules, the authentication encryption algorithm corresponding to the integrity security protection algorithm is determined. The preset rules can be the correspondence between the authentication encryption algorithm and the integrity security protection algorithm. For example, see the description in 1) above. The SNOW integrity security protection algorithm can determine the SNOW-AEAD algorithm, the ZUC integrity security protection algorithm can determine the ZUC-AEAD algorithm, and other similar algorithms are not further described.

[0144] For example, the correspondence between an authentication encryption algorithm and an integrity security protection algorithm can also be referred to as a mapping relationship between the authentication encryption algorithm and the integrity security protection algorithm. Therefore, the fact that an integrity security protection algorithm can be used to determine a corresponding authentication encryption algorithm can also be understood as the fact that an integrity security protection algorithm can be used to map a corresponding authentication encryption algorithm.

[0145] 4) The confidentiality security protection algorithm can be used to determine the corresponding authentication encryption algorithm.

[0146] Exemplarily, the confidentiality security protection algorithm is used to determine the corresponding authentication encryption algorithm, including:

[0147] According to preset rules, the authentication encryption algorithm corresponding to the confidentiality security protection algorithm is determined. The preset rules can be the correspondence between the authentication encryption algorithm and the encryption algorithm. For example, see the description in 2) above. The SNOW confidentiality security protection algorithm can determine the SNOW-AEAD algorithm, the ZUC confidentiality security protection algorithm can determine the ZUC-AEAD algorithm, and other similar algorithms are not repeated here.

[0148] For example, the correspondence between an authentication encryption algorithm and a confidentiality protection algorithm can also be referred to as a mapping relationship between the authentication encryption algorithm and the confidentiality protection algorithm. Therefore, the confidentiality protection algorithm can be used to determine the corresponding authentication encryption algorithm, which can also be understood as the confidentiality protection algorithm can be used to map the corresponding authentication encryption algorithm.

[0149] 4. AS SMC process:

[0150] For example, the AS SMC process is mainly used to negotiate the radio resource control (RRC) and user plane (UP) algorithms and to activate RRC security. The RRC reconfiguration message is mainly used to activate UP security.

[0151] For ease of understanding, the AS SMC process is described in detail with reference to Figure 3.

[0152] FIG3 is a schematic flow chart of an AS SMC process, which includes the following steps:

[0153] S310: The access network device configures a priority list of algorithms allowed to be used.

[0154] Exemplarily, an AS integrity security protection algorithm priority list is configured on the access network device (e.g., the AS integrity security protection algorithms configured on the access network device include AES integrity security protection algorithm, SNOW integrity security protection algorithm, ZUC integrity security protection algorithm, empty integrity security protection algorithm, etc., wherein the priorities of the configured multiple integrity security protection algorithms are ranked from high to low as AES integrity security protection algorithm, SNOW integrity security protection algorithm, ZUC integrity security protection algorithm, empty integrity security protection algorithm) and an AS confidentiality security protection algorithm priority list (e.g., the AS confidentiality security protection algorithms configured on the access network device include ZUC confidentiality security protection algorithm, AES confidentiality security protection algorithm, SNOW confidentiality security protection algorithm, empty integrity security protection algorithm, wherein the priorities of the configured multiple confidentiality security protection algorithms are ranked from high to low as ZUC confidentiality security protection algorithm, AES confidentiality security protection algorithm, SNOW confidentiality security protection algorithm, empty integrity security protection algorithm).

[0155] The access network device receives the UE security capabilities and selects the AS integrity security protection algorithm and the AS confidentiality security protection algorithm based on the UE security capabilities and the algorithm priority list. For example, if the UE security capabilities include the supported AS integrity security protection algorithms of AES and SNOW, the access network device selects the AES integrity security protection algorithm. For another example, if the UE security capabilities include the supported AS confidentiality security protection algorithms of AES and ZUC, the access network device selects the ZUC confidentiality security protection algorithm.

[0156] S320: Activate RRC integrity security protection.

[0157] Specifically, before sending the AS SMC message, the access network device activates RRC integrity security protection.

[0158] Furthermore, the access network device performs integrity security calculations on the AS SMC message and obtains a MAC-I. For example, the AS MAC calculation uses the key Krrcint as input, the input parameters include the bearer identifier, the direction parameter, the counter value, etc., and the security algorithm used is the selected integrity security algorithm.

[0159] Among them, the bearer identifier is used to distinguish different bearers. For example, in a 3GPP connection, the bearer identifier can be "0x01", and in a non-3GPP connection, the bearer identifier can be "0x02"; the direction parameter is used to distinguish whether it is an uplink message or a downlink message. For example, in an uplink message, the direction parameter value is 0, and in a downlink message, the direction parameter value is 1; the value of the counter is used as a freshness parameter to prevent replay attacks.

[0160] It should be noted that only integrity protection is performed in the AS SMC message, not confidentiality protection, because the UE side needs to use the parameters in the message (such as ngKSI, etc.) to obtain the key and algorithm for integrity verification.

[0161] S330: The access network device sends an AS SMC message to the UE.

[0162] The AS SMC message includes, but is not limited to, the selected confidentiality and integrity security algorithms. These algorithms are part of the AS security context and are used by the UE and access network device to negotiate the security algorithms for subsequent security protection.

[0163] It should be noted that the security protection algorithms for RRC messages and UP messages can be unified, that is, the selected confidentiality security protection algorithm and the selected integrity security protection algorithm are applicable to both the security protection of RRC messages and the security protection of UP messages; the security protection algorithms for RRC messages and UP messages can be independent, that is, the message includes the confidentiality security protection algorithm selected for the RRC message, the integrity security protection algorithm selected for the RRC message, the confidentiality security protection algorithm selected for the UP message, and the integrity security protection algorithm selected for the UP message.

[0164] S340: The access network device activates decryption of uplink RRC messages.

[0165] Specifically, after sending the AS SMC message, the access network device activates decryption of the uplink RRC message.

[0166] S350, the UE verifies the AS SMC message.

[0167] Exemplarily, the UE obtains the corresponding Krrcint and performs an integrity check based on the integrity security protection algorithm carried in the message. If the integrity check succeeds, the UE activates integrity security and confidentiality protection (e.g., encryption) for uplink RRC messages and deconfidentiality protection (e.g., decryption) for downlink messages.

[0168] S360, the UE sends an AS SMP message to the access network device.

[0169] Specifically, if verification succeeds in step S350, the UE sends an AS SMP message to the access network device. This message is integrity- and confidentiality-protected. For example, the integrity protection key is Krrcint, the integrity protection algorithm is the integrity protection algorithm selected in the AS SMC message in step S330, the confidentiality protection key is Krrcenc, and the confidentiality protection algorithm is the confidentiality protection algorithm selected in the AS SMC message in step S330. MAC-I is used for integrity protection. The access network device receives the AS SMP message, decrypts it, and performs integrity verification on it.

[0170] S370: The UE activates RRC uplink message confidentiality security protection.

[0171] After sending the AS SMP message, the UE activates RRC uplink message confidentiality security protection.

[0172] S380: The access network device activates RRC downlink message confidentiality protection.

[0173] After receiving the AS SMP message, the access network device activates RRC downlink message confidentiality security protection.

[0174] It should be noted that in the existing security mechanism, confidentiality security protection and integrity security protection are independent of each other, that is, the keys and algorithms are isolated.

[0175] 5. Security activation of user plane (UP) messages: The RRC connection reconfiguration message is mainly used for security activation of UP messages.

[0176] For ease of understanding, the UP security activation process is described in detail with reference to FIG4 .

[0177] FIG4 is a schematic flow chart of a UP security activation process, which includes the following steps:

[0178] S410: RAN sends an RRC connection reconfiguration message to the UE.

[0179] The RRC connection reconfiguration message includes a data radio bearer (DRB) identifier and its corresponding UP message integrity security protection indicator and confidentiality security protection indicator.

[0180] It should be understood that the RRC connection reconfiguration process for performing UP message security activation occurs after the AS SMC process, that is, after RRC security activation.

[0181] S420, RAN configures keys and algorithms for UP message security protection;

[0182] Exemplarily, the RAN configures a Packet Data Convergence Protocol (PDCP) entity corresponding to the DRB identifier.

[0183] If UP integrity security is activated for the DRB indicated in the RRC Connection Reconfiguration message and the RAN does not have an UP integrity security key, the RAN shall generate an UP integrity security key. The RAN shall configure the UP message integrity security key and integrity security algorithm in the PDCP entity. The RAN shall activate integrity checking for uplink user plane messages on this DRB and integrity security for downlink user plane messages on this DRB.

[0184] Similarly, if UP confidentiality is activated for the DRB indicated in the RRC Connection Reconfiguration message and the RAN does not have an UP confidentiality protection key, the RAN shall generate an UP confidentiality protection key. The RAN shall configure the confidentiality protection key and confidentiality protection algorithm for UP messages in the PDCP entity. The RAN shall activate decryption of uplink user plane messages on this DRB and confidentiality protection for downlink user plane messages on this DRB.

[0185] S430: The UE verifies the integrity of the RRC connection reconfiguration message.

[0186] If the RRC connection reconfiguration message indicates activation of UP integrity security protection for the DRB, and if the UE does not have an UP integrity security protection key, the UE shall generate an UP integrity security protection key. The UE configures the key and algorithm for UP message security protection. Exemplarily, the UE configures the UP message integrity security protection key and integrity security protection algorithm in the PDCP entity. The UE activates integrity security protection for uplink user plane messages on the DRB; and activates integrity checking for downlink user plane messages on the DRB.

[0187] Similarly, if the RRC connection reconfiguration message indicates activation of UP confidentiality protection for the DRB, and if the UE does not have an UP confidentiality protection key, the UE shall generate an UP confidentiality protection key. The UE shall configure the integrity security key and integrity security algorithm for UP messages in the PDCP entity. The UE shall activate confidentiality protection for uplink user plane messages on the DRB and decryption of downlink user plane messages on the DRB.

[0188] S440: The UE sends an RRC connection reconfiguration complete message to the RAN.

[0189] Specifically, if the UE successfully verifies the integrity of the RRC connection reconfiguration message, the UE shall send an RRC connection reconfiguration complete message to the RAN.

[0190] In addition, in order to facilitate understanding of the embodiments of the present application, the following explanations are made.

[0191] First, in this application, "used to indicate" can include being used for direct indication and being used for indirect indication. When describing that a certain indication information is used to indicate A, it can include that the indication information directly indicates A or indirectly indicates A, but it does not mean that the indication information must include A.

[0192] The information indicated by the indication information is referred to as the information to be indicated. During the specific implementation process, there are many ways to indicate the information to be indicated. The information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately. The transmission period and / or transmission timing of these sub-information can be the same or different. The specific transmission method is not limited in this application. The transmission period and / or transmission timing of these sub-information can be predefined, for example, according to a protocol, or can be configured by the transmitting device through sending configuration information to the receiving device.

[0193] Second, "at least one" shown in the present application refers to one or more, and "a plurality of" refers to two or more. In addition, in the embodiments of the present application, "first", "second" and various digital numbers (for example, "#1", "#2", etc.) are only for the convenience of description and are not used to limit the scope of the embodiments of the present application. The size of the sequence number of each process below does not mean the order of execution. The execution order of each process should be determined by its function and inherent logic, and should not constitute any limitation to the implementation process of the embodiments of the present application. It should be understood that the objects described in this way can be interchanged where appropriate, so that the schemes other than the embodiments of the present application can be described. In addition, in the embodiments of the present application, words such as "510", "520" are only for the convenience of description and are not used to limit the order of execution of steps.

[0194] Third, in this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described in this application as "exemplary" or "for example" should not be construed as being preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner.

[0195] Fourth, the term "storage" used in the embodiments of this application may refer to storage in one or more memories. The one or more memories may be provided separately or integrated into an encoder or decoder, a processor, or a communication device. The one or more memories may also be provided in part separately and in part integrated into a decoder, a processor, or a communication device. The memory may be any type of storage medium, and this application is not limited thereto.

[0196] Fifth, the "protocol" involved in the embodiments of the present application may refer to a standard protocol in the communication field, for example, it may include an LTE protocol, an NR protocol, and related protocols used in future communication systems. This application does not limit this.

[0197] Sixth, in the embodiments of the present application, "under the circumstances", "when", and "if" can sometimes be used interchangeably. It should be pointed out that when the distinction between them is not emphasized, the meanings they intend to express are consistent.

[0198] Seventh, in the embodiments of this application, various terms and English abbreviations, such as radio resource control (RRC), are provided for ease of description and should not constitute any limitation on this application. This application does not exclude the possibility of defining other terms in existing or future protocols that can achieve the same or similar functions.

[0199] Eighth, the term "and / or" in this document simply describes a relationship between related objects, indicating that three possible relationships exist. For example, "A and / or B" can mean: A exists alone, A and B exist simultaneously, or B exists alone. Furthermore, the character " / " in this document generally indicates that the related objects are in an "or" relationship.

[0200] The above briefly introduces the scenarios in which the communication method provided in the embodiment of the present application can be applied, and introduces the basic concepts that may be involved in the embodiment of the present application, and introduces the AS SMC process and the security activation process of the user plane message in combination with Figures 3 and 4 in the basic concepts. In the AS SMC process shown in Figure 3, the confidentiality security protection algorithm and the integrity security protection algorithm that can be negotiated. When confidentiality security protection and integrity security protection are required, the combination of the confidentiality security protection algorithm and the integrity security protection algorithm has potential security risks. For example, the confidentiality security protection algorithm and the integrity security protection algorithm are used to perform security protection on the user plane message, specifically including: first performing integrity security protection on the user plane message based on the integrity security protection algorithm, and then using the result of the integrity security protection as the input parameter of the confidentiality security protection algorithm to perform confidentiality security protection on the user plane message. However, the confidentiality security protection algorithm and integrity security protection algorithm used are independent and not necessarily algorithms with the same number of bits. When the result of the integrity security protection is used as the input parameter of the confidentiality security protection, there may be algorithm splicing, and algorithm splicing brings security risks.

[0201] If the security protection algorithm based on which the user plane message is negotiated in the AS SMC process is an authentication encryption algorithm that can achieve both confidentiality security protection and integrity security protection, it is necessary to provide a user plane security protection activation process to activate the authentication encryption algorithm to provide security protection for the user plane message and improve the security of user plane message transmission.

[0202] The present application provides a communication method that can be applied in the communication system shown in FIG1 , in order to improve the security of user plane message transmission.

[0203] It should be understood that the embodiments shown below do not particularly limit the specific structure of the execution subject of the method provided in the embodiments of the present application. As long as it is possible to communicate according to the method provided in the embodiments of the present application by running a program that records the code of the method provided in the embodiments of the present application. For example, the execution subject of the method provided in the embodiments of the present application can be an access network device and a terminal device, or a functional module in the access network device and the terminal device that can call and execute the program.

[0204] Figure 5 is a schematic flow chart of a communication method provided in this application. In this communication method, the access network device and the terminal device can negotiate a security algorithm for protecting user plane messages through the AS SMC process, or they can negotiate a security algorithm for protecting user plane messages through other methods. The specific negotiation method is not limited in this application.

[0205] The security algorithm involved in the following embodiments may be the authenticated encryption algorithm described above, including a portion for confidentiality protection and a portion for integrity protection, a security algorithm that can achieve both confidentiality and integrity security protection. For example, the security algorithm is the AEAD algorithm described above. In the embodiments of this application, the security algorithm and the authenticated encryption algorithm may be described interchangeably.

[0206] The security key involved in the following embodiments is the input key of the security algorithm. Integrity and confidentiality security protection, or integrity verification and decryption of received messages, are performed based on this security key and the security algorithm. The security key is a key shared between the terminal device and the network device. For example, the security key is a key generated during the primary authentication process, or a key derived from a key generated during the primary authentication process.

[0207] For ease of understanding, the following two possible implementations of algorithm negotiation are introduced:

[0208] As a possible implementation method, the access network device and the terminal device negotiate a security protection algorithm for user plane messages through the AS SMC process. Under this implementation method, the access network device selects a security protection algorithm suitable for UP messages before sending an SMC message to the terminal device, and then transmits the selected security protection algorithm to the terminal device through the AS SMC message. For example, when the terminal device is converted from an idle state to a connected state (idle-connected), the terminal device and the access network device can negotiate a security protection algorithm through the AS SMC process, and activate UP message security protection through the RRC reconfiguration process. For another example, when the terminal device is converted from an inactive state to a connected state (inactive-connected), if the security protection algorithms used by the source base station and the target base station are different or the security activation states are different, the terminal device and the access network device first negotiate a security protection algorithm through the AS SMC process, and then activate UP message security protection through the RRC reconfiguration process.

[0209] For example, in this implementation, if the security protection algorithms for RRC messages and UP messages are independent, that is, the AS SMC message includes the security protection algorithm selected by the access network device for RRC messages and the security protection algorithm selected by the access network device for UP messages. It should be understood that this embodiment does not provide detailed explanation of how the access network device selects the security protection algorithms for RRC messages and UP messages. The appropriate security protection algorithm may be selected based on locally configured algorithm priorities, algorithm selection policies, or the security capabilities of the terminal device.

[0210] For example, the algorithm selected by the access network device for the RRC message is the authentication encryption algorithm, and the security protection algorithm selected by the access network device for UP message protection is the integrity security protection algorithm and the confidentiality security protection algorithm. The AS SMC message includes the identifier of the integrity security protection algorithm, the identifier of the confidentiality security protection algorithm, and the identifier of the authentication encryption algorithm.

[0211] For example, the algorithm selected by the access network device for the RRC message is authentication encryption algorithm #1, and the security protection algorithm selected by the access network device for UP message protection is authentication encryption algorithm #2. The AS SMC message includes the identifier of authentication encryption algorithm #1 and the identifier of authentication encryption algorithm #2.

[0212] Exemplarily, in this implementation, if the security protection algorithm of the RRC message and the UP message is common, that is, the AS SMC message includes an identifier of the common security protection algorithm selected by the access network device.

[0213] For example, if the shared security protection algorithm selected by the access network device is an integrity security protection algorithm and a confidentiality security protection algorithm, the AS SMC message includes the identifier of the integrity security protection algorithm and the identifier of the confidentiality security protection algorithm. The integrity security protection algorithm can be an algorithm determined based on the authentication encryption algorithm (e.g., an algorithm with the confidentiality protection part in the authentication encryption algorithm cleared, or an integrity security protection algorithm determined by the authentication encryption algorithm), and the confidentiality security protection algorithm can be an algorithm determined based on the authentication encryption algorithm (e.g., an algorithm with the integrity protection part in the authentication encryption algorithm cleared, or a confidentiality security protection algorithm determined based on a corresponding relationship and the authentication encryption algorithm).

[0214] For another example, if the shared security protection algorithm selected by the access network device is an authentication encryption algorithm, the AS SMC message includes an identifier of the authentication encryption algorithm.

[0215] Exemplarily, in this implementation mode, if the security protection algorithms of the RRC message and the UP message are shared, the access network device carries indication information #1, as well as the identifier of the integrity security protection algorithm and / or the identifier of the confidentiality security protection algorithm in the AS SMC message. The indication information #1 is used to indicate that the RRC message and the user plane message are securely protected based on the authentication encryption algorithm. The terminal device and the access network device can determine the authentication encryption algorithm based on the integrity security protection algorithm and / or the confidentiality security protection algorithm.

[0216] For example, the AS SMC message carries the identifier of the integrity security protection algorithm and the identifier of the confidentiality security protection algorithm. The message also carries indication information #1, which is used to indicate that the message after the SMC uses the authentication confidentiality algorithm. Indication information #1 can also be called AEAD indication information.

[0217] Optionally, the AEAD indication information may be a 1-bit value. For example, when the AEAD indication information value is 1, it indicates that the message after the SMC uses the AEAD algorithm; when the AEAD indication information value is 0 or is not carried, it indicates that the message after the SMC does not use the AEAD algorithm.

[0218] Optionally, the AEAD indication information may also be an identifier of a specific AEAD algorithm. When the SMC message carries the identifier of the AEAD algorithm, it indicates that the message after the SMC uses the AEAD algorithm; when not carried, it indicates that the message after the SMC does not use the AEAD algorithm.

[0219] Furthermore, after receiving the AEAD indication information, the terminal device determines an AEAD protection algorithm based on the AEAD indication information. For example, the terminal device determines the AEAD algorithm based on the selected integrity and confidentiality protection algorithms. For example, if the selected integrity protection algorithm is the SNOW integrity protection algorithm, the determined AEAD algorithm is the SNOW-AEAD algorithm. In this implementation, the access network device may also determine the AEAD algorithm based on the selected integrity and confidentiality protection algorithms.

[0220] Optionally, the terminal device may determine the AEAD algorithm after receiving the RRC connection reconfiguration message. For example, when the RRC connection reconfiguration message includes an indication of integrity security protection being turned on and confidentiality security protection being turned on, the terminal device determines the AEAD algorithm applicable to the UP message. This application does not impose any restrictions on the timing of the terminal device determining the AEAD algorithm.

[0221] Exemplarily, in this implementation mode, if the security protection algorithms of the RRC message and the UP message are shared, the access network device carries indication information #2 and the identifier of the authentication encryption algorithm in the AS SMC message. Indication information #2 is used to indicate that the RRC message and the user plane message are security protected based on the integrity security protection algorithm or the confidentiality security protection algorithm. The terminal device and the access network device can determine the integrity security protection algorithm and / or the confidentiality security protection algorithm based on the authentication encryption algorithm.

[0222] For example, the AS SMC message carries the identifier of the AEAD algorithm and indication information #2. The terminal device determines the integrity security algorithm or the confidentiality security algorithm based on the AEAD algorithm. For example, if the selected AEAD algorithm is the SNOW-AEAD algorithm, the integrity security algorithm is the SNOW integrity security algorithm. In this implementation, the access network device can also determine the integrity security algorithm or the confidentiality security algorithm based on the selected AEAD algorithm.

[0223] Optionally, after receiving the AS SMC message (e.g., when receiving the AEAD algorithm applicable to the UP message), the terminal device may determine the integrity security protection algorithm or confidentiality security protection algorithm applicable to the RRC message and the UP message based on the AEAD algorithm.

[0224] Optionally, the terminal device may determine the confidentiality security protection algorithm applicable to the UP message based on the AEAD algorithm of the UP message after receiving the RRC connection reconfiguration message (e.g., when the RRC connection reconfiguration message includes an indication that confidentiality security protection is turned on and integrity security protection is not turned on); or when the RRC connection reconfiguration message includes an indication that confidentiality security protection is not turned on and integrity security protection is turned on, the terminal device may determine the integrity security protection algorithm applicable to the UP message based on the AEAD algorithm of the UP message. This application does not limit the timing of the terminal device determining the integrity security protection algorithm.

[0225] As another possible implementation, the access network device may carry the identifier of the security protection algorithm corresponding to the UP message through the RRC reconfiguration message. Under this implementation, the access network device selects the security protection algorithm of the UP message before sending the RRC reconfiguration message to the terminal device, and then transmits the selected security protection algorithm to the terminal device through the RRC reconfiguration message. For example, in the process of UE switching from the source base station to the target base station, the algorithm negotiation process used to perform the UP message can be incorporated into the RRC connection reconfiguration process, that is, the RRC connection reconfiguration message includes both the security protection algorithm and the security protection indication. Among them, handover (HO) can be understood as Xn connection switching (that is, the access network device serving the terminal device changes, switching from the source access network device to the target access network device, and the access network device and the target access network device have a direct interface), or N2 switching (that is, the access network device serving the terminal device changes, and the source access network device and the target access network device have no direct interface). Alternatively, handover can also be understood as network switching, such as switching from a 4G network to a 5G network.

[0226] Exemplarily, under this implementation, the access network device may carry the integrity security protection algorithm and the confidentiality security protection algorithm in the RRC reconfiguration message, indicating that the security protection algorithm protected by the UP message is an independent integrity security protection algorithm and confidentiality security protection algorithm.

[0227] Exemplarily, in this implementation, the access network device may indicate that the security protection algorithm protected by the UP message is the authentication encryption algorithm by carrying an identifier of the authentication encryption algorithm in the RRC reconfiguration message.

[0228] It should be noted that this embodiment does not limit the method for negotiating the algorithm between the terminal device and the access network device, and takes the case where the algorithm negotiation result between the terminal device and the access network device is an authentication encryption algorithm as an example for explanation.

[0229] Specifically, in the communication method shown in FIG5 , the algorithm negotiation result is mainly introduced as an authentication encryption algorithm, and the user plane security protection based on the authentication encryption algorithm is activated. The communication method includes the following steps:

[0230] S510 : When the access network device determines to use a security algorithm to perform confidentiality and integrity security protection on the user plane, the access network device configures the security algorithm for the user plane and a security key applicable to the security algorithm.

[0231] For access network devices, confidentiality and integrity security protection of user plane messages includes: integrity verification and decryption operations of uplink UP messages, as well as integrity security protection and confidentiality security protection of downlink UP messages.

[0232] Exemplarily, the integrity check and decryption operations of the access network device for the uplink UP message include: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity check on the uplink UP message, and using the security key as the input key of the confidentiality protection part in the security algorithm to decrypt the uplink UP message.

[0233] Exemplarily, the access network device provides integrity security protection and confidentiality security protection for downlink UP messages, including: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the downlink UP message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the downlink UP message.

[0234] From the above, it can be seen that when the access network device determines to use a security algorithm for user plane confidentiality and integrity security protection, the access network device can perform integrity security protection and confidentiality security protection of user plane messages based on the same security key, or integrity verification and decryption, thereby avoiding the security risks of the combination of confidentiality security protection algorithm and integrity security protection algorithm, and improving the security of user plane message transmission.

[0235] It should be noted that this application does not provide detailed information on how to use security algorithms to protect user plane confidentiality and integrity. This application mainly introduces how to activate user plane security protection based on security algorithms.

[0236] For example, in this embodiment, the access network device configures the security algorithm of the UP message and the security key applicable to the security algorithm, including but not limited to the following possible implementations:

[0237] As a possible implementation, the access network device configures the UP message security algorithm and the security key applicable to the security algorithm in the PDCP entity. The PDCP entity uses the UP message authentication encryption algorithm and the security key to protect the UP message.

[0238] As another possible implementation, the access network device configures a security algorithm for the UP message and a security key applicable to the security algorithm in the RRC entity. The RRC entity uses the security algorithm and security key for the UP message to perform security protection on the UP message.

[0239] As another possible implementation, the access network device configures a security algorithm for UP messages and a security key applicable to the security algorithm in a dedicated security processing entity. The dedicated security processing entity uses the security algorithm and security key for UP messages to perform security protection on the UP messages.

[0240] The PDCP entity, RRC entity, or security processing dedicated entity configured in the above-mentioned access network device may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DRB, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the session, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DU, and no limitation is made here. This indicates that the granularity of user plane security protection may be to configure a security protection algorithm and security key for a certain DRB, or to configure a security protection algorithm and security key for a certain session, or to configure a security protection algorithm and security key for a certain DU, etc., that is, user plane security protection may be of different granularities.

[0241] Exemplarily, determining the situation where an authentication encryption algorithm is used to securely protect user-plane messages can be understood as: determining that the algorithm negotiation result is a situation where an authentication encryption algorithm is used to securely protect user-plane messages, that is, the authentication encryption algorithm is selected for securely protecting user-plane messages; and / or determining that user-plane messages require integrity security protection and confidentiality security protection, that is, both user-plane confidentiality and integrity security protection are activated.

[0242] It should be noted that this embodiment does not limit how the access network device determines whether to use the authentication encryption algorithm to securely protect user plane messages. It can be predefined or determined based on the algorithm negotiation result in the AS SMC process.

[0243] Exemplarily, the access network device determines to use an authentication encryption algorithm to perform security protection on the user plane message according to at least one of the following information:

[0244] Terminal device capability information, user plane message security protection policy, algorithm negotiation results, or algorithm selection policy.

[0245] The capability information of the terminal device indicates the security capability of the terminal device. For example, the security capability of the terminal device includes that the supported security protection algorithm is an authentication encryption algorithm.

[0246] The user plane message security protection policy can be obtained by the access network device through the core network. For example, a terminal device sends a session request message through the access network device. The session request message includes a session identifier, which is used to identify the terminal device's session. The core network device searches for the corresponding user plane message security protection policy based on the session identifier and provides the obtained user plane message security protection policy to the access network device.

[0247] Optionally, the security protection policy includes: a confidentiality security policy and an integrity security policy. The values ​​of the confidentiality security policy include required, preferred, and not needed. If the value of the confidentiality security policy is required, it means that confidentiality security protection needs to be activated; if the value of the confidentiality security policy is not needed, it means that confidentiality security protection does not need to be activated; if the value of the confidentiality security policy is recommended, it means that confidentiality security protection can be activated or not activated. The values ​​of the integrity security policy include required, preferred, and not needed. If the value of the integrity security policy is required, it means that integrity security protection needs to be activated; if the value of the integrity security policy is not needed, it means that integrity security protection does not need to be activated; if the value of the integrity security policy is recommended, it means that integrity security protection can be activated or not activated.

[0248] The algorithm negotiation result may be a security protection algorithm corresponding to an UP message negotiated between the access network device and the terminal device during the algorithm negotiation process. For example, the security protection algorithm corresponding to the UP message negotiated between the access network device and the terminal device during the algorithm negotiation process includes an authentication encryption algorithm.

[0249] The algorithm selection policy can be locally configured on the access network device. For example, the algorithm selection policy can be configured on the access network device to prioritize the use of the authentication encryption algorithm. This means that if both the terminal device and the access network device support the same authentication encryption algorithm (e.g., AEAD algorithm), the authentication encryption algorithm is selected. Otherwise, the independent integrity protection algorithm and confidentiality protection algorithm are selected for security protection.

[0250] Optionally, the access network device may determine to use an authentication encryption algorithm to securely protect user plane messages based on the capability information of the terminal device. For example, if the capability information of the terminal device indicates that the terminal device supports the authentication encryption algorithm, the access network device may determine to use the authentication encryption algorithm to securely protect user plane messages.

[0251] Optionally, the access network device may determine, based on the user plane message security protection policy, to use an authentication encryption algorithm to perform security protection on the user plane message. For example, if the user plane message security protection policy indicates that integrity and confidentiality security protection should be performed on the user plane message, the access network device may determine to use an authentication encryption algorithm to perform security protection on the user plane message.

[0252] Optionally, the access network device may determine to use an authentication encryption algorithm to securely protect user plane messages based on the algorithm negotiation result. For example, if the algorithm negotiation result includes the authentication encryption algorithm, the access network device may determine to use the authentication encryption algorithm to securely protect user plane messages.

[0253] Optionally, the access network device may determine to use the authentication encryption algorithm to securely protect the user plane message according to the algorithm selection policy. For example, if the algorithm selection policy indicates that the authentication encryption algorithm is preferred, the access network device determines to use the authentication encryption algorithm to securely protect the user plane message.

[0254] In addition, the access network device may also determine to use an authentication encryption algorithm to securely protect user plane messages based on one or more of the following information: the terminal device's capability information, the user plane message security protection policy, the algorithm negotiation result, or the algorithm selection policy. Examples are not given here one by one.

[0255] To facilitate understanding, a specific example is used to illustrate how an access network device determines whether to use an authentication and encryption algorithm to securely protect user plane messages:

[0256] Example 1:

[0257] A session is carried by multiple DRBs. The access network device receives the user plane message security protection policy for the session from the core network device and activates DRB security according to the user plane message security protection policy.

[0258] For example, when the user plane message security protection policy is required, the access network device configures the DRB security to be turned on; when the user plane message security protection policy is not required, the access network device configures the DRB security to be not turned on; when the user plane message security protection policy is recommended, the access network device determines whether to turn on the DRB security based on the local policy.

[0259] Furthermore, when DRB security is configured to be on, it can be determined based on the terminal device's capability information, algorithm negotiation results, or algorithm selection policy whether to enable authentication encryption algorithm security protection, integrity security protection, or confidentiality security protection.

[0260] It should be understood that the above examples are merely illustrative of the manner in which the access network device determines the security protection of user-plane messages, and do not constitute any limitation on the scope of protection of this application. In this embodiment, the access network device may also determine the manner in which the user-plane message security protection is determined by other means. For example, the manner in which the user-plane message security protection is determined is based on historical communication data (e.g., if historical communication data shows that the UP message transmitted between the terminal device and the terminal device requires integrity security protection and confidentiality security protection, then the manner in which the user-plane message security protection is determined is integrity security protection and confidentiality security protection).

[0261] Furthermore, the access network device can instruct the terminal device to activate UP message integrity security protection and confidentiality security protection through the first indication information. There is no limitation on the order between the access network device sending the first indication information to the terminal device and the access network device configuring the authentication encryption algorithm and the security key applicable to the authentication encryption algorithm for the UP message. For example, the access network device can send the first indication information to the terminal device after configuring the authentication encryption algorithm and the security key applicable to the authentication encryption algorithm for the UP message, or the access network device can configure the authentication encryption algorithm and the security key applicable to the authentication encryption algorithm for the UP message after sending the first indication information to the terminal device.

[0262] The method flow shown in FIG5 further includes:

[0263] S520, the access network device sends first indication information to the terminal device.

[0264] Specifically, the first indication information is used to indicate the activation of integrity security protection and confidentiality security protection for user plane messages. For example, the first indication information is status information for activating integrity security protection and activating confidentiality security protection; for another example, the first indication information is an identifier of an authentication encryption algorithm. The fact that the first indication information is an identifier of an authentication encryption algorithm can be understood as follows: since the authentication encryption algorithm can implement integrity security protection and confidentiality security protection, when the access network device sends the identifier of the authentication encryption algorithm to the terminal device, the terminal device can determine the activation of integrity security protection and confidentiality security protection for the user plane based on the identifier of the authentication encryption algorithm.

[0265] Exemplarily, the first indication information is used to indicate the activation of user plane message integrity security protection and confidentiality security protection, for example: the first indication information includes information #1 and information #2, wherein information #1 is used to indicate the activation of user plane message integrity security protection, and information #2 is used to indicate the activation of user plane message confidentiality security protection.

[0266] Exemplarily, the access network device sends an RRC connection reconfiguration message to the terminal device, where the RRC connection reconfiguration message carries first indication information.

[0267] Exemplarily, the access network device may further send second indication information to the terminal device, where the second indication information is used to indicate that the UP message is to be securely protected based on the authentication encryption algorithm. For example, when the access network device determines to use the authentication encryption algorithm to securely protect the UP message, the second indication information is sent to the terminal device.

[0268] Exemplarily, the access network device may also send a DRB identifier, session identifier, or DU identifier corresponding to the second indication information to the terminal device. This indicates that the PDCP entity granularity configured by the terminal device is DRB, session, or DU granularity. The second indication information indicates that the granularity of user plane security protection may be to configure a security protection algorithm and security key for a certain DRB, or to configure a security protection algorithm and security key for a certain session, or to configure a security protection algorithm and security key for a certain DU, etc., that is, user plane security protection may be of different granularities.

[0269] Optionally, the first indication information, the second indication information, the DRB identifier, etc. are all carried in the RRC reconfiguration message.

[0270] S530: The terminal device configures a security algorithm for the UP message and a security key applicable to the security algorithm.

[0271] Specifically, the terminal device performs an integrity check on the RRC connection reconfiguration message. If the verification is successful, the terminal device configures a security algorithm for the UP message and a security key applicable to the security algorithm.

[0272] For terminal devices, the security protection of UP messages includes: integrity security protection and confidentiality security protection of uplink UP messages, as well as integrity verification and decryption operations of downlink UP messages.

[0273] Exemplarily, the integrity check and decryption operations of the terminal device for the downlink UP message include: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity check on the downlink UP message, and using the security key as the input key of the confidentiality protection part in the security algorithm to decrypt the downlink UP message.

[0274] Exemplarily, the terminal device provides integrity security protection and confidentiality security protection for uplink UP messages, including: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the uplink UP message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the uplink UP message.

[0275] From the above, it can be seen that when the terminal device determines to use a security algorithm for user-plane confidentiality and integrity security protection, the terminal device can perform integrity security protection and confidentiality security protection of user-plane messages based on the same security key, or integrity verification and decryption, thereby avoiding the security risks of the combination of confidentiality security protection algorithms and integrity security protection algorithms, and improving the security of user-plane message transmission.

[0276] It should be noted that this application does not provide detailed information on how to use security algorithms to protect user plane confidentiality and integrity. This application mainly introduces how to activate user plane security protection based on authentication encryption algorithm.

[0277] For example, in this embodiment, the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm, including but not limited to the following possible implementations:

[0278] As a possible implementation, the terminal device configures the UP message authentication encryption algorithm and the security key applicable to the authentication encryption algorithm in the PDCP entity. The PDCP entity uses the UP message authentication encryption algorithm and the security key to protect the UP message.

[0279] As another possible implementation, the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm in the RRC entity. The RRC entity uses the authentication encryption algorithm and the security key of the UP message to securely protect the UP message.

[0280] As another possible implementation, the terminal device configures the authentication encryption algorithm and the security key applicable to the UP message in the security processing dedicated entity. The security processing dedicated entity uses the authentication encryption algorithm and the security key to securely protect the UP message.

[0281] The PDCP entity, RRC entity, or security processing dedicated entity configured in the above-mentioned terminal device may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DRB, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the session, or may be the PDCP entity, RRC entity, or security processing dedicated entity corresponding to the DU, and no limitation is made here. This indicates that the granularity of user plane security protection may be to configure a security protection algorithm and security key for a certain DRB, or to configure a security protection algorithm and security key for a certain session, or to configure a security protection algorithm and security key for a certain DU, etc., that is, user plane security protection may be of different granularities.

[0282] As a possible implementation, the terminal device may determine, based on the first indication information, to activate integrity security protection and confidentiality security protection for UP messages, thereby configuring the terminal device with an authentication encryption algorithm for the UP messages and a security key applicable to the authentication encryption algorithm. For example, the terminal device determines, based on the first indication information, to use an authentication encryption algorithm to securely protect UP messages, thereby configuring the terminal device with an authentication encryption algorithm for the UP messages and a security key applicable to the authentication encryption algorithm.

[0283] As another possible implementation, after receiving the first indication information, the terminal device determines, based on the first indication information, to activate integrity security protection and confidentiality security protection for UP messages, and determines, based on the algorithm negotiation result, that an authenticated encryption algorithm can be used to securely protect the UP messages, thereby configuring the terminal device with an authenticated encryption algorithm for the UP messages and a security key applicable to the authenticated encryption algorithm. For example, the terminal device determines, based on the first indication information, that an authenticated encryption algorithm can be used to securely protect the UP messages, and the terminal device determines that the algorithm negotiation result includes an authenticated encryption algorithm, thereby configuring the terminal device with an authenticated encryption algorithm for the UP messages and a security key applicable to the authenticated encryption algorithm.

[0284] As another possible implementation method, if the terminal device receives the above-mentioned first indication information and second indication information, the terminal device can determine to activate the integrity security protection and confidentiality security protection of the UP message based on the first indication information, and the terminal device can determine to use the authentication encryption algorithm to perform security protection on the UP message based on the second indication information, so that the terminal device configures the authentication encryption algorithm of the UP message and the security key applicable to the authentication encryption algorithm.

[0285] Optionally, if the terminal device successfully verifies the integrity of the RRC connection reconfiguration message, the terminal device may send an RRC connection reconfiguration completion message to the access network device.

[0286] In the embodiment shown in FIG5 , when the access network device and the terminal device determine to use an authenticated encryption algorithm that can achieve both confidentiality and integrity security protection to secure user plane messages, the access network device and the terminal device configure the authenticated encryption algorithm for the UP message and a security key applicable to the authenticated encryption algorithm, so that subsequent user plane messages transmitted between the terminal device and the access network device can be securely protected based on the authenticated encryption algorithm, thereby improving the security of user plane message transmission. For example, when user plane messages require both integrity and confidentiality security protection, there is no need to perform security protection based on the integrity and confidentiality security algorithms, thereby avoiding the security risks inherent in the confidentiality and integrity security algorithms. For example, in this solution, when performing confidentiality and integrity security protection on user plane messages, there is no need to perform security protection based on separate confidentiality and integrity security algorithms. Instead, both confidentiality and integrity security protection of user plane messages are performed based on the authenticated encryption algorithm, avoiding the splicing of different algorithms and thus avoiding the security risks inherent in the combination of separate confidentiality and integrity security algorithms.

[0287] It should be noted that the communication method shown in Figure 5 is explained by taking the example of the terminal device and the access network device negotiating the use of an authentication encryption algorithm to provide security protection for UP messages, and activating user plane confidentiality and integrity security protection. It should be understood that when the terminal device and the access network device negotiate the use of an authentication encryption algorithm to provide security protection for UP messages, it is possible to activate user plane confidentiality security protection or integrity security protection.

[0288] For example, in the embodiment shown in FIG6 , the terminal device and the access network device negotiate to use an authentication and encryption algorithm to perform security protection on UP messages, and determine the confidentiality security protection algorithm required for user plane confidentiality security protection based on the authentication and encryption algorithm. This can be because before the access network device activates user plane confidentiality security protection through the third indication information activation instruction and does not activate user plane integrity security protection, the terminal device and the access network device have already determined the confidentiality security protection algorithm based on the negotiated authentication and encryption algorithm. For example, the confidentiality security protection algorithm can be determined when the terminal device and the access network device negotiate to obtain the authentication and encryption algorithm during the AS SMC process.

[0289] Similarly, in the embodiment shown in FIG6 , the terminal device and the access network device negotiate to use an authentication encryption algorithm to securely protect UP messages, and determine the integrity security protection algorithm required for user plane integrity security protection based on the authentication encryption algorithm. This can be because before the access network device activates user plane integrity security protection through the third indication information activation instruction and does not activate user plane confidentiality security protection, the terminal device and the access network device have already determined the integrity security protection algorithm based on the negotiated authentication encryption algorithm. For example, the terminal device and the access network device can determine the integrity security protection algorithm when the authentication encryption algorithm is negotiated during the AS SMC process.

[0290] In addition, the terminal device and the access network device determine the confidentiality security protection algorithm required for user plane confidentiality security protection based on the authentication encryption algorithm, which may also be performed after the access network device activates the user plane confidentiality security protection and does not activate the user plane integrity security protection through the third indication information activation instruction. For example, after the terminal device receives the third indication information and determines to activate the user plane confidentiality security protection and not activate the user plane integrity security protection, it determines the confidentiality security protection algorithm based on the negotiated authentication encryption algorithm.

[0291] Similarly, the terminal device and the access network device determine the integrity security protection algorithm required for user plane integrity security protection based on the authentication encryption algorithm, which may also be performed after the access network device activates the user plane integrity security protection and does not activate the user plane confidentiality security protection through the third indication information activation instruction. For example, after the terminal device receives the third indication information and determines to activate the user plane integrity security protection and does not activate the user plane confidentiality security protection, it determines the integrity security protection algorithm based on the negotiated authentication encryption algorithm.

[0292] The following describes in detail the algorithm negotiation result as an authentication encryption algorithm, and activates user plane confidentiality security protection or integrity security protection. The communication method includes the following steps:

[0293] S610: The access network device determines a security protection state of the user plane according to a security protection policy.

[0294] Security protection policies include: confidentiality security policy and integrity security policy.

[0295] Among them, the values ​​of confidentiality security policy include required, preferred, and not needed. If the value of confidentiality security policy is required, it means that confidentiality security protection needs to be activated. If the value of confidentiality security policy is not needed, it means that confidentiality security protection does not need to be activated. If the value of confidentiality security policy is recommended, it means that confidentiality security protection can be activated or not. The values ​​of integrity security policy include required, preferred, and not needed. If the value of integrity security policy is required, it means that integrity security protection needs to be activated. If the value of integrity security policy is not needed, it means that integrity security protection does not need to be activated. If the value of integrity security policy is recommended, it means that integrity security protection can be activated or not.

[0296] In this embodiment, the access network device determines the security protection status of the user plane according to the security protection policy, including: the access network device determines to enable user plane confidentiality security protection according to the security protection policy, and does not enable integrity security protection; or, the access network device determines to enable user plane integrity security protection according to the security protection policy, and does not enable confidentiality security protection.

[0297] S620: The access network device determines a security protection algorithm according to the authentication and encryption algorithm.

[0298] Exemplarily, the access network device may determine a confidentiality security protection algorithm required for user plane confidentiality security protection and / or an integrity security protection algorithm required for user plane integrity security protection based on the negotiated authentication encryption algorithm.

[0299] For example, when the access network device obtains the authentication encryption algorithm through negotiation in the AS SMC process, it can determine the confidentiality security protection algorithm and / or the integrity security protection algorithm.

[0300] For example, after the access network device determines to activate the user plane integrity security protection and does not activate the user plane confidentiality security protection, it determines the integrity security protection algorithm based on the negotiated authentication encryption algorithm; or, after the access network device determines to activate the user plane confidentiality security protection and does not activate the user plane integrity security protection, it determines the confidentiality security protection algorithm based on the negotiated authentication encryption algorithm.

[0301] In this embodiment, there is no restriction on the timing when the access network device determines the confidentiality security protection algorithm required for user plane confidentiality security protection and / or the integrity security protection algorithm required for user plane integrity security protection based on the negotiated authentication encryption algorithm. Before the security protection based on the confidentiality security protection algorithm or the integrity security protection algorithm needs to be activated, the confidentiality security protection algorithm or the integrity security protection algorithm can be determined based on the authentication encryption algorithm.

[0302] S630: The access network device configures a security protection algorithm and a security key for the user plane.

[0303] In this embodiment, the terminal device and the access network device negotiate to use an authentication encryption algorithm to perform security protection on the UP message. However, if the access network device determines to activate user plane confidentiality security protection and not to activate user plane integrity security protection according to the security protection policy, the access network device can configure the user plane confidentiality security protection algorithm and the key corresponding to the confidentiality security protection algorithm. If the access network device determines to activate user plane integrity security protection and not to activate user plane confidentiality security protection according to the security protection policy, the access network device can configure the user plane integrity security protection algorithm and the key corresponding to the integrity security protection algorithm. The key corresponding to the confidentiality security protection algorithm and the key corresponding to the integrity security protection algorithm may be the same as or different from the security key corresponding to the authentication encryption algorithm, and this is not limited in this application.

[0304] Exemplarily, the access network device may configure the user plane security protection algorithm and security key in a PDCP entity, an RRC entity, or a security processing dedicated entity.

[0305] In this embodiment, the access network device configures the user plane security protection algorithm and security key, including the following two possible implementation methods:

[0306] As a possible implementation, if the UP message security activation state is to activate UP message integrity security protection and deactivate UP message confidentiality security protection, the access network device configures the UP message integrity security protection key and integrity security protection algorithm. The integrity security protection algorithm can be determined based on the authenticated encryption algorithm. For example, if the negotiated authenticated encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can be the authenticated encryption algorithm with the confidentiality protection portion of the algorithm cleared.

[0307] As another possible implementation, if the UP message security activation state is to activate UP message confidentiality protection and deactivate UP message integrity protection, the access network device configures the UP message confidentiality protection key and confidentiality protection algorithm. The confidentiality protection algorithm can be determined based on the authenticated encryption algorithm. For example, if the negotiated authenticated encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW confidentiality protection algorithm. Alternatively, the confidentiality protection algorithm can be the authenticated encryption algorithm with the integrity protection portion of the algorithm cleared.

[0308] For example, when it is determined that the UP message security activation status is to activate the UP message integrity security protection and not activate the UP message confidentiality security protection, the access network device can configure the user plane security protection algorithm and security key of the terminal device through the third indication information S660.

[0309] In this embodiment, since the terminal device and the access network device negotiate to use an authentication encryption algorithm to perform security protection for UP messages, if the terminal device determines to activate user plane confidentiality security protection and not activate user plane integrity security protection based on the third indication information, the terminal device can configure the user plane confidentiality security protection algorithm and the key corresponding to the confidentiality security protection algorithm; if the terminal device determines to activate user plane integrity security protection and not activate user plane confidentiality security protection based on the third indication information, the access network device can configure the user plane integrity security protection algorithm and the key corresponding to the integrity security protection algorithm.

[0310] Exemplarily, the terminal device may configure the user plane security protection algorithm and security key in a PDCP entity, an RRC entity, or a security processing dedicated entity.

[0311] As a possible implementation, if the UP message security activation state is to activate UP message integrity security protection and deactivate UP message confidentiality security protection, the terminal device configures the UP message integrity security protection key and integrity security protection algorithm. The integrity security protection algorithm can be determined based on the authenticated encryption algorithm. For example, if the negotiated authenticated encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can be the authenticated encryption algorithm with the confidentiality protection portion of the algorithm cleared.

[0312] As another possible implementation, if the UP message security activation state is to activate UP message confidentiality protection and deactivate UP message integrity protection, the terminal device configures the UP message confidentiality protection key and confidentiality protection algorithm. The confidentiality protection algorithm can be determined based on the authenticated encryption algorithm. For example, if the negotiated authenticated encryption algorithm is the SNOW-AEAD algorithm, the security protection algorithm is determined to be the SNOW confidentiality protection algorithm. Alternatively, the confidentiality protection algorithm can be the authenticated encryption algorithm with the integrity protection portion of the algorithm cleared.

[0313] In the communication method shown in Figure 6, the access network device determines to activate user plane integrity security protection or confidentiality security protection according to the security protection policy, but when the negotiation result of the algorithm negotiation process is an authentication encryption algorithm, the access network device and the terminal device can still determine the required integrity security protection algorithm or confidentiality security protection algorithm based on the authentication encryption algorithm, so that when the algorithm negotiation result and the security protection policy do not match, user plane security protection can still be achieved.

[0314] In the communication methods shown in Figures 5 and 6 above, it is mainly introduced that the result of the algorithm negotiation between the terminal device and the access network device is the authentication encryption algorithm. It should be understood that the terminal device and the access network device can also negotiate to use the integrity security protection algorithm and / or the confidentiality security protection algorithm to perform security protection for the UP message. For example, the result of the algorithm negotiation between the terminal device and the access network device is the integrity security protection algorithm and / or the confidentiality security protection algorithm. When the user plane integrity security protection and confidentiality security protection are activated, the authentication encryption algorithm can be determined based on the integrity security protection algorithm and / or the confidentiality security protection algorithm, and the user plane message is securely protected based on the determined authentication encryption algorithm. The specific determination method is not repeated here. For another example, the result of the algorithm negotiation between the terminal device and the access network device is the authentication encryption algorithm. When the user plane integrity security protection and confidentiality security protection are activated, the integrity security protection algorithm and the confidentiality security protection algorithm can be determined based on the authentication encryption algorithm. The user plane message is securely protected based on the determined integrity security protection algorithm and confidentiality security protection algorithm. The specific determination method is not repeated here.

[0315] For ease of understanding, the following describes in detail with reference to FIG7 how the terminal device and the access network device configure the security protection algorithm and key for the UP message when the terminal device and the access network device negotiate to use different security protection algorithms for the UP message.

[0316] FIG7 is a schematic flow chart of another communication method provided in an embodiment of the present application, comprising the following steps:

[0317] S710: The terminal device and the access network device negotiate a security protection algorithm.

[0318] The terminal device and the access network device negotiate a security protection algorithm, including but not limited to negotiating a security protection algorithm applicable to RRC messages and / or UP messages. This embodiment mainly involves negotiating a security protection algorithm applicable to UP messages between the terminal device and the access network device, and activating security protection for UP messages.

[0319] The security protection algorithm negotiated between the terminal device and the access network device includes: at least one of an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm.

[0320] Exemplarily, for a terminal device, the security protection of UP messages includes: integrity security protection and encryption security protection of uplink UP messages, and integrity verification and decryption operations of downlink UP messages.

[0321] Exemplarily, for an access network device, security protection of UP messages includes: integrity verification and decryption operations of uplink UP messages, and integrity security protection and encryption security protection of downlink UP messages.

[0322] The specific algorithm negotiation process is not limited in this embodiment, and includes but is not limited to the following possible algorithm negotiation methods:

[0323] As a possible implementation, the terminal device and the access network device can negotiate a security protection algorithm through the AS SMC process. In this implementation, the access network device selects a security protection algorithm suitable for the UP message before sending an SMC message to the terminal device, and then transmits the selected security protection algorithm to the terminal device through the SMC message.

[0324] For example, the access network device selects a security protection algorithm for the UP message based on the security capabilities of the terminal device, the local algorithm selection policy, or the locally configured algorithm priority: one or more of the following: an authentication encryption algorithm, an independent integrity security protection algorithm, and an encryption security protection algorithm.

[0325] For example, when the terminal device is converted from an idle state to a connected state (idle-connected), the terminal device and the access network device can negotiate a security protection algorithm through the AS SMC process and activate UP message security protection through the RRC reconfiguration process.

[0326] For example, when the terminal device is converted from an inactive state to a connected state (inactive-connected), if the security protection algorithms used by the source base station and the target base station are different or the security activation states are different, the terminal device and the access network device first negotiate the security protection algorithm through the AS SMC process, and then activate the UP message security protection through the RRC reconfiguration process.

[0327] As another possible implementation, the terminal device and the access network device can negotiate a security protection algorithm via an RRC reconfiguration message. In this implementation, the access network device selects a security protection algorithm for the UP message before sending the RRC reconfiguration message to the terminal device, and then transmits the selected security protection algorithm to the terminal device via the RRC reconfiguration message.

[0328] For example, the access network device selects a security protection algorithm for the UP message based on the security capabilities of the terminal device, the local algorithm selection policy, or the locally configured algorithm priority: at least one of the following: an authentication encryption algorithm, an independent integrity security protection algorithm, and an encryption security protection algorithm. The access network device can pass it to the terminal device through an RRC reconfiguration message.

[0329] Exemplarily, in the process of UE switching from the source base station to the target base station, the algorithm negotiation process used to perform the UP message can be incorporated into the RRC connection reconfiguration process, that is, the RRC connection reconfiguration message includes both a security protection algorithm and a security protection indication. Among them, handover (HO) can be understood as Xn connection switching (that is, the access network device of the service terminal device changes, switching from the source access network device to the target access network device, and the access network device and the target access network device have a direct interface), or N2 switching (that is, the access network device of the service terminal device changes, and the source access network device and the target access network device have no direct interface). Alternatively, handover can also be understood as network switching, such as switching from a 4G network to a 5G network.

[0330] For ease of description, this embodiment takes the negotiation of the security protection algorithm between the terminal device and the access network device through the AS SMC process, and the activation of the UP message security protection algorithm through the RRC reconfiguration process as an example, and other algorithm negotiation methods are not repeated.

[0331] S720: The access network device configures the security protection algorithm and key for the UP message.

[0332] For example, the access network device may configure the UP message security protection algorithm and key based on the security protection algorithm negotiation result and the UP message security activation status. Optionally, in this embodiment, the access network device configures the UP message security protection algorithm and key including but not limited to the following possible implementations:

[0333] As a possible implementation method, the security protection algorithm negotiation result includes an authentication and encryption algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the access network device configures the authentication and encryption algorithm of the UP message and the key applicable to the authentication and encryption algorithm.

[0334] As another possible implementation, if the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, the access network device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key, and encryption security protection algorithm. The integrity security protection algorithm and encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithms are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm. Alternatively, the integrity security protection algorithm can be the integrity protection portion of the authentication encryption algorithm, and the encryption security protection algorithm can be the encryption protection portion of the authentication encryption algorithm.

[0335] As another possible implementation, if the security protection algorithm negotiation result includes an authenticated encryption algorithm, and the UP message security activation status is activating UP message integrity security protection and deactivating UP message encryption security protection, the access network device configures the UP message integrity security protection key and integrity security protection algorithm. The integrity security protection algorithm can be determined based on the authenticated encryption algorithm. For example, if the negotiated authenticated encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can be the integrity protection component of the authenticated encryption algorithm.

[0336] As another possible implementation, if the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation status is activating UP message encryption security protection and deactivating UP message integrity security protection, the access network device configures the UP message encryption security protection key and encryption security protection algorithm. The encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW encryption security protection algorithm. Alternatively, the encryption security protection algorithm can be the encryption protection component of the authentication encryption algorithm.

[0337] As another possible implementation, if the security protection algorithm negotiation result includes an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is activating UP message integrity security protection and encryption security protection, the access network device configures an authentication encryption algorithm for UP messages and a key applicable to the authentication encryption algorithm. The authentication encryption algorithm can be determined based on the integrity security protection algorithm and the encryption security protection algorithm. For example, if the negotiated integrity security protection algorithm and encryption security protection algorithm are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm, the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0338] As another possible implementation, if the security protection algorithm negotiation result includes an integrity security protection algorithm, and the UP message security activation status is UP message integrity security and encryption security activated, the access network device configures an authentication encryption algorithm for UP messages and a key applicable to the authentication encryption algorithm. The authentication encryption algorithm can be determined based on the integrity security protection algorithm. For example, if the negotiated integrity security protection algorithm is the SNOW integrity security protection algorithm, the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0339] As another possible implementation, if the security protection algorithm negotiation result includes an encryption security protection algorithm, and the UP message security activation status is UP message integrity security protection and encryption security protection activated, the access network device configures an authentication encryption algorithm for UP messages and a key applicable to the authentication encryption algorithm. The authentication encryption algorithm can be determined based on the encryption security protection algorithm. For example, if the negotiated encryption security protection algorithm is the SNOW encryption security protection algorithm, the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0340] As another possible implementation method, the security protection algorithm negotiation result includes the integrity security protection algorithm and the encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the access network device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key and encryption security protection algorithm.

[0341] As another possible implementation method, the security protection algorithm negotiation result includes the integrity security protection algorithm, and the UP message security activation status is to activate the UP message integrity security protection and not activate the encryption security protection of the UP message, then the access network device configures the UP message integrity security protection key and integrity security protection algorithm.

[0342] As another possible implementation method, the security protection algorithm negotiation result includes encryption security protection, and the UP message security activation status is to activate UP message encryption security protection and not activate UP message integrity security protection, then the access network device configures the UP message encryption security protection key and encryption security protection algorithm.

[0343] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the access network device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0344] As another possible implementation method, the security protection algorithm negotiation result includes the authentication encryption algorithm, the integrity security protection algorithm and the encryption security protection algorithm, and the UP message security activation status is to activate the UP message integrity security protection and not activate the UP message encryption security protection, then the access network device configures the UP message integrity security protection key and integrity security protection algorithm.

[0345] As another possible implementation method, the security protection algorithm negotiation result includes the authentication encryption algorithm, the integrity security protection algorithm and the encryption security protection algorithm, and the UP message security activation status is to activate the UP message encryption security protection and not activate the UP message integrity security protection, then the access network device configures the UP message encryption security protection key and encryption security protection algorithm.

[0346] Specifically, after the access network device determines to use the security protection algorithm to perform security protection on the UP message, the access network device activates integrity security protection and / or encryption security protection of the UP message based on the security protection algorithm.

[0347] Furthermore, after the terminal device and the access network device negotiate a security protection algorithm through the AS SMC process, the access network device may instruct the terminal device to activate UP message integrity security protection and / or encryption security protection through RRC reconfiguration information. The method process shown in FIG6 further includes:

[0348] S730, the access network device sends an RRC reconfiguration message to the terminal device.

[0349] Exemplarily, the RRC reconfiguration message is used to indicate UP message integrity security protection and / or encryption security protection.

[0350] Optionally, the RRC reconfiguration message includes second indication information, where the second indication information is used to indicate whether the UP message is to be securely protected based on an authentication encryption algorithm.

[0351] S740: The terminal device configures the security protection algorithm and key for the UP message.

[0352] For example, the terminal device may configure the UP message security protection algorithm and key based on the security protection algorithm negotiation result and the UP message activation status. Optionally, in this embodiment, the terminal device configures the UP message security protection algorithm and key including but not limited to the following possible implementations:

[0353] As a possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0354] As another possible implementation method, if the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, the terminal device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key and encryption security protection algorithm. Among them, the integrity security protection algorithm and the encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithms are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm. Alternatively, the integrity security protection algorithm can also be the integrity protection part of the authentication encryption algorithm, and the encryption security protection algorithm can also be the encryption protection part of the authentication encryption algorithm.

[0355] As another possible implementation, if the security protection algorithm negotiation result includes an authenticated encryption algorithm, and the UP message security activation status is to activate UP message integrity security protection and deactivate UP message encryption security protection, the terminal device configures the UP message integrity security protection key and integrity security protection algorithm. The integrity security protection algorithm can be determined based on the authenticated encryption algorithm. For example, if the negotiated authenticated encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW integrity security protection algorithm. Alternatively, the integrity security protection algorithm can be the integrity protection component of the authenticated encryption algorithm.

[0356] As another possible implementation, if the security protection algorithm negotiation result includes an authentication encryption algorithm, and the UP message security activation status is to activate UP message encryption security protection and deactivate UP message integrity security protection, the terminal device configures the UP message encryption security protection key and encryption security protection algorithm. The encryption security protection algorithm can be determined based on the authentication encryption algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithm is the SNOW encryption security protection algorithm. Alternatively, the encryption security protection algorithm can also be the encryption protection portion of the authentication encryption algorithm.

[0357] As another possible implementation, if the security protection algorithm negotiation result includes an integrity security protection algorithm and an encryption security protection algorithm, and the UP message security activation status is activating UP message integrity security protection and encryption security protection, the terminal device configures an authentication encryption algorithm for UP messages and a key applicable to the authentication encryption algorithm. The authentication encryption algorithm can be determined based on the integrity security protection algorithm and the encryption security protection algorithm. For example, if the negotiated integrity security protection algorithm and encryption security protection algorithm are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm, the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0358] As another possible implementation, if the security protection algorithm negotiation result includes an integrity security protection algorithm, and the UP message security activation status is UP message integrity security and encryption security activated, the terminal device configures an authentication encryption algorithm for UP messages and a key applicable to the authentication encryption algorithm. The authentication encryption algorithm can be determined based on the integrity security protection algorithm. For example, if the negotiated integrity security protection algorithm is the SNOW integrity security protection algorithm, the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0359] As another possible implementation, if the security protection algorithm negotiation result includes an encryption security protection algorithm, and the UP message security activation status is UP message integrity security protection and encryption security protection activated, the terminal device configures an authentication encryption algorithm for UP messages and a key applicable to the authentication encryption algorithm. The authentication encryption algorithm can be determined based on the encryption security protection algorithm. For example, if the negotiated encryption security protection algorithm is the SNOW encryption security protection algorithm, the mapped authentication encryption algorithm is the SNOW-AEAD algorithm.

[0360] As another possible implementation method, the security protection algorithm negotiation result includes the integrity security protection algorithm and the encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key and encryption security protection algorithm.

[0361] As another possible implementation method, the security protection algorithm negotiation result includes the integrity security protection algorithm, and the UP message security activation status is to activate the UP message integrity security protection and not activate the encryption security protection of the UP message, then the terminal device configures the UP message integrity security protection key and integrity security protection algorithm.

[0362] As another possible implementation method, the security protection algorithm negotiation result includes encryption security protection, and the UP message security activation status is to activate UP message encryption security protection and not activate UP message integrity security protection, then the terminal device configures the UP message encryption security protection key and encryption security protection algorithm.

[0363] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm, and the UP message security activation status is to activate UP message integrity security protection and encryption security protection, then the terminal device configures the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0364] As another possible implementation method, the security protection algorithm negotiation result includes the authentication encryption algorithm, the integrity security protection algorithm and the encryption security protection algorithm, and the UP message security activation status is to activate the UP message integrity security protection and not activate the UP message encryption security protection, then the terminal device configures the UP message integrity security protection key and integrity security protection algorithm.

[0365] As another possible implementation method, the security protection algorithm negotiation result includes the authentication encryption algorithm, the integrity security protection algorithm and the encryption security protection algorithm, and the UP message security activation status is to activate the UP message encryption security protection and not activate the UP message integrity security protection, then the terminal device configures the UP message encryption security protection key and encryption security protection algorithm.

[0366] For example, if the access network device indicates via the second indication information whether the UP message is to be securely protected based on an authentication encryption algorithm, the terminal device may configure the UP message security protection algorithm and key based on the security protection algorithm negotiation result, the UP message activation status, and the second indication information. Optionally, in this embodiment, the terminal device configures the UP message security protection algorithm and key including, but not limited to, the following possible implementations:

[0367] As a possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, the UP message security activation status is to activate the UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is security protected based on the authentication encryption algorithm, then the terminal device is configured with the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0368] As another possible implementation, if the security protection algorithm negotiation result includes an authentication encryption algorithm, the UP message security activation status is activating UP message integrity security protection and encryption security protection, and the second indication information indicates that UP messages are not protected based on the authentication encryption algorithm, the terminal device determines an independent integrity security protection algorithm and an encryption security protection algorithm based on the authentication encryption algorithm, and configures the UP message integrity security protection key, integrity security protection algorithm, UP encryption security protection key, and encryption security protection algorithm. For example, if the negotiated authentication encryption algorithm is the SNOW-AEAD algorithm, the mapped security protection algorithms are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm.

[0369] In another possible implementation, the security protection algorithm negotiation result includes an encryption security protection algorithm and an integrity security protection algorithm. The UP message security activation status is activating UP message integrity security protection and encryption security protection. The second indication information indicates that UP messages are protected based on an authenticated encryption algorithm. The terminal device then determines the authenticated encryption algorithm based on the independent encryption security protection algorithm and the integrity security protection algorithm, and further configures the authenticated encryption algorithm for the UP message and a key applicable to the authenticated encryption algorithm. For example, if the independent encryption security protection algorithm and the integrity security protection algorithm are the SNOW integrity security protection algorithm and the SNOW encryption security protection algorithm, the mapped authenticated encryption algorithm is the SNOW-AEAD algorithm.

[0370] In another possible implementation, the security protection algorithm negotiation result includes an encryption security protection algorithm, the UP message security activation status indicates that UP message integrity security protection and encryption security protection are activated, and the second indication information indicates that UP messages are protected based on an authenticated encryption algorithm. The terminal device then determines the authenticated encryption algorithm based on the encryption security protection algorithm and further configures the authenticated encryption algorithm and a key for the UP message. For example, if the encryption security protection algorithm is the SNOW encryption security protection algorithm, the mapped authenticated encryption algorithm is the SNOW-AEAD algorithm.

[0371] In another possible implementation, the security protection algorithm negotiation result includes an integrity security protection algorithm, the UP message security activation status indicates that UP message integrity security protection and encryption security protection are activated, and the second indication information indicates that UP messages are protected based on an authenticated encryption algorithm. The terminal device then determines the authenticated encryption algorithm based on the integrity security protection algorithm and further configures the authenticated encryption algorithm and a key for the UP message. For example, if the integrity security protection algorithm is the SNOW integrity security protection algorithm, the mapped authenticated encryption algorithm is the SNOW-AEAD algorithm.

[0372] As another possible implementation method, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm. The UP message security activation status is to activate the UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is security protected based on the authentication encryption algorithm. The terminal device is configured with the authentication encryption algorithm of the UP message and the key applicable to the authentication encryption algorithm.

[0373] As another possible implementation, the security protection algorithm negotiation result includes an authentication encryption algorithm, an integrity security protection algorithm, and an encryption security protection algorithm. The UP message security activation state is to activate UP message integrity security protection and encryption security protection, and the second indication information indicates that the UP message is not to be security-protected based on the authentication encryption algorithm. In this case, the terminal device configures the UP message integrity security protection key, the integrity security protection algorithm, the UP encryption security protection key, and the encryption security protection algorithm. Furthermore, after the terminal device determines to use the security protection algorithm to security-protect the UP message, the terminal device activates the integrity security protection and / or encryption security protection of the UP message based on the security protection algorithm.

[0374] Optionally, if the terminal device successfully verifies the integrity of the RRC connection reconfiguration message, the terminal device may send an RRC connection reconfiguration completion message to the access network device. In the communication method shown in FIG7 , a security protection algorithm may be negotiated between the terminal device and the access network device, and UP message security protection may be activated through the RRC reconfiguration process. In some cases, the security protection algorithm negotiated between the terminal device and the access network device may be an authentication encryption algorithm that can implement both encryption security protection and integrity security protection, thereby improving security. In some cases, the security protection algorithm negotiated between the terminal device and the access network device may be an independent integrity security protection algorithm and / or encryption security protection algorithm, thereby improving the backward compatibility of the solution.

[0375] It should be understood that the size of the serial numbers of the above processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0376] It should also be understood that in the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between different embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form new embodiments according to their internal logical relationships.

[0377] It should also be understood that in some of the above embodiments, exemplary descriptions are mainly given using devices in existing network architectures (such as UE, RAN, etc.). It should be understood that the embodiments of the present application do not limit the specific form of the devices. For example, devices that can achieve the same functions in the future are applicable to the embodiments of the present application.

[0378] It can be understood that, in the above-mentioned various method embodiments, the methods and operations implemented by a device (such as UE, RAN) may also be implemented by components of the device (such as a chip or circuit).

[0379] The communication method provided in the embodiments of the present application is described in detail above, in conjunction with Figures 5 to 7 . The communication method described above is primarily described from the perspective of interaction between a terminal device and an access network device. It is understood that, in order to implement the aforementioned functions, the terminal device and the access network device include hardware structures and / or software modules corresponding to each function.

[0380] Those skilled in the art should be aware that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is performed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0381] The communication device provided in this application is described in detail below with reference to Figures 8 to 10. It should be understood that the description of the device embodiment corresponds to the description of the method embodiment. Therefore, for matters not described in detail, reference can be made to the method embodiment above. For the sake of brevity, some contents will not be repeated.

[0382] In the embodiment of the present application, the functional modules of the transmitting device or the receiving device can be divided according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical functional division. There may be other division methods in actual implementation. The following is an example of dividing each functional module according to each function.

[0383] Figure 8 is a schematic block diagram of a communication device 10 provided in an embodiment of the present application. The device 10 includes a transceiver module 11 and a processing module 12. The transceiver module 11 can implement corresponding communication functions, and the processing module 12 is used to process data. In other words, the transceiver module 11 is used to perform operations related to receiving and sending, and the processing module 12 is used to perform operations other than receiving and sending. The transceiver module 11 can also be referred to as a communication interface or a communication unit.

[0384] Optionally, the device 10 may further include a storage module 13, which may be used to store instructions and / or data. The processing module 12 may read the instructions and / or data in the storage module so that the device implements the actions of the devices in the aforementioned method embodiments.

[0385] In one design, the apparatus 10 may correspond to the UE in the above method embodiments, or a component (such as a chip) of the UE.

[0386] The device 10 can implement the steps or processes executed by the UE in the above method embodiment, wherein the transceiver module 11 can be used to perform the transceiver-related operations of the UE in the above method embodiment, and the processing module 12 can be used to perform the processing-related operations of the UE in the above method embodiment.

[0387] In one possible implementation, the transceiver module 11 is configured to receive first indication information, where the first indication information is used to indicate activation of user plane integrity security protection and confidentiality security protection. The processing module 12 is configured to determine, based on the first indication information, whether to use an authentication encryption algorithm to perform user plane confidentiality and integrity security protection, and configure the authentication encryption algorithm and a security key applicable to the authentication encryption algorithm for the user plane, wherein the security algorithm includes a portion for performing confidentiality protection and a portion for performing integrity protection, the security algorithm is used to perform user plane confidentiality and integrity security protection, and performing user plane confidentiality and integrity security protection includes: using the security key as an input key of the integrity protection portion in the security algorithm to perform integrity protection on the user plane message, and using the security key as an input key of the confidentiality protection portion in the security algorithm to perform confidentiality protection on the user plane message.

[0388] In another possible implementation, the processing module 12 is configured to determine an integrity security protection algorithm based on the selected security algorithm. The transceiver module 11 is configured to receive third indication information indicating activation of user plane integrity security protection. The processing module 12 is configured to, upon determining, based on the third indication information, to use the integrity security protection algorithm for user plane integrity security protection, configure the integrity security protection algorithm for the user plane and a security key applicable to the integrity security protection algorithm.

[0389] In another possible implementation, the processing module 12 is configured to determine a confidentiality security protection algorithm based on the selected security algorithm. The transceiver module 11 is configured to receive third indication information, the third indication information being used to indicate activation of user plane confidentiality security protection. The processing module 12 is configured to, upon determining, based on the third indication information, to use the confidentiality security protection algorithm for user plane confidentiality security protection, determine the confidentiality security protection algorithm based on an authenticated encryption algorithm, and configure the confidentiality security protection algorithm and a security key applicable to the confidentiality security protection algorithm for the user plane; wherein the authenticated encryption algorithm is an authenticated encryption algorithm capable of implementing both confidentiality security protection and integrity security protection.

[0390] When the device 10 is used to execute the method in FIG. 5 , the transceiver module 11 may be used to execute the steps of sending and receiving information in the method, such as step S510 , and the processing module 12 may be used to execute the processing steps in the method, such as step S530 .

[0391] When the device 10 is used to execute the method in Figure 6, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as step S640, and the processing module 12 can be used to execute the processing steps in the method, such as steps S650 and S660.

[0392] When the device 10 is used to execute the method in Figure 7, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as steps S710 and S730, and the processing module 12 can be used to execute the processing steps in the method, such as step S740.

[0393] It should be understood that the specific process of each unit executing the above corresponding steps has been described in detail in the above method embodiment, and for the sake of brevity, it will not be repeated here.

[0394] In another design, the device 10 may correspond to the RAN in the above method embodiment, or a component of the RAN (such as a chip).

[0395] The device 10 can implement steps or processes corresponding to those performed by the RAN in the above method embodiments. The transceiver module 11 can be used to perform operations related to transceiver transmission of the RAN in the above method embodiments, and the processing module 12 can be used to perform operations related to processing of the RAN in the above method embodiments.

[0396] In one possible implementation, the processing module 12 is used to configure the authentication encryption algorithm and the security key applicable to the authentication encryption algorithm for the user plane when it is determined to use the authentication encryption algorithm to perform user plane confidentiality and integrity security protection. The transceiver module 11 is used to send a first indication message to the terminal device, and the first indication message is used to indicate the activation of user plane integrity security protection and confidentiality security protection, wherein the security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform user plane confidentiality and integrity security protection, and the user plane confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the user plane message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user plane message.

[0397] In another possible implementation, processing module 12 is configured to determine an integrity security protection algorithm based on the selected security algorithm. Processing module 12 is configured to configure the integrity security protection algorithm for the user plane and a security key applicable to the integrity security protection algorithm, if activation of user plane integrity security protection is determined according to the security protection policy. Transceiver module 11 is configured to send third indication information to the terminal device, the third indication information being used to indicate activation of user plane integrity security protection.

[0398] In another possible implementation, the processing module 12 is configured to determine a confidentiality security protection algorithm based on the selected security algorithm. When determining to activate user plane confidentiality security protection according to the security protection policy, the processing module 12 is configured to configure the confidentiality security protection algorithm and a security key applicable to the confidentiality security protection algorithm for the user plane. The transceiver module 11 is configured to send third indication information to the terminal device, the third indication information being used to indicate activation of user plane confidentiality security protection.

[0399] When the device 10 is used to execute the method in FIG5 , the transceiver module 11 may be used to execute the steps of sending and receiving information in the method, such as step S520 , and the processing module 12 may be used to execute the processing steps in the method, such as step S510 .

[0400] When the device 10 is used to execute the method in Figure 6, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as step S640, and the processing module 12 can be used to execute the processing steps in the method, such as steps S610, S620 and S630.

[0401] When the device 10 is used to execute the method in Figure 7, the transceiver module 11 can be used to execute the steps of sending and receiving information in the method, such as steps S710 and S730, and the processing module 12 can be used to execute the processing steps in the method, such as step S720.

[0402] It should be understood that the specific process of each unit executing the above corresponding steps has been described in detail in the above method embodiment, and for the sake of brevity, it will not be repeated here.

[0403] It should also be understood that the device 10 here is embodied in the form of a functional module. The term "module" here may refer to an application specific integrated circuit (ASIC), an electronic circuit, a processor (such as a shared processor, a dedicated processor or a group processor, etc.) and memory for executing one or more software or firmware programs, a combined logic circuit and / or other suitable components that support the described functions. In an optional example, those skilled in the art will understand that the device 10 may be specifically the mobile management network element in the above-mentioned embodiment, and may be used to execute the various processes and / or steps corresponding to the mobile management network element in the above-mentioned method embodiments; or, the device 10 may be specifically the terminal device in the above-mentioned embodiment, and may be used to execute the various processes and / or steps corresponding to the terminal device in the above-mentioned method embodiments. To avoid repetition, it will not be described here.

[0404] The apparatus 10 of each of the above-described solutions has the function of implementing the corresponding steps performed by the devices (such as terminal devices and network devices) in the above-described methods. This function can be implemented by hardware, or by hardware executing corresponding software implementations. The hardware or software includes one or more modules corresponding to the above-described functions; for example, the transceiver module can be replaced by a transceiver (for example, the transmitting unit in the transceiver module can be replaced by a transmitter, and the receiving unit in the transceiver module can be replaced by a receiver), and other units, such as the processing module, can be replaced by a processor to respectively perform the transceiver operations and related processing operations in each method embodiment.

[0405] In addition, the transceiver module 11 may also be a transceiver circuit (for example, may include a receiving circuit and a sending circuit), and the processing module may be a processing circuit.

[0406] FIG9 is a schematic diagram of another communication device 20 provided in an embodiment of the present application. Device 20 includes a processor 21, which is configured to execute computer programs or instructions stored in memory 22, or read data / signaling stored in memory 22, to perform the methods described in the above method embodiments. Optionally, there may be one or more processors 21.

[0407] Optionally, as shown in FIG9 , the apparatus 20 further includes a memory 22 for storing computer programs or instructions and / or data. The memory 22 may be integrated with the processor 21 or may be separately provided. Optionally, there may be one or more memories 22 .

[0408] Optionally, as shown in Figure 9, the device 20 further includes a transceiver 23, which is used to receive and / or send signals. For example, the processor 21 is used to control the transceiver 23 to receive and / or send signals.

[0409] As a solution, the device 20 is used to implement the operations performed by the UE in the above various method embodiments.

[0410] As another solution, the device 20 is used to implement the operations performed by the RAN in the above various method embodiments.

[0411] It should be understood that the processor mentioned in the embodiments of the present application may be a central processing unit (CPU), or may be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc.

[0412] It should also be understood that the memory mentioned in the embodiments of the present application may be a volatile memory and / or a non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM). For example, RAM can be used as an external cache. By way of example and not limitation, RAM includes the following forms: static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus RAM (DR RAM).

[0413] It should be noted that when the processor is a general-purpose processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, the memory (storage module) can be integrated into the processor.

[0414] It should also be noted that the memory described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0415] 10 is a schematic diagram of a chip system 30 provided in an embodiment of the present application. The chip system 30 (or also referred to as a processing system) includes a logic circuit 31 and an input / output interface 32.

[0416] The logic circuit 31 may be a processing circuit in the chip system 30. The logic circuit 31 may be coupled to a storage unit and call instructions in the storage unit so that the chip system 30 can implement the methods and functions of the various embodiments of the present application. The input / output interface 32 may be an input / output circuit in the chip system 30, outputting information processed by the chip system 30 or inputting data or signaling information to be processed into the chip system 30 for processing.

[0417] As a solution, the chip system 30 is used to implement the operations performed by the UE or the RAN in the above various method embodiments.

[0418] For example, the logic circuit 31 is used to implement the processing-related operations performed by the UE or RAN in the above method embodiments; the input / output interface 32 is used to implement the sending and / or receiving-related operations performed by the UE or RAN in the above method embodiments.

[0419] An embodiment of the present application further provides a computer-readable storage medium storing computer instructions for implementing the methods executed by the UE or the RAN in the above-mentioned method embodiments.

[0420] For example, when the computer program is executed by a computer, the computer can implement the methods performed by the UE or the RAN in each embodiment of the above method.

[0421] An embodiment of the present application further provides a computer program product, comprising instructions, which, when executed by a computer, implement the methods performed by the UE or the RAN in the above-mentioned method embodiments.

[0422] An embodiment of the present application also provides a communication system, including the aforementioned UE and RAN.

[0423] The explanation of the relevant contents and beneficial effects of any of the above-mentioned devices can be referred to the corresponding method embodiments provided above, which will not be repeated here.

[0424] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0425] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. For example, the computer can be a personal computer, a server, or a network device, etc. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrations. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a magnetic tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid state disk (SSD)). For example, the aforementioned available medium includes, but is not limited to, various media that can store program code, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0426] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A communication method, characterized in that: include: In the case where it is determined to use a security algorithm to perform confidentiality and integrity security protection on the user plane, configuring the security algorithm of the user plane and a security key applicable to the security algorithm; Sending first indication information to the terminal device, where the first indication information is used to indicate activation of user plane confidentiality and integrity security protection, The security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform user-plane confidentiality and integrity security protection, and the user-plane confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the user-plane message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user-plane message.

2. The method according to claim 1, characterized in that: The method further comprises: Determine using the security algorithm to perform user plane confidentiality and integrity security protection according to at least one of the following information: Terminal device capability information, user plane message security protection policy, algorithm negotiation results, or algorithm selection policy.

3. The method according to claim 1 or 2, characterized in that: The method further comprises: Sending second indication information to the terminal device, where the second indication information is used to indicate that user plane confidentiality and integrity security protection is performed based on the security algorithm.

4. The method according to claim 3, characterized in that: The method further comprises: Send a data radio bearer DRB identifier, session identifier, or distribution unit DU identifier corresponding to the second indication information to the terminal device.

5. The method according to claim 3 or 4, characterized in that: The sending the second indication information to the terminal device includes: In the case where it is determined to use the security algorithm to perform user plane confidentiality and integrity security protection, second indication information is sent to the terminal device.

6. The method according to any one of claims 1 to 5, characterized in that Before sending the first indication information to the terminal device, the method further includes: Selecting the security algorithm for confidentiality and integrity security protection of the user plane; The identifier of the security algorithm is sent to the terminal device in the access layer security mode command AS SMC process.

7. The method according to any one of claims 1 to 6, characterized in that The sending the first indication information to the terminal device includes: A radio resource control (RRC) connection reconfiguration message is sent to the terminal device, wherein the RRC connection reconfiguration message includes the first indication information.

8. The method according to claim 7, characterized in that The RRC connection reconfiguration message also includes an identifier of the security algorithm.

9. The method according to any one of claims 1 to 8, characterized in that The first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

10. The method according to any one of claims 1 to 9, characterized in that The configuring the security algorithm of the user plane and a security key applicable to the security algorithm includes: The security algorithm of the user plane and a security key applicable to the security algorithm are configured in a packet data convergence layer protocol PDCP entity.

11. The method according to any one of claims 1 to 10, characterized in that The method further comprises: Receive an uplink user plane message from the terminal device, use the security key as an input key for the integrity protection part in the security algorithm to verify the integrity of the uplink user plane message, and use the security key as an input key for the confidentiality protection part in the security algorithm to decrypt the uplink user plane message.

12. A communication method, characterized in that: include: receiving first indication information, where the first indication information is used to indicate activation of user plane confidentiality and integrity security protection; Determine, according to the first indication information, to use a security algorithm to perform confidentiality and integrity security protection on the user plane, configure the security algorithm on the user plane and a security key applicable to the security algorithm, The security algorithm includes a part for confidentiality protection and a part for integrity protection. User plane confidentiality and integrity security protection, the user plane confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm to perform integrity protection on the user plane message, and using the security key as the input key of the confidentiality protection part in the security algorithm to perform confidentiality protection on the user plane message.

13. The method according to claim 12, characterized in that The method further comprises: Second indication information is received, where the second indication information is used to instruct to perform user plane confidentiality and integrity security protection based on the security algorithm.

14. The method according to claim 13, characterized in that The method further comprises: Receive a data radio bearer DRB identifier, a session identifier, or a distributed unit DU identifier corresponding to the second indication information.

15. The method according to any one of claims 12 to 14, characterized in that Before receiving the first indication information, the method further includes: The identifier of the security algorithm is received in the access layer security mode command AS SMC process.

16. The method according to any one of claims 12 to 15, characterized in that The receiving first indication information comprises: A radio resource control (RRC) connection reconfiguration message is received, where the RRC connection reconfiguration message includes the first indication information.

17. The method according to claim 16, characterized in that The RRC connection reconfiguration message also includes an identifier of the security algorithm.

18. The method according to any one of claims 12 to 17, characterized in that The first indication information is status information of activating integrity security protection and activating confidentiality security protection, or the first indication information is an identifier of the security algorithm.

19. The method according to any one of claims 12 to 18, characterized in that The configuring the security of the user plane and a security key applicable to the security algorithm includes: The security algorithm of the user plane and a security key applicable to the security algorithm are configured in a packet data convergence layer protocol PDCP entity.

20. The method according to any one of claims 11 to 19, characterized in that The method further comprises: Receive a downlink user plane message from a network end device, use the security key as an input key of the integrity protection part in the security algorithm to verify the integrity of the downlink user plane message, and use the security key as an input key of the confidentiality protection part in the security algorithm to decrypt the downlink user plane message.

21. A communication method, characterized in that: include: determining an integrity security protection algorithm based on the selected security algorithm; In a case where it is determined according to the security protection policy to activate the integrity security protection of the user plane, configuring the integrity security protection algorithm of the user plane and a security key applicable to the integrity security protection algorithm; Sending third indication information to the terminal device, where the third indication information is used to indicate activation of user plane integrity security protection; or, determining a confidentiality security protection algorithm based on the selected security algorithm; In the case of determining to activate confidentiality security protection of the user plane according to the security protection policy, configuring the confidentiality security protection algorithm of the user plane and a security key applicable to the confidentiality security protection algorithm; Sending third indication information to the terminal device, where the third indication information is used to indicate activation of user plane confidentiality security protection, The security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform confidentiality and integrity security protection, and the confidentiality and integrity security protection includes: using the security key as an input key of the integrity protection part in the security algorithm for integrity protection, and using the security key as an input key of the confidentiality protection part in the security algorithm for confidentiality protection.

22. The method according to claim 21, characterized in that The sending the third indication information to the terminal device includes: sending a radio resource control RRC connection reconfiguration message to the terminal device, the RRC connection reconfiguration message including the third indication information.

23. The method according to claim 22, characterized in that The RRC connection reconfiguration message also includes an identifier of the security algorithm; or, before sending the third indication information to the terminal device, the method also includes: selecting the security algorithm for confidentiality and integrity security protection of the user plane; and sending the identifier of the security algorithm to the terminal device in the access layer security mode command AS SMC process.

24. The method according to any one of claims 21 to 23, characterized in that The third indication information is status information of activating integrity security protection or activating confidentiality security protection.

25. A communication method, characterized in that: include: determining an integrity security protection algorithm based on the selected security algorithm; receiving third indication information, where the third indication information is used to indicate activation of user plane integrity security protection; In a case where it is determined according to the third indication information that an integrity security protection algorithm is used to perform integrity security protection on the user plane, configuring the integrity security protection algorithm of the user plane and a security key applicable to the integrity security protection algorithm; or, determining a confidentiality security protection algorithm based on the selected security algorithm; receiving third indication information, where the third indication information is used to indicate activation of user plane confidentiality security protection; In the case where it is determined according to the third indication information that a confidentiality security protection algorithm is used to perform confidentiality security protection of the user plane, determining the confidentiality security protection algorithm based on a security algorithm, and configuring the confidentiality security protection algorithm of the user plane and a security key applicable to the confidentiality security protection algorithm; The security algorithm includes a part for confidentiality protection and a part for integrity protection, and the security algorithm is used to perform user plane confidentiality and integrity security protection, and the confidentiality and integrity security protection includes: using the security key as the input key of the integrity protection part in the security algorithm for integrity protection, and using the security key as the input key of the confidentiality protection part in the security algorithm for confidentiality protection.

26. The method according to claim 25, characterized in that The receiving the third indication information includes: receiving a radio resource control RRC connection reconfiguration message, wherein the RRC connection reconfiguration message includes the third indication information.

27. The method according to claim 26, characterized in that The RRC connection reconfiguration message further includes an identifier of the security algorithm; or, before sending the third indication information to the terminal device, the method further includes: In the access layer security mode command AS SMC process, an identifier of the security algorithm is received from the access network device.

28. The method according to claim 26 or 27, characterized in that The RRC connection reconfiguration message also includes an identifier of the security algorithm.

29. The method according to any one of claims 25 to 28, characterized in that The third indication information is status information of activating integrity security protection or activating confidentiality security protection.

30. A communication system, characterized in that: It comprises an access network device, wherein the access network device is used to execute the method as claimed in any one of claims 1 to 11; or, the access network device is used to execute the method as claimed in any one of claims 21 to 24.

31. The communication system according to claim 30, characterized in that The communication system further comprises a terminal device, wherein the terminal device is used to execute the method as claimed in any one of claims 12 to 20; or, the terminal device is used to execute the method as claimed in any one of claims 25 to 29.

32. A communication device, characterized in that: include: One or more functional modules for executing the method as claimed in any one of claims 1 to 11, or one or more functional modules for executing the method as claimed in any one of claims 12 to 20, or one or more functional modules for executing the method as claimed in any one of claims 21 to 24, or one or more functional modules for executing the method as claimed in any one of claims 25 to 29.

33. A communication device, characterized in that: include: A processor, configured to execute a computer program stored in a memory so that the apparatus performs the method as claimed in any one of claims 1 to 11, or so that the apparatus performs the method as claimed in any one of claims 12 to 20, or so that the apparatus performs the method as claimed in any one of claims 21 to 24, or so that the apparatus performs the method as claimed in any one of claims 25 to 29.

34. A computer program product, characterized in that The computer program product comprises instructions for performing the method of any one of claims 1 to 29.

35. A computer-readable storage medium, characterized in that: include: The computer-readable storage medium stores a computer program; when the computer program is executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 29.

36. A chip, characterized in that: The chip is installed in a communication device, and the chip includes a processor and a communication interface. When the processor reads instructions through the communication interface and runs, the communication device executes the method as described in any one of claims 1 to 29.

Images