Information processing method, terminal, communication system, and storage medium

Abstract

The embodiments of the present disclosure provide an information processing method, a terminal, a communication device, and a storage medium. The information processing method comprises: a first terminal sending a first message, wherein the first message comprises first information on which security protection is performed using first security information, and the first security information is one of multiple pieces of security information acquired by the first terminal. In this way, one piece of security information among the multiple pieces of security information can be used to protect the first information carried in the first message, thereby improving the security of communication between the first terminal and a second terminal.

Description

Information processing method, terminal, communication system and storage medium Technical Field

[0001] The present disclosure relates to the field of communication technologies, and in particular to an information processing method, a terminal, a communication system, and a storage medium. Background Art

[0002] With the continuous development of wireless communication technologies, various networks can realize more and more functions. For example, relay user equipment (UE) can be used to carry out communication between UEs or between UEs and the network.

[0003] Summary of the Invention

[0004] The embodiments of the present disclosure need to solve the problem of determining which set of security information protects the discovery message when a remote terminal has multiple sets of security information in relay communication.

[0005] The embodiments of the present disclosure provide an information processing method, a terminal, a communication system, and a storage medium.

[0006] According to the first aspect of an embodiment of the present disclosure, an information processing method is proposed, including: a first terminal sends a first message; wherein the first message includes first information that is security-protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0007] According to the second aspect of an embodiment of the present disclosure, an information processing method is proposed, including: a second terminal receives a first message; wherein the first message includes first information that is security-protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0008] According to the third aspect of an embodiment of the present disclosure, an information processing method is proposed, including: a first network element receives a third message sent by a first terminal, wherein the third message includes a relay service code (RSC); the third message is used to request at least one security information corresponding to the RSC; wherein the at least one security information is used by the first terminal to determine the first security information; the first security information is used to perform security protection on the first information in the first message.

[0009] According to the fourth aspect of an embodiment of the present disclosure, a first terminal is proposed, comprising: a first transceiver module, configured to send a first message; wherein the first message includes first information that is security protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0010] According to the fifth aspect of an embodiment of the present disclosure, a second terminal is proposed, including: a second transceiver module, configured to receive a first message; wherein the first message includes first information that is security protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0011] According to the sixth aspect of an embodiment of the present disclosure, a first network element is proposed, including: a third transceiver module, configured to receive a third message sent by a first terminal, wherein the third message includes an RSC; the third message is used to request at least one security information corresponding to the RSC; wherein the at least one security information is used by the first terminal to determine the first security information; the first security information is used to perform security protection on the first information in the first message.

[0012] According to a seventh aspect of an embodiment of the present disclosure, a first terminal is proposed, comprising: one or more processors; wherein the first terminal is configured to execute an optional implementation of the first aspect.

[0013] According to an eighth aspect of an embodiment of the present disclosure, a second terminal is proposed, comprising: one or more processors; wherein the second terminal is configured to execute an optional implementation of the second aspect.

[0014] According to a ninth aspect of an embodiment of the present disclosure, a first network element is proposed, comprising: one or more processors; wherein the first network element is used to execute an optional implementation of the second aspect.

[0015] According to the tenth aspect of an embodiment of the present disclosure, a communication system is proposed, including: a first terminal, a second terminal and a first network element; wherein, the above-mentioned first terminal is configured to execute the method described in the optional implementation manner of the first aspect, the above-mentioned second terminal is configured to execute the method described in the optional implementation manner of the second aspect, and the above-mentioned first network element is configured to execute the method described in the optional implementation manner of the third aspect.

[0016] According to the eleventh aspect of an embodiment of the present disclosure, a storage medium is proposed, which stores instructions. When the instructions are executed on a communication device, the communication device executes the method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0017] The disclosed embodiments can determine which set of protection information to use to protect a discovery message when a remote terminal has multiple sets of security information in relay communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure, the following drawings required for describing the embodiments are introduced. The following drawings are merely some embodiments of the present disclosure and do not impose specific limitations on the protection scope of the present disclosure.

[0019] FIG1 is a schematic structural diagram of an information processing system according to an embodiment of the present disclosure.

[0020] FIG2 is an interactive schematic diagram illustrating an information processing method according to an embodiment of the present disclosure.

[0021] FIG3A is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0022] FIG3B is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0023] FIG3C is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0024] FIG4A is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0025] FIG4B is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0026] FIG4C is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0027] FIG5A is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0028] FIG5B is a flow chart illustrating an information processing method according to an embodiment of the present disclosure.

[0029] FIG6 is a flow chart showing an information processing method according to an embodiment of the present disclosure.

[0030] FIG7 is a flow chart showing an information processing method according to an embodiment of the present disclosure.

[0031] FIG8A is a schematic structural diagram of a first terminal according to an embodiment of the present disclosure.

[0032] FIG8B is a schematic structural diagram of a second terminal according to an embodiment of the present disclosure.

[0033] FIG8C is a schematic structural diagram of a first network element according to an embodiment of the present disclosure.

[0034] FIG9A is a schematic structural diagram of a communication device provided according to an embodiment of the present disclosure.

[0035] FIG9B is a schematic structural diagram of a chip provided according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0036] The embodiments of the present disclosure provide an information processing method, a terminal, a communication system, and a storage medium.

[0037] In a first aspect, an embodiment of the present disclosure proposes an information processing method, including: a first terminal sends a first message; wherein the first message includes first information that is security-protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0038] In the above embodiment, one security information may be used from a plurality of security information to protect the first information carried in the first message, thereby improving the security of communication between the first terminal and the second terminal.

[0039] In conjunction with some embodiments of the first aspect, in some embodiments, before sending the first message, the method further includes one of the following:

[0040] Selecting any one of the plurality of security information as the first security information to perform security protection on the first information;

[0041] Selecting first security information from the plurality of security information based on a time sequence in which the plurality of security information is acquired and performing security protection on the first information;

[0042] Based on the priorities of the plurality of security information, first security information is selected from the plurality of security information to perform security protection on the first information.

[0043] In the above embodiment, a plurality of methods can be used to select a security information from the security information to perform security protection on the first information, thereby adapting to more application scenarios. In addition, if the first security information is selected based on the time sequence or priority of the multiple security information obtained, it is beneficial for the first terminal to quickly discover the second terminal.

[0044] In conjunction with some embodiments of the first aspect, in some embodiments, the method further includes:

[0045] sending a second message based on not receiving a first response returned by the second terminal based on the first message; wherein the second message includes the first information that is security-protected using the second security information; the second security information is one of a plurality of security information obtained by the first terminal, and the second security information is different from the first security information; or

[0046] The first response fails to be verified based on the first security information, and the second message is sent.

[0047] In the above embodiment, if it is determined that the first information in the first message is protected based on a security information used in multiple security information, and the first response based on the first message is not successfully received or the first response is not successfully verified, you can continue to try to use another security information from the multiple security information to protect the first information and then send it, which is conducive to the first terminal successfully discovering the second terminal.

[0048] In conjunction with some embodiments of the first aspect, in some embodiments, before sending the second message, the method further includes:

[0049] Selecting any one security information other than the first security information from the plurality of security information as the second security information to perform security protection on the first information;

[0050] Selecting second security information from the plurality of security information to perform security protection on the first information based on a time sequence in which the plurality of security information is acquired;

[0051] Based on the priorities of the plurality of security information, second security information is selected from the plurality of security information to perform security protection on the first information.

[0052] In the above embodiment, the next security information to be used for security protection of the first information can be selected from the security information in a variety of ways, thereby adapting to a wider range of application scenarios. In addition, if the next security information is selected based on the time sequence or priority of the multiple security information obtained, it is beneficial for the first terminal to quickly discover the second terminal.

[0053] In conjunction with some embodiments of the first aspect, in some embodiments, the method includes:

[0054] receiving a first response returned by the second terminal based on the first message;

[0055] The first response is successfully verified based on the first security information, and it is determined that the second terminal is found.

[0056] In the above embodiment, if the first terminal can receive the first response returned based on the first message and can successfully verify the first response, it can be determined that the first terminal and the second terminal have discovered each other; this is conducive to the secure communication between the first terminal (such as the remote UE) and the second terminal (relay UE).

[0057] In conjunction with some embodiments of the first aspect, in some embodiments, the first message includes one of the following:

[0058] RSC indicating relay service;

[0059] The RSC and a first identifier (identify, ID), wherein the first identifier is used to indicate a public land mobile network (Public Land Mobile Network, PLMN) for determining the first security information.

[0060] In the above embodiment, if the first message includes RSC, security information corresponding to the RSC can be obtained; or, if the first message also includes a first identifier, it can be determined that the security information corresponding to the RSC is obtained from the PLMN corresponding to the first identifier.

[0061] In conjunction with some embodiments of the first aspect, in some embodiments, the second message includes one of the following:

[0062] Relay service code RSC indicating the relay service;

[0063] RSC and a second identifier, wherein the second identifier is used to indicate the PLMN for determining the second security information.

[0064] In the above embodiment, if the second message includes RSC, security information corresponding to the RSC can be obtained; or, if the second message also includes a second identifier, it can be determined that the security information corresponding to the RSC is obtained from the PLMN corresponding to the second identifier.

[0065] In the second aspect, an embodiment of the present disclosure proposes an information processing method, including: a second terminal receives a first message; wherein the first message includes first information that is security-protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0066] In conjunction with some embodiments of the second aspect, in some embodiments, the first message includes one of the following:

[0067] RSC indicating relay service;

[0068] RSC and a first identifier, wherein the first identifier is used to indicate the PLMN where the second terminal corresponding to the first security information is located.

[0069] In conjunction with some embodiments of the second aspect, in some embodiments, the method includes:

[0070] The first message is successfully verified based on the local security information, and a first response is sent to the first terminal; wherein the first response uses the security information for security protection; or,

[0071] Based on the first identifier, it is determined that the second terminal belongs to the PLMN indicated by the first identifier, and based on the local security information, the first message is successfully verified, and a first response is sent to the first terminal.

[0072] In the above embodiment, the first terminal sends the first response after the second terminal successfully verifies the first message based on local security information, which helps the second terminal to be discovered by the first terminal.

[0073] In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes:

[0074] Based on the absence of local security information to verify the first message, determining not to send a first response to the first terminal; wherein the first response uses the security information for security protection; or,

[0075] It is determined based on the first identifier that the second terminal does not belong to the PLMN indicated by the first identifier, and it is determined not to send a first response to the first terminal.

[0076] In the above embodiment, if the second terminal does not have local security information to verify the first message or determines that the second terminal is not in the PLMN indicated by the first identifier, it is determined that the first terminal and the second terminal are not matched terminals to send discovery messages; in this way, signaling overhead can be saved by not sending the first response.

[0077] In the third aspect, an embodiment of the present disclosure proposes an information processing method, including: a first network element receives a third message sent by a first terminal, wherein the third message includes an RSC; the third message is used to request at least one security information corresponding to the RSC; wherein the at least one security information is used by the first terminal to determine the first security information; the first security information is used to perform security protection on the first information in the first message.

[0078] In the above embodiment, the first terminal may obtain at least one security information corresponding to the RSC through the first network element, so as to facilitate security protection of the first information in the first message that the first terminal needs to broadcast.

[0079] In combination with some embodiments of the third aspect, in some embodiments, the method further includes: sending a third request to at least one second network element based on the mapping information; wherein the mapping information is used to indicate the correspondence between the RSC and the PLMN where the at least one second network element is located.

[0080] In the above embodiment, the PLMN corresponding to at least one second network element supporting RSC can be accurately known through the mapping information, thereby facilitating acquisition of security information corresponding to the RSC from the second network element of the PLMN.

[0081] In conjunction with some embodiments of the third aspect, in some embodiments, the method further includes at least one of the following:

[0082] receiving a third response sent by at least one second network element, wherein the third response includes security information corresponding to the RSC;

[0083] A third response is sent to the first terminal.

[0084] In a fourth aspect, an embodiment of the present disclosure proposes a first terminal, comprising: a first transceiver module, configured to send a first message; wherein the first message includes first information that is security-protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0085] In the fifth aspect, an embodiment of the present disclosure proposes a second terminal, including: a second transceiver module, configured to receive a first message; wherein the first message includes first information that is security protected using first security information; the first security information is one of multiple security information obtained by the first terminal.

[0086] In the sixth aspect, an embodiment of the present disclosure proposes a first network element, including: a third transceiver module, configured to receive a third message sent by a first terminal, wherein the third message includes a relay service code RSC; the third message is used to request at least one security information corresponding to the RSC; wherein the at least one security information is used by the first terminal to determine the first security information; the first security information is used to perform security protection on the first information in the first message.

[0087] In a seventh aspect, an embodiment of the present disclosure proposes a first terminal, comprising: one or more processors; wherein the above-mentioned first terminal is used to execute an optional implementation method of the first aspect.

[0088] In an eighth aspect, an embodiment of the present disclosure proposes a second terminal, comprising: one or more processors; wherein the above-mentioned second terminal is used to execute the optional implementation method of the second aspect.

[0089] In a ninth aspect, an embodiment of the present disclosure proposes a first network element, comprising: one or more processors; wherein the above-mentioned first network element is used to execute the optional implementation method of the second aspect.

[0090] In the tenth aspect, an embodiment of the present disclosure proposes a communication system, comprising: a first terminal, a second terminal and a first network element; wherein, the above-mentioned first terminal is configured to execute the method described in the optional implementation manner of the first aspect, the above-mentioned second terminal is configured to execute the method described in the optional implementation manner of the second aspect, and the above-mentioned first network element is configured to execute the method described in the optional implementation manner of the third aspect.

[0091] In the eleventh aspect, an embodiment of the present disclosure proposes a storage medium, which stores instructions. When the instructions are executed on a communication device, the communication device executes the method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0092] In the tenth aspect, an embodiment of the present disclosure proposes a program product. When the program product is executed by a communication device, the communication device executes the method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0093] In the eleventh aspect, an embodiment of the present disclosure proposes a computer program, which, when running on a computer, enables the computer to execute the information processing method described in the first aspect, the second aspect, the third aspect, or the optional implementation of the first aspect, the second aspect and the third aspect.

[0094] In the twelfth aspect, an embodiment of the present disclosure proposes a chip or a chip system; the chip or chip system includes a processing circuit configured to execute the method described in the optional implementation of the above-mentioned first aspect, second aspect and third aspect.

[0095] It is understood that the above-mentioned terminal, first network element, communication system, storage medium, program product, computer program, chip or chip system are all used to perform the method provided by the embodiment of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the corresponding method and will not be repeated here.

[0096] The present disclosure provides an information processing method, a terminal, a communication system, and a storage medium. In some embodiments, the terms information processing method and communication method are interchangeable, the terms information processing device and communication device are interchangeable, and the terms information processing system and communication system are interchangeable.

[0097] The embodiments of the present disclosure are not exhaustive and are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined. For example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

[0098] In each embodiment of the present disclosure, unless otherwise specified or provided for, the terms and / or descriptions between the embodiments are consistent and can be used interchangeably. The technical features in different embodiments can be combined to form new embodiments based on their inherent logical relationships.

[0099] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

[0100] In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular, such as "a", "an", "the", "above", "said", "the", "the", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun following the article may be understood as a singular expression or a plural expression.

[0101] In the embodiments of the present disclosure, “plurality” refers to two or more.

[0102] In some embodiments, the terms "at least one," "one or more," "a plurality of," "multiple," etc. may be used interchangeably.

[0103] In some embodiments, descriptions such as "at least one of A and B," "A and / or B," "A in one case, B in another case," or "in response to one case A, in response to another case B" may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed); and in some embodiments, A and B (both A and B are executed). The above is also applicable when there are more branches such as A, B, and C.

[0104] In some embodiments, "A or B" and other descriptions may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed). The above is also applicable when there are more branches such as A, B, C, etc.

[0105] The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects and do not constitute any restrictions on the position, order, priority, quantity or content of the description objects. For the statement of the description object, please refer to the description in the context of the claims or embodiments, and the use of prefixes should not constitute unnecessary restrictions. For example, if the description object is a "field", the ordinal number before the "field" in "first field" and "second field" does not limit the position or order between the "fields". "First" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and "second field". For another example, if the description object is a "level", the ordinal number before the "level" in "first level" and "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number and can be one or more. Taking "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes can be the same or different. For example, if the description object is "device", then the "first device" and the "second device" can be the same device or different devices, and their types can be the same or different; for another example, if the description object is "information", then the "first information" and the "second information" can be the same information or different information, and their contents can be the same or different.

[0106] In some embodiments, “including A,” “comprising A,” “used to indicate A,” and “carrying A” can be interpreted as directly carrying A or indirectly indicating A.

[0107] In some embodiments, terms such as "in response to...", "in response to determining...", "in the case of...", "at the time of...", "when...", "if...", "if...", etc. can be used interchangeably.

[0108] In some embodiments, terms such as "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not less than", and "above" can be replaced with each other, and terms such as "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "not more than", "lower than", "lower than or equal to", "not higher than", and "below" can be replaced with each other.

[0109] In some embodiments, devices, etc. can be interpreted as physical or virtual, and their names are not limited to the names recorded in the embodiments. Terms such as "device", "equipment", "device", "circuit", "network element", "node", "function", "unit", "section", "system", "network", "chip", "chip system", "entity", and "subject" can be used interchangeably.

[0110] In some embodiments, "network" can be interpreted as devices included in the network (eg, access network equipment, core network equipment, etc.).

[0111] In some embodiments, the terms "access network device (AN device)", "radio access network device (RAN device)", "base station (BS)", "radio base station" "fixed station", "node", "access point", "transmission point (TP)", "reception point (RP)", "transmission / reception point (TRP)", "panel", "antenna panel", "antenna array", "cell", "macro cell", "small cell", "femto cell", "pico cell", "sector", "cell group", "carrier", "component carrier", "bandwidth part (BWP)" and the like may be used interchangeably.

[0112] In some embodiments, the terms "terminal", "terminal device", "user equipment (UE)", "user terminal", "mobile station (MS)", "mobile terminal (MT)", subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, etc. can be used interchangeably.

[0113] In some embodiments, the access network device, the core network device, or the network device can be replaced by a terminal. For example, the various embodiments of the present disclosure can also be applied to a structure in which the communication between the access network device, the core network device, or the network device and the terminal is replaced by communication between multiple terminals (for example, it can also be called device-to-device (D2D), vehicle-to-everything (V2X), etc.). In this case, it can also be set as a structure in which the terminal has all or part of the functions of the access network device. In addition, language such as "uplink" and "downlink" can also be replaced by language corresponding to communication between terminals (for example, "side"). For example, uplink channels, downlink channels, etc. can be replaced by side channels, and uplinks, downlinks, etc. can be replaced by side links.

[0114] In some embodiments, the terminal may be replaced by an access network device, a core network device, or a network device. In this case, the access network device, the core network device, or the network device may have a structure that has all or part of the functions of the terminal.

[0115] In some embodiments, obtaining data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

[0116] In some embodiments, data, information, etc. may be obtained with the user's consent.

[0117] In addition, each element, each row, or each column in the table of the embodiment of the present disclosure can be implemented as an independent embodiment, and the combination of any elements, any rows, and any columns can also be implemented as an independent embodiment.

[0118] FIG1 is a schematic diagram showing the structure of an information processing system 100 according to an embodiment of the present disclosure. As shown in FIG1 , the information processing system 100 may include: a terminal 101 and a network device 102 .

[0119] In some embodiments, the terminal includes a first terminal and / or a second terminal.

[0120] In some embodiments, the first terminal and the second terminal may be UEs in a relay service. Exemplarily, the first terminal may be a remote UE, and / or the second terminal may be a relay UE.

[0121] In some embodiments, the network device 102 may include at least one of an access network device and a core network device.

[0122] In some embodiments, the terminal 101 includes, for example, a mobile phone, a wearable device, an Internet of Things (IOT) device or terminal, a car with communication function, a smart car, a tablet computer (Pad), a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, and at least one of a wireless terminal device in a smart home, but is not limited thereto.

[0123] In some embodiments, the access network device is, for example, a node or device that accesses a terminal to a wireless network. The access network device may include an evolved NodeB (eNB), a next generation evolved NodeB (ng-eNB), a next generation NodeB (gNB), a node B (NB), a home node B (HNB), a home evolved nodeB (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an open base station (Open RAN), a cloud base station (Cloud RAN), a base station in other communication systems, and at least one of an access node in a wireless fidelity (WiFi) system, but is not limited thereto.

[0124] In some embodiments, the technical solution of the present disclosure can be applied to the Open RAN architecture. In this case, the interfaces between or within the access network devices involved in the embodiments of the present disclosure can be transformed into internal interfaces of the Open RAN, and the processes and information interactions between these internal interfaces can be implemented through software or programs.

[0125] In some embodiments, the access network device can be composed of a centralized unit (CU) and a distributed unit (DU), where the CU can also be called a control unit. The CU-DU structure can be used to split the protocol layer of the access network device, with the functions of some protocol layers centrally controlled by the CU, and the functions of the remaining part or all of the protocol layers distributed in the DU, which is centrally controlled by the CU, but is not limited to this.

[0126] In some embodiments, the core network device may be a device including a first network element, a second network element, a third network element, or a fourth network element, or may be a plurality of devices or a group of devices, each including all or part of the first network element and the second network element. The network element may be virtual or physical. The core network may include, for example, at least one of an evolved packet core (EPC), a 5G core network (5GCN), and a next generation core (NGC).

[0127] In some embodiments, the first network element is, for example, the Direct Discovery Name Management Function (DDNMF) or the Proximity Service Key Management Function (PKMF) of the Home Public Land Mobile Network (HPLMN) where the first terminal is located. The name of the first network element is not limited thereto.

[0128] In some embodiments, the second network element is, for example, a DDNMF or a PKMF of the HPLMN where the second terminal is located, and the name of the second network element is not limited thereto.

[0129] In some embodiments, the third network element is, for example, a DDNMF or a PKMF of a visited public land mobile network (VPLMN) where the second terminal is located. The name of the third network element is not limited thereto.

[0130] In some embodiments, the fourth network element is, for example, a DDNMF or a PKMF of the VPLMN where the first terminal is located, and the name of the fourth network element is not limited thereto.

[0131] It can be understood that the information processing system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution provided by the embodiment of the present disclosure. Ordinary technicians in this field can know that with the evolution of system architecture and the emergence of new business scenarios, the technical solution provided by the embodiment of the present disclosure is also applicable to similar technical problems.

[0132] The following embodiments of the present disclosure may be applied to the information processing system 100 shown in FIG1 , or a portion thereof, but are not limited thereto. The entities shown in FIG1 are illustrative only. The information processing system may include all or a portion of the entities shown in FIG1 , or may include other entities outside of FIG1 . The number and form of the entities may be arbitrary. The connection relationships between the entities are illustrative only. The entities may be connected or disconnected, and the connection may be in any manner, including direct or indirect, wired or wireless.

[0133] The embodiments of the present disclosure can be applied to Long Term Evolution (LTE), LTE-Advanced (LTE-A), LTE-Beyond (LTE-B), SUPER 3G, IMT-Advanced, 4th generation mobile communication system (4G), 5th generation mobile communication system (5G), 5G New Radio (NR), Future Radio Access (FRA), New-Radio Access Technology (RAT), New Radio (NR), New Radio Access (NX), Future Generation Radio Access (FX), Global System for Mobile Communications (GSM (registered trademark)), CDMA2000, Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, Ultra-WideBand (UWB), Bluetooth (registered trademark), Public Land Mobile Network (PLMN) networks, Device-to-Device (D2D) systems, Machine-to-Machine (M2M) systems, Internet of Things (IoT) systems, Vehicle-to-Everything (V2X), systems utilizing other communication methods, and next-generation systems based on and extending these methods. Furthermore, multiple systems may be combined (for example, a combination of LTE or LTE-A with 5G).

[0134] In some embodiments, in order for the relay UE to obtain security materials to protect and / or verify the discovery message of the relay service indicated by the RSC, the relay UE should receive the security materials associated with the RSC from its DDNMF or PKMF. In order for the remote UE to obtain security materials to protect and / or verify the discovery message of the relay service indicated by the RSC, the remote UE should send a discovery key request to its DDNMF or PKMF, and then the DDNMF or PKMF to which the remote UE belongs should obtain the security materials from the DDNMF or PKMF of the potential relay UE based on the list of home public land mobile networks (HPLMN) of the potential U2N relays mapped to the RSC. In this way, the remote UE can receive multiple sets of security materials from different DDNMFs or PKMFs of all potential relay UEs. Since the security materials received by the remote UE are generated separately by DDNMDFs or PKMFs in different PLMNs, the multiple sets of security materials associated with one RSC may be different.

[0135] In some embodiments, for the direct discovery process of model A, the discovery message (e.g., announcement message) is broadcast by the relay UE, which only has a set of security materials obtained from its home DDNMF or PKMF, so the relay UE is able to determine to use this set of security materials to protect the discovery message.

[0136] In some embodiments, for the direct discovery process in Mode B, a discovery message (e.g., a request message) is broadcast by a remote UE, which may have multiple sets of security materials obtained from different DDNMFs or PKMFs of all potential relay UEs. The remote UE then needs to determine which set of security materials should be used to protect the discovery message.

[0137] In some embodiments, there is no mechanism defined for a remote UE to determine one set of security materials from among multiple sets of security materials for protecting discovery messages in the direct discovery process of Model B. Therefore, embodiments of the present disclosure require enabling the remote UE to determine one set of security materials from among multiple sets of security materials for protecting discovery messages in Model B discovery.

[0138] Optionally, the UE is the terminal in the above embodiment; the security material may be a discovery security material.

[0139] FIG2 is an interactive diagram of an information processing method according to an embodiment of the present disclosure. As shown in FIG2 , the present disclosure embodiment relates to an information processing method for an information processing system 100, and the method includes:

[0140] Step S2101: The second terminal sends a fourth message to the second network element.

[0141] In some embodiments, the second network element receives a fourth message sent by the second terminal.

[0142] In some embodiments, the second terminal may be a relay UE; and / or the second network element may be a DDNMF or a PKMF of the HPLMN where the relay UE is located.

[0143] In some embodiments, the fourth message is used to request security information.

[0144] Optionally, the security information may be the security material in the above embodiment, etc.

[0145] Optionally, the security information may include: a confidentiality key and / or an integrity key. Exemplarily, the confidentiality key may protect the confidentiality of the information and / or verify the confidentiality; and / or the integrity key may protect the integrity of the information and / or verify the integrity.

[0146] Alternatively, the security information may include an intermediate key and a random number, or the security information may include a root key and a random number. Exemplarily, the root key and the random number may be used to generate an intermediate key. Exemplarily, the intermediate key and the random number may be used to generate a confidentiality key and / or an integrity key.

[0147] Optionally, the security information may include algorithm information, which may include a confidentiality algorithm and / or an integrity algorithm. Exemplarily, the security information may include an algorithm identifier indicating the algorithm information; the algorithm identifier may include a first algorithm identifier and / or a second algorithm identifier; the first algorithm identifier is used to indicate the confidentiality algorithm; and the second algorithm identifier is used to indicate the integrity algorithm.

[0148] Optionally, the name of the security information is not limited, and it can be, for example, a security key, a security material, or a discovery key.

[0149] In some embodiments, the fourth message may include an RSC. Optionally, the RSC is used to indicate a relay service; the relay service may be any relay service. Optionally, the fourth message is used to request security information corresponding to the RSC.

[0150] In some embodiments, the name of the fourth message is not limited, and it can be, for example, a security information request, a key request, or a key discovery request.

[0151] In some optional embodiments, the second network element and the third network element confirm the authorization authentication.

[0152] In some embodiments, when the second terminal is roaming, the second network element confirms authorization and authentication with the third network; or, when the second terminal is not roaming, the second network element does not confirm authorization and authentication with the third network element.

[0153] In some embodiments, the third network element may be a DDNMF or a PKMF of the VPLMN where the second terminal is located.

[0154] In some embodiments, the second network element sends a first authentication message to the third network element, wherein the first authentication message is used to verify whether the second terminal has the right to send a discovery message in the third network element.

[0155] In some embodiments, if the third network element determines that the second terminal has the right to send a discovery message in the third network element, it determines to send a first authentication response including the first indication information; or, if the third network element determines that the second terminal does not have the right to send a discovery message in the third network element, it determines to send a first authentication response including the second indication information.

[0156] In some embodiments, the third network element sends a first authentication response to the second network element, where the first authentication response includes first indication information or second indication information.

[0157] Optionally, the first indication information is used to indicate that the second terminal has the right to send a discovery message in the third network element; the second indication information is used to indicate that the second terminal has no right to send a discovery message in the third network element.

[0158] Optionally, the name of the first authentication message may not be limited, and may be, for example, authorization authentication or declaration authorization authentication.

[0159] Optionally, the name of the first authentication response may not be limited, and may be, for example, an authorization response or a declaration authorization response.

[0160] Optionally, the discovery message may be a declaration message and / or a request message, etc.

[0161] Step S2102: The second network element sends a fourth response to the second terminal.

[0162] In some embodiments, the second terminal receives a fourth response sent by the second network element.

[0163] In some embodiments, the fourth response includes security information.

[0164] In some embodiments, the fourth response includes the RSC and security information corresponding to the RSC.

[0165] In some embodiments, the name of the fourth response is not limited, and it can be, for example, a security information response, a key response, or a discovery key response.

[0166] In some optional embodiments, the second terminal stores the RSC and the security information accordingly.

[0167] Step S2103: The first terminal sends a third message to the first network element.

[0168] In some embodiments, the first network element receives a third message sent by the first terminal.

[0169] In some embodiments, the first terminal may be a remote UE; and / or the first network element may be a DDNMF or a PKMF of the HPLMN where the remote UE is located.

[0170] In some embodiments, the third message is used to request security information.

[0171] In some embodiments, the third message may include the RSC. Optionally, the first message is used to request at least one security information corresponding to the RSC.

[0172] Optionally, the at least one security information is used by the first terminal to determine first security information; the first security information is one of the at least one security information.

[0173] Optionally, the at least one security information is used by the first terminal to determine second security information; the second security information is one of the at least one security information, but the second security information is different from the first security information.

[0174] In some embodiments, the name of the third message is not limited, and it can be, for example, a key request or a key discovery request.

[0175] Step S2104: The first network element sends a third message to the second network element.

[0176] In some embodiments, the second network element receives a third message sent by the first network element.

[0177] In some embodiments, the first network element sends a third message to at least one second network element.

[0178] In some embodiments, the first network element sends a third request message to at least one second network element based on the mapping information.

[0179] Optionally, the mapping information is used to indicate a corresponding relationship between the RSC and the PLMN where at least one second network element is located. Exemplarily, the mapping information includes: the RSC and an identifier of the PLMN where the second network element corresponding to the RSC is located.

[0180] Optionally, multiple second network elements may support the same RSC.

[0181] Optionally, the first network element determines, based on the mapping information, at least one second network element corresponding to the RSC in the third message; and sends the third message to the at least one second network element.

[0182] Step S2105: The second network element sends a third response to the first network element.

[0183] In some embodiments, the first network element receives the third response sent by the second network element. Optionally, the first network element receives the third response sent by at least one second network element respectively.

[0184] In some embodiments, the third response includes security information corresponding to the RSC.

[0185] In some embodiments, the third response includes security information.

[0186] In some embodiments, the third response includes the RSC and security information corresponding to the RSC.

[0187] Optionally, the RSC in the third responses sent by different second network elements is the same, but the security information corresponding to the RSC may be different.

[0188] In some embodiments, the name of the third response is not limited, and it can be, for example, a security information response, a key response, or a discovery key response.

[0189] In some optional embodiments, the first network element and the fourth network element confirm the authorization authentication.

[0190] In some embodiments, when the first terminal is roaming, the first network element confirms authorization and authentication with the fourth network; or, when the first terminal is not roaming, the first network element does not confirm authorization and authentication with the fourth network element.

[0191] In some embodiments, the fourth network element may be a DDNMF or a PKMF of the VPLMN where the first terminal is located.

[0192] In some embodiments, the first network element sends a second authentication message to the fourth network element, wherein the second authentication message is used to verify whether the first terminal has the right to send a discovery message at the fourth network element.

[0193] In some embodiments, if the fourth network element determines that the first terminal has the right to send a discovery message in the fourth network element, it determines to send a second authentication response including the third indication information; or, if the fourth network element determines that the first terminal does not have the right to send a discovery message in the fourth network element, it determines to send a second authentication response including the fourth indication information.

[0194] In some embodiments, the fourth network element sends a second authentication response to the first network element, where the second authentication response includes the third indication information or the fourth indication information.

[0195] Optionally, the third indication information is used to indicate that the first terminal has the right to send a discovery message in the fourth network element; the fourth indication information is used to indicate that the first terminal has no right to send a discovery message in the fourth network element.

[0196] Optionally, the name of the second authentication message may not be limited, and may be, for example, authorization authentication or declaration authorization authentication.

[0197] Optionally, the name of the second authentication response may not be limited, and may be, for example, an authorization response or a declaration authorization response.

[0198] Step S2106: The first network element sends a third response to the first terminal.

[0199] In some embodiments, the first terminal receives a third response sent by the first network element.

[0200] Optionally, the first network element sends a third response to the first terminal respectively, where one third response includes an RSC and security information corresponding to the RSC.

[0201] Optionally, the first network element sends a third response to the first terminal, where the third response includes an RSC and at least one security information corresponding to the RSC.

[0202] In some optional embodiments, the first network element stores the RSC and at least one piece of security information corresponding to the RSC.

[0203] Step S2107: The first terminal sends a first message to the second terminal.

[0204] In some embodiments, the second terminal receives the first message sent by the first terminal.

[0205] In some optional embodiments, the first terminal determines the first security information before sending the first message.

[0206] Optionally, the first terminal determines the first security information based on at least one security information.

[0207] Optionally, the first terminal determines any one piece of security information as the first security information from the at least one security information.

[0208] Optionally, the first terminal selects the first security information from the at least one security information based on a time sequence in which the at least one security information is acquired. Exemplarily, the first terminal determines the security information acquired earliest as the first security information based on a time sequence in which the at least one security information is acquired.

[0209] Optionally, the first terminal selects the first security information from the at least one security information based on a priority of the at least one security information.

[0210] Exemplarily, the first terminal determines, based on a priority of at least one security information, the security information with the highest priority as the first security information.

[0211] Exemplarily, the first terminal obtains three security information, and the priorities corresponding to the three security information are first priority, second priority and third priority respectively; the first priority is higher than the second priority, and the second priority is higher than the third priority; the first terminal determines that the security information corresponding to the first priority is the first security information.

[0212] Optionally, in the embodiment of the present disclosure, at least one includes one or more; and multiple includes two or more.

[0213] Optionally, at least one security information and a priority corresponding to the security information are stored in the first terminal.

[0214] In some embodiments, the first message includes first information that is security-protected using first security information.

[0215] Optionally, the first information is any sensitive information.

[0216] Optionally, performing security protection includes: performing confidentiality protection and / or performing integrity protection. Exemplarily, the first terminal may perform confidentiality protection on the first information based on a confidentiality key in the first security information, and / or perform integrity protection on the first information based on an integrity key in the first security information.

[0217] In some embodiments, the first message may include: RSC.

[0218] In some embodiments, the first message may include: RSC and a first identifier.

[0219] Optionally, the first identifier is used to indicate the PLMN or HPLMN for determining the first security information. Here, the PLMN or HPLMN for determining the first security information may be: the PLMN or HPLMN for generating the first security information.

[0220] Optionally, the first identifier indicates the PLMN or HPLMN where the second terminal corresponding to the first security information is located.

[0221] Optionally, the first identifier may be any character string, index, or number.

[0222] In some embodiments, the name of the first message is not limited, and it can be, for example, a request message or a declaration message.

[0223] Step S2108: The second terminal verifies the first message.

[0224] In some embodiments, the second terminal verifies the first message based on local security information.

[0225] Optionally, verifying the first message based on local security information includes: performing confidentiality verification on the first message based on a confidentiality key in the security information; and / or performing integrity verification on the first message based on an integrity key in the security information.

[0226] Optionally, the local security information of the second terminal includes: security information stored in the second terminal, or a security key generated by the PLMN or HPLMN where the second terminal is located.

[0227] In some embodiments, the second terminal successfully verifies the first message based on local security information and determines to send a first response to the first terminal.

[0228] In some embodiments, the second terminal determines that the second terminal belongs to the PLMN of the first identifier based on the first identifier, and successfully verifies the first message based on local security information, and determines to send a first response to the first terminal.

[0229] In some embodiments, the second terminal verifies the first message based on the absence of local security information, and determines not to send the first response to the first terminal.

[0230] In some embodiments, the second terminal determines, based on the first identifier, that the second terminal does not belong to the PLMN indicated by the first identifier, and determines not to send the first response to the first terminal.

[0231] In some embodiments, the first response is determined based on the first message.

[0232] In some embodiments, the first response includes second information that is security-protected using local security information. Optionally, the second information is determined based on the first information. Optionally, the second information may be sensitive information.

[0233] In some embodiments, the name of the first response is not limited, and it can be, for example, a response message.

[0234] Step S2109: The second terminal sends a first response to the first terminal.

[0235] In some embodiments, the first terminal receives a first response sent by the second terminal.

[0236] In some embodiments, the second terminal successfully verifies the first message based on local security information and sends a first response to the first terminal.

[0237] In some embodiments, the second terminal determines that the second terminal belongs to the PLMN of the first identifier based on the first identifier, successfully verifies the first message based on local security information, and sends a first response to the first terminal.

[0238] Step S2110: The first terminal verifies the first response.

[0239] In some embodiments, the first terminal verifies the first message based on the first security information.

[0240] Optionally, verifying the first message based on the first security information includes: performing confidentiality verification on the first message based on a confidentiality key in the first security information; and / or performing integrity verification on the first message based on an integrity key in the first security information.

[0241] Optionally, the first terminal successfully verifies the first response based on the first security information, and determines that the second terminal is found.

[0242] Optionally, the discovered second terminal may communicate securely with the first terminal.

[0243] Step S2111: The first terminal sends a second message to the second terminal.

[0244] In some embodiments, the second terminal receives the second message sent by the first terminal.

[0245] In some embodiments, the first terminal determines second security information before sending the second message. Optionally, the second security information is one of the at least one security information. Optionally, the second security information is used to provide security protection for the first information.

[0246] In some embodiments, the first terminal determines the second security information based on the at least one security information. Optionally, the first terminal determines, based on the at least one security information, any security information other than the first security information as the second security information, or determines the security information other than the first security information that was acquired the earliest as the second security information, or determines the security information other than the first security information that has the highest priority as the second security information.

[0247] In some embodiments, the first terminal selects second security information from the multiple security information based on the time sequence in which the multiple security information are acquired to perform security protection on the first information.

[0248] In some embodiments, the first terminal selects second security information from the plurality of security information based on priorities of the plurality of security information to perform security protection on the first information.

[0249] In some embodiments, the first terminal sends the second message based on not receiving the first response returned by the second terminal based on the first message. Alternatively, the first terminal sends the second message based on not receiving the first response returned by the second terminal based on the first message within a predetermined time.

[0250] In some embodiments, the first terminal sends a second message if verification of the first response based on the first security information fails.

[0251] In some embodiments, the first terminal successfully verifies the first response based on the first security information and determines not to send the second message.

[0252] In some embodiments, the second message includes: RSC.

[0253] In some embodiments, the second message includes: RSC and a second identifier.

[0254] Optionally, the second identifier is used to indicate the PLMN or HPLMN for determining the second security information. Here, the PLMN or HPLMN for determining the second security information may be: the PLMN or HPLMN for generating the second security information.

[0255] Optionally, the second identifier indicates the PLMN or HPLMN where the second terminal corresponding to the second security information is located.

[0256] Optionally, the second identifier may be any character string, index, or number.

[0257] In some embodiments, the name of the second message is not limited, and it can be, for example, a request message or a declaration message.

[0258] In some embodiments, the first information included in the second message may be the same as the first information included in the first message, but the security information used for security protection in the second message and the first message is different.

[0259] In some optional embodiments, the second terminal verifies the second message. Optionally, the second terminal verifies the second message in a manner similar to the manner in which the second terminal verifies the first message.

[0260] In some optional embodiments, the second terminal sends a second response to the first terminal. Optionally, the second terminal determines the second response in a manner similar to how the second terminal determined the first response. Optionally, the name of the second terminal is not limited, and can be, for example, a response message.

[0261] In some optional embodiments, after step S2110, if the first terminal does not receive the first response or fails to verify the first response based on the first security information, the first terminal continuously selects other security information from the multiple security information to perform security protection on the first information; and sends a message including the first information for security protection with the other security information until a response message based on the message is received, the response message is successfully verified, or all multiple security information are selected to perform security protection on the first information. Here, each time security information is selected for security protection, security information that was not previously selected is selected.

[0262] In some embodiments, the names of information, etc. are not limited to the names described in the embodiments, and terms such as "information", "message", "signal", "signaling", "report", "configuration", "indication", "instruction", "command", "channel", "parameter", "domain", "field", "symbol", "symbol", "codeword", "codebook", "codeword", "codepoint", "bit", "data", "program", and "chip" can be used interchangeably.

[0263] In some embodiments, "obtain", "get", "get", "receive", "transmit", "bidirectional transmission", "send and / or receive" can be interchangeable, and can be interpreted as receiving from other entities, obtaining from protocols, obtaining from higher layers, obtaining by self-processing, autonomous implementation, etc.

[0264] In some embodiments, terms such as "send", "transmit", "report", "download", "transmit", "bidirectional transmission", "send and / or receive" can be used interchangeably.

[0265] In some embodiments, terms such as "certain", "preset", "preset", "setting", "indicated", "some", "any", and "first" can be interchangeable. "Specific A", "preset A", "preset A", "setting A", "indicated A", "some A", "any A", and "first A" can be interpreted as A pre-specified in a protocol, etc., or as A obtained through setting, configuration, or indication, etc., or as specific A, some A, any A, or first A, etc., but not limited to this.

[0266] In some embodiments, the determination or judgment can be performed by a value represented by 1 bit (0 or 1), or by a true or false value (Boolean value) represented by true or false, or by comparison of numerical values ​​(for example, comparison with a predetermined value), but is not limited thereto.

[0267] The information processing method involved in the embodiments of the present disclosure may include at least one of steps S2101 to S2111. For example, step S2107 can be implemented as an independent embodiment; step S2111 can be implemented as an independent embodiment; step S2104 can be implemented as an independent embodiment; step S2101 can be implemented as an independent embodiment; step S2107 and step S2108 can be implemented as independent embodiments; the combination of step S2107, step S2108, and step S2109 can be implemented as an independent embodiment; the combination of step S2107, step S2108, step S2109, and step S2110 can be implemented as an independent embodiment; step S2107, step S2108, and step S2109 can be implemented as an independent embodiment; 9 and the combination of step S2110 and step S2111 can be implemented as an independent embodiment; the combination of step S2101 and step S2102 can be implemented as an independent embodiment; the combination of step S2101 and step S2102 and step S2107 can be implemented as an independent embodiment; the combination of step S2103 and step S2104 and step S2105 and step S2106 can be implemented as an independent embodiment; the combination of step S2103 to step S2106 and step S2107 can be implemented as an independent embodiment; the combination of step S2101 to step S2111 can be implemented as an independent embodiment.

[0268] In some embodiments, steps S2101 to S2102 and steps S2103 to S2106 may be performed in an interchanged order or simultaneously. For example, steps S2103 to S2106 may be performed first, and then steps S2101 to S2102.

[0269] In some embodiments, steps S2101 to S2106 and steps S2108 to S2111 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0270] In some embodiments, steps S2101 to S2106 and steps S2110 to S2111 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0271] In some embodiments, step S2101, step S2102, and step S2110 to step S2111 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0272] FIG3A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG3A , the present disclosure embodiment relates to an information processing method, which is executed by a first terminal and includes:

[0273] Step S3101, sending the third message.

[0274] The optional implementation of step S3101 can refer to the optional implementation of step S2103 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0275] In some embodiments, the first terminal sends the third message to the first network element, but is not limited thereto, and the third message may also be sent to other entities.

[0276] Step S3102, obtain the third response.

[0277] The optional implementation of step S3102 can refer to the optional implementation of step S2105 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0278] In some embodiments, the first terminal obtains the third response sent by the first network element, but is not limited thereto, and may also receive the third response sent by other entities.

[0279] In some embodiments, the first terminal obtains a third response specified by the protocol.

[0280] In some embodiments, the first terminal obtains the third response from an upper layer(s).

[0281] In some embodiments, the first terminal performs processing to obtain a third response.

[0282] In some embodiments, step S3102 is omitted, and the terminal autonomously implements the function indicated by the third response, or the above function is default or acquiescent.

[0283] Step S3103, sending the first message.

[0284] The optional implementation of step S3103 can refer to the optional implementation of step S2107 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0285] In some embodiments, the first message is used for authentication by the second terminal.

[0286] In some embodiments, the first terminal sends the first message to the second terminal, but is not limited thereto, and the first message may also be sent to other entities.

[0287] Step S3104, obtain the first response.

[0288] The optional implementation of step S3104 can refer to the optional implementation of step S2109 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0289] In some embodiments, the first terminal obtains the first response sent by the second terminal, but is not limited thereto. The first response sent by other entities may also be received.

[0290] In some embodiments, the first terminal obtains a first response specified by the protocol.

[0291] In some embodiments, the first terminal obtains the first response from an upper layer(s).

[0292] In some embodiments, the first terminal performs processing to obtain a first response.

[0293] In some embodiments, step S3104 is omitted, and the terminal autonomously implements the function indicated by the first response, or the above function is default or acquiescent.

[0294] Step S3105: verify the first response.

[0295] The optional implementation of step S3105 can refer to the optional implementation of step S2110 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0296] Step S3106, sending a second message.

[0297] The optional implementation of step S3106 can refer to the optional implementation of step S2111 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0298] In some embodiments, the second message is used by the second terminal to perform verification. If the verification is successful, the second terminal returns a second response determined based on the second message.

[0299] In some embodiments, the first terminal sends the second message to the second terminal, but is not limited thereto, and the second message may also be sent to other entities.

[0300] The information processing method involved in the embodiment of the present disclosure may include at least one of steps S3101 to S3106. For example, step S3101 can be implemented as an independent embodiment; step S3103 can be implemented as an independent embodiment; step S3106 can be implemented as an independent embodiment; step S3101 and step S3102 can be implemented as independent embodiments; the combination of step S3103 and step S3104 can be implemented as an independent embodiment; the combination of step S3103, step S3104 and step S3105 can be implemented as an independent embodiment; step S3103, step S3104, step S3105 and step S3106 can be implemented as an independent embodiment. The combination of step S3101, step S3102 and step S3103 can be implemented as an independent embodiment; the combination of step S3101, step S3102, step S3103 and step S3104 can be implemented as an independent embodiment; the combination of step S3101, step S3102, step S3103, step S3104 and step S3105 can be implemented as an independent embodiment; the combination of step S3101 to step S3106 can be implemented as an independent embodiment.

[0301] In some embodiments, steps S3101 to S3102 and steps S3104 to S3106 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0302] In some embodiments, steps S3101 to S3102 and steps S3105 to S3106 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0303] In some embodiments, steps S3101 to S3102 and step S3106 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0304] In some embodiments, steps S3101 to S3102 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0305] FIG3B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG3B , the present disclosure embodiment relates to an information processing method, which is executed by a first terminal and includes:

[0306] Step S3201, sending the first message.

[0307] The optional implementation of step S3201 can be found in step S2107 in FIG. 2 , or the optional implementation of step S3103 in FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0308] In some embodiments, sending the first message includes: the first terminal sending the first message; wherein the first message includes first information that is security-protected using first security information; and the first security information is one of multiple security information obtained by the first terminal.

[0309] In some embodiments, before sending the first message, the method further includes: selecting any one security information from a plurality of security information as the first security information to perform security protection on the first information.

[0310] In some embodiments, before sending the first message, the method further includes: selecting first security information from multiple security information based on the time sequence in which the multiple security information are acquired to perform security protection on the first information.

[0311] In some embodiments, before sending the first message, the method further includes: selecting first security information from multiple security information based on the priorities of the multiple security information to perform security protection on the first information.

[0312] In some embodiments, the method also includes: sending a second message based on not receiving a first response returned by the second terminal based on the first message; wherein the second message includes the first information that is security protected using the second security information; the second security information is one of multiple security information obtained by the first terminal, and the second security information is different from the first security information.

[0313] In some embodiments, the method further includes: sending a second message based on a failure to verify the first response based on the first security information.

[0314] In some embodiments, before sending the second message, the method further includes: selecting any one security information except the first security information from a plurality of security information as the second security information to perform security protection on the first information.

[0315] In some embodiments, before sending the second message, the method further includes: selecting second security information from the plurality of security information to perform security protection on the first information based on the time sequence in which the plurality of security information are acquired.

[0316] In some embodiments, before sending the second message, the method further includes: selecting second security information from multiple security information based on the priorities of the multiple security information to perform security protection on the first information.

[0317] In some embodiments, the method includes: receiving a first response returned by the second terminal based on the first message; and successfully verifying the first response based on the first security information, and determining that the second terminal is found.

[0318] In some embodiments, the first message includes: an RSC indicating a relay service.

[0319] In some embodiments, the first message includes: an RSC and a first identifier, wherein the first identifier is used to indicate a PLMN for determining the first security information.

[0320] In some embodiments, the second message includes: a relay service code RSC indicating the relay service.

[0321] In some embodiments, the second message includes: an RSC and a second identifier, wherein the second identifier is used to indicate a PLMN for determining the second security information.

[0322] The above embodiments may be implemented individually or in combination with each other. For optional implementations, please refer to the optional implementations of the steps in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0323] FIG3C is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG3C , the present disclosure embodiment relates to an information processing method, which is executed by a first terminal, and the method includes:

[0324] Step S3301: verify the first response.

[0325] The optional implementation of step S3301 can be found in step S2110 in FIG. 2 or the optional implementation of step S3105 in FIG. 3A , as well as other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0326] Step S3302, sending a second message.

[0327] The optional implementation of step S3302 can be found in step S2111 in FIG. 2 , or the optional implementation of step S3106 in FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0328] Optionally, sending the second message includes: sending the second message based on failure of verification of the first response.

[0329] Optionally, sending the second message includes: sending the second message if the first response is not received.

[0330] The above embodiments may be implemented individually or in combination with each other. For optional implementations, please refer to the optional implementations of the steps in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0331] FIG4A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4A , the present disclosure embodiment relates to an information processing method, which is executed by a second terminal, and the method includes:

[0332] Step S4101, sending the fourth message.

[0333] The optional implementation of step S4101 can refer to the optional implementation of step S2101 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0334] In some embodiments, the second terminal sends the fourth message to the second network element, but is not limited thereto, and the fourth message may also be sent to other entities.

[0335] Step S4102: Obtain a fourth response.

[0336] The optional implementation of step S4102 can refer to the optional implementation of step S2102 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0337] In some embodiments, the second terminal obtains the fourth response sent by the second network element, but is not limited thereto, and may also receive the fourth response sent by other entities.

[0338] In some embodiments, the second terminal obtains a fourth response specified by the protocol.

[0339] In some embodiments, the second terminal obtains the fourth response from an upper layer(s).

[0340] In some embodiments, the second terminal performs processing to obtain a fourth response.

[0341] In some embodiments, step S4102 is omitted, and the terminal autonomously implements the function indicated by the fourth response, or the above function is default or acquiescent.

[0342] Step S4103, obtain the first message.

[0343] The optional implementation of step S4103 can refer to the optional implementation of step S2107 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0344] In some embodiments, the second terminal obtains the first message sent by the first terminal, but is not limited thereto and may also receive the first message sent by other entities.

[0345] In some embodiments, the second terminal obtains a first message specified by the protocol.

[0346] In some embodiments, the second terminal obtains the first message from an upper layer(s).

[0347] In some embodiments, the second terminal performs processing to obtain the first message.

[0348] In some embodiments, step S4103 is omitted, and the terminal autonomously implements the function indicated by the first message, or the above function is default or acquiescent.

[0349] Step S4104: verify the first message.

[0350] The optional implementation of step S4104 can refer to the optional implementation of step S2108 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0351] Optionally, the first terminal determines a first response based on the first message based on successful verification of the first message.

[0352] Step S4105: Send a first response.

[0353] The optional implementation of step S4105 can refer to the optional implementation of step S2109 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0354] In some embodiments, the second terminal sends the first response to the first terminal, but is not limited thereto, and the first response may also be sent to other entities.

[0355] Step S4106, obtain the second message.

[0356] The optional implementation of step S4106 can refer to the optional implementation of step S2111 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0357] In some embodiments, the second terminal obtains the second message sent by the first terminal, but is not limited thereto and may also receive the second message sent by other entities.

[0358] In some embodiments, the second terminal obtains a second message specified by the protocol.

[0359] In some embodiments, the second terminal obtains the second message from an upper layer(s).

[0360] In some embodiments, the second terminal performs processing to obtain the second message.

[0361] In some embodiments, step S4106 is omitted, and the terminal autonomously implements the function indicated by the second message, or the above function is default or acquiescent.

[0362] In some optional embodiments, the second message is authenticated.

[0363] In some optional embodiments, a second response is sent.

[0364] The information processing method involved in the embodiment of the present disclosure may include at least one of steps S4101 to S4106. For example, step S4101 can be implemented as an independent embodiment; step S4103 can be implemented as an independent embodiment; step S4106 can be implemented as an independent embodiment; step S4101 and step S4102 can be implemented as independent embodiments; the combination of step S4103 and step S4104 can be implemented as an independent embodiment; the combination of step S4103, step S4104 and step S4105 can be implemented as an independent embodiment; step S4103, step S4104, step S4105 and step S4106 can be implemented as an independent embodiment. The combination of step S4101, step S4102 and step S4103 can be implemented as an independent embodiment; the combination of step S4101, step S4102, step S4103 and step S4104 can be implemented as an independent embodiment; the combination of step S4101, step S4102, step S4103, step S4104 and step S4105 can be implemented as an independent embodiment; the combination of step S4101 to step S4106 can be implemented as an independent embodiment.

[0365] In some embodiments, steps S4101 to S4102 and steps S4104 to S4106 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0366] In some embodiments, steps S4101 to S4102 and steps S4105 to S4106 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0367] In some embodiments, steps S4101 to S4102 and step S4106 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0368] In some embodiments, steps S4101 to S4102 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0369] FIG4B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4B , the present disclosure embodiment relates to an information processing method, which is executed by a second terminal, and the method includes:

[0370] Step S4201, obtain the first message.

[0371] The optional implementation of step S4201 can be found in step S2107 in FIG. 2 , or the optional implementation of step S4103 in FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0372] In some embodiments, obtaining the first message includes: receiving a first message sent by a first terminal; wherein the first message includes first information that is security-protected using first security information; and the first security information is one of multiple security information obtained by the first terminal.

[0373] In some embodiments, the first message includes: an RSC indicating a relay service.

[0374] In some embodiments, the first message includes: an RSC and a first identifier, wherein the first identifier is used to indicate the PLMN where the second terminal corresponding to the first security information is located.

[0375] In some embodiments, the method includes: successfully verifying the first message based on local security information, and sending a first response to the first terminal; wherein the first response uses the security information for security protection.

[0376] In some embodiments, the method includes: determining, based on the first identifier, that the second terminal belongs to the PLMN indicated by the first identifier, successfully verifying the first message based on local security information, and sending a first response to the first terminal.

[0377] In some embodiments, the method includes: verifying the first message based on a lack of local security information, and determining not to send the first response to the first terminal.

[0378] In some embodiments, the method includes: determining, based on the first identifier, that the second terminal does not belong to the PLMN indicated by the first identifier, and determining not to send a first response to the first terminal.

[0379] The above embodiments may be implemented individually or in combination with each other. For optional implementations, please refer to the optional implementations of the steps in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0380] FIG4C is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4C , the embodiment of the present disclosure relates to an information processing method, which is executed by the second terminal, and the method includes:

[0381] Step S4301, obtain the second message.

[0382] The optional implementation of step S4301 can be found in step S2111 in FIG. 2 , or the optional implementation of step S4106 in FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0383] The above embodiments may be implemented individually or in combination with each other. For optional implementations, please refer to the optional implementations of the steps in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0384] FIG5A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG5A , the embodiment of the present disclosure relates to an information processing method, which is executed by a first network element. The method includes:

[0385] Step S5101, obtain the third message.

[0386] The optional implementation of step S5101 can refer to the optional implementation of step S2103 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0387] In some embodiments, the first network element obtains the third message sent by the first terminal, but is not limited thereto and may also receive the third message sent by other entities.

[0388] In some embodiments, the first network element obtains a third message specified by the protocol.

[0389] In some embodiments, the first network element obtains the third message from an upper layer(s).

[0390] In some embodiments, the first network element performs processing to obtain the third message.

[0391] In some embodiments, step S5101 is omitted, and the terminal autonomously implements the function indicated by the third message, or the above function is default or acquiescent.

[0392] Step S5102: Send a third message.

[0393] The optional implementation of step S5102 can refer to the optional implementation of step S2104 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0394] In some embodiments, the first network element sends a third request message to at least one second network element based on the mapping information.

[0395] In some embodiments, the first network element sends the third message to the second network element, but is not limited thereto, and the third message may also be sent to other entities.

[0396] Step S5103: Obtain a third response.

[0397] The optional implementation of step S5103 can refer to the optional implementation of step S2105 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0398] In some embodiments, the first network element obtains the third response sent by the first terminal, but is not limited thereto, and may also receive the third response sent by other entities.

[0399] In some embodiments, the first network element obtains a third response specified by the protocol.

[0400] In some embodiments, the first network element obtains the third response from an upper layer(s).

[0401] In some embodiments, the first network element performs processing to obtain a third response.

[0402] In some embodiments, step S5103 is omitted, and the terminal autonomously implements the function indicated by the third response, or the above function is default or acquiescent.

[0403] Step S5104, sending a third response.

[0404] The optional implementation of step S5104 can refer to the optional implementation of step S2106 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0405] In some embodiments, the first network element sends the third response to the first terminal, but is not limited thereto, and the third response may also be sent to other entities.

[0406] The information processing method involved in the embodiments of the present disclosure may include at least one of steps S5101 to S5104. For example, step S5101 can be implemented as an independent embodiment; step S5102 can be implemented as an independent embodiment; step S5101 and step S5102 can be implemented as independent embodiments; the combination of step S5101, step S5102, and step S5103 can be implemented as an independent embodiment; and the combination of step S5101, step S5102, and step S5103 and step S5104 can be implemented as independent embodiments.

[0407] In some embodiments, steps S5102 to S5104 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0408] In some embodiments, step S5103 and step S5104 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0409] FIG5B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG5B , the embodiment of the present disclosure relates to an information processing method, which is executed by a first network element. The method includes:

[0410] Step S5201, obtain the third message.

[0411] The optional implementation of step S5201 can be found in step S2103 in FIG. 2 , or the optional implementation of step S5101 in FIG. 3A , and other related parts in the embodiments involved in FIG. 2 and FIG. 3A , which will not be described in detail here.

[0412] In some embodiments, obtaining the third message includes: receiving a third message sent by the first terminal, wherein the third message includes RSC; the third message is used to request at least one security information corresponding to the RSC; wherein the at least one security information is used by the first terminal to determine the first security information; the first security information is used to perform security protection on the first information in the first message.

[0413] In some embodiments, the method further includes: sending a third request to at least one second network element based on the mapping information; wherein the mapping information is used to indicate a corresponding relationship between the RSC and the PLMN where the at least one second network element is located.

[0414] In some embodiments, the method further comprises at least one of:

[0415] receiving a third response sent by at least one second network element, wherein the third response includes security information corresponding to the RSC;

[0416] A third response is sent to the first terminal.

[0417] The above embodiments may be implemented individually or in combination with each other. For optional implementations, please refer to the optional implementations of the steps in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0418] FIG6 is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG6, the embodiment of the present disclosure relates to an information processing method for a communication system, the method comprising:

[0419] Step S6101: The first terminal sends a first message to the second terminal.

[0420] The optional implementation of step S6101 can refer to the optional implementation of step S2107 in Figure 2, step S3103 in Figure 3A, step S4103 in Figure 4A, and other related parts in the embodiments involved in Figures 2, 3A, and 4A, which will not be repeated here.

[0421] Step S6102: The second terminal verifies the first message.

[0422] The optional implementation of step S6101 can refer to step S2108 in FIG. 2 , the optional implementation of step S4104 in FIG. 4A , and other related parts in the embodiments involved in FIG. 2 and FIG. 4A , which will not be described in detail here.

[0423] In some optional embodiments, the second terminal determines to send a first response to the first terminal based on successful verification of the first message; alternatively, the second terminal determines not to send a first response based on failure to verify the first message. Here, successful verification of the first message refers to: successful decryption of the first information carried in the first message based on the security information and / or successful integrity verification of the first information in the first message. Failure to verify the first message refers to: failure to decrypt the first information carried in the first message based on the security information and / or failure to pass integrity verification of the first information in the first message.

[0424] In some optional embodiments, the first terminal successfully verifies the first response and determines not to send the second message.

[0425] In some optional embodiments, the first terminal does not receive the first response or fails to verify the first response, and sends the second message.

[0426] In some embodiments, the above method may include the method described in the above-mentioned embodiments of the information processing system 100 side, the first terminal side, the second terminal side, the first network element side, the second network element side, etc., which will not be repeated here.

[0427] FIG7 is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG7 , the embodiment of the present disclosure relates to an information processing method for a communication system, the method comprising:

[0428] Step S7101: The relay UE sends a key discovery request.

[0429] Optionally, for the 5G proximity service UE to network relay discovery process, the relay UE sends a discovery key request; the discovery key request includes at least RSC.

[0430] Optionally, the key discovery request sent by the relay UE may be the fourth request in the previous embodiment; the relay UE may be the second terminal in the previous embodiment.

[0431] Step S7102: The DDNMF or PKMF of the HPLMN of the relay UE performs authorization and authentication with the DDNMF or PKMF of the VPLMN of the relay UE.

[0432] Optionally, if the relay UE does not roam, step S7102 does not occur.

[0433] Optionally, the DDNMF or PKMF of the HPLMN of the relay UE may be the second network element in the previous embodiment; the DDNMF or PKMF of the VPLMN of the relay UE may be the third network element in the previous embodiment.

[0434] Step S7103: The DDNMF or PKMF of the HPLMN relaying the UE sends the discovery security material corresponding to the RSC.

[0435] Optionally, the relay UE stores the RSC and the discovery security material accordingly.

[0436] Optionally, the security material may be the security information in the previous embodiment.

[0437] The above steps S7101 to S7103 involve the relay UE.

[0438] Step S7104: The remote UE sends a key discovery request.

[0439] Optionally, for the 5G proximity service UE to network relay discovery process, the remote UE sends a discovery key request; the discovery key request includes at least RSC.

[0440] Optionally, the key discovery request sent by the remote UE may be the third request in the previous embodiment; and the remote UE may be the first terminal in the previous embodiment.

[0441] Step S7105: The DDNMF or PKMF of the HPLMN of the remote UE sends a key discovery request to the DDNMF or PKMF of the HPLMN of the relay UE.

[0442] Optionally, the DDNMF or PKMF of the remote UE's HPLMN determines the potential relay UE PLMNs that support the RSC based on the potential relay UE PLMNs mapped to the RSC. If multiple potential relay UE PLMNs support the same RSC, the DDNMF or PKMF of the remote UE's HPLMN will discover multiple DNNMFs or PKMFs in different PLMNs.

[0443] Optionally, the DDNMF or PKMF of the HPLMN of the relay UE obtains multiple groups of discovery security materials supporting the same RSC. Here, a group of discovery security materials can be one security information in the previous embodiment.

[0444] Optionally, the DDNMF or PKMF of the HPLMN of the remote UE may be the first network element in the previous embodiment.

[0445] Step S7106: The DDNMF or PKMF of the HPLMN of the relay UE sends the discovery security material corresponding to the RSC to the DDNMF or PKMF of the HPLMN of the remote UE.

[0446] Optionally, if there are multiple PLMNs of potential relay UEs that support the same RSC, the DDNMF or PKMF of the HPLMN of the remote UE will receive multiple sets of discovery security materials from the DDNMFs or PKMFs of different PLMNs.

[0447] Step S7107: The DDNMF or PKMF of the HPLMN of the remote UE performs authorization and authentication with the DDNMF or PKMF of the VPLMN of the remote UE.

[0448] Optionally, if the remote UE does not roam, step S7107 does not occur.

[0449] Optionally, the DDNMF or PKMF of the VPLMN of the remote UE may be the fourth network element in the previous embodiment.

[0450] Step S7108: The DDNMF or PKMF of the HPLMN of the remote UE sends the discovery security material associated with the RSC to the remote UE.

[0451] Optionally, if there are multiple PLMNs of potential relay UEs supporting the same RSC, the remote UE receives multiple sets of discovery security materials generated by DDNMFs or PKMFs of different PLMNs.

[0452] The above steps S7104 to S7108 involve a remote UE.

[0453] In step S7109, the remote UE sends a request message protected by a set of discovery security materials.

[0454] Optionally, before broadcasting the request message, the remote UE uses a set of discovery security materials to protect the request message and broadcasts the protected request message. After sending the request message, the remote UE listens for a response message.

[0455] Optionally, the request message is the first message in the previous embodiment.

[0456] Step S7110: relay the UE verification request message.

[0457] Optionally, the relay UE monitors the request message; if the local RSC matches the RSC in the request message, the message is verified using the discovery security material obtained from the DDNMF or PKMF of the PLMN to which the relay UE belongs.

[0458] Step S7111: The relay UE sends a response message protected by a set of local discovery security materials.

[0459] Optionally, after successfully verifying the request message, the relay UE determines the security material protection response message obtained from the DDNMF or PKMF of the home PLMN and sends the protected response message; or, if the relay fails to verify the request message, the response message is not discovered.

[0460] Optionally, the response message may be the first response in the previous embodiment.

[0461] Step S7112: The remote UE verifies the response message.

[0462] Optionally, the remote UE monitors a response message from a potential UE.

[0463] Optionally, if the remote UE receives a response message, it verifies the response message using the set of discovery security materials used to protect the request message in step S7109. If the verification succeeds, the remote UE and the relay UE have successfully discovered each other. Alternatively, if the verification fails, the remote UE repeats step S7109 until the received response message is verified, or until all sets of discovery security materials have been tried.

[0464] The above steps S7109 to S7112 involve PC5.

[0465] The aforementioned UE may be a terminal.

[0466] The information processing method involved in the embodiments of the present disclosure may include at least one of steps S7101 to S7112. For example, step S7109 can be implemented as an independent embodiment; the combination of step S7109 and step S7110 can be implemented as an independent embodiment; the combination of steps S7109 to S7112 can be implemented as an independent embodiment; the combination of step S7101 and step S7103 can be implemented as an independent embodiment; the combination of step S7104 and step S7108 can be implemented as an independent embodiment; the combination of steps S7104 to S7112 can be implemented as an independent embodiment; and the combination of steps S7101 to S7112 can be implemented as an independent embodiment.

[0467] In some embodiments, steps S7101 to S7108 and steps S7110 to S7111 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0468] In some embodiments, steps S7101 to S7108 may be optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0469] In the embodiments of the present disclosure, some or all of the steps and their optional implementations may be arbitrarily combined with some or all of the steps in other embodiments, and may also be arbitrarily combined with the optional implementations of other embodiments.

[0470] The embodiments of the present disclosure further provide an apparatus for implementing any of the above methods. For example, an apparatus is provided, comprising units or modules for implementing each step performed by a terminal in any of the above methods. For another example, another apparatus is provided, comprising units or modules for implementing each step performed by a network device (e.g., an access network device, a core network function node, a core network device, etc.) in any of the above methods.

[0471] It should be understood that the division of the various units in the above device is merely a division of logical functions. In actual implementation, they may be fully or partially integrated into a physical entity, or they may be physically separated. In addition, the units in the device may be implemented in the form of a processor calling software: for example, the device includes a processor, the processor is connected to a memory, the memory stores computer instructions, and the processor calls the computer instructions stored in the memory to implement any of the above methods or implement the functions of the various units of the above device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory within the device or a memory outside the device. Alternatively, the units in the device can be implemented in the form of hardware circuits, and the functions of some or all of the units can be realized by designing the hardware circuits. The above-mentioned hardware circuits can be understood as one or more processors. For example, in one implementation, the above-mentioned hardware circuit is an application-specific integrated circuit (ASIC), and the functions of some or all of the above units are realized by designing the logical relationship of the components in the circuit. For another example, in another implementation, the above-mentioned hardware circuit can be implemented by a programmable logic device (PLD). Taking a field programmable gate array (FPGA) as an example, it can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by a configuration file, thereby realizing the functions of some or all of the above units. All units of the above devices can be implemented in the form of software called by the processor, or in the form of hardware circuits, or in part by software called by the processor, and the rest by hardware circuits.

[0472] In the embodiment of the present disclosure, the processor is a circuit with signal processing capability. In one implementation, the processor can be a circuit with instruction reading and execution capability, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP); in another implementation, the processor can implement certain functions through the logical relationship of the hardware circuit, and the logical relationship of the above hardware circuit is fixed or reconfigurable, such as a hardware circuit implemented by a processor as an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document and implementing the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0473] Figure 8A is a schematic diagram of the structure of the first terminal provided by an embodiment of the present disclosure. As shown in Figure 8A, the first terminal 8100 includes: a first transceiver module 8101. In some embodiments, the first transceiver module 8101 is used to receive and send a first message. Optionally, the above-mentioned first transceiver module 8101 is used to perform at least one of the steps of receiving and / or sending performed by the first terminal in any of the above methods, which will not be repeated here. Optionally, the first terminal 8100 also includes a first processing module. Optionally, the above-mentioned first processing module is used to perform at least one of the steps of processing performed by the first terminal in any of the above methods, which will not be repeated here.

[0474] Figure 8B is a schematic diagram of the structure of a terminal provided by an embodiment of the present disclosure. As shown in Figure 8B, the second terminal 8200 includes: a second transceiver module 8201. In some embodiments, the second transceiver module 8201 is configured to receive a first message. Optionally, the second transceiver module 8201 is used to perform at least one of the receiving and / or sending steps performed by the second terminal in any of the above methods, which will not be repeated here. Optionally, the second terminal 8200 also includes a second processing module for performing at least one of the processing steps performed by the second terminal in any of the above methods, which will not be repeated here.

[0475] Figure 8C is a schematic diagram of the structure of the terminal provided by an embodiment of the present disclosure. As shown in Figure 8C, the first network element 8300 includes: a third transceiver module 8301. In some embodiments, the third transceiver module 8201 is configured to receive a first message. Optionally, the third transceiver module 8301 is used to perform at least one of the steps of receiving and / or sending performed by the first network element in any of the above methods, which will not be repeated here. Optionally, the first network element 8300 also includes a third processing module for performing at least one of the steps of processing performed by the first network element in any of the above methods, which will not be repeated here.

[0476] Figure 9A is a schematic diagram of the structure of a communication device 9100 provided in an embodiment of the present disclosure. Communication device 9100 can be a first terminal, a second terminal, a first network element, or a second network element, or can also be a chip, chip system, or processor that supports a first terminal in implementing any of the above methods, or a chip, chip system, or processor that supports a terminal in implementing any of the above methods. Communication device 9100 can be used to implement the methods described in the above method embodiments. For details, please refer to the description of the above method embodiments. Optionally, the communication device can be the communication device described in the previous embodiments.

[0477] As shown in Figure 9A, the communication device 9100 includes one or more processors 9101. The processor 9101 can be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor can be used to process communication protocols and communication data, and the central processing unit can be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute programs, and process program data. The processor 9101 is used to call instructions to enable the communication device 9100 to perform any of the above methods.

[0478] In some embodiments, the communication device 9100 further includes one or more memories 9102 for storing instructions. Optionally, all or part of the memories 9102 may be located outside the communication device 9100.

[0479] In some embodiments, the communication device 9100 further includes one or more transceivers 9103. When the communication device 9100 includes one or more transceivers 9103, the transceiver 9103 performs at least one of the communication steps such as sending and / or receiving in the above method, and the processor 9101 performs at least one of the other steps.

[0480] In some embodiments, a transceiver may include a receiver and a transmitter, which may be separate or integrated. Optionally, the terms transceiver, transceiver unit, transceiver, and transceiver circuit may be used interchangeably; the terms transmitter, transmitting unit, transmitter, and transmitting circuit may be used interchangeably; and the terms receiver, receiving unit, receiver, and receiving circuit may be used interchangeably.

[0481] Optionally, the communication device 9100 further includes one or more interface circuits 9104, which are connected to the memory 9102. The interface circuits 9104 can be used to receive signals from the memory 9102 or other devices, and can be used to send signals to the memory 9102 or other devices. For example, the interface circuits 9104 can read instructions stored in the memory 9102 and send the instructions to the processor 9101.

[0482] The communication device 9100 described in the above embodiment may be a first terminal or a second terminal, but the scope of the communication device 9100 described in the present disclosure is not limited thereto, and the structure of the communication device 9100 may not be limited by FIG. 9A. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: (1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data or computer programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, an in-vehicle device, a network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

[0483] 9B is a schematic diagram of the structure of a chip 9200 provided in an embodiment of the present disclosure. If the communication device 9100 can be a chip or a chip system, please refer to the schematic diagram of the structure of the chip 9200 shown in FIG9B , but the present disclosure is not limited thereto.

[0484] The chip 9200 includes one or more processors 9201 , and the chip 9200 is configured to execute any of the above methods.

[0485] In some embodiments, the chip 9200 further includes one or more interface circuits 9202, which are connected to the memory 9203. The interface circuits 9202 can be used to receive signals from the memory 9203 or other devices, and can be used to send signals to the memory 9203 or other devices. For example, the interface circuits 9202 can read instructions stored in the memory 9203 and send the instructions to the processor 9201.

[0486] In some embodiments, the interface circuit 9202 performs at least one of the communication steps such as sending and / or receiving in the above method, and the processor 9201 performs at least one of the other steps.

[0487] In some embodiments, terms such as interface circuit, interface, transceiver pin, and transceiver may be used interchangeably.

[0488] In some embodiments, the chip 9200 further includes one or more memories 9203 for storing instructions. Alternatively, all or part of the memories 9203 may be located outside the chip 9200.

[0489] The present disclosure also proposes a storage medium having instructions stored thereon, which, when executed on the communication device 9100, causes the communication device 9100 to execute any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited thereto and may also be a storage medium readable by other devices. Optionally, the storage medium may be a non-transitory storage medium, but is not limited thereto and may also be a temporary storage medium.

[0490] The present disclosure also provides a program product, which, when executed by the communication device 9100, enables the communication device 9100 to perform any of the above methods. Optionally, the program product is a computer program product.

[0491] The present disclosure also proposes a computer program, which, when executed on a computer, causes the computer to perform any one of the above methods.

Claims

1. An information processing method, characterized in that the method include: The first terminal sends a first message; wherein the first message includes first information that is security protected using first security information; The first security information is one of a plurality of security information acquired by the first terminal.

2. The method according to claim 1, characterized in that Before sending the first message, the method further includes one of the following: Selecting any one of the security information from the multiple security information as the first security information to perform security protection on the first information; Based on the time sequence in which the multiple security information are acquired, selecting the first security information from the multiple security information to perform security protection on the first information; Based on the priorities of the multiple security information, the first security information is selected from the multiple security information to perform security protection on the first information.

3. The method according to claim 1 or 2, characterized in that: The method also Includes one of the following: Sending a second message based on not receiving a first response returned by the second terminal based on the first message; wherein the second message includes the first information that is security-protected using second security information; the second security information is one of multiple security information obtained by the first terminal, and the second security information is different from the first security information; The second message is sent based on a failure in verifying the first response based on the first security information.

4. The method according to claim 3, characterized in that Before sending the second message, the method further includes: Selecting any one of the security information except the first security information from the plurality of security information as the second security information to perform security protection on the first information; Based on the time sequence in which the multiple security information are acquired, selecting the second security information from the multiple security information to perform security protection on the first information; Based on the priorities of the multiple security information, the second security information is selected from the multiple security information to perform security protection on the first information.

5. The method according to claim 1, characterized in that The method comprises: receiving a first response returned by the second terminal based on the first message; The first response is successfully verified based on the first security information, and it is determined that the second terminal is found.

6. The method according to any one of claims 1 to 5, characterized in that: The first message includes one of the following: Relay Service Code RSC indicating the relay service; The RSC and the first identifier, wherein the first identifier is used to indicate a public land mobile network PLMN for determining the first security information.

7. The method according to claim 3 or 4, characterized in that: The second message includes one of the following: Relay Service Code RSC indicating the relay service; The RSC and the second identifier, wherein the second identifier is used to indicate the PLMN for determining the second security information.

8. An information processing method, characterized in that: The method comprises: The second terminal receives a first message; wherein the first message includes first information that is security-protected using first security information; and the first security information is one of a plurality of security information acquired by the first terminal.

9. The method according to claim 8, characterized in that The first message includes one of the following: Relay Service Code RSC indicating the relay service; The RSC and the first identifier, wherein the first identifier is used to indicate a public land mobile network PLMN where the second terminal corresponding to the first security information is located.

10. The method according to claim 8 or 9, characterized in that: The method comprises one of: The first message is successfully verified based on the local security information, and a first response is sent to the first terminal; wherein the first response uses the security information for security protection; Based on the first identifier, it is determined that the second terminal belongs to the PLMN indicated by the first identifier, and based on the local security information, the first message is successfully verified, and the first response is sent to the first terminal.

11. The method according to claim 8 or 9, characterized in that: The method also Includes one of the following: Verifying the first message based on the absence of local security information, determining not to send a first response to the first terminal; wherein the first response uses the security information for security protection; It is determined based on the first identifier that the second terminal does not belong to the PLMN indicated by the first identifier, and it is determined not to send the first response to the first terminal.

12. An information processing method, characterized in that: The method comprises: The first network element receives a third message sent by the first terminal, wherein the third message includes a relay service code RSC; the third message is used to request at least one security information corresponding to the RSC; Among them, at least one of the security information is used by the first terminal to determine the first security information; and the first security information is used to perform security protection on the first information in the first message.

13. The method according to claim 12, characterized in that The method further comprises: Based on the mapping information, a third request is sent to at least one second network element; wherein the mapping information is used to indicate a corresponding relationship between the RSC and the PLMN where the at least one second network element is located.

14. The method according to claim 13, characterized in that The method further comprises at least one of the following: receiving a third response sent by at least one of the second network elements, wherein the third response includes the security information corresponding to the RSC; The third response is sent to the first terminal.

15. A first terminal, characterized in that: include: A first transceiver module is configured to send a first message; wherein the first message includes first information that is security protected using first security information; The first security information is one of a plurality of security information acquired by the first terminal.

16. A second terminal, characterized in that: include: A second transceiver module is configured to receive a first message; wherein the first message includes first information that is security-protected using first security information; The first security information is one of multiple security information acquired by the first terminal.

17. A first network element, characterized in that: include: A third transceiver module is configured to receive a third message sent by the first terminal, wherein the third message includes a relay service code RSC; the third message is used to request at least one security information corresponding to the RSC; Among them, at least one of the security information is used by the first terminal to determine the first security information; and the first security information is used to perform security protection on the first information in the first message.

18. A first terminal, characterized in that: include: one or more processors; Wherein, the first terminal is used to execute the information processing method according to any one of claims 1 to 7.

19. A second terminal, characterized in that: include: one or more processors; Wherein, the second terminal is used to execute the information processing method according to any one of claims 8 to 11.

20. A first network element, characterized in that: include: one or more processors; The first network element is used to execute the information processing method according to any one of claims 12 to 14.

21. A communication system, characterized in that: include: A first terminal, a second terminal and a first network element; wherein the first terminal is configured to implement the information processing method according to any one of claims 1 to 7, the second terminal is configured to implement the information processing method according to any one of claims 8 to 11, and the first network element is configured to implement the information processing method according to any one of claims 12 to 14.

22. A storage medium storing instructions, characterized in that: When the instruction is executed on the communication device, the communication device is caused to execute the information processing method according to any one of claims 1 to 7, claims 8 to 11, or claims 12 to 14.

Images