Information sending method and apparatus based on proximity service discovery, and communication device, communication system and storage medium

Abstract

Provided in the present disclosure are an information sending method and apparatus based on proximity service discovery, and a communication device, a communication system and a storage medium. The method comprises: a first terminal receiving a security context identifier that is sent by a core network device and is associated with a security context for proximity service discovery, and the first terminal sending a first message to a second terminal, wherein the first message is used for realizing the proximity service discovery, and comprises the security context identifier. In proximity service discovery, the method of the present disclosure enables a terminal to accurately obtain a security context for the proximity service discovery.

Description

Information sending method and device based on proximity service discovery, communication equipment, communication system, and storage medium Technical Field

[0001] The present disclosure relates to the field of communication technologies, and in particular to a method and apparatus for sending information based on proximity service discovery, a communication device, a communication system, and a storage medium. Background Art

[0002] In some standard communication protocols, network devices can provide discovery security parameters to terminals to ensure that the terminals can securely protect messages. Such messages can include announcement messages, solicitation messages, response messages, and direct communication request messages. Discovery security parameters are used to protect information elements in the aforementioned messages, except for the message type, a counter based on Coordinated Universal Time (UTC), and a message integrity code (MIC).

[0003] Summary of the Invention

[0004] The embodiments of the present disclosure provide a method, apparatus, device, chip system, storage medium, computer program, and computer program product for sending information based on proximity service discovery, which can be applied in the field of communication technology to solve the technical problem that "the terminal cannot accurately obtain the security context for proximity service discovery."

[0005] The present disclosure provides an information sending method and apparatus based on proximity service discovery, a communication device, a communication system, and a storage medium.

[0006] According to a first aspect of an embodiment of the present disclosure, a method for sending information based on proximity service discovery is proposed, which is executed by a first terminal, including: receiving a security context identifier associated with a security context of proximity service discovery sent by a core network device; and sending a first message to a second terminal, wherein the first message is used to implement the proximity service discovery, and the first message includes the security context identifier.

[0007] According to a second aspect of an embodiment of the present disclosure, a method for receiving information based on proximity service discovery is proposed, which is executed by a second terminal, including: receiving a first message sent by a first terminal, wherein the first message is used to implement proximity service discovery, and the first message includes a security context identifier associated with the security context of the proximity service discovery.

[0008] According to a third aspect of an embodiment of the present disclosure, a method for sending information based on proximity service discovery is proposed, which is executed by a core network device and includes: sending a security context identifier associated with a security context discovered by the proximity service to a first terminal.

[0009] According to the fourth aspect of an embodiment of the present disclosure, a method for sending information based on proximity service discovery is proposed, including: a core network device sends a security context identifier associated with a security context of proximity service discovery to a first terminal; the first terminal receives the security context identifier sent by the core network device, and sends a first message to a second terminal, wherein the first message is used to implement the proximity service discovery, and the first message includes the security context identifier; the second terminal receives the first message sent by the first terminal to obtain the security context identifier.

[0010] According to the fifth aspect of an embodiment of the present disclosure, an information sending device based on proximity service discovery is proposed, including: a transceiver module for receiving a security context identifier associated with a security context of proximity service discovery sent by a core network device, and sending a first message to a second terminal, wherein the first message is used to implement the proximity service discovery, and the first message includes the security context identifier.

[0011] According to the sixth aspect of an embodiment of the present disclosure, an information receiving device based on proximity service discovery is proposed, including: a transceiver module for receiving a first message sent by a first terminal, wherein the first message is used to implement proximity service discovery, and the first message includes a security context identifier associated with the security context of the proximity service discovery.

[0012] According to a seventh aspect of an embodiment of the present disclosure, an information sending device based on proximity service discovery is proposed, including: a transceiver module, configured to send a security context identifier associated with a security context discovered by the proximity service to a first terminal.

[0013] According to an eighth aspect of an embodiment of the present disclosure, a communication device is proposed, comprising: one or more processors; wherein the processor is used to call instructions to enable the communication device to execute the information sending or receiving method based on proximity service discovery of any one of the first aspect, the second aspect and the third aspect.

[0014] According to the ninth aspect of an embodiment of the present disclosure, a communication system is proposed, characterized in that it includes a first terminal, a second terminal and a core network device, wherein the first terminal is configured to implement the information sending method based on proximity service discovery of the first aspect, the second terminal is configured to implement the information receiving method based on proximity service discovery of the second aspect, and the core network device is configured to implement the information sending method based on proximity service discovery of the third aspect.

[0015] According to the tenth aspect of an embodiment of the present disclosure, a storage medium is proposed, which stores instructions, and is characterized in that when the instructions are executed on a communication device, the communication device executes a method for sending or receiving information based on proximity service discovery as described in any one of the first, second and third aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure or the background technology, the drawings required for use in the embodiments of the present disclosure or the background technology will be described below.

[0017] FIG1 is a schematic diagram of the architecture of a communication system according to an embodiment of the present disclosure;

[0018] FIG2 is an interactive diagram illustrating a method for sending information based on proximity service discovery according to an embodiment of the present disclosure;

[0019] FIG3A is an interactive schematic diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure;

[0020] FIG3B is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure;

[0021] FIG3C is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure;

[0022] FIG3D is an interactive diagram illustrating a method for sending information based on proximity service discovery according to yet another embodiment of the present disclosure;

[0023] FIG4A is an interactive schematic diagram illustrating a method for receiving information based on proximity service discovery according to another embodiment of the present disclosure;

[0024] FIG4B is an interactive diagram illustrating a method for receiving information based on proximity service discovery according to another embodiment of the present disclosure;

[0025] FIG5A is an interactive schematic diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure;

[0026] FIG5B is an interactive diagram illustrating a method for sending information based on proximity service discovery according to yet another embodiment of the present disclosure;

[0027] FIG6 is an interactive diagram illustrating a method for sending information based on proximity service discovery according to yet another embodiment of the present disclosure;

[0028] FIG7A is an interactive diagram of an information sending method based on proximity service discovery according to another embodiment of the present disclosure;

[0029] FIG7B is an interactive diagram of an information sending method based on proximity service discovery according to yet another embodiment of the present disclosure;

[0030] FIG8A is a schematic structural diagram of an information sending device based on proximity service discovery proposed in an embodiment of the present disclosure;

[0031] FIG8B is a schematic structural diagram of an information receiving device based on proximity service discovery proposed in an embodiment of the present disclosure;

[0032] FIG8C is a schematic structural diagram of an information sending device based on proximity service discovery proposed in an embodiment of the present disclosure;

[0033] FIG9A is a schematic structural diagram of a communication device proposed in an embodiment of the present disclosure;

[0034] FIG9B is a schematic diagram of the structure of the chip proposed in an embodiment of the present disclosure. DETAILED DESCRIPTION

[0035] The present disclosure provides a method and apparatus for transmitting information based on proximity service discovery, as well as a communication device, a communication system, and a storage medium. In some embodiments, the terms "information transmitting method based on proximity service discovery" and "information processing method" and "communication method" are interchangeable; "information transmitting apparatus based on proximity service discovery" and "information processing apparatus" and "communication apparatus" are interchangeable; and "information processing system" and "communication system" are interchangeable.

[0036] The embodiments of the present disclosure are not exhaustive and are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined. For example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

[0037] In each embodiment of the present disclosure, unless otherwise specified or provided for by logic, the terms and / or descriptions between the embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form a new embodiment based on their inherent logical relationships.

[0038] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

[0039] In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular, such as "a", "an", "the", "above", "said", "the", "the", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun following the article may be understood as a singular expression or a plural expression.

[0040] In the embodiments of the present disclosure, “plurality” refers to two or more.

[0041] In some embodiments, the terms "at least one of", "at least one of", "at least one of", "one or more", "a plurality of", "multiple", etc. can be used interchangeably.

[0042] In the embodiments of the present disclosure, descriptions such as “at least one of A, B, C…”, “A and / or B and / or C…”, etc. include the situation where any one of A, B, C… exists alone, and also include any combination of any multiple of A, B, C…, and each situation can exist alone; for example, “at least one of A, B, C” includes the situation where A exists alone, B exists alone, C exists alone, the combination of A and B, the combination of A and C, the combination of B and C, and the combination of A, B, and C; for example, A and / or B includes the situation where A exists alone, B exists alone, and the combination of A and B.

[0043] In some embodiments, descriptions such as "in one case A, in another case B," or "in response to one case A, in response to another case B," can include the following technical solutions depending on the situation: executing A independently of B (in some embodiments, A); executing B independently of A (in some embodiments, B); selectively executing A and B (in some embodiments, selecting between A and B); and executing both A and B (in some embodiments, A and B). The same applies when there are more branches, such as A, B, and C.

[0044] The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects and do not constitute any restriction on the position, order, priority, quantity or content of the description objects. For the statement of the description object, please refer to the description in the context of the claims or embodiments, and no unnecessary restriction should be constituted due to the use of prefixes. For example, if the description object is a "field", the ordinal number before the "field" in the "first field" and the "second field" does not limit the position or order between the "fields". "First" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and the "second field". For another example, if the description object is a "level", the ordinal number before the "level" in the "first level" and the "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number and can be one or more. Taking "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes can be the same or different. For example, if the description object is "device", then the "first device" and the "second device" can be the same device or different devices, and their types can be the same or different. For another example, if the description object is "information", then the "first information" and the "second information" can be the same information or different information, and their contents can be the same or different.

[0045] In some embodiments, “including A,” “comprising A,” “used to indicate A,” and “carrying A” can be interpreted as directly carrying A or indirectly indicating A.

[0046] In some embodiments, terms such as "in response to...", "in response to determining...", "in the case of...", "at the time of...", "when...", "if...", "if...", etc. can be used interchangeably.

[0047] In some embodiments, terms such as "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not less than", and "above" can be replaced with each other, and terms such as "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "not more than", "lower than", "lower than or equal to", "not higher than", and "below" can be replaced with each other.

[0048] In some embodiments, devices, etc. can be interpreted as physical or virtual, and their names are not limited to the names recorded in the embodiments. Terms such as "device", "equipment", "device", "circuit", "network element", "node", "function", "unit", "section", "system", "network", "chip", "chip system", "entity", and "subject" can be used interchangeably.

[0049] In some embodiments, "network" can be interpreted as devices included in the network (eg, access network equipment, core network equipment, etc.).

[0050] In some embodiments, the terms "access network device (AN device)", "radio access network device (RAN device)", "base station (BS)", "radio base station" "fixed station", "node", "access point", "transmission point (TP)", "reception point (RP)", "transmission / reception point (TRP)", "panel", "antenna panel", "antenna array", "cell", "macro cell", "small cell", "femto cell", "pico cell", "sector", "cell group", "carrier", "component carrier", "bandwidth part (BWP)" and the like may be used interchangeably.

[0051] In some embodiments, the terms "terminal", "terminal device", "user equipment (UE)", "user terminal", "mobile station (MS)", "mobile terminal (MT)", subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, etc. can be used interchangeably.

[0052] In some embodiments, obtaining data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

[0053] In some embodiments, data, information, etc. may be obtained with the user's consent.

[0054] In addition, each element, each row, or each column in the table of the embodiment of the present disclosure can be implemented as an independent embodiment, and the combination of any elements, any rows, and any columns can also be implemented as an independent embodiment.

[0055] The correspondences shown in the tables of the present disclosure can be configured or predefined. The values ​​of the information in each table are merely examples and can be configured to other values, which are not limited by the present disclosure. When configuring the correspondences between information and parameters, it is not necessarily required to configure all the correspondences shown in each table. For example, in the tables of the present disclosure, the correspondences shown in certain rows may not be configured. For another example, appropriate deformation adjustments can be made based on the above tables, such as splitting, merging, etc. The names of the parameters shown in the titles of the above tables may also adopt other names that can be understood by the communication device, and the values ​​or representations of the parameters may also adopt other values ​​or representations that can be understood by the communication device. When implementing the above tables, other data structures may also be used, such as arrays, queues, containers, stacks, linear lists, pointers, linked lists, trees, graphs, structures, classes, heaps, hash tables or hash tables, etc.

[0056] The predefined in the present disclosure may be understood as defined, predefined, stored, pre-stored, pre-negotiated, pre-configured, solidified, or pre-burned.

[0057] FIG1 is a schematic diagram of the architecture of a communication system according to an embodiment of the present disclosure. As shown in FIG1 , a communication system 100 may include a terminal 101 and a core network device 102 .

[0058] In some embodiments, the terminal 101 may include, for example, a mobile phone, a wearable device, an Internet of Things device, a car with communication function, a smart car, a tablet computer, a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, and at least one of a wireless terminal device in a smart home, but is not limited thereto.

[0059] In some embodiments, the core network device 102 may be a single device, multiple devices, or a group of devices. A network element may be virtual or physical. The core network may include, for example, at least one of an Evolved Packet Core (EPC), a 5G Core Network (5GCN), or a Next Generation Core (NGC).

[0060] In some embodiments, the terminal 101 and the core network device 102 can be connected through an access network device. Optionally, the access network device is, for example, a node or device that accesses the terminal to a wireless network. The access network device may include an evolved NodeB (eNB), a next generation evolved NodeB (ng-eNB), a next generation NodeB (gNB), a node B (NB), a home node B (HNB), a home evolved nodeB (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an open base station (Open RAN), a cloud base station (Cloud RAN), a base station in other communication systems, and at least one of an access node in a wireless fidelity (WiFi) system, but is not limited thereto.

[0061] It can be understood that the communication system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution proposed in the embodiment of the present disclosure. Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution proposed in the embodiment of the present disclosure is also applicable to similar technical problems.

[0062] The following embodiments of the present disclosure may be applied to the communication system 100 shown in Figure 1, or a portion thereof, but are not limited thereto. The entities shown in Figure 1 are illustrative only. The communication system may include all or part of the entities shown in Figure 1, or may include other entities outside of Figure 1. The number and form of the entities may be arbitrary. The connection relationship between the entities is illustrative only. The entities may be connected or disconnected, and the connection may be in any manner, including direct or indirect, wired or wireless.

[0063] The embodiments of the present disclosure may be applied to Long Term Evolution (LTE), LTE-Advanced (LTE-A), LTE-Beyond (LTE-B), SUPER 3G, IMT-Advanced, 4th generation mobile communication system (4G), 5th generation mobile communication system (5G), 5G New Radio (NR), Future Radio Access (FRA), New-Radio Access Technology (RAT), New Radio (NR), New Radio Access (NX), Future Generation Radio Access (FX), Global System for Mobile Communications (GSM (registered trademark)), CDMA2000, Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.17 (WiMAX (registered trademark)), IEEE 802.18 (WiMAX (registered trademark)), IEEE 802.19 (WiMAX (registered trademark)), IEEE 802.20 (WiMAX (registered trademark)), IEEE 802.21 (WiMAX (registered trademark)), IEEE 802.22 (WiMAX (registered trademark)), IEEE 802.23 (WiMAX (registered trademark)), IEEE 802.24 (WiMAX (registered trademark)), IEEE 802.25 (WiMAX (registered trademark)), IEEE 802.26 (WiMAX (registered trademark)), IEEE 802.27 (WiMAX (registered trademark)), IEEE 802.28 (WiMAX (registered trademark)), IEEE 802.29 (WiMAX (registered trademark)), IEEE 802.30 (WiMAX (registered trademark)), IEEE 802.31 (WiMAX (registered trademark)), IEEE 802.32 (WiMAX (registered trademark)), IEEE 802.33 (WiMAX (registered trademark)), 802.20, Ultra-WideBand (UWB), Bluetooth (registered trademark), Public Land Mobile Network (PLMN) networks, Device-to-Device (D2D) systems, Machine-to-Machine (M2M) systems, Internet of Things (IoT) systems, Vehicle-to-Everything (V2X) systems, systems utilizing other proximity service discovery-based information transmission methods, and next-generation systems based on and extending these systems. Furthermore, multiple systems may be combined (for example, a combination of LTE or LTE-A with 5G) for application.

[0064] Optionally, after receiving the protected message, the terminal can retrieve the corresponding discovery security parameters to perform the security verification process. However, without the plaintext identifier for the discovery security parameters, the terminal cannot obtain the correct discovery security parameters, resulting in the failure of the security verification process.

[0065] In the disclosed embodiments, discovery security parameters may also be referred to as security context or discovery security material. The security context may include multiple keys used for security protection during proximity service discovery. The security context may also include send code security parameters and / or receive code security parameters. Furthermore, discovery security parameters may be described by any other possible name, without limitation.

[0066] In the disclosed embodiments, a first terminal can receive a security context identifier associated with a security context for proximity service discovery, sent by a core network device. The first terminal can also send the security context identifier to a second terminal. This security context identifier can be used by the second terminal to accurately retrieve the associated security context for proximity service discovery. This resolves the technical issue in related technologies whereby a terminal cannot accurately obtain a security context for proximity service discovery.

[0067] FIG2 is an interactive diagram illustrating a method for sending information based on proximity service discovery according to an embodiment of the present disclosure. As shown in FIG2 , the present disclosure embodiment relates to a method for sending information based on proximity service discovery, which can be used in a communication system 100. The method includes:

[0068] Step S2101: The core network device generates a security context identifier associated with a security context for proximity service discovery.

[0069] In some embodiments, a security context identifier may be used to identify a security context for Proximity Services (ProSe) discovery. The security context identifier may also be expressed as the security context identifier or as a key identifier, and there is no restriction on the name of the security context identifier.

[0070] In some embodiments, proximity service discovery may include at least one of proximity service direct discovery, proximity service user equipment to network (Prose User equipment to Network, Prose U2N) discovery, and proximity service user equipment to user equipment (Prose User equipment to User equipment, Prose U2U) discovery, thereby effectively expanding the application scenarios of the information sending method based on proximity service discovery.

[0071] In some embodiments, the core network device may be, for example, a Direct Discovery Name Management Function (DDNMF) network element, or a Proximity Service Key Management Function (PKMF) network element.

[0072] In some embodiments, a core network device may generate a security context identifier and provide the security context identifier to the first terminal.

[0073] In some embodiments, the core network device may use one or more parameters to generate a security context identifier, where the parameters include at least one of a relay service code (RSC), proximity service information (which may be expressed as prose service info), discovery security parameters (which may be expressed as discovery security parameters), a proximity service restriction code (which may be expressed as prose restricted code), a proximity service query code (which may be expressed as prose query code), and a public land mobile network identity (PLMN ID). This can effectively improve the accuracy and effectiveness of the security context identifier generation.

[0074] In some embodiments, the DDNMF network element may use at least one of the RSC, proximity service information, discovery security parameters, proximity service constraint code, proximity service query code, and PLMN ID to derive the security context identifier. Alternatively, the PKMF network element may use at least one of the RSC, proximity service information, discovery security parameters, proximity service constraint code, proximity service query code, and PLMN ID to derive the security context identifier. Alternatively, the DDNMF network element and the PKMF network element may jointly use at least one of the RSC, proximity service information, discovery security parameters, proximity service constraint code, proximity service query code, and PLMN ID to derive the security context identifier.

[0075] In some embodiments, at least one of the RSC, proximity service information, discovery security parameters, proximity service constraint code, proximity service query code, and PLMN ID may be introduced into a generation function, and the output of the generation function may be used as a security context identifier.

[0076] In some embodiments, at least one of the RSC, the proximity service information, the discovery security parameter, the proximity service constraint code, the proximity service query code, and the PLMN ID may be concatenated to obtain a security context identifier.

[0077] Step S2102: The core network device sends a security context identifier to the first terminal.

[0078] In some embodiments, the core network device may send a security context identifier to the first terminal to indicate the security context identifier to the first terminal.

[0079] In some embodiments, the core network device may further send a security context for proximity service discovery to the first terminal.

[0080] In some embodiments, in the proximity service direct discovery, the first terminal may be, for example, an Announcing UE or the Discoverer UE or the Discoveree UE; the second terminal may be, for example, the Monitoring UE or the Discoveree UE or the Discoverer UE; in the proximity service user equipment to network, the first terminal may be, for example, a user equipment to network relay (User equipment to Network relay, U2N relay), and the second terminal may be, for example, a remote UE; in the proximity service user equipment to user equipment, the first terminal may be, for example, a user equipment to user equipment relay (User equipment to User equipment relay, U2U relay), and the second terminal may be, for example, an end UE. Of course, depending on the type of proximity service discovery, the first terminal and / or the second terminal may also be configured as any other possible role.

[0081] Step S2103: The core network device sends at least one security context to the second terminal.

[0082] The security context of the proximity service discovery belongs to at least one security context.

[0083] In some embodiments, the core network device may send one or more security contexts to the second terminal to support the second terminal in retrieving a security context for proximity service discovery from at least one security context.

[0084] Step S2104: The first terminal receives a security context identifier sent by the core network device.

[0085] In some embodiments, the first terminal may further associate and store the security context discovered by the proximity service with the security context identifier.

[0086] Step S2105: The first terminal sends a first message to the second terminal.

[0087] The first message is used to implement proximity service discovery, and the first message includes a security context identifier.

[0088] In some embodiments, the first terminal may include a security context identifier in a first message and send the security context identifier to the second terminal by sending the first message. The first message may be a new message or a reused existing message. The first message may be used to implement proximity service discovery. The first message may carry the security context identifier in plain text, thereby enabling the second terminal to parse the first message to obtain the security context identifier used by the first terminal to securely protect the first message.

[0089] In some embodiments, the core network device may further send a security context for proximity service discovery to the first terminal, and the first terminal may receive the security context for proximity service discovery sent by the core network device. The first terminal may further associate and store the security context for proximity service discovery with a security context identifier.

[0090] In some embodiments, the first message is security-protected based on the security context of proximity service discovery. For example, the core network device may first send the security context and security context identifier of the proximity service discovery to the first terminal. After receiving the security context and security context identifier of the proximity service discovery, the first terminal may security-protect the first message based on the security context of the proximity service discovery, carry the security context identifier in plain text in the first message, and send the first message to the second terminal, indicating the security context identifier, to support the second terminal in retrieving the accurate security context of the proximity service discovery based on the security context identifier.

[0091] In some embodiments, security protection includes at least one of encryption protection, integrity protection, and scrambling protection, thereby effectively improving the flexibility of security protection and effectively applying it to personalized security protection scenarios.

[0092] In some embodiments, in response to cryptographically protecting the first message, the first terminal sends the security context identifier in plain text to the second terminal. For example, if the first message is cryptographically protected, the first terminal may send the first message to the second terminal, where the first message includes the security context identifier in plain text, enabling the second terminal to obtain an accurate security context identifier.

[0093] In some embodiments, in response to integrity protection of the first message, all parameters in the first message are integrity protected using the security context discovered by the proximity service, where all parameters include a security context identifier. For example, if integrity protection is performed on the first message, the first terminal can integrity protect all parameters in the first message using the security context discovered by the proximity service and send the integrity-protected first message to the second terminal. This enables the second terminal to obtain a complete and accurate security context identifier.

[0094] Step S2106: The second terminal receives the first message sent by the first terminal.

[0095] In some embodiments, the second terminal may receive the security context identifier sent in plain text by the first terminal. In some embodiments, the second terminal may receive the first message sent by the first terminal and obtain the security context identifier in plain text from the first message.

[0096] Step S2107: The second terminal determines a security context for proximity service discovery from at least one security context according to the security context identifier.

[0097] In some embodiments, the second terminal can retrieve the corresponding security context for proximity service discovery based on the security context identifier. For example, the core network device can provide the second terminal with multiple security contexts and corresponding security context identifiers, and each security context corresponds to a security context identifier. The second terminal stores the received security context sent by the core network device in correspondence with the security context identifier in the proximity discovery process. Based on the received security context identifier sent by the first terminal, the second terminal can determine the security context corresponding to the security context identifier and use the corresponding security context to perform security verification on the first message. This allows accurate retrieval of the security context for proximity service discovery used.

[0098] Step S2108: The second terminal performs security verification on the first message according to the security context discovered by the proximity service.

[0099] In some embodiments, the second terminal may further perform security verification on the first message based on the security context discovered by the proximity service to obtain message content other than the security context identifier in the first message and support implementation of the proximity service.

[0100] In some embodiments, the second terminal may decrypt the first message based on the security context discovered by the proximity service, or the second terminal may verify the integrity of the first message based on the security context discovered by the proximity service.

[0101] It should be noted that in the embodiments of the present disclosure, the roles of the first terminal and the second terminal can be interchanged. For example, the first terminal can be used as the second terminal, and the second terminal can be used as the first terminal. The second terminal can also receive the security context and associated security context identifier sent by the core network device for proximity service discovery, and send the security context identifier to the first terminal. The first terminal can then receive the security context identifier sent by the second terminal to retrieve the accurate security context for proximity service discovery based on the security context identifier. There is no limitation on this.

[0102] For example, the second terminal may also receive a security context identifier associated with the security context for proximity service discovery sent by the core network device. The second terminal may also send the security context identifier to the first terminal. The security context identifier may be used by the first terminal to accurately obtain the security context for proximity service discovery. Thus, in proximity service discovery, the terminal can accurately obtain the security context for proximity service discovery, and retrieve the accurate proximity service discovery security context based on the security context identifier.

[0103] The information transmission method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S2101 to S2108. For example, step S2101 can be implemented as an independent embodiment, step S2102 can be implemented as an independent embodiment, and so on, but are not limited thereto. Steps S2101+S2102 can be implemented as independent embodiments, and steps S2101+S2102+S2103 can be implemented as independent embodiments, but are not limited thereto.

[0104] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0105] Thus, in this embodiment, the first terminal can receive a security context identifier associated with the security context for proximity service discovery sent by the core network device. The first terminal can also send the security context identifier to the second terminal, and the security context identifier can be used by the second terminal to accurately obtain the security context for proximity service discovery. Thus, in proximity service discovery, the terminal can accurately obtain the security context used for proximity service discovery.

[0106] FIG3A is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure. As shown in FIG3A , the present disclosure embodiment relates to a method for sending information based on proximity service discovery, which can be used for a first terminal. The method includes:

[0107] Step S3101: receiving a security context identifier associated with a security context for proximity service discovery sent by a core network device.

[0108] In an embodiment of the present disclosure, proximity service discovery includes at least one of the following: proximity service direct discovery; proximity service user device to network discovery; proximity service user device to user device discovery.

[0109] Step S3102: Send a first message to the second terminal, where the first message is used to implement proximity service discovery and includes a security context identifier.

[0110] The information transmission method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S3101 and S3102. For example, step S3101 can be implemented as an independent embodiment, step S3102 can be implemented as an independent embodiment, and so on, but is not limited thereto. Steps S3101+S3102 can be implemented as independent embodiments, but are not limited thereto.

[0111] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0112] FIG3B is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure. As shown in FIG3B , the embodiment of the present disclosure relates to a method for sending information based on proximity service discovery, which can be used for a first terminal. The method includes:

[0113] Step S3201: Receive a security context for proximity service discovery sent by a core network device.

[0114] Step S3202: Receive a security context identifier associated with a security context for proximity service discovery sent by a core network device.

[0115] Step S3203: Send a first message to the second terminal, wherein the first message is used to implement proximity service discovery, the first message includes a security context identifier, and the first message is security-protected based on a security context of proximity service discovery.

[0116] In an embodiment of the present disclosure, security protection includes at least one of the following: encryption protection; integrity protection; and scrambling protection.

[0117] The information transmission method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S3201 to S3203. For example, step S3201 can be implemented as an independent embodiment, step S3202 can be implemented as an independent embodiment, and so on, but is not limited thereto. Steps S3201+S3202 can be implemented as independent embodiments, but are not limited thereto.

[0118] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0119] FIG3C is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure. As shown in FIG3C , the present disclosure embodiment relates to a method for sending information based on proximity service discovery, which can be used for a first terminal. The method includes:

[0120] Step S3301: Receive a security context identifier associated with a security context for proximity service discovery sent by a core network device.

[0121] Step S3302: In response to encrypting and protecting the first message, the first terminal sends a security context identifier to the second terminal in plain text. The first message is used to implement proximity service discovery, and the first message includes the security context identifier.

[0122] The information transmission method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S3301 and S3302. For example, step S3301 may be implemented as an independent embodiment, step S3302 may be implemented as an independent embodiment, and so on, but is not limited thereto.

[0123] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0124] FIG3D is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure. As shown in FIG3D , the present disclosure embodiment relates to a method for sending information based on proximity service discovery, which can be used for a first terminal. The method includes:

[0125] Step S3401: Receive a security context identifier associated with a security context for proximity service discovery sent by a core network device.

[0126] Step S3402: In response to integrity protection of the first message, integrity protection is performed on all parameters in the first message using a security context for proximity service discovery, wherein the first message is used to implement proximity service discovery, and all parameters include a security context identifier.

[0127] Step S3403: Send a first message to the second terminal.

[0128] The information transmission method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S3401 to S3403. For example, step S3401 can be implemented as an independent embodiment, step S3402 can be implemented as an independent embodiment, and so on, but is not limited thereto. Steps S3401+S3402 can be implemented as independent embodiments, but are not limited thereto.

[0129] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0130] FIG4A is an interactive diagram illustrating a method for receiving information based on proximity service discovery according to another embodiment of the present disclosure. As shown in FIG4A , the present disclosure embodiment relates to a method for receiving information based on proximity service discovery, which can be used by a second terminal. The method includes:

[0131] Step S4101: Receive a first message sent by a first terminal, wherein the first message is used to implement proximity service discovery, and the first message includes a security context identifier associated with a security context of proximity service discovery.

[0132] The information receiving method based on proximity service discovery involved in the embodiments of the present disclosure may include step S4101. For example, step S4101 may be implemented as an independent embodiment, but is not limited thereto.

[0133] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0134] FIG4B is an interactive diagram illustrating a method for receiving information based on proximity service discovery according to another embodiment of the present disclosure. As shown in FIG4B , the present disclosure embodiment relates to a method for receiving information based on proximity service discovery, which can be used by a second terminal. The method includes:

[0135] Step S4201: Receive at least one security context sent by a core network device.

[0136] Step S4202: Receive a first message sent by a first terminal, wherein the first message is used to implement proximity service discovery, and the first message includes a security context identifier associated with a security context for proximity service discovery.

[0137] Step S4203: Determine a security context for proximity service discovery from at least one security context according to the security context identifier.

[0138] Step S4204: Perform security verification on the first message according to the security context of proximity service discovery.

[0139] The information receiving method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S4201 to S4204. For example, step S4201 can be implemented as an independent embodiment, step S4202 can be implemented as an independent embodiment, and so on, but is not limited thereto. Steps S4201+S4202 can be implemented as independent embodiments, but are not limited thereto.

[0140] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0141] Figure 5A is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure. As shown in Figure 5A, the embodiment of the present disclosure relates to a method for sending information based on proximity service discovery, which can be used in a core network device. The method includes:

[0142] Step S5101: Send a security context identifier associated with a security context discovered by a proximity based service to a first terminal.

[0143] The information transmission method based on proximity service discovery involved in the embodiment of the present disclosure may include step S5101. For example, step S5101 may be implemented as an independent embodiment, but is not limited thereto.

[0144] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0145] FIG5B is an interactive diagram illustrating a method for sending information based on proximity service discovery according to another embodiment of the present disclosure. As shown in FIG5B , the present disclosure embodiment relates to a method for sending information based on proximity service discovery, which can be used in a core network device. The method includes:

[0146] Step S5201: Send a security context for proximity service discovery to the first terminal.

[0147] Step S5202: Generate a security context identifier associated with a security context for proximity service discovery.

[0148] Step S5203: Send a security context identifier associated with the security context discovered by the proximity service to the first terminal.

[0149] In an embodiment of the present disclosure, the core network device may further send at least one security context to the second terminal, and the second terminal may receive the at least one security context sent by the core network device. Each security context has a corresponding security context identifier, and the second terminal may associate and store the security context received from the core network device with the security context identifier received from the core network device. The second terminal may determine the security context for proximity service discovery from the at least one security context based on the security context identifier, and perform security verification on the first message based on the security context for proximity service discovery.

[0150] In some embodiments of the present disclosure, a security context identifier is generated using parameters, wherein the parameters include at least one of the following: a relay service code; proximity service information; discovery security parameters; proximity service constraint code; proximity service query code; and a public land mobile network identifier.

[0151] The information transmission method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S5201 to S5203. For example, step S5201 can be implemented as an independent embodiment, step S5202 can be implemented as an independent embodiment, and so on, but is not limited thereto. Steps S5201+S5202 can be implemented as independent embodiments, but are not limited thereto.

[0152] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0153] Figure 6 is an interactive diagram of a method for sending information based on proximity service discovery according to another embodiment of the present disclosure. As shown in Figure 6, the embodiment of the present disclosure relates to a method for sending information based on proximity service discovery, which can be used in a communication system. The method includes:

[0154] Step S6101: The core network device sends a security context identifier associated with a security context discovered by the proximity service to the first terminal.

[0155] In step S6102, the first terminal receives a security context identifier sent by the core network device, and sends a first message to the second terminal, wherein the first message is used to implement proximity service discovery, and the first message includes the security context identifier.

[0156] Step S6103: The second terminal receives the first message sent by the first terminal to obtain a security context identifier.

[0157] The information transmission method based on proximity service discovery involved in the embodiments of the present disclosure may include at least one of steps S6101 to S6103. For example, step S6101 can be implemented as an independent embodiment, step S6102 can be implemented as an independent embodiment, and so on, but is not limited thereto. Steps S6101+S6102 can be implemented as independent embodiments, but are not limited thereto.

[0158] In this embodiment or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other embodiments or other examples.

[0159] The following is an exemplary introduction to the above method.

[0160] Optional embodiment:

[0161] For proximity service direct discovery, proximity service U2N discovery (proximity service user device to network) and proximity service U2U (proximity service user device to user device) discovery, the DDNMF network element and / or the PKMF network element may provide the terminal with a sending code security parameter and / or a receiving code security parameter (the sending code security parameter and / or the receiving code security parameter may be an optional example of a security context for proximity service discovery) and an associated security context identifier. The security context corresponds to each proximity service. In other words, each different proximity service (relay) service has a corresponding security context for protecting the discovery process. Therefore, the security context identifier also corresponds to each proximity service.

[0162] As shown in Figure 7A, Figure 7A is an interactive diagram of an information sending method based on proximity service discovery according to another embodiment of the present disclosure. A proximity service interaction process based on Model A is shown. UE-1, UE-2, UE-3, UE-4, and UE-5 are included, wherein UE-1 can be used as a first terminal for announcing, and UE-2, UE-3, UE-4, and UE-5 can be used as second terminals for monitoring. UE-1 can send announcement messages (announcement messages or discovery messages) to UE-2, UE-3, UE-4, and UE-5, respectively, to implement proximity services.

[0163] In an embodiment of the present disclosure, if a discovery time slot associated with a UTC-based timer provided by the system is within the maximum offset (MAX_OFFSET) of the neighboring service clock of the announcing UE (e.g., the Announcing UE) and the validity timer has not expired, the Announcing UE may form a discovery message and protect it using a transmit code security parameter and / or a receive code security parameter. The security context identifier associated with the transmit code security parameter and / or the receive code security parameter and the least significant four bits of the UTC-based timer may be transmitted in plain text along with the protected discovery message.

[0164] In the embodiment of the present disclosure, the security context identifier may be derived by using the RSC and / or the proximity service constraint code and / or the proximity service query code and / or the PLMN ID and / or the proximity service service information and / or the discovery security parameter.

[0165] In an embodiment of the present disclosure, if the discovery slot associated with the UTC-based timer is within the maximum offset (MAX_OFFSET) of the proximity service clock of a monitoring UE (e.g., a monitoring UE), the monitoring UE may monitor discovery messages that satisfy its discovery filter. The monitoring UE may retrieve the corresponding transmit code security parameters and / or receive code security parameters based on the security context identifier in the announcement message for security verification.

[0166] As shown in Figure 7B, Figure 7B is an interactive diagram of an information sending method based on proximity service discovery shown in another embodiment of the present disclosure. A proximity service interaction process based on Model B is shown. Among them, UE-1, UE-2, UE-3, UE-4, and UE-5 are included, wherein UE-1 can be used as the first terminal for discovery (discoverer), and UE-2, UE-3, UE-4, and UE-5 can be used as the second terminal and discovered (discoveree). UE-1 can send a Solicitation message (request message or discovery message) to UE-2, UE-3, UE-4, and UE-5 respectively to implement proximity service. UE-2, UE-3, UE-4, and UE-5 can send a Response message (response message) to UE-1 respectively. The roles of the first terminal and the second terminal can also be interchanged. For example, UE-2, UE-3, UE-4, and UE-5 are used as the first terminal, and UE-1 is used as the second terminal. UE-2, UE-3, UE-4, and UE-5 respectively use the same method (that is, the same as UE-1 sends to UE-2 or UE-3 or UE-4 or UE-5) to send feedback messages to UE-1.

[0167] In an embodiment of the present disclosure, if the discovery slot associated with the UTC-based timer provided by the system is within the maximum offset (MAX_OFFSET) of the proximity service clock of the discoverer UE (e.g., the discoverer UE) and the validity timer has not expired, the discoverer UE may send a proximity service query code and / or a relay service code and listen for a response message. The discoverer UE may form a discovery message and protect it using a transmit code security parameter and / or a receive code security parameter. The security context identifier associated with the transmit code security parameter and / or the receive code security parameter and the least significant four bits of the UTC-based timer may be transmitted in plain text along with the protected discovery message.

[0168] In the embodiment of the present disclosure, the security context identifier may be derived by using the RSC and / or the proximity service constraint code and / or the proximity service query code and / or the PLMN ID and / or the proximity service service information and / or the discovery security parameter.

[0169] In an embodiment of the present disclosure, if the discovery slot associated with the UTC-based timer is within the maximum offset (MAX_OFFSET) of the neighboring service clock of the discovered UE (e.g., the discoveree UE), the discovered UE may listen for discovery messages that meet its discovery filter. The discovered UE may retrieve the corresponding transmit code security parameters and / or receive code security parameters based on the security context identifier for security verification.

[0170] In an embodiment of the present disclosure, a discovered UE sends a proximity service response code or relay service code associated with a discovered proximity service query code. The discovered UE forms a discovery message and protects it using a send code security parameter and / or a receive code security parameter. The security context identifier associated with the send code security parameter and / or the receive code security parameter and the least significant four bits of a UTC-based timer may be transmitted in plain text along with the protected discovery message.

[0171] In the embodiment of the present disclosure, the discoverer UE may monitor the discovery messages that meet its discovery filter and may obtain the corresponding sending code security parameters and / or receiving code security parameters according to the security context identifier to perform security verification.

[0172] In the embodiment of the present disclosure, the security key in the send code security parameter of the discoverer UE and the security key in the send code security parameter of the discovered UE may be independently randomly generated.

[0173] The present disclosure also provides a message-specific confidentiality mechanism for discovery. The message-specific confidentiality mechanism for discovery can be provided by the ProSe (Proximity Services) layer between terminals implementing ProSe. The input parameters of the encryption algorithm in some communication standards include:

[0174] Keyword (KEY): the least significant 128 bits of the output of the Key Derivation Function (KDF);

[0175] Count value (Count): a counter based on UTC;

[0176] BEARER: 0x00;

[0177] Direction: 0x00

[0178] Length: can be calculated by the following formula:

[0179] LEN(discovery message)-(LEN(message type)+LEN(least significant bit LSB of the UTC-based counter)+LEN(MIC)+LEN(security context identifier), where LEN(x) represents the length of x, expressed in the number of bits.

[0180] In some communication standards, a keyword (KEY) is set to generate a message-specific keystream. The output keystream (output_keystream) of the encrypted_bits_mask mask encryption algorithm (an encryption algorithm) is then used to generate the final keystream (keystream) for message-specific confidentiality protection. This can be calculated using the following formula:

[0181] Final key stream KEYSTREAM = output_keystreamAND(encrypted_bits_mask||0xFF..FF);

[0182] The final key stream KEYSTREAM can also be "xored" with the discovery message for message-specific confidentiality protection, where "||" is a logical OR operator, indicating a logical OR operation, and "xor" is a logical exclusive OR operator, indicating a logical exclusive OR operation.

[0183] Figure 8A is a schematic diagram of the structure of an apparatus for transmitting information based on proximity service discovery, as proposed in an embodiment of the present disclosure. As shown in Figure 8A, the apparatus for transmitting information based on proximity service discovery includes: a transceiver module configured to receive a security context identifier associated with a security context for proximity service discovery, sent by a core network device, and to transmit a first message to a second terminal, wherein the first message is used to implement proximity service discovery and includes the security context identifier.

[0184] Optionally, the above-mentioned transceiver module is used to execute the relevant steps performed by the first terminal in any of the above methods, which will not be repeated here.

[0185] Optionally, the information sending device based on proximity service discovery also includes at least one of a sending module and a receiving module. The sending module is used to execute the steps related to sending performed by the first terminal in any of the above methods, and the receiving module is used to execute the steps related to receiving performed by the first terminal in any of the above methods, which will not be repeated here.

[0186] Figure 8B is a schematic diagram of the structure of an information receiving device based on proximity service discovery proposed in an embodiment of the present disclosure. As shown in Figure 8B, the information receiving device based on proximity service discovery includes: a transceiver module for receiving a first message sent by a first terminal, wherein the first message is used to implement proximity service discovery and includes a security context identifier associated with a security context for proximity service discovery.

[0187] Optionally, the above-mentioned transceiver module is used to execute the relevant steps executed by the second terminal in any of the above methods, which will not be repeated here.

[0188] Optionally, the information receiving device based on proximity service discovery also includes at least one of a sending module and a receiving module. The sending module is used to execute the steps related to sending performed by the second terminal in any of the above methods, and the receiving module is used to execute the steps related to receiving performed by the second terminal in any of the above methods, which will not be repeated here.

[0189] FIG8C is a schematic diagram of the structure of the information sending device based on proximity service discovery proposed in an embodiment of the present disclosure. As shown in FIG8C , the information sending device based on proximity service discovery includes: a transceiver module configured to send a security context identifier associated with the security context discovered by the proximity service to the first terminal.

[0190] Optionally, the above-mentioned transceiver module is used to execute the relevant steps performed by the core network device in any of the above methods, which will not be repeated here.

[0191] Optionally, the information sending device based on proximity service discovery also includes at least one of a sending module and a receiving module. The sending module is used to execute the steps related to sending performed by the core network device in any of the above methods, and the receiving module is used to execute the steps related to receiving performed by the core network device in any of the above methods, which will not be repeated here.

[0192] It should be understood that the division of the various units or modules in the above device is merely a division of logical functions. In actual implementation, they may be fully or partially integrated into a physical entity, or they may be physically separated. In addition, the units or modules in the device may be implemented in the form of a processor calling software: for example, the device includes a processor, the processor is connected to a memory, and the memory stores instructions. The processor calls the instructions stored in the memory to implement any of the above methods or implement the functions of the various units or modules of the above device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory within the device or a memory outside the device. Alternatively, the units or modules in the device can be implemented in the form of hardware circuits, and the functions of some or all of the units or modules can be realized by designing the hardware circuits. The above-mentioned hardware circuits can be understood as one or more processors; for example, in one implementation, the above-mentioned hardware circuit is an application-specific integrated circuit (ASIC), which realizes the functions of some or all of the above units or modules by designing the logical relationship of the components in the circuit; for example, in another implementation, the above-mentioned hardware circuit can be realized by a programmable logic device (PLD). Taking a field programmable gate array (FPGA) as an example, it can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by configuring the configuration file, thereby realizing the functions of some or all of the above units or modules. All units or modules of the above devices can be realized in the form of software called by the processor, or in the form of hardware circuits, or in part by the form of software called by the processor, and the rest by hardware circuits.

[0193] As shown in Figure 9A, Figure 9A is a schematic diagram of the structure of the communication device proposed in an embodiment of the present disclosure. The communication device 9100 includes one or more processors 9101. The processor 9101 can be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor can be used to process the communication protocol and communication data, and the central processing unit can be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute programs, and process program data. The processor 9101 is used to call instructions to enable the communication device 9100 to execute any of the above methods.

[0194] In some embodiments, the communication device 9100 further includes one or more memories 9102 for storing instructions. Optionally, all or part of the memories 9102 may be located outside the communication device 9100.

[0195] In some embodiments, the communication device 9100 further includes one or more transceivers 9103. When the communication device 9100 includes one or more transceivers 9103, the communication steps such as sending and receiving in the above method are performed by the transceiver 9103, and the other steps are performed by the processor 9101.

[0196] In some embodiments, a transceiver may include a receiver and a transmitter, which may be separate or integrated. Optionally, the terms transceiver, transceiver unit, transceiver, and transceiver circuit may be used interchangeably; the terms transmitter, transmitting unit, transmitter, and transmitting circuit may be used interchangeably; and the terms receiver, receiving unit, receiver, and receiving circuit may be used interchangeably.

[0197] Optionally, the communication device 9100 further includes one or more interface circuits 9104, which are connected to the memory 9102. The interface circuits 9104 can be used to receive signals from the memory 9102 or other devices, and can be used to send signals to the memory 9102 or other devices. For example, the interface circuits 9104 can read instructions stored in the memory 9102 and send the instructions to the processor 9101.

[0198] The communication device 9100 described in the above embodiments may be a network device or a terminal, but the scope of the communication device 9100 described in the present disclosure is not limited thereto, and the structure of the communication device 9100 may not be limited by FIG. 9A. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: 1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data or programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, an in-vehicle device, a network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

[0199] Figure 9B is a schematic diagram of the structure of a chip proposed in an embodiment of the present disclosure. If the communication device 9100 can be a chip or a chip system, please refer to the schematic diagram of the structure of the chip 9200 shown in Figure 9B, but the present invention is not limited thereto. The chip 9200 includes one or more processors 9201, which are used to call instructions to cause the chip 9200 to execute any of the above methods.

[0200] In some embodiments, chip 9200 further includes one or more interface circuits 9202, which are connected to memory 9203. Interface circuits 9202 can be used to receive signals from memory 9203 or other devices, and can be used to send signals to memory 9203 or other devices. For example, interface circuit 9202 can read instructions stored in memory 9203 and send the instructions to processor 9201. Optionally, the terms interface circuit, interface, transceiver pin, and transceiver are interchangeable.

[0201] In some embodiments, the chip 9200 further includes one or more memories 9203 for storing instructions. Alternatively, all or part of the memories 9203 may be located outside the chip 9200.

[0202] The present disclosure also proposes a storage medium having instructions stored thereon, which, when executed on the communication device 9100, causes the communication device 9100 to execute any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited thereto and may also be a storage medium readable by other devices. Optionally, the storage medium may be a non-transitory storage medium, but is not limited thereto and may also be a temporary storage medium.

[0203] In the embodiment of the present disclosure, the processor is a circuit with signal processing capability. In one implementation, the processor can be a circuit with instruction reading and execution capability, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP); in another implementation, the processor can implement certain functions through the logical relationship of the hardware circuit, and the logical relationship of the above hardware circuit is fixed or reconfigurable, such as a hardware circuit implemented by a processor as an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document and implementing the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units or modules. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0204] The present disclosure also provides a program product, which, when executed by the communication device 9100, enables the communication device 9100 to perform any of the above methods. Optionally, the program product is a computer program product.

[0205] The present disclosure also proposes a computer program, which, when executed on a computer, causes the computer to perform any one of the above methods.

[0206] In the above embodiments, all or part of the embodiments can be implemented by software, hardware, firmware or any combination thereof. When implemented using software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer programs. When the computer program is loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present disclosure are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program can be transmitted from one website, computer, server or data center to another website, computer, server or data center via a wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) method. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that includes one or more available media integrated therein. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a high-density digital video disc (DVD)), or a semiconductor medium (eg, a solid state disk (SSD)).

[0207] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this disclosure.

[0208] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0209] The above description is merely a specific embodiment of the present disclosure, but the scope of protection of the present disclosure is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this disclosure should be included in the scope of protection of the present disclosure. Therefore, the scope of protection of the present disclosure should be based on the scope of protection of the claims.

Claims

1. A method for sending information based on proximity service discovery, characterized in that: The method is executed by the first terminal, and includes: Receiving a security context identifier associated with a security context discovered by a proximity service and sent by a core network device; A first message is sent to the second terminal, wherein the first message is used to implement the proximity service discovery, and the first message includes the security context identifier.

2. The method according to claim 1, characterized in that The proximity service discovery includes at least one of the following: Direct discovery of neighboring services; Proximity service user device to network discovery; Proximity Services UE-to-UE Discovery.

3. The method according to any one of claims 1 to 2, characterized in that: The method further comprises: Receive the security context of the proximity service discovery sent by the core network device.

4. The method according to any one of claims 1 to 3, characterized in that: The first message is protected based on the security context of the proximity service discovery.

5. The method according to claim 4, characterized in that The security protection includes at least one of the following: Encryption protection; Integrity protection; Scrambling protection.

6. The method according to any one of claims 1 to 5, characterized in that: The method further comprises: In response to encrypting and protecting the first message, the first terminal sends the security context identifier to the second terminal in plain text.

7. The method according to any one of claims 1 to 5, characterized in that: The method further comprises: In response to integrity protection of the first message, integrity protection is performed on all parameters in the first message using the security context of the proximity service discovery, wherein all the parameters include the security context identifier.

8. A method for receiving information based on proximity service discovery, characterized in that: The method is executed by the second terminal, and includes: A first message sent by a first terminal is received, wherein the first message is used to implement proximity service discovery, and the first message includes a security context identifier associated with a security context of the proximity service discovery.

9. The method according to claim 8, characterized in that The proximity service discovery includes at least one of the following: Direct discovery of neighboring services; Proximity service user device to network discovery; Proximity Services UE-to-UE Discovery.

10. The method according to any one of claims 8 to 9, characterized in that: The first message is protected by a security context based on proximity service discovery.

11. The method according to claim 10, characterized in that The security protection includes at least one of the following: Encryption protection; Integrity protection; Scrambling protection.

12. The method according to any one of claims 8 to 11, characterized in that: The receiving a first message sent by a first terminal includes: Receive the security context identifier sent by the first terminal in plain text.

13. The method according to any one of claims 8 to 12, characterized in that: The method further comprises: Receive at least one security context sent by a core network device.

14. The method according to any one of claims 8 to 13, characterized in that: The method further comprises: A security context for the proximity service discovery is determined from at least one security context according to the security context identifier.

15. The method according to any one of claims 8 to 14, characterized in that: The method further comprises: Perform security verification on the first message according to the security context of the proximity service discovery.

16. A method for sending information based on proximity service discovery, characterized in that: The method is executed by a core network device, and includes: A security context identifier associated with the security context discovered by the proximity service is sent to the first terminal.

17. The method according to claim 16, characterized in that The proximity service discovery includes at least one of the following: Direct discovery of neighboring services; Proximity service user device to network discovery; Proximity Services UE-to-UE Discovery.

18. The method according to any one of claims 16 to 17, characterized in that: The method further comprises: Sending the security context of the proximity service discovery to the first terminal.

19. The method according to any one of claims 16 to 18, characterized in that: The method further comprises: A security context identifier associated with the security context discovered by the proximity service is generated.

20. The method of claim 19, wherein: The security context identifier is generated using parameters, wherein the parameters include at least one of the following: Relay service code; Proximity service information; Discover security parameters; Proximity service constraint code; Proximity service query code; Public Land Mobile Network Identity.

21. The method according to any one of claims 16 to 20, characterized in that: The method further comprises: At least one security context is sent to the second terminal, wherein the security context discovered by the proximity based service belongs to the at least one security context.

22. A method for sending information based on proximity service discovery, characterized in that: The method comprises: The core network device sends a security context identifier associated with the security context discovered by the proximity service to the first terminal; The first terminal receives the security context identifier sent by the core network device, and sends a first message to the second terminal, wherein the first message is used to implement the proximity service discovery, and the first message includes the security context identifier; The second terminal receives the first message sent by the first terminal to obtain the security context identifier.

23. An information sending device based on proximity service discovery, characterized in that: The device comprises: The transceiver module is used to receive a security context identifier associated with a security context for proximity service discovery sent by a core network device, and send a first message to a second terminal, wherein the first message is used to implement the proximity service discovery and includes the security context identifier.

24. An information receiving device based on proximity service discovery, characterized in that: The device comprises: The transceiver module is configured to receive a first message sent by a first terminal, wherein the first message is used to implement proximity service discovery, and the first message includes a security context identifier associated with a security context of the proximity service discovery.

25. An information sending device based on proximity service discovery, characterized in that: The device comprises: The transceiver module is configured to send a security context identifier associated with a security context discovered by the proximity service to the first terminal.

26. A communication device, characterized in that: include: One or more processors; The processor is used to call instructions so that the communication device executes the method according to any one of claims 1 to 22.

27. A communication system, characterized in that: It includes a first terminal, a second terminal and a core network device, wherein the first terminal is configured to implement the method described in any one of claims 1-7, the second terminal is configured to implement the method described in any one of claims 8-15, and the core network device is configured to implement the method described in any one of claims 16-21.

28. A storage medium storing instructions, characterized in that: When the instruction is executed on a communication device, the communication device is caused to execute the method according to any one of claims 1 to 22.

Images