NAS message security protection method and apparatus, and storage medium

Abstract

Provided are an NAS message security protection method and apparatus, and a storage medium. The method is applied to an NAS security function entity, and the NAS security function entity is a function entity other than an access mobility management function entity (AMF). The method comprises: receiving an uplink NAS message sent by a user equipment (UE), using an NAS integrity protection key to perform integrity verification on the uplink NAS message, using a NAS encryption key to decrypt the uplink NAS message, and sending the uplink NAS message which has undergone integrity verification and decryption to an NAS network function entity (NF); and / or receiving a downlink NAS message sent by the NAS NF, using the NAS encryption key to encrypt the downlink NAS message, using the NAS integrity protection key to perform integrity protection on the downlink NAS message, and sending the downlink NAS message which had undergone encryption and integrity protection to the UE, wherein the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity. The present invention implements RAN service-based NAS message security protection.

Description

NAS message security protection method, device and storage medium

[0001] This disclosure claims priority to Chinese patent application number 202311267633.4, filed with the Patent Office of China on September 27, 2023, entitled “Security Protection Method, Device and Storage Medium for NAS Messages,” the entire contents of which are incorporated herein by reference. Technical Field

[0002] The present disclosure relates to the field of communication technology, and in particular to a method, device, and storage medium for securely protecting Non-Access Stratum (NAS) messages. Background Art

[0003] Currently, encryption and integrity protection for the NAS protocol are performed by the Access and Mobility Management Function (AMF). The AMF is responsible for security functions such as encryption and decryption, integrity protection, and transmission of NAS messages within each core network network function (NF). With the service-oriented Radio Access Network (RAN), core network NFs and RANs can interact directly, but there is currently no NAS message security protection method based on RAN service-oriented RANs.

[0004] Summary of the Invention

[0005] The present disclosure provides a method, apparatus, and storage medium for securely protecting NAS messages, which implement NAS message security protection based on RAN service.

[0006] In a first aspect, an embodiment of the present disclosure provides a method for securing non-access stratum (NAS) messages, which is applied to a NAS security function entity, where the NAS security function entity is a functional entity other than an access mobility management function entity (AMF); the method includes:

[0007] Receive an uplink NAS message sent by a user equipment UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, and decrypt the uplink NAS message using a NAS encryption key, and send the integrity-verified and decrypted uplink NAS message to a NAS network function entity NF;

[0008] and / or

[0009] Receive a downlink NAS message sent by the NAS NF, encrypt the downlink NAS message using a NAS encryption key, perform integrity protection on the downlink NAS message using a NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS message to the UE;

[0010] The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity.

[0011] In one implementation, the method further includes:

[0012] Activate NAS integrity protection;

[0013] Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key;

[0014] Activate NAS uplink decryption;

[0015] receiving a NAS security mode complete message sent by the UE;

[0016] Activate NAS downlink encryption.

[0017] In one implementation, activating NAS integrity protection includes:

[0018] The downlink NAS message is received, and NAS integrity protection is activated.

[0019] In one implementation, the method further includes:

[0020] receiving an initial NAS message sent by the UE;

[0021] Send the decrypted and integrity-verified initial NAS message to the NAS NF;

[0022] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0023] In one implementation, the method further includes:

[0024] receiving an initial NAS message sent by the UE;

[0025] Initiating an authentication process with the UE;

[0026] Sending an initial NAS message to the NAS NF;

[0027] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0028] In one implementation, the NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF, or a custom network function entity.

[0029] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key, and the NAS security function entity key is derived by a security anchor function entity SEAF.

[0030] In one implementation, the NAS security function entity includes a SEAF.

[0031] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0032] In a second aspect, the present disclosure provides a method for securing non-access stratum (NAS) messages, which is applied to a NAS network function entity (NF). The method includes:

[0033] receiving an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or

[0034] Send downlink NAS messages to the UE through the NAS security function entity;

[0035] The NAS security function entity is a functional entity other than the access mobility management function entity AMF, and the NAS security function entity is used to derive a NAS integrity protection key and a NAS encryption key.

[0036] In a third aspect, the present disclosure provides a method for securing non-access stratum (NAS) messages, which is applied to a NAS security function entity. The method includes:

[0037] Export NAS integrity protection keys and NAS encryption keys;

[0038] The NAS integrity protection key and the NAS encryption key are sent to a NAS network function entity NF, wherein the NAS integrity protection key is used to perform integrity verification on uplink NAS messages and integrity protection on downlink NAS messages; and the NAS encryption key is used to decrypt the uplink NAS message and encrypt the downlink NAS message.

[0039] In one implementation, the NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

[0040] In a fourth aspect, the present disclosure provides a method for securing a non-access stratum (NAS) message, which is applied to a NAS network function entity (NF). The method includes:

[0041] receiving an uplink NAS message from the UE, performing integrity verification on the uplink NAS message using the NAS integrity protection key, and decrypting the uplink NAS message using the NAS encryption key;

[0042] and / or

[0043] Encrypting a downlink NAS message using the NAS encryption key, performing integrity protection on the downlink NAS message using the NAS integrity protection key, and sending the encrypted and integrity-protected downlink NAS message to the UE;

[0044] The NAS integrity protection key and the NAS encryption key are sent to the NAS NF by a NAS security function entity; or, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF, and the NAS NF is a functional entity other than an access mobility management function entity AMF.

[0045] In one implementation, the method further includes:

[0046] Activate NAS integrity protection;

[0047] Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key;

[0048] Activate NAS uplink decryption;

[0049] receiving a NAS security mode complete message sent by the UE;

[0050] Activate NAS downlink encryption.

[0051] In one implementation, the method further includes:

[0052] receiving an initial NAS message from the UE;

[0053] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0054] In one implementation, the method further includes:

[0055] receiving an initial NAS message from the UE;

[0056] Initiating an authentication process with the UE;

[0057] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0058] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on a NAS NF key, and the NAS NF key is derived by a security anchor function entity SEAF.

[0059] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by a security anchor function entity SEAF, and the NAS security function entity is a functional entity outside the SEAF.

[0060] In one implementation, the NAS security function entity includes a security anchor function entity SEAF.

[0061] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0062] In a fifth aspect, the present disclosure provides a security protection device for non-access stratum (NAS) messages, which is applied to a NAS security function entity, wherein the NAS security function entity is a functional entity other than an access mobility management function entity (AMF); the device includes:

[0063] an uplink processing module, configured to receive an uplink NAS message sent by a user equipment UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, decrypt the uplink NAS message using a NAS encryption key, and send the integrity-verified and decrypted uplink NAS message to a NAS network function entity NF;

[0064] and / or

[0065] a downlink processing module, configured to receive a downlink NAS message sent by the NAS NF, encrypt the downlink NAS message using a NAS encryption key, perform integrity protection on the downlink NAS message using a NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS message to the UE;

[0066] The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity.

[0067] In one implementation, the system further includes an activation module configured to:

[0068] Activate NAS integrity protection;

[0069] Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key;

[0070] Activate NAS uplink decryption;

[0071] receiving a NAS security mode complete message sent by the UE;

[0072] Activate NAS downlink encryption.

[0073] In one implementation, the activation module is configured to:

[0074] The downlink NAS message is received, and NAS integrity protection is activated.

[0075] In one implementation, the system further includes a first initial message protection module configured to:

[0076] receiving an initial NAS message sent by the UE;

[0077] Send the decrypted and integrity-verified initial NAS message to the NAS NF;

[0078] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0079] In one implementation, the system further includes a second initial message protection module, configured to:

[0080] receiving an initial NAS message sent by the UE;

[0081] Initiating an authentication process with the UE;

[0082] Sending an initial NAS message to the NAS NF;

[0083] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0084] In one implementation, the NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF, or a custom network function entity.

[0085] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key, and the NAS security function entity key is derived by a security anchor function entity SEAF.

[0086] In one implementation, the NAS security function entity includes a SEAF.

[0087] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0088] In a sixth aspect, the present disclosure provides a security protection device for non-access stratum (NAS) messages, which is applied to a NAS network function entity (NF). The device includes:

[0089] a receiving module, configured to receive an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or

[0090] A sending module, configured to send a downlink NAS message to the UE through the NAS security function entity;

[0091] The NAS security function entity is a functional entity other than the access mobility management function entity AMF, and the NAS security function entity is used to derive a NAS integrity protection key and a NAS encryption key.

[0092] In a seventh aspect, the present disclosure provides a security protection device for non-access stratum (NAS) messages, applied to a NAS security function entity, the device comprising:

[0093] Export module, used to export NAS integrity protection keys and NAS encryption keys;

[0094] a sending module, configured to send the NAS integrity protection key and the NAS encryption key to a NAS network function entity NF, wherein the NAS integrity protection key is used to perform integrity verification on uplink NAS messages and perform integrity protection on downlink NAS messages; and the NAS encryption key is used to decrypt the uplink NAS message and encrypt the downlink NAS message.

[0095] In one implementation, the NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

[0096] In an eighth aspect, the present disclosure provides a security protection device for non-access stratum (NAS) messages, applied to a NAS network function entity (NF), the device comprising:

[0097] an uplink processing module, configured to receive an uplink NAS message from the UE, perform integrity verification on the uplink NAS message using the NAS integrity protection key, and decrypt the uplink NAS message using the NAS encryption key;

[0098] and / or

[0099] a downlink processing module, configured to encrypt a downlink NAS message using the NAS encryption key, perform integrity protection on the downlink NAS message using the NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS message to the UE;

[0100] The NAS integrity protection key and the NAS encryption key are sent to the NAS NF by a NAS security function entity; or, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF, and the NAS NF is a functional entity other than an access mobility management function entity AMF.

[0101] In one implementation, the system further includes an activation module configured to:

[0102] Activate NAS integrity protection;

[0103] Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key;

[0104] Activate NAS uplink decryption;

[0105] receiving a NAS security mode complete message sent by the UE;

[0106] Activate NAS downlink encryption.

[0107] In one implementation, the system further includes a first initial message protection module configured to:

[0108] receiving an initial NAS message from the UE;

[0109] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0110] In one implementation, the system further includes a second initial message protection module, configured to:

[0111] receiving an initial NAS message from the UE;

[0112] Initiating an authentication process with the UE;

[0113] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0114] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on a NAS NF key, and the NAS NF key is derived by a security anchor function entity SEAF.

[0115] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by a security anchor function entity SEAF, and the NAS security function entity is a functional entity outside the SEAF.

[0116] In one implementation, the NAS security function entity includes a security anchor function entity SEAF.

[0117] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0118] In a ninth aspect, the present disclosure provides a security protection device for non-access stratum (NAS) messages, the device being a NAS security function entity, the NAS security function entity being a functional entity other than an access mobility management function entity (AMF); the device including a memory, a transceiver, and a processor.

[0119] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0120] Receive an uplink NAS message sent by a user equipment UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, and decrypt the uplink NAS message using a NAS encryption key, and send the integrity-verified and decrypted uplink NAS message to a NAS network function entity NF;

[0121] and / or

[0122] Receive a downlink NAS message sent by the NAS NF, encrypt the downlink NAS message using a NAS encryption key, perform integrity protection on the downlink NAS message using a NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS message to the UE;

[0123] The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity.

[0124] In one implementation, the processor is configured to perform the following operations:

[0125] Activate NAS integrity protection;

[0126] Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key;

[0127] Activate NAS uplink decryption;

[0128] receiving a NAS security mode complete message sent by the UE;

[0129] Activate NAS downlink encryption.

[0130] In one implementation, activating NAS integrity protection includes:

[0131] The downlink NAS message is received, and NAS integrity protection is activated.

[0132] In one implementation, the processor is configured to perform the following operations:

[0133] receiving an initial NAS message sent by the UE;

[0134] Send the decrypted and integrity-verified initial NAS message to the NAS NF;

[0135] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0136] In one implementation, the processor is configured to perform the following operations:

[0137] receiving an initial NAS message sent by the UE;

[0138] Initiating an authentication process with the UE;

[0139] Sending an initial NAS message to the NAS NF;

[0140] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0141] In one implementation, the NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF, or a custom network function entity.

[0142] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key, and the NAS security function entity key is derived by a security anchor function entity SEAF.

[0143] In one implementation, the NAS security function entity includes a SEAF.

[0144] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0145] In a tenth aspect, the present disclosure provides a security protection device for non-access stratum (NAS) messages, the device being a NAS network function entity (NF), the device including a memory, a transceiver, and a processor.

[0146] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0147] receiving an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or

[0148] Send downlink NAS messages to the UE through the NAS security function entity;

[0149] The NAS security function entity is a functional entity other than the access mobility management function entity AMF, and the NAS security function entity is used to derive a NAS integrity protection key and a NAS encryption key.

[0150] In an eleventh aspect, the present disclosure provides a non-access stratum (NAS) message security protection device, the device being a NAS security function entity, the device including a memory, a transceiver, and a processor:

[0151] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0152] Export NAS integrity protection keys and NAS encryption keys;

[0153] The NAS integrity protection key and the NAS encryption key are sent to a NAS network function entity NF, wherein the NAS integrity protection key is used to perform integrity verification on uplink NAS messages and integrity protection on downlink NAS messages; and the NAS encryption key is used to decrypt the uplink NAS message and encrypt the downlink NAS message.

[0154] In one implementation, the NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

[0155] In a twelfth aspect, the present disclosure provides a non-access stratum (NAS) message security protection device, the device being a NAS network function entity (NF), the device including a memory, a transceiver, and a processor.

[0156] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0157] receiving an uplink NAS message from the UE, performing integrity verification on the uplink NAS message using the NAS integrity protection key, and decrypting the uplink NAS message using the NAS encryption key;

[0158] and / or

[0159] Encrypting a downlink NAS message using the NAS encryption key, performing integrity protection on the downlink NAS message using the NAS integrity protection key, and sending the encrypted and integrity-protected downlink NAS message to the UE;

[0160] The NAS integrity protection key and the NAS encryption key are sent to the NAS NF by a NAS security function entity; or, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF, and the NAS NF is a functional entity other than an access mobility management function entity AMF.

[0161] In one implementation, the processor is configured to perform the following operations:

[0162] Activate NAS integrity protection;

[0163] Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key;

[0164] Activate NAS uplink decryption;

[0165] receiving a NAS security mode complete message sent by the UE;

[0166] Activate NAS downlink encryption.

[0167] In one implementation, the processor is configured to perform the following operations:

[0168] receiving an initial NAS message from the UE;

[0169] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0170] In one implementation, the processor is configured to perform the following operations:

[0171] receiving an initial NAS message from the UE;

[0172] Initiating an authentication process with the UE;

[0173] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0174] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on a NAS NF key, and the NAS NF key is derived by a security anchor function entity SEAF.

[0175] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by a security anchor function entity SEAF, and the NAS security function entity is a functional entity outside the SEAF.

[0176] In one implementation, the NAS security function entity includes a security anchor function entity SEAF.

[0177] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0178] In a thirteenth aspect, the present disclosure provides a non-transitory readable storage medium, wherein the non-transitory readable storage medium stores a computer program, and the computer program is used to enable a processor to execute the method described in the first aspect.

[0179] In a fourteenth aspect, the present disclosure provides a non-transitory readable storage medium, wherein the non-transitory readable storage medium stores a computer program, and the computer program is used to enable a processor to execute the method described in the second aspect.

[0180] In a fifteenth aspect, the present disclosure provides a non-transitory readable storage medium storing a computer program, wherein the computer program is used to enable a processor to execute the method described in the third aspect.

[0181] In a sixteenth aspect, the present disclosure provides a non-transitory readable storage medium, wherein the non-transitory readable storage medium stores a computer program, and the computer program is used to enable a processor to execute the method described in the fourth aspect.

[0182] It should be understood that the contents described in the above summary of the invention are not intended to limit the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become readily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0183] In order to more clearly illustrate the technical solutions in the present disclosure or the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0184] FIG1 is a schematic diagram of a key derivation mechanism in the related art;

[0185] FIG2 is a flow chart of a method for protecting NAS messages according to an embodiment of the present disclosure;

[0186] FIG3 is a schematic diagram 1 of a key derivation mechanism provided by an embodiment of the present disclosure;

[0187] FIG4 is a second schematic diagram of a key derivation mechanism provided by an embodiment of the present disclosure;

[0188] FIG5 is a third schematic diagram of a key derivation mechanism provided by an embodiment of the present disclosure;

[0189] FIG6 is a fourth schematic diagram of a key derivation mechanism provided by an embodiment of the present disclosure;

[0190] FIG7 is a first schematic diagram of a NAS SMC process provided by an embodiment of the present disclosure;

[0191] FIG8 is a schematic diagram of an initial NAS message protection process provided by an embodiment of the present disclosure;

[0192] FIG9 is a second flow chart of a method for security protection of NAS messages provided in an embodiment of the present disclosure;

[0193] FIG10 is a fifth schematic diagram of a key derivation mechanism provided in an embodiment of the present disclosure;

[0194] FIG11 is a second schematic diagram of a NAS SMC process provided by an embodiment of the present disclosure;

[0195] FIG12 is a second schematic diagram of an initial NAS message protection process provided by an embodiment of the present disclosure;

[0196] FIG13 is a structural diagram of a security protection device for NAS messages provided by an embodiment of the present disclosure;

[0197] FIG14 is a second structural diagram of a security protection device for NAS messages provided in an embodiment of the present disclosure;

[0198] FIG15 is a third structural diagram of a security protection device for NAS messages provided in an embodiment of the present disclosure;

[0199] FIG16 is a fourth structural diagram of a security protection device for NAS messages provided in an embodiment of the present disclosure;

[0200] FIG17 is a fifth structural diagram of a security protection device for NAS messages provided in an embodiment of the present disclosure;

[0201] FIG18 is a sixth structural diagram of a security protection device for NAS messages provided in an embodiment of the present disclosure;

[0202] FIG19 is a structural diagram of a security protection device for NAS messages according to an embodiment of the present disclosure;

[0203] FIG20 is a structural diagram eight of a security protection device for NAS messages provided by an embodiment of the present disclosure. DETAILED DESCRIPTION

[0204] In the embodiments of the present disclosure, the term "and / or" describes the association relationship between associated objects, indicating that three relationships can exist. For example, A and / or B can represent three situations: A exists alone, A and B exist simultaneously, and B exists alone. The character " / " generally indicates that the associated objects are in an "or" relationship.

[0205] In the embodiments of the present disclosure, the term "plurality" refers to two or more than two, and other quantifiers are similar thereto.

[0206] The following will be combined with the accompanying drawings in the embodiments of the present disclosure to clearly and completely describe the technical solutions in the embodiments of the present disclosure. Obviously, the embodiments described are only part of the embodiments of the present disclosure and not all of the embodiments. Based on the embodiments of the present disclosure, all other embodiments obtained by ordinary technicians in this field without making any creative efforts shall fall within the scope of protection of the present disclosure.

[0207] The embodiments of the present disclosure provide a method and apparatus for protecting NAS messages, so as to implement NAS message security protection based on RAN service.

[0208] Among them, the method and the device are based on the same application concept. Since the principles of solving problems by the method and the device are similar, the implementation of the device and the method can refer to each other, and the repeated parts will not be repeated.

[0209] The technical solution provided by the embodiment of the present disclosure can be applicable to a variety of systems, especially 5G systems. For example, the applicable system can be a global system of mobile communication (GSM) system, a code division multiple access (CDMA) system, a wideband code division multiple access (WCDMA) general packet radio service (GPRS) system, a long term evolution (LTE) system, a LTE frequency division duplex (FDD) system, a LTE time division duplex (TDD) system, an advanced long term evolution (LTE-A) system, a universal mobile telecommunication system (UMTS), a world-wide interoperability for microwave access (WiMAX) system, a 5G new air interface (NR) system, etc. These various systems include terminal equipment and network equipment. The system may also include a core network part, such as an evolved packet system (EPS), a 5G system (5GS), etc.

[0210] The terminal device involved in the embodiments of the present disclosure may be a device that provides voice and / or data connectivity to a user, a handheld device with wireless connection function, or other processing devices connected to a wireless modem. In different systems, the name of the terminal device may also be different. For example, in a 5G system, the terminal device may be called User Equipment (UE). A wireless terminal device can communicate with one or more core networks (CN) via a radio access network (RAN). The wireless terminal device may be a mobile terminal device, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal device. For example, it may be a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device that exchanges voice and / or data with a radio access network. For example, personal communication service (PCS) phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDAs), and other devices. The wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, a remote terminal device, an access terminal device, a user terminal device, a user agent, or a user device, but is not limited in the embodiments of the present disclosure.

[0211] The network device involved in the embodiments of the present disclosure may be a base station, which may include multiple cells providing services to terminals. Depending on the specific application scenario, the base station may also be called an access point, or may be a device in an access network that communicates with a wireless terminal device through one or more sectors on an air interface, or may be called another name. The network device may be used to interchange received air frames with Internet Protocol (IP) packets, acting as a router between the wireless terminal device and the rest of the access network, wherein the rest of the access network may include an Internet Protocol (IP) communication network. The network device may also coordinate the attribute management of the air interface. For example, the network device involved in the embodiments of the present disclosure may be a base transceiver station (BTS) in the Global System for Mobile communications (GSM) or code division multiple access (CDMA), a network device (NodeB) in wide-band code division multiple access (WCDMA), an evolutionary Node B (eNB or e-NodeB) in the long term evolution (LTE) system, a 5G base station (gNB) in the 5G network architecture (next generation system), a home evolved Node B (HeNB), a relay node, a femto, a pico, etc., and is not limited in the embodiments of the present disclosure. In some network structures, the network device may include a centralized unit (CU) node and a distributed unit (DU) node, and the centralized unit and the distributed unit may also be geographically separated.

[0212] Network devices and terminal devices can each use one or more antennas for Multiple Input Multiple Output (MIMO) transmission. MIMO transmission can be single-user MIMO (SU-MIMO) or multi-user MIMO (MU-MIMO). Depending on the configuration and number of antenna combinations, MIMO transmission can be 2D-MIMO, 3D-MIMO, FD-MIMO, or massive-MIMO. It can also use diversity transmission, precoding, or beamforming.

[0213] In the related art, the keys involved in the encryption, decryption and integrity protection of NAS messages are derived by the AMF. Figure 1 is a schematic diagram of a key derivation mechanism in the related art. As can be seen from Figure 1, the UE and network sides each generate a series of keys. On the network side, keys are generated by network elements such as the Unified Data Management (UDM) / Authentication Credential Repository and Processing Function (ARPF), Authentication Server Function (AUSF), Security Anchor Function (SEAF), AMF, Non-3GPP InterWorking Function (N3IWF), and gNB. On the UE side, keys are generated by the Universal Subscriber Identity Module (USIM) and Mobile Equipment (ME). This series of keys includes K_AUSF, K_SEAF, K_AMF, K_NASint, K_NASenc, K_N3IWF, K_gNB, K_RRCint, K_RRCenc, K_UPint, and K_UPenc. Among them, the NAS integrity protection key K_NASint and NAS encryption key K_NASenc on the network side are derived by AMF based on the AMF key K_AMF.

[0214] During NAS message transmission, the UE's uplink NAS message is sent to the AMF via the RAN. The AMF performs integrity verification and decryption on the uplink NAS message using the NAS integrity protection key K_NASint and the NAS encryption key K_NASenc, and then sends it to the NAS NF, which is the core network NF corresponding to the uplink NAS message. For NAS NFs that need to send downlink NAS messages, the NAS NF sends the downlink NAS message to the AMF. The AMF performs encryption and integrity protection on the uplink NAS message using the NAS integrity protection key K_NASint and the NAS encryption key K_NASenc, and then sends it to the UE via the RAN. In other words, the uplink and downlink transmission of NAS messages between the NAS NF and the UE depends on the AMF.

[0215] After RAN service-oriented, the core network NF and RAN can interact directly. Therefore, the security protection of NAS messages can be completed by the core network NF other than the AMF. The following describes the security protection method of NAS messages based on RAN service-oriented with reference to an embodiment.

[0216] FIG2 is a flow chart of a method for protecting NAS messages according to an embodiment of the present disclosure. As shown in FIG2 , the method includes:

[0217] S201. A NAS Security Function (NASSF) receives an uplink NAS message sent by a user equipment (UE).

[0218] The NASSF in this embodiment is a network element used to complete NAS message encryption and decryption and integrity protection. It should be noted that NASSF is not currently defined as a specific network element. NASSF can be an existing network element in the relevant technology or a newly added network element used to implement the security protection function of NAS messages. The name of NASSF is not limited to this. This is only used as an example in the embodiment of the present disclosure. For example, NASSF can include any of the following: Session Management Function (SMF), Location Management Function (LMF), Policy Control Function (PCF), Short Message Service Function (SMSF), SEAF or a custom network function entity.

[0219] In the embodiment of the present disclosure, the NASSF implements the security protection function of the NAS message. Therefore, the uplink NAS message sent by the UE is sent to the NASSF via the RAN, wherein the uplink NAS message sent by the UE is encrypted using the NAS encryption key on the UE side and integrity protected using the NAS integrity protection key on the UE side.

[0220] S202. The NASSF uses the NAS integrity protection key to verify the integrity of the uplink NAS message, and uses the NAS encryption key to decrypt the uplink NAS message.

[0221] The NAS integrity protection key and NAS encryption key are derived by the NASSF.

[0222] S203. The NASSF sends the integrity-verified and decrypted uplink NAS message to the NAS NF.

[0223] After receiving the uplink NAS message, NASSF uses the NAS integrity protection key derived from the NASSF side to verify the integrity of the uplink NAS message. After the verification is successful, it uses the NAS encryption key to decrypt the uplink NAS message to obtain the uplink NAS message and send it to NAS NF. NAS NF receives the uplink NAS message of the UE sent by NASSF, thus realizing the transmission of the uplink NAS message.

[0224] S204. The NASSF receives the downlink NAS message sent by the NAS NF.

[0225] S205. The NASSF encrypts the downlink NAS message using the NAS encryption key, and performs integrity protection on the downlink NAS message using the NAS integrity protection key.

[0226] The NAS integrity protection key and NAS encryption key are derived by the NASSF.

[0227] S206. The NASSF sends the encrypted and integrity-protected downlink NAS message to the UE.

[0228] In the embodiment of the present disclosure, the security protection function of the NAS message is implemented by the NASSF. The NAS NF sends a downlink NAS message to the UE through the NASSF. The NASSF uses the NAS encryption key derived from the NASSF side to encrypt the downlink NAS message sent by the NAS NF, and uses the NAS integrity protection key derived from the NASSF side to perform integrity protection on the downlink NAS message. The encrypted and integrity-protected downlink NAS message is sent to the UE, thereby completing the transmission of the downlink NAS message.

[0229] S201-S203 are steps for uplink NAS message transmission, and S204-S206 are steps for downlink NAS message transmission. It should be noted that the embodiments of the present disclosure do not limit the execution of both uplink and downlink NAS message transmission. For example, only S201-S203 may be executed to implement uplink NAS message transmission, or only S204-S206 may be executed to implement downlink NAS message transmission, or both S201-S203 and S204-S206 may be executed to implement uplink and downlink NAS message transmission. The order of S201-S203 and S204-S206 is not limited.

[0230] In the disclosed embodiment, the NASSF derives the NAS encryption key and the NAS integrity protection key, and the NASSF performs encryption, decryption, and integrity protection on the NAS message, thereby implementing security protection of the NAS message based on RAN service.

[0231] The following describes how the NASSF derives the NAS encryption key and the NAS integrity protection key in the embodiment shown in FIG. 2 .

[0232] Figure 3 is a schematic diagram of a key derivation mechanism provided in an embodiment of the present disclosure. As shown in Figure 3, NAS integrity protection keys and NAS encryption keys are derived by the NASSF based on the NASSF key K_NASSF. The NASSF key K_NASSF is derived by the SEAF based on the SEAF key K_SEAF. The NASSF can include any of the following: SMF, LMF, PCF, SMS, or a custom network function. The NASSF is also used to derive the key K_N31WF for untrusted non-3GPP access and the gNB key K_gNB.

[0233] Figure 4 is a second schematic diagram of a key derivation mechanism provided in an embodiment of the present disclosure. As shown in Figure 4, the NAS integrity protection key and NAS encryption key are derived by the NASSF based on the NASSF key K_NASSF. The NASSF key K_NASSF is derived by the SEAF based on the SEAF key K_SEAF. In this embodiment, the untrusted non-3GPP access key K_N31WF and the gNB key K_gNB are still derived by the AMF based on the AMF key K_AMF. The AMF key K_AMF is derived by the SEAF based on the SEAF key K_SEAF.

[0234] Figure 5 is a third schematic diagram of a key derivation mechanism provided by an embodiment of the present disclosure. In this embodiment, the NASSF is a SEAF. As shown in Figure 5, the SEAF derives NAS integrity protection keys and NAS encryption keys based on the SEAF key K_SEAF. Furthermore, the SEAF derives the untrusted non-3GPP access key K_N31WF and the gNB key K_gNB based on the SEAF key K_SEAF.

[0235] Figure 6 is a fourth schematic diagram of a key derivation mechanism provided by an embodiment of the present disclosure. In this embodiment, the NASSF is the SEAF. As shown in Figure 6, the NAS integrity protection key and NAS encryption key are derived by the SEAF based on the SEAF key K_SEAF. The untrusted non-3GPP access key K_N31WF and the gNB key K_gNB are still derived by the AMF based on the AMF key K_AMF. The AMF key K_AMF is derived by the SEAF based on the SEAF key K_SEAF.

[0236] Before the uplink and downlink NAS message transmission shown in FIG2 is performed, the method of the embodiment of the present disclosure may further include a NAS security mode command (SMC) process and an initial NAS message protection process.

[0237] FIG7 is a schematic diagram of a NAS SMC process provided by an embodiment of the present disclosure. The NASSF in this embodiment may be the NASSF in the embodiment shown in FIG2 , for example, the NASSF may be an SMF, LMF, PCF, SMSF, SEAF, or a custom network function entity. As shown in FIG7 , the process includes:

[0238] 1. NAS NF sends a downlink NAS message (Nnassf_xx_xx) to NASSF.

[0239] 1a.NASSF activates NAS integrity protection.

[0240] 1b. The NASSF sends a NAS security mode command message (NAS Securituy Mode Command) to the UE. The NAS Securituy Mode Command is integrity protected by the NAS integrity protection key but is not encrypted.

[0241] 1c.NASSF activates NAS uplink decryption.

[0242] 2a. The UE performs integrity verification on the NAS Securituy Mode Command and, if verification is successful, starts NAS integrity protection and encryption / decryption.

[0243] 2b. The UE sends a NAS Security Mode Complete message to the NASSF. The NAS Security Mode Complete message is encrypted and integrity protected.

[0244] 1d.NASSF activates NAS downlink encryption.

[0245] It should be noted that step 1 is one of the factors that trigger the subsequent NAS SMC process, that is, the NASSF receives a downlink NAS message and activates NAS integrity protection. In addition, the NAS SMC process can also be triggered during the initial NAS message protection process, which will be explained in subsequent embodiments.

[0246] FIG8 is a schematic diagram of an initial NAS message protection process provided by an embodiment of the present disclosure. As shown in FIG8 , the process includes:

[0247] 1. The NASSF receives the initial NAS message sent by the UE.

[0248] If the UE does not have a NAS security context, the initial NAS message contains only a plaintext Information Element (IE). If the UE has a NAS security context, the initial NAS message sent by the UE in step 1 is encrypted and integrity protected. If the NASSF also has the same NAS security context, subsequent steps 2 to 4 are not performed.

[0249] 2. NASSF initiates the authentication process with the UE.

[0250] If the NASSF cannot find the NAS security context locally or the integrity verification fails, the NASSF initiates the authentication process with the UE to obtain the NAS security context.

[0251] 3. The NASSF sends a NAS security mode command message (NAS Securituy Mode Command) to the UE. The NAS Securituy Mode Command is integrity protected by the NAS integrity protection key.

[0252] If the initial NAS message is protected but fails integrity verification or the NASSF cannot decrypt the complete initial NAS message, the NASSF may carry a flag in the NAS Security Mode Command to instruct the UE to send the complete initial NAS message in the NAS Security Mode Complete message.

[0253] 4. The UE sends a NAS Securituy Mode Complete message to the NASSF. The NAS Securituy Mode Complete message is encrypted and integrity protected.

[0254] Steps 3 and 4 are the NAS SMC process, which can refer to steps 1a to 1d in the embodiment shown in Figure 7. The activation of NAS integrity protection, activation of NAS uplink decryption, activation of NAS downlink encryption, and UE initiation of NAS integrity protection and encryption and decryption by NASSF are not illustrated here.

[0255] 5. NASSF sends the initial NAS message to NAS NF.

[0256] 6. The NASSF sends an initial NAS message response to the UE. The initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0257] The above embodiments illustrate a scenario in which the NASSF derives the NAS integrity protection key and the NAS encryption key, and the NASSF performs encryption, decryption, and integrity protection of NAS messages. In another feasible implementation, the NAS NF can perform encryption, decryption, and integrity protection of NAS messages. The NAS integrity protection key and the NAS encryption key can be derived by the NASSF and sent to the NAS NF, or the NAS NF can derive them independently. This is explained below with reference to the following embodiments.

[0258] FIG9 is a second flow chart of a method for protecting NAS messages provided by an embodiment of the present disclosure. As shown in FIG9 , the method includes:

[0259] S901. NAS NF receives an uplink NAS message from UE.

[0260] S902. The NAS NF uses the NAS integrity protection key to verify the integrity of the uplink NAS message and the NAS encryption key to decrypt the uplink NAS message.

[0261] S903. The NAS NF uses the NAS encryption key to encrypt the downlink NAS message, and uses the NAS integrity protection key to perform integrity protection on the downlink NAS message.

[0262] S904. The NAS NF sends the encrypted and integrity-protected downlink NAS message to the UE.

[0263] The NAS integrity protection key and NAS encryption key are sent by the NASSF to the NAS NF; or, the NAS integrity protection key and NAS encryption key are derived by the NAS NF, which is a functional entity other than the access mobility management function entity AMF.

[0264] The above steps S901-S902 are steps for uplink NAS message transmission, and S903-S904 are steps for downlink NAS message transmission. It should be noted that the embodiments of the present disclosure do not limit the execution of both uplink and downlink NAS message transmission. For example, only S901-S902 may be executed to implement uplink NAS message transmission, or only S903-S904 may be executed to implement downlink NAS message transmission, or both S901-S902 and S903-S904 may be executed to implement uplink and downlink NAS message transmission. The order of S901-S902 and S903-S904 is not limited.

[0265] In the embodiments of the present disclosure, when the NAS integrity protection key and NAS encryption key are derived by the NAS NF, the NAS NF may include any of the following: SMF, LMF, PCF, and SMSF. Each NAS NF may derive its own NAS integrity protection key and NAS encryption key. In this case, the AMF may still derive the AMF's NAS integrity protection key and NAS encryption key. In addition, when the NAS integrity protection key and NAS encryption key are sent to the NAS NF by the NASSF, the NAS NF may include any of the following: AMF, SMF, LMF, PCF, and SMSF.

[0266] In the disclosed embodiment, the NAS encryption key and the NAS integrity protection key are derived by the NASSF or NAS NF, and the NAS NF performs encryption, decryption, and integrity protection on the NAS message, thereby implementing security protection of the NAS message based on RAN service.

[0267] Figure 10 is a fifth schematic diagram of a key derivation mechanism provided by an embodiment of the present disclosure. NAS integrity protection keys and NAS encryption keys are derived by the NAS NF based on NAS NF keys, while NAS NF keys are derived by the SEAF based on the SEAF key K_SEAF. Optionally, the NAS NF may include an SMF, LMF, PCF, and SMSF. Each NAS NF establishes a separate NAS security context with the UE, and each NAS security context adds a parameter identifying the NAS type. The NAS integrity protection keys and NAS encryption keys derived by each NAS NF can be the same or different. Each NAS NF independently performs security functions and transmissions, such as encryption, decryption, and integrity protection, for corresponding NAS messages. Furthermore, the AMF can still derive its own NAS integrity protection keys and NAS encryption keys. The key K_N31WF for untrusted non-3GPP access and the gNB key K_gNB are still derived by the AMF based on the AMF key K_AMF, while the AMF key K_AMF is derived by the SEAF based on the SEAF key K_SEAF.

[0268] In a scenario where the NAS integrity protection key and NAS encryption key are derived by the NASSF based on the NASSF key and sent to the NAS NF, the NASSF derives the NAS integrity protection key and NAS encryption key and sends the NAS integrity protection key and NAS encryption key to the NAS NF, wherein the NAS integrity protection key is used to verify the integrity of uplink NAS messages and to protect the integrity of downlink NAS messages; the NAS encryption key is used to decrypt uplink NAS messages and to encrypt downlink NAS messages. For schematic diagrams of the NASSF deriving the NAS integrity protection key and NAS encryption key, please refer to Figures 3 to 6 of the aforementioned embodiments. The NASSF can be a functional entity other than the SEAF, such as an SMF, LMF, PCF, SMSF, or a custom network functional entity, and the NASSF key is derived by the SEAF. Alternatively, the NASSF can be the SEAF. In addition, the NASSF can also be the AMF. For each NAS NF, the NAS integrity protection key and NAS encryption key derived by the NASSF can be the same or different.

[0269] Before the uplink and downlink NAS message transmission shown in FIG9 is performed, the method of the embodiment of the present disclosure may further include a NAS SMC process and an initial NAS message protection process.

[0270] FIG11 is a second schematic diagram of a NAS SMC process provided by an embodiment of the present disclosure. As shown in FIG11 , the process includes:

[0271] 1a.NAS NF activates NAS integrity protection.

[0272] 1b. The NAS NF sends a NAS Security Mode Command message to the UE. The NAS Security Mode Command is integrity protected using the NAS integrity protection key but is not encrypted.

[0273] 1c. The NAS NF activates NAS uplink decryption.

[0274] 2a. The UE performs integrity verification on the NAS Securituy Mode Command and, if verification is successful, starts NAS integrity protection and encryption / decryption.

[0275] 2b. The UE sends a NAS Security Mode Complete message to the NAS NF. The NAS Security Mode Complete message is encrypted and integrity protected.

[0276] 1d.NAS NF activates NAS downlink encryption.

[0277] It should be noted that the NAS SMC can be triggered when the NAS NF needs to send a downlink NAS message. In other words, the NAS NF activates NAS integrity protection when sending a downlink NAS message. In addition, the NAS SMC process can also be triggered during the initial NAS message protection process, which will be explained in subsequent embodiments.

[0278] FIG12 is a second schematic diagram of an initial NAS message protection process provided by an embodiment of the present disclosure. As shown in FIG12 , the process includes:

[0279] 1. NAS NF receives the initial NAS message sent by the UE.

[0280] If the UE does not have a NAS security context, the initial NAS message contains only a plaintext Information Element (IE). If the UE has a NAS security context, the initial NAS message sent by the UE in step 1 is encrypted and integrity protected. If the NAS NF also has the same NAS security context, subsequent steps 2 to 4 are not performed.

[0281] 2. NAS NF initiates the authentication process with the UE.

[0282] If the NAS NF cannot find the NAS security context locally or the integrity verification fails, the NAS NF initiates the authentication process with the UE to obtain the NAS security context.

[0283] 3. The NAS NF sends a NAS Security Mode Command message to the UE. The NAS Security Mode Command is integrity protected using the NAS integrity protection key.

[0284] If the initial NAS message is protected but fails integrity verification or the NAS NF cannot decrypt the complete initial NAS message, the NAS NF may carry a flag in the NAS Security Mode Command to instruct the UE to send the complete initial NAS message in the NAS Security Mode Complete message.

[0285] 4. The UE sends a NAS Security Mode Complete message to the NAS NF. The NAS Security Mode Complete message is encrypted and integrity protected.

[0286] Steps 3 and 4 are the NAS SMC process, which can refer to steps 1a to 1d in the embodiment shown in Figure 11. The activation of NAS integrity protection, activation of NAS uplink decryption, activation of NAS downlink encryption, and UE initiation of NAS integrity protection and encryption and decryption by the NAS NF are not illustrated here.

[0287] 5. The NAS NF sends an initial NAS message response to the UE, where the initial NAS message response is encrypted using the NAS encryption key and integrity protected using the NAS integrity protection key.

[0288] In the above embodiment, the NAS integrity protection key and the NAS encryption key are derived by the NASSF or NAS NF, and the encryption and decryption and integrity protection of the NAS message are performed by the NAS NF, thereby realizing security protection of the NAS message based on RAN service.

[0289] FIG13 is a structural diagram of a NAS message security protection device according to an embodiment of the present disclosure. The device is a NASSF. As shown in FIG13 , the NAS message security protection device includes a processor 1310 , a memory 1320 , and a transceiver 1330 .

[0290] In Figure 13 , the bus architecture can include any number of interconnected buses and bridges, specifically linking various circuits such as one or more processors represented by processor 1310 and memory represented by memory 1320. Bus architecture 1330 can include multiple components, including transmitters and receivers, providing units for communicating with various other devices over transmission media, such as wireless channels, wired channels, and optical cables. Processor 1310 is responsible for managing the bus architecture and general processing, while memory 1320 can store data used by processor 1310 when performing operations.

[0291] The processor 1310 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0292] The memory 1320 is used to store computer programs. The transceiver 1330 is used to send and receive data under the control of the processor 1310. The processor 1310 is used to read the computer program in the memory 1320 and perform the following operations:

[0293] Receive an uplink NAS message sent by a user equipment UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, and decrypt the uplink NAS message using a NAS encryption key, and send the integrity-verified and decrypted uplink NAS message to a NAS network function entity NF;

[0294] and / or

[0295] Receive the downlink NAS message sent by the NAS NF, encrypt the downlink NAS message using the NAS encryption key, and integrity-protect the downlink NAS message using the NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS message to the UE;

[0296] Among them, the NAS integrity protection key and NAS encryption key are derived by the NAS security function entity.

[0297] In one implementation, the processor 1310 is configured to perform the following operations:

[0298] Activate NAS integrity protection;

[0299] Send a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected using the NAS integrity protection key;

[0300] Activate NAS uplink decryption;

[0301] Receive the NAS security mode complete message sent by the UE;

[0302] Activate NAS downlink encryption.

[0303] In one implementation, activating NAS integrity protection includes:

[0304] Receive downlink NAS messages and activate NAS integrity protection.

[0305] In one implementation, the processor 1310 is configured to perform the following operations:

[0306] Receive the initial NAS message sent by the UE;

[0307] Send the decrypted and integrity-verified initial NAS message to the NAS NF;

[0308] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0309] In one implementation, the processor 1310 is configured to perform the following operations:

[0310] Receive the initial NAS message sent by the UE;

[0311] Start the authentication process with the UE;

[0312] Send the initial NAS message to the NAS NF;

[0313] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0314] In one implementation, the NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF, or a custom network function entity.

[0315] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on the NAS security function entity key, and the NAS security function entity key is derived by the security anchor function entity SEAF.

[0316] In one implementation, the NAS security function entity includes a SEAF.

[0317] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0318] FIG14 is a second structural diagram of a NAS message security protection device provided by an embodiment of the present disclosure. The device is a NAS NF. As shown in FIG14 , the NAS message security protection device includes: a processor 1410 , a memory 1420 , and a transceiver 1430 .

[0319] In Figure 14 , the bus architecture may include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors represented by processor 1410 and memory represented by memory 1420. Bus architecture 1430 may comprise multiple components, including transmitters and receivers, providing units for communicating with various other devices over transmission media, such as wireless channels, wired channels, and optical cables. Processor 1410 is responsible for managing the bus architecture and general processing, while memory 1420 may store data used by processor 1410 when performing operations.

[0320] The processor 1410 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0321] The memory 1420 is used to store computer programs. The transceiver 1430 is used to send and receive data under the control of the processor 1410. The processor 1410 is used to read the computer program in the memory 1420 and perform the following operations:

[0322] receiving an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or

[0323] Send downlink NAS messages to the UE through the NAS security function entity;

[0324] Among them, the NAS security function entity is a functional entity other than the access mobility management function entity AMF. The NAS security function entity is used to derive NAS integrity protection keys and NAS encryption keys.

[0325] FIG15 is a third structural diagram of a NAS message security protection device provided by an embodiment of the present disclosure. The device is a NASSF. As shown in FIG15 , the NAS message security protection device includes: a processor 1510 , a memory 1520 , and a transceiver 1530 .

[0326] In Figure 15 , the bus architecture can include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors represented by processor 1510 and memory represented by memory 1520. Bus architecture 1530 can include multiple components, including transmitters and receivers, providing units for communicating with various other devices over transmission media, such as wireless channels, wired channels, and optical cables. Processor 1510 is responsible for managing the bus architecture and general processing, while memory 1520 can store data used by processor 1510 when performing operations.

[0327] The processor 1510 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0328] The memory 1520 is used to store computer programs. The transceiver 1530 is used to send and receive data under the control of the processor 1510. The processor 1510 is used to read the computer program in the memory 1520 and perform the following operations:

[0329] Export NAS integrity protection keys and NAS encryption keys;

[0330] The NAS integrity protection key and NAS encryption key are sent to the NAS network function entity NF. The NAS integrity protection key is used to verify the integrity of uplink NAS messages and to protect the integrity of downlink NAS messages; the NAS encryption key is used to decrypt uplink NAS messages and to encrypt downlink NAS messages.

[0331] In one implementation, the NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

[0332] FIG16 is a fourth structural diagram of a NAS message security protection device provided by an embodiment of the present disclosure. The device is a NAS NF. As shown in FIG16 , the NAS message security protection device includes: a processor 1610 , a memory 1620 , and a transceiver 1630 .

[0333] In Figure 16 , the bus architecture may include any number of interconnected buses and bridges, specifically linking various circuits of one or more processors represented by processor 1610 and memory represented by memory 1620. Bus architecture 1630 may comprise multiple components, including transmitters and receivers, providing units for communicating with various other devices over transmission media, such as wireless channels, wired channels, and optical cables. Processor 1610 is responsible for managing the bus architecture and general processing, while memory 1620 may store data used by processor 1610 when performing operations.

[0334] The processor 1610 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0335] The memory 1620 is used to store computer programs. The transceiver 1630 is used to send and receive data under the control of the processor 1610. The processor 1610 is used to read the computer program in the memory 1620 and perform the following operations:

[0336] Receive uplink NAS messages from the UE, verify the integrity of the uplink NAS messages using the NAS integrity protection key, and decrypt the uplink NAS messages using the NAS encryption key;

[0337] and / or

[0338] Encrypt downlink NAS messages using the NAS encryption key, perform integrity protection on downlink NAS messages using the NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS messages to the UE;

[0339] The NAS integrity protection key and NAS encryption key are sent by the NAS security function entity to the NAS NF; or, the NAS integrity protection key and NAS encryption key are derived by the NAS NF, which is a functional entity other than the access mobility management function entity AMF.

[0340] In one implementation, the processor 1610 is configured to perform the following operations:

[0341] Activate NAS integrity protection;

[0342] Send a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected using the NAS integrity protection key;

[0343] Activate NAS uplink decryption;

[0344] Receive the NAS security mode complete message sent by the UE;

[0345] Activate NAS downlink encryption.

[0346] In one implementation, the processor 1610 is configured to perform the following operations:

[0347] Receive the initial NAS message from the UE;

[0348] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0349] In one implementation, the processor 1610 is configured to perform the following operations:

[0350] Receive the initial NAS message from the UE;

[0351] Start the authentication process with the UE;

[0352] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0353] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on the NAS NF key, and the NAS NF key is derived by the Security Anchor Function entity SEAF.

[0354] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on the NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by the security anchor function entity SEAF, which is a functional entity outside the SEAF.

[0355] In one implementation, the NAS security function entity includes a security anchor function entity SEAF.

[0356] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0357] It should be noted here that the above-mentioned device provided in the embodiment of the present disclosure can implement all the method steps implemented in the above-mentioned method embodiment and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as those in the method embodiment will not be described in detail here.

[0358] FIG17 is a fifth structural diagram of a security protection device for NAS messages provided in an embodiment of the present disclosure. The device is applied to a NAS security function entity, which is a functional entity other than the access mobility management function entity (AMF). The security protection device for NAS messages includes:

[0359] An uplink processing module 1701 is configured to receive an uplink NAS message sent by a user equipment (UE), perform integrity verification on the uplink NAS message using a NAS integrity protection key, decrypt the uplink NAS message using a NAS encryption key, and send the integrity-verified and decrypted uplink NAS message to a NAS network function entity NF.

[0360] and / or

[0361] The downlink processing module 1702 is configured to receive a downlink NAS message sent by the NAS NF, encrypt the downlink NAS message using a NAS encryption key, perform integrity protection on the downlink NAS message using a NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS message to the UE.

[0362] Among them, the NAS integrity protection key and NAS encryption key are derived by the NAS security function entity.

[0363] In one implementation, the system further includes an activation module configured to:

[0364] Activate NAS integrity protection;

[0365] Send a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected using the NAS integrity protection key;

[0366] Activate NAS uplink decryption;

[0367] Receive the NAS security mode complete message sent by the UE;

[0368] Activate NAS downlink encryption.

[0369] In one implementation, the activation module is configured to:

[0370] Receive downlink NAS messages and activate NAS integrity protection.

[0371] In one implementation, the system further includes a first initial message protection module configured to:

[0372] Receive the initial NAS message sent by the UE;

[0373] Send the decrypted and integrity-verified initial NAS message to the NAS NF;

[0374] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0375] In one implementation, the system further includes a second initial message protection module, configured to:

[0376] Receive the initial NAS message sent by the UE;

[0377] Start the authentication process with the UE;

[0378] Send the initial NAS message to the NAS NF;

[0379] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0380] In one implementation, the NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF, or a custom network function entity.

[0381] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on the NAS security function entity key, and the NAS security function entity key is derived by the security anchor function entity SEAF.

[0382] In one implementation, the NAS security function entity includes a SEAF.

[0383] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0384] FIG18 is a sixth structural diagram of a NAS message security protection device provided by an embodiment of the present disclosure. The device is applied to a NAS network function entity NF, and the NAS message security protection device includes:

[0385] The receiving module 1801 is configured to receive an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or

[0386] The sending module 1802 is configured to send a downlink NAS message to the UE through the NAS security function entity;

[0387] Among them, the NAS security function entity is a functional entity other than the access mobility management function entity AMF. The NAS security function entity is used to derive NAS integrity protection keys and NAS encryption keys.

[0388] FIG19 is a seventh structural diagram of a security protection device for NAS messages provided by an embodiment of the present disclosure. The device is applied to a NAS security function entity and includes:

[0389] An export module 1901 is configured to export a NAS integrity protection key and a NAS encryption key;

[0390] The sending module 1902 is configured to send a NAS integrity protection key and a NAS encryption key to the NAS network function entity NF, wherein the NAS integrity protection key is used to verify the integrity of uplink NAS messages and to protect the integrity of downlink NAS messages; and the NAS encryption key is used to decrypt uplink NAS messages and to encrypt downlink NAS messages.

[0391] In one implementation, the NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

[0392] FIG20 is a structural diagram 8 of a security protection device for NAS messages provided by an embodiment of the present disclosure. The device is applied to a NAS network function entity NF, and includes:

[0393] An uplink processing module 2001 is configured to receive an uplink NAS message from a UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, and decrypt the uplink NAS message using a NAS encryption key;

[0394] and / or

[0395] A downlink processing module 2002 is configured to encrypt a downlink NAS message using a NAS encryption key, perform integrity protection on the downlink NAS message using a NAS integrity protection key, and send the encrypted and integrity-protected downlink NAS message to a UE;

[0396] The NAS integrity protection key and NAS encryption key are sent by the NAS security function entity to the NAS NF; or, the NAS integrity protection key and NAS encryption key are derived by the NAS NF, which is a functional entity other than the access mobility management function entity AMF.

[0397] In one implementation, the system further includes an activation module configured to:

[0398] Activate NAS integrity protection;

[0399] Send a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected using the NAS integrity protection key;

[0400] Activate NAS uplink decryption;

[0401] Receive the NAS security mode complete message sent by the UE;

[0402] Activate NAS downlink encryption.

[0403] In one implementation, the system further includes a first initial message protection module configured to:

[0404] Receive the initial NAS message from the UE;

[0405] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0406] In one implementation, the system further includes a second initial message protection module, configured to:

[0407] Receive the initial NAS message from the UE;

[0408] Start the authentication process with the UE;

[0409] An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted using a NAS encryption key and integrity protected using a NAS integrity protection key.

[0410] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on the NAS NF key, and the NAS NF key is derived by the Security Anchor Function entity SEAF.

[0411] In one implementation, the NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on the NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by the security anchor function entity SEAF, which is a functional entity outside the SEAF.

[0412] In one implementation, the NAS security function entity includes a security anchor function entity SEAF.

[0413] In one implementation, the NAS security function entity is further configured to derive keys for untrusted non-3GPP access and gNB keys.

[0414] It should be noted that the division of modules / units in the embodiments of the present disclosure is schematic and is merely a logical functional division. In actual implementation, other division methods may be used. Furthermore, the functional modules / units in the various embodiments of the present disclosure may be integrated into a single processing module / unit, or each module / unit may exist physically separately, or two or more modules / units may be integrated into a single module / unit. The aforementioned integrated modules / units may be implemented in the form of hardware or software functional units.

[0415] If the integrated module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor to execute all or part of the steps of the various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, and other media that can store program code.

[0416] It should be noted here that the above-mentioned device provided by the embodiment of the present invention can implement all the method steps implemented by the above-mentioned method embodiment and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0417] An embodiment of the present disclosure provides a non-transitory readable storage medium, which stores a computer program. The computer program is used to enable a processor to execute the method executed by any of the above-mentioned devices.

[0418] The non-transitory readable storage medium can be any available medium or data storage device that can be accessed by the processor, including but not limited to magnetic storage (such as floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO)), optical storage (such as CDs, DVDs, BDs, HVDs, etc.), and semiconductor storage (such as ROMs, EPROMs, EEPROMs, non-volatile memories (NAND FLASH), solid-state drives (SSDs)), etc.

[0419] Those skilled in the art will appreciate that the embodiments of the present disclosure may be provided as methods, systems, or computer program products. Therefore, the present disclosure may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present disclosure may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to magnetic disk storage and optical storage, etc.) containing computer-usable program code.

[0420] The present disclosure is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present disclosure. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer-executable instructions. These computer-executable instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device produce a device for implementing the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0421] These processor-executable instructions may also be stored in a processor-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the processor-readable memory produce a product including an instruction device that implements the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0422] These processor-executable instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, whereby the instructions executed on the computer or other programmable device provide steps for implementing the functions specified in one or more processes in the flowchart and / or one or more boxes in the block diagram.

[0423] Obviously, those skilled in the art may make various changes and modifications to the present disclosure without departing from the spirit and scope of the present disclosure. Thus, if these modifications and variations of the present disclosure fall within the scope of the claims of the present disclosure and their equivalents, the present disclosure is intended to include these modifications and variations.

Claims

1. A security protection method for non-access layer NAS messages, applied to a NAS security function entity, wherein the NAS security function entity is a function entity other than an access mobility management function entity AMF; the method comprises: Receive an uplink NAS message sent by a user equipment UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, and decrypt the uplink NAS message using a NAS encryption key, and send the integrity-verified and decrypted uplink NAS message to a NAS network function entity NF; and / or receiving a downlink NAS message sent by the NAS NF, encrypting the downlink NAS message using a NAS encryption key, performing integrity protection on the downlink NAS message using a NAS integrity protection key, and sending the encrypted and integrity protected downlink NAS message to the UE; The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity.

2. The method according to claim 1, wherein: Also includes: Activate NAS integrity protection; Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key; Activate NAS uplink decryption; Receiving a NAS security mode completion message sent by the UE; Activate NAS downlink encryption.

3. The method according to claim 2, wherein: The activating NAS integrity protection includes: The downlink NAS message is received, and NAS integrity protection is activated.

4. The method according to claim 1, wherein: Also includes: Receiving an initial NAS message sent by the UE; Sending the decrypted and integrity-verified initial NAS message to the NAS NF; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

5. The method according to claim 2, wherein: Also includes: Receiving an initial NAS message sent by the UE; Initiating an authentication process with the UE; Sending an initial NAS message to the NAS NF; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

6. The method according to claim 1, wherein: The NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF or a custom network function entity.

7. The method according to claim 6, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key, and the NAS security function entity key is derived by a security anchor function entity SEAF.

8. The method according to claim 1, wherein: The NAS security function entity includes SEAF.

9. The method according to any one of claims 6 to 8, wherein: The NAS security function entity is also used to derive keys for untrusted non-3GPP access and gNB keys.

10. A method for protecting the security of non-access layer NAS messages, applied to a NAS network function entity NF, the method comprising: Receiving an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or Sending downlink NAS messages to the UE via the NAS security function entity; The NAS security function entity is a functional entity other than the access mobility management function entity AMF, and the NAS security function entity is used to derive a NAS integrity protection key and a NAS encryption key.

11. A method for protecting the security of a non-access stratum NAS message, applied to a NAS security function entity, the method comprising: Export NAS integrity protection keys and NAS encryption keys; The NAS integrity protection key and the NAS encryption key are sent to a NAS network function entity NF, wherein the NAS integrity protection key is used to perform integrity verification on an uplink NAS message and to perform integrity protection on a downlink NAS message; and the NAS encryption key is used to decrypt the uplink NAS message and to encrypt the downlink NAS message.

12. The method according to claim 11, wherein: The NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

13. A method for protecting the security of non-access layer NAS messages, applied to a NAS network function entity NF, the method comprising: receiving an uplink NAS message from the UE, performing integrity verification on the uplink NAS message using the NAS integrity protection key, and decrypting the uplink NAS message using the NAS encryption key; and / or Encrypting a downlink NAS message using the NAS encryption key, and integrity protecting the downlink NAS message using the NAS integrity protection key, and sending the encrypted and integrity protected downlink NAS message to the UE; The NAS integrity protection key and the NAS encryption key are sent to the NAS NF by a NAS security function entity; or, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF, and the NAS NF is other functional entities other than the access mobility management function entity AMF.

14. The method according to claim 13, wherein: Also includes: Activate NAS integrity protection; Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key; Activate NAS uplink decryption; Receiving a NAS security mode completion message sent by the UE; Activate NAS downlink encryption.

15. The method according to claim 13, wherein: Also includes: receiving an initial NAS message from the UE; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

16. The method according to claim 14, wherein: Also includes: receiving an initial NAS message from the UE; Initiating an authentication process with the UE; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

17. The method according to claim 13, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on a NAS NF key, and the NAS NF key is derived by a security anchor function entity SEAF.

18. The method according to claim 13, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by a security anchor function entity SEAF. The NAS security function entity is a functional entity outside the SEAF.

19. The method according to claim 13, wherein: The NAS security function entity includes a security anchor function entity SEAF.

20. The method according to claim 18 or 19, wherein: The NAS security function entity is also used to derive keys for untrusted non-3GPP access and gNB keys.

21. A security protection device for non-access layer NAS messages, applied to a NAS security function entity, wherein the NAS security function entity is a function entity other than an access mobility management function entity AMF; the device comprises: An uplink processing module is configured to receive an uplink NAS message sent by a user equipment UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, and decrypt the uplink NAS message using a NAS encryption key, and send the integrity verified and decrypted uplink NAS message to a NAS network function entity NF; and / or A downlink processing module, configured to receive a downlink NAS message sent by the NAS NF, encrypt the downlink NAS message using a NAS encryption key, perform integrity protection on the downlink NAS message using a NAS integrity protection key, and send the encrypted and integrity protected downlink NAS message to the UE; The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity.

22. The device according to claim 21, wherein Also includes activation modules for: Activate NAS integrity protection; Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key; Activate NAS uplink decryption; Receiving a NAS security mode completion message sent by the UE; Activate NAS downlink encryption.

23. The device according to claim 22, wherein: The activation module is used to: The downlink NAS message is received, and NAS integrity protection is activated.

24. The device according to claim 21, wherein Also included is a first initial message protection module, which is used to: Receiving an initial NAS message sent by the UE; Sending the decrypted and integrity-verified initial NAS message to the NAS NF; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

25. The device according to claim 24, wherein: Also included is a second initial message protection module, which is used to: Receiving an initial NAS message sent by the UE; Initiating an authentication process with the UE; Sending an initial NAS message to the NAS NF; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

26. The device according to claim 21, wherein The NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF or a custom network function entity.

27. The device according to claim 26, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key, and the NAS security function entity key is derived by a security anchor function entity SEAF.

28. The device according to claim 21, wherein The NAS security function entity includes SEAF.

29. The device according to any one of claims 26 to 28, wherein: The NAS security function entity is also used to derive keys for untrusted non-3GPP access and gNB keys.

30. A security protection device for non-access layer NAS messages, applied to a NAS network function entity NF, the device comprising: A receiving module, configured to receive an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or A sending module, used for sending a downlink NAS message to the UE through the NAS security function entity; The NAS security function entity is a functional entity other than the access mobility management function entity AMF, and the NAS security function entity is used to derive a NAS integrity protection key and a NAS encryption key.

31. A security protection device for non-access layer NAS messages, applied to a NAS security function entity, the device comprising: An export module, used to export NAS integrity protection keys and NAS encryption keys; A sending module, configured to send the NAS integrity protection key and the NAS encryption key to a NAS network function entity NF, wherein the NAS integrity protection key is used to perform integrity verification on an uplink NAS message and to perform integrity protection on a downlink NAS message; and the NAS encryption key is used to decrypt the uplink NAS message and to encrypt the downlink NAS message.

32. The device according to claim 31, wherein The NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

33. A security protection device for non-access layer NAS messages, applied to a NAS network function entity NF, the device comprising: An uplink processing module is used to receive an uplink NAS message from the UE and use the NAS integrity protection key to The uplink NAS message is integrity verified, and the uplink NAS message is decrypted by the NAS encryption key; and / or a downlink processing module, configured to encrypt a downlink NAS message using the NAS encryption key, perform integrity protection on the downlink NAS message using the NAS integrity protection key, and send the encrypted and integrity protected downlink NAS message to the UE; The NAS integrity protection key and the NAS encryption key are sent to the NAS NF by a NAS security function entity; or, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF, and the NAS NF is other functional entities other than the access mobility management function entity AMF.

34. The device according to claim 33, wherein Also includes activation modules for: Activate NAS integrity protection; Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key; Activate NAS uplink decryption; Receiving a NAS security mode completion message sent by the UE; Activate NAS downlink encryption.

35. The device according to claim 33, wherein Also included is a first initial message protection module, which is used to: receiving an initial NAS message from the UE; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

36. The device according to claim 34, wherein Also included is a second initial message protection module, which is used to: receiving an initial NAS message from the UE; Initiating an authentication process with the UE; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

37. The device according to claim 33, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on a NAS NF key, and the NAS NF key is derived by a security anchor function entity SEAF.

38. The apparatus of claim 33, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by a security anchor function entity SEAF. The NAS security function entity is a functional entity outside the SEAF.

39. The apparatus of claim 33, wherein: The NAS security function entity includes a security anchor function entity SEAF.

40. The device according to claim 38 or 39, wherein: The NAS security function entity is also used to derive keys for untrusted non-3GPP access and gNB keys.

41. A security protection device for non-access layer NAS messages, the device being a NAS security function entity, the NAS security function entity being a function entity other than an access mobility management function entity AMF; the device comprising a memory, a transceiver, and a processor: Memory for storing computer programs; a transceiver, for transmitting and receiving data under the control of the processor; A processor is configured to read the computer program in the memory and perform the following operations: Receive an uplink NAS message sent by a user equipment UE, perform integrity verification on the uplink NAS message using a NAS integrity protection key, and decrypt the uplink NAS message using a NAS encryption key, and send the integrity-verified and decrypted uplink NAS message to a NAS network function entity NF; and / or receiving a downlink NAS message sent by the NAS NF, encrypting the downlink NAS message using a NAS encryption key, performing integrity protection on the downlink NAS message using a NAS integrity protection key, and sending the encrypted and integrity protected downlink NAS message to the UE; The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity.

42. The device according to claim 41, wherein The processor is configured to perform the following operations: Activate NAS integrity protection; Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key; Activate NAS uplink decryption; Receiving a NAS security mode completion message sent by the UE; Activate NAS downlink encryption.

43. The device according to claim 42, wherein: The activating NAS integrity protection includes: The downlink NAS message is received, and NAS integrity protection is activated.

44. The device according to claim 41, wherein The processor is configured to perform the following operations: Receiving an initial NAS message sent by the UE; Sending the decrypted and integrity-verified initial NAS message to the NAS NF; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

45. The device according to claim 44, wherein The processor is configured to perform the following operations: Receiving an initial NAS message sent by the UE; Initiating an authentication process with the UE; Sending an initial NAS message to the NAS NF; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

46. ​​The apparatus of claim 41, wherein: The NAS security function entity includes any one of the following: a session management function entity SMF, a location management function entity LMF, a policy control function entity PCF, a short message service function entity SMSF or a custom network function entity.

47. The device according to claim 46, wherein The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key, and the NAS security function entity key is derived by a security anchor function entity SEAF.

48. The apparatus of claim 41, wherein: The NAS security function entity includes SEAF.

49. The device according to any one of claims 46 to 48, wherein: The NAS security function entity is also used to derive keys for untrusted non-3GPP access and gNB keys.

50. A security protection device for non-access layer NAS messages, the device being a NAS network function entity NF, the device comprising a memory, a transceiver, and a processor: Memory for storing computer programs; a transceiver, for transmitting and receiving data under the control of the processor; A processor is configured to read the computer program in the memory and perform the following operations: Receiving an uplink NAS message of a user equipment UE sent by a NAS security function entity; and / or Sending downlink NAS messages to the UE via the NAS security function entity; The NAS security function entity is a functional entity other than the access mobility management function entity AMF, and the NAS security function entity is used to derive a NAS integrity protection key and a NAS encryption key.

51. A security protection device for non-access layer NAS messages, the device being a NAS security function entity, the device comprising a memory, a transceiver, and a processor: Memory for storing computer programs; a transceiver, for transmitting and receiving data under the control of the processor; A processor is configured to read the computer program in the memory and perform the following operations: Export NAS integrity protection keys and NAS encryption keys; The NAS integrity protection key and the NAS encryption key are sent to a NAS network function entity NF, wherein the NAS integrity protection key is used to perform integrity verification on an uplink NAS message and to perform integrity protection on a downlink NAS message; and the NAS encryption key is used to decrypt the uplink NAS message and to encrypt the downlink NAS message.

52. The apparatus of claim 51, wherein: The NAS security function entity includes any one of the following: access and mobility management function AMF, session management function entity SMF, location management function entity LMF, policy control function entity PCF, short message service function entity SMSF, security anchor function entity SEAF or custom network function entity.

53. A security protection device for non-access layer NAS messages, the device being a NAS network function entity NF, the device comprising a memory, a transceiver, and a processor: Memory for storing computer programs; a transceiver, for transmitting and receiving data under the control of the processor; A processor is configured to read the computer program in the memory and perform the following operations: receiving an uplink NAS message from the UE, performing integrity verification on the uplink NAS message using the NAS integrity protection key, and decrypting the uplink NAS message using the NAS encryption key; and / or Encrypting a downlink NAS message using the NAS encryption key, and integrity protecting the downlink NAS message using the NAS integrity protection key, and sending the encrypted and integrity protected downlink NAS message to the UE; The NAS integrity protection key and the NAS encryption key are sent to the NAS NF by a NAS security function entity; or, the NAS integrity protection key and the NAS encryption key are derived by the NAS NF, and the NAS NF is other functional entities other than the access mobility management function entity AMF.

54. The apparatus of claim 53, wherein: The processor is configured to perform the following operations: Activate NAS integrity protection; Sending a NAS security mode command message to the UE, where the NAS security mode command message is integrity protected by the NAS integrity protection key; Activate NAS uplink decryption; Receiving a NAS security mode completion message sent by the UE; Activate NAS downlink encryption.

55. The apparatus of claim 53, wherein: The processor is configured to perform the following operations: receiving an initial NAS message from the UE; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

56. The apparatus of claim 54, wherein: The processor is configured to perform the following operations: receiving an initial NAS message from the UE; Initiating an authentication process with the UE; An initial NAS message response is sent to the UE, where the initial NAS message response is encrypted by the NAS encryption key and integrity protected by the NAS integrity protection key.

57. The apparatus of claim 53, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS NF based on a NAS NF key, and the NAS NF key is derived by a security anchor function entity SEAF.

58. The apparatus of claim 53, wherein: The NAS integrity protection key and the NAS encryption key are derived by the NAS security function entity based on a NAS security function entity key and sent to the NAS NF. The NAS security function entity key is derived by a security anchor function entity SEAF. The NAS security function entity is a functional entity outside the SEAF.

59. The apparatus of claim 53, wherein: The NAS security function entity includes a security anchor function entity SEAF.

60. The device according to claim 58 or 59, wherein: The NAS security function entity is also used to derive keys for untrusted non-3GPP access and gNB keys.

61. A non-transitory readable storage medium storing a computer program, wherein the computer program is used to cause a processor to execute the method according to any one of claims 1 to 9.

62. A non-transitory readable storage medium storing a computer program, wherein the computer program is configured to cause a processor to execute the method of claim 10.

63. A non-transitory readable storage medium storing a computer program, wherein the computer program is configured to cause a processor to execute the method of claim 11 or 12.

64. A non-transitory readable storage medium storing a computer program, wherein the computer program is used to cause a processor to execute the method according to any one of claims 13 to 20.

Images