Secure communication method, apparatus and system, and terminal and network-side device

Abstract

The present application belongs to the technical field of communications. Disclosed are a secure communication method, apparatus and system, and a terminal and a network-side device. The secure communication method in the embodiments of the present application comprises: a terminal receiving target wireless signaling, wherein the target wireless signaling comprises first identification information and first target information, and the first target information comprises first security assistance information; when the first identification information is related to the terminal, the terminal generating a first security element on the basis of at least one of first derivative information and a security element derivation algorithm; and the terminal executing a first operation on the basis of the first security element, wherein the first operation comprises at least one of the following: sending first information to an access network node, sending to the access network node first information carrying a third security parameter, and receiving second information from the access network node, security protection is performed on the first information or part of content in the first information on the basis of the first security element, and security processing is performed on the second information or part of content in the second information on the basis of the first security element.

Description

Secure communication method, device, system, terminal and network side equipment

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to the Chinese patent application filed with the China Patent Office on December 7, 2023, with application number 202311673953.X and invention name “Secure Communication Method, Device, System, Terminal and Network Side Equipment”, the entire contents of which are incorporated by reference into this application. Technical Field

[0003] The present application belongs to the field of communication technology, and specifically relates to a secure communication method, apparatus, system, terminal, and network-side equipment. Background Art

[0004] With the development of communication technology, in order to improve the efficiency of data transmission in communication systems, terminals can transmit and receive terminal-dedicated data (UE-dedicated data) with network-side devices without entering a connected state, i.e., small data transmission (SDT). Currently, small data transmission mainly includes mobile-initiated small data transmission (MO-SDT) transmitted on the physical uplink shared channel (PUSCH) of the terminal-triggered uplink message 3 (Msg3) or configured grant (CG) or mobile-terminated small data transmission (MT-SDT) triggered by the downlink. In this way, the terminal and the network-side device still need to exchange messages multiple times to complete the small data interaction, which is complicated and cannot guarantee the security of data transmission. Summary of the Invention

[0005] The embodiments of the present application provide a secure communication method, apparatus, system, terminal, and network-side equipment, which can solve the problem that the small data transmission process is complicated and the security of data transmission cannot be guaranteed.

[0006] In a first aspect, a secure communication method is provided, comprising:

[0007] The terminal receives target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security assistance information, the first security assistance information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0008] In a case where the first identification information is related to the terminal, the terminal generates a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm;

[0009] The terminal performs a first operation based on the first security requirement;

[0010] The first operation includes at least one of the following:

[0011] Sending first information to the access network node;

[0012] Sending first information carrying a third security parameter to the access network node;

[0013] receiving second information from the access network node;

[0014] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0015] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0016] The first security element includes at least one of a key and a secret stream.

[0017] In a second aspect, a secure communication method is provided, comprising:

[0018] The access network node sends target wireless signaling, wherein the target wireless signaling includes first identification information and first target information; the first target information includes first security auxiliary information, the first security auxiliary information includes first indication information, first algorithm information, first security parameter, and at least one of the second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

[0019] A third aspect provides a secure communication method, comprising:

[0020] The access network node sends target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security assistance information, the first security assistance information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0021] The terminal receives the target wireless signaling;

[0022] In a case where the first identification information is related to the terminal, the terminal generates a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm;

[0023] The terminal performs a first operation based on the first security requirement;

[0024] The first operation includes at least one of the following:

[0025] Sending first information to the access network node;

[0026] Sending first information carrying a third security parameter to the access network node;

[0027] receiving second information from the access network node;

[0028] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0029] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0030] The first security element includes at least one of a key and a secret stream.

[0031] In a fourth aspect, a secure communication device is provided, comprising:

[0032] a first receiving module, configured to receive target wireless signaling, the target wireless signaling including first identification information and first target information; the first target information including first security auxiliary information, the first security auxiliary information including at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter, the first algorithm information including at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0033] a requirement generating module, configured to generate, by the terminal, a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm, when the first identification information is related to the terminal;

[0034] A first execution module, configured to execute a first operation based on the first security requirement;

[0035] The first operation includes at least one of the following:

[0036] Sending first information to the access network node;

[0037] Sending first information carrying a third security parameter to the access network node;

[0038] receiving second information from the access network node;

[0039] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0040] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0041] The first security element includes at least one of a key and a secret stream.

[0042] In a fifth aspect, a secure communication device is provided, comprising:

[0043] A first sending module is used to send target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security auxiliary information, where the first security auxiliary information includes first indication information, first algorithm information, first security parameter, and at least one of the second security parameter, where the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

[0044] In a sixth aspect, a secure communication system is provided, characterized in that it includes: a terminal and an access network node, wherein:

[0045] The access network node is configured to send target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security auxiliary information, the first security auxiliary information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0046] The terminal is configured to receive the target wireless signaling; if the first identification information is related to the terminal, generate a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm; and perform a first operation based on the first security requirement;

[0047] The first operation includes at least one of the following:

[0048] Sending first information to the access network node;

[0049] Sending first information carrying a third security parameter to the access network node;

[0050] receiving second information from the access network node;

[0051] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0052] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0053] The first security element includes at least one of a key and a secret stream.

[0054] In a seventh aspect, a terminal is provided, comprising a processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, the steps of the method described in the first aspect are implemented.

[0055] In an eighth aspect, a terminal is provided, comprising a processor and a communication interface, wherein the communication interface is configured to receive target wireless signaling, the target wireless signaling including first identification information and first target information; the first target information including first security assistance information, the first security assistance information including at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter, the first algorithm information including at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0056] The processor is configured to, when the first identification information is related to the terminal, generate, by the terminal, a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm;

[0057] The communication interface is further configured to perform a first operation based on the first security requirement;

[0058] The first operation includes at least one of the following:

[0059] Sending first information to the access network node;

[0060] Sending first information carrying a third security parameter to the access network node;

[0061] receiving second information from the access network node;

[0062] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0063] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0064] The first security element includes at least one of a key and a secret stream.

[0065] In the ninth aspect, a network side device is provided, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the method described in the second aspect are implemented.

[0066] In the tenth aspect, a network side device is provided, comprising a processor and a communication interface, wherein the communication interface is used to send target wireless signaling, the target wireless signaling including first identification information and first target information; the first target information includes first security auxiliary information, the first security auxiliary information includes first indication information, first algorithm information, first security parameter, and at least one of the second security parameters, the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

[0067] In the eleventh aspect, a readable storage medium is provided, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented, or the steps of the method described in the second aspect are implemented.

[0068] In the twelfth aspect, a wireless communication system is provided, including: a terminal and a network side device, wherein the terminal can be used to execute the steps of the method described in the first aspect, and the network side device can be used to execute the steps of the method described in the second aspect.

[0069] In the thirteenth aspect, a chip is provided, which includes a processor and a communication interface, the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the method as described in the first aspect, or to implement the method as described in the second aspect.

[0070] In a fourteenth aspect, a computer program / program product is provided, wherein the computer program / program product is stored in a storage medium, and the program / program product is executed by at least one processor to implement the method as described in the first aspect, or to implement the method as described in the second aspect.

[0071] In an embodiment of the present application, when the terminal is associated with the first identification information, the terminal generates a first security requirement based on the first derived information and at least one of the security requirement derivation algorithms; and performs a first operation based on the first security requirement, thereby enabling data or signaling transmission in a subsequent first interactive message between the terminal and the network-side device, reducing the complexity of data transmission and thus reducing data transmission latency. At the same time, the first security requirement is used to securely protect at least a portion of the content of the first message, and the first security requirement is used to securely process at least a portion of the content of the second message, thereby improving the security of the interaction between the terminal and the core network node. BRIEF DESCRIPTION OF THE DRAWINGS

[0072] FIG1 is a block diagram of a wireless communication system to which embodiments of the present application may be applied;

[0073] FIG2 is a flowchart of a secure communication method according to an embodiment of the present application;

[0074] FIG3 is a second flowchart of the secure communication method provided in an embodiment of the present application;

[0075] FIG4 is a third flowchart of the secure communication method provided in an embodiment of the present application;

[0076] FIG5 is a fourth flowchart of the secure communication method provided in an embodiment of the present application;

[0077] FIG6 is a schematic structural diagram of a secure communication device provided in an embodiment of the present application;

[0078] FIG7 is a schematic structural diagram of another secure communication device provided in an embodiment of the present application;

[0079] FIG8 is a schematic structural diagram of a communication device provided in an embodiment of the present application;

[0080] FIG9 is a schematic diagram of the structure of a terminal provided in an embodiment of the present application;

[0081] FIG10 is a schematic diagram of the structure of the network side device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0082] The terms "first", "second", etc. in this application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first" and "second" are generally of the same type, and do not limit the number of objects, for example, the first object can be one or more. In addition, "or" in this application represents at least one of the connected objects. For example, "A or B" covers three options, namely, Option 1: including A but not including B; Option 2: including B but not including A; Option 3: including both A and B. The character " / " generally indicates that the objects associated before and after are in an "or" relationship.

[0083] The term "indication" in this application can be either a direct indication (or explicit indication) or an indirect indication (or implicit indication). A direct indication can be understood as the sender explicitly informing the receiver of specific information, the operation to be performed, or the requested result, etc. in the instruction sent; an indirect indication can be understood as the receiver determining the corresponding information based on the instruction sent by the sender, or making a judgment and determining the operation to be performed or the requested result, etc. based on the judgment result.

[0084] It is worth noting that the technology described in the embodiments of the present application is not limited to the Long Term Evolution (LTE) / LTE-Advanced (LTE-A) system, but can also be used in other wireless communication systems, such as Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Orthogonal Frequency Division Multiple Access (OFDMA), Single-carrier Frequency Division Multiple Access (SC-FDMA) or other systems. The terms "system" and "network" in the embodiments of the present application are often used interchangeably, and the technology described can be used for the systems and radio technologies mentioned above, as well as for other systems and radio technologies. The following description describes a New Radio (NR) system for illustrative purposes, and the NR terminology is used in most of the following description, but these technologies can also be applied to systems other than NR systems, such as the 6th generation (6G) system. th Generation, 6G) communication system.

[0085] FIG1 is a block diagram of a wireless communication system applicable to an embodiment of the present application. The wireless communication system includes a terminal 11 and a network-side device 12. The terminal 11 may be a mobile phone, a tablet computer (Tablet Personal Computer), a laptop computer (Laptop Computer), a notebook computer, a personal digital assistant (PDA), a handheld computer, a netbook, an ultra-mobile personal computer (UMPC), a mobile internet device (MID), an augmented reality (AR), a virtual reality (VR) device, a robot, a wearable device (Wearable Device), an aircraft (Flight Vehicle), a vehicle-mounted device (VUE), a ship-mounted device, a pedestrian user equipment (PUE), a smart home (home appliances with wireless communication capabilities, such as refrigerators, televisions, washing machines, or furniture), a game console, a personal computer (PC), an ATM, or a self-service machine, or other terminal-side devices. Wearable devices include: smart watches, smart bracelets, smart headphones, smart glasses, smart jewelry (smart bracelets, smart bracelets, smart rings, smart necklaces, smart anklets, smart anklets, etc.), smart wristbands, smart clothing, etc. Among them, the vehicle-mounted device can also be called a vehicle-mounted terminal, a vehicle-mounted controller, a vehicle-mounted module, a vehicle-mounted component, a vehicle-mounted chip or a vehicle-mounted unit, etc. It should be noted that the specific type of the terminal 11 is not limited in the embodiment of the present application. The network side device 12 may include an access network system or a core network device, wherein the access network system may also be called a radio access network (Radio Access Network, RAN) device, a radio access network function or a radio access network unit. The access network system may include a base station, a wireless local area network (WLAN) access point (AP) or a wireless fidelity (WiFi) node, etc.Among them, the base station can be referred to as Node B (NB), Evolved Node B (eNB), the next generation Node B (gNB), New Radio Node B (NR Node B), access point, Relay Base Station (RBS), Serving Base Station (SBS), Base Transceiver Station (BTS), radio base station, radio transceiver, Basic Service Set (BSS), Extended Service Set (ESS), Home Node B (HNB), Home Evolved Node B (homeevolved Node B), Transmission Reception Point (TRP) or other appropriate terms in the relevant field. As long as the same technical effect is achieved, the base station is not limited to specific technical vocabulary. It should be noted that in the embodiment of the present application, only the base station in the NR system is used as an example for introduction, and the specific type of the base station is not limited.

[0086] The core network equipment may include but is not limited to at least one of the following: core network node, core network function, mobility management entity (MME), access mobility management function (AMF), session management function (SMF), user plane function (UPF), policy control function (PCF), policy and charging rules function unit (PCRF), edge application service discovery function (EASDF), unified data management (UDM), unified data repository (UDR), home subscriber server (HSS), centralized network configuration (CNC), network storage function (NRF), network exposure function (NEF), local NEF (L-NEF), binding support function (BSF), etc. Function, BSF), application function (Application Function, AF), etc. It should be noted that in the embodiment of the present application, only the core network device in the NR system is introduced as an example, and the specific type of the core network device is not limited.

[0087] For ease of understanding, some of the contents involved in the embodiments of this application are described below:

[0088] 1. Small Data Transmission (SDT)

[0089] Efficient small data transmission is a feature that allows users in non-Radio Resource Control (RRC) connected states to avoid excessive signaling overhead associated with RRC state transitions and RRC connection establishment, enabling small data transmission through a minimal signaling process. Non-RRC connected states include idle and inactive states.

[0090] A key feature of the small data transmission solution is that the UE's current Data Radio Bearer (DRB) is suspended, not released. Therefore, the UE can resume the DRB before sending a ResumeRequest message, then use RRC signaling to piggyback small data. At this point, data can be transmitted on the DRB, just like a connected UE. This avoids state transitions and achieves efficient small data transmission with minimal signaling overhead.

[0091] Since small data transmission uses DRB transmission and access layer (Attached Storage, AS) security is activated, small data transmission can provide necessary security protection for the data, such as data encryption and integrity protection. From a security perspective, since the UE may have moved to another base station while in the suspended state, the security key used by the UE to resend the packet needs to be updated. The update method is to perform the next key update operation according to the parameters provided to the UE by the network side equipment when it enters the suspended state for calculating the next hop key.

[0092] Small data transmissions are carried on the Dedicated Traffic Channel (DTCH) and multiplexed with the uplink RRCConnectionResumeRequest message before transmission. Similarly, any downlink reply message can also be carried on the DTCH and multiplexed with the downlink RRCConnectionRelease message. Both uplink and downlink data are encrypted using the next key after the update.

[0093] Optionally, small data can be transmitted on Msg3 PUSCH in a 4-step Random Access Channel (RACH) process. Small data can also be transmitted on MsgA PUSCH in a 2-step RACH process, or on PUSCH resources scheduled by a configured grant (CG) configured in the RRC inactive state. Small data transmission in 2-step RACH and 4-step RACH processes is called RACH-based small data transmission, and small data transmission based on PUSCH scheduled by a configured grant is called CG-based small data transmission.

[0094] 2. Mobile Terminated Early Data Transmission (MT-EDT)

[0095] In the LTE system, the network (NW) carries the MT-EDT trigger message via a paging message. The UE then initiates the EDT process. After receiving the UE's request message (carrying the MT-EDT cause value), the NW concatenates the RRC response message with the DRB data into a protocol data unit (PDU) and sends it to the UE, ultimately enabling the reception of downlink services.

[0096] Data transmission in the idle state or inactive state is a special transmission mechanism, which allows the UE to send and receive UE-dedicated data with the NW side without entering the connected state. Currently, small data transmission is mainly transmitted in the uplink Msg3 or MO-SDT transmitted on the CG PUSCH triggered by the terminal, or in the downlink MT-SDT. There is no corresponding solution for how to transmit data or schedule data transmission in the paging message. To this end, a secure communication method of the present application is proposed, that is, the data or data transmission resources are directly delivered to the UE through the first broadcast signal that the UE can receive, such as paging, thereby reducing the message interaction process.

[0097] The following describes in detail the secure communication method provided by the embodiments of the present application through some embodiments and their application scenarios in combination with the accompanying drawings.

[0098] 2 , an embodiment of the present application provides a secure communication method. As shown in FIG2 , the secure communication method includes:

[0099] Step 201: A terminal receives target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security assistance information, the first security assistance information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter; the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0100] Step 202: When the first identification information is related to the terminal, the terminal generates a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm;

[0101] Step 203: The terminal performs a first operation based on the first security requirement;

[0102] The first operation includes at least one of the following:

[0103] Sending first information to the access network node;

[0104] Sending first information carrying a third security parameter to the access network node;

[0105] receiving second information from the access network node;

[0106] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0107] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0108] The first security element includes at least one of a key and a secret stream.

[0109] In an embodiment of the present application, the above-mentioned first identification information can be understood as a target identification or a part of the identification intercepted from the target identification, and the target identification may include at least one of a user identification, a group identification, a connection identification, a bearer identification, a transaction identification and an interaction identification.

[0110] Optionally, the terminal is associated with the first identification information, which can be understood as the relevant identification of the terminal is associated with the first identification information. For example, the target wireless signaling includes a user identification. When the user identification contained in the target wireless signaling includes the user identification of the terminal, it can be considered that the terminal is associated with the first identification information. At this time, the terminal can perform the above-mentioned first operation.

[0111] It should be understood that, in the case that the terminal is not related to the first identification information, the terminal may discard the received first target information.

[0112] Optionally, the first indication information may be used to indicate at least one of data sending and data receiving.

[0113] Optionally, when the first security auxiliary information includes the first algorithm information, and the first algorithm information includes the full requirement derivation algorithm, the terminal may generate the first security requirement based on the indicated security requirement derivation algorithm, or may generate the first security requirement based on the indicated security requirement derivation algorithm and other relevant information (such as the first derived information). Optionally, the content in the first derived information may be determined by the protocol agreement or the terminal, or indicated by the access network node through the first target information. For example, core network-related keys, non-access layer NAS layer-related keys, access network-related keys and access layer AS layer-related keys, keys in the terminal context, information in the terminal core network context, and information in the terminal access network context may be agreed upon by the protocol, and the above-mentioned third security parameter may be determined by the terminal itself.

[0114] Optionally, part or all of the content in the first security auxiliary information can be used to generate the first security requirement. When part of the content in the first security auxiliary information is used to generate the first security requirement, the remaining content may not be used, or may be used to perform a first operation, such as for security protection or security processing.

[0115] It should be noted that the target wireless signaling can be understood as wireless signaling that can be received by the terminal in an idle or inactive state. Because the terminal is associated with the first identification information, the terminal generates a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm; and performs a first operation based on the first security requirement. This allows data or signaling to be transmitted in the first subsequent interactive message between the terminal and the network-side device, thereby reducing data transmission latency.

[0116] Optionally, the key stream (KeyStream) may be a string generated based on a secret key and other parameters.

[0117] Optionally, the above-mentioned core network-related keys may include a long-term key (Long Term Key), an authentication-related key (Kausf), a security and authentication-related key (Kseaf), an AMF key (Kamf), a mobility management entity (Mobility Management Entity, MME) key (Kasme), etc.

[0118] NAS layer related keys may include NAS encryption key (Knas_enc), NAS integrity key (Knas_int), etc.

[0119] Access network related keys may include base station keys (such as Kenb, Kgnb, NH, Kenb*, Kgnb*, Ks-enb, Ks-gnb, etc.).

[0120] AS layer related keys may include signaling encryption key (Krrc_enc), signaling integrity key (Krrc_int), data encryption key (Kup_enc), data integrity key (Kup_int), etc.

[0121] The keys in the terminal context may include any one or a combination of at least two of the core network related keys, the non-access layer NAS layer related keys, the access network related keys, and the access layer AS layer related keys.

[0122] In an embodiment of the present application, when the terminal is associated with the first identification information, the terminal generates a first security requirement based on the first derived information and at least one of the security requirement derivation algorithms; and performs a first operation based on the first security requirement, thereby enabling data or signaling transmission in a subsequent first interactive message between the terminal and the network-side device, thereby reducing data transmission latency. At the same time, the first security requirement is used to securely protect at least a portion of the first message, and the first security requirement is used to securely process at least a portion of the second message, thereby improving the security of the interaction between the terminal and the core network node.

[0123] It should be noted that before the access network device sends the target wireless signaling, the access network node receives third information or target data from the core network node, where the third information includes third identification information and second target information;

[0124] The third information includes second identification information and second target information; the second target information includes at least one of the following:

[0125] First safety requirement or second safety requirement;

[0126] the first algorithm information;

[0127] Second instruction information;

[0128] the second security parameter;

[0129] Second safety auxiliary information;

[0130] Among them, the first security requirement includes at least one of a secret key and a secret stream, the second security requirement includes at least one of a secret key and a secret stream, the second security auxiliary information includes information in the terminal core network context, the second indication information is used to generate the first indication information, and the second identification information is used to indicate the terminal, or is related to the first identification information.

[0131] In an embodiment of the present application, the access network node may acquire or generate the first security requirement based on the second target information, and send the target wireless signaling based on the third information.

[0132] For example, in some embodiments, the access network node generates the first security requirement based on at least one of second derived information and the security requirement derivation algorithm, wherein the second derived information includes at least one of the following: an access network-related key, an AS layer-related key, a key in a terminal context, at least a portion of the first security assistance information, at least a portion of the second security assistance information, first identification information, and information in the terminal access network context.

[0133] Optionally, the second identification information may be a global unique temporary identifier (GUTI), and the first identification information may be an RNTI; or the second identification information may be a GUTI, and the first identification information may be a short-term mobile subscriber identity (S-TMSI); or both the second identification information and the first identification information may be S-TMSI.

[0134] Optionally, the target data may be understood as data to be transmitted (ie, small data). In some embodiments, the third information may further include the target data.

[0135] Optionally, in some embodiments, the second information may be encrypted target data (or encrypted data generated based on the target data).

[0136] Optionally, the access network node may further perform at least one of the following:

[0137] receiving first information from a terminal;

[0138] receiving, from a terminal, first information carrying a third security parameter;

[0139] sending second information to the terminal;

[0140] The second derived information includes at least one of the following: an access network-related key, an AS layer-related key, a key in a terminal context, a second security requirement, information in a terminal access network context, at least part of the first security assistance information, the first identification information, at least part of the second security assistance information, and the third security parameter;

[0141] The first information or part of the first information is securely processed based on the first security requirement, and / or the second information or part of the second information is securely protected based on the first security requirement.

[0142] Optionally, in some embodiments, the third information includes at least one of the following:

[0143] at least one second identification information and at least one second target information;

[0144] at least one pair of second identification information and second target information;

[0145] Wherein, the second target information and the second identification information are mapped one to one or more;

[0146] Alternatively, the second identification information and the second target information are a one-to-zero or one mapping;

[0147] Alternatively, there is a correspondence between K pieces of second identification information and all the second target information, and K is less than or equal to the number of second identification information included in the third information.

[0148] In the embodiments of the present application, the second target information and the second identification information being mapped one-to-one or one-to-many can be understood as follows: the second target information and the second identification information can have a one-to-one mapping relationship, or a one-to-many mapping relationship. For example, all of the second target information and the second identification information are mapped one-to-one; or all of the second target information and the second identification information are mapped one-to-many; or some of the second target information and the second identification information are mapped one-to-one, and some of the second target information and the second identification information are mapped one-to-many.

[0149] The second identification information and the second target information being a one-to-zero or one-to-one mapping can be understood as follows: the second identification information can have a one-to-one mapping relationship with the second target information, or a one-to-zero mapping relationship, wherein a one-to-zero mapping relationship indicates that the second identification information does not have any second target information mapped thereto. For example, all of the second identification information and the second target information are mapped one-to-one; or some of the second identification information and the second target information are mapped one-to-one, while some of the second identification information and the second target information are mapped one-to-zero.

[0150] Optionally, when there is a correspondence between K pieces of second identification information and all pieces of second target information, if K is equal to the number of pieces of second identification information included in the target wireless signaling, it can be understood that all pieces of second identification information have mapped second target information; if K is less than the number of pieces of second identification information included in the target wireless signaling, it can be understood that only some pieces of second identification information have mapped second target information, while some pieces of second identification information do not have mapped second target information. The mapping relationship between the second target information and the second identification information can include at least one of the following: a one-to-one mapping relationship; or a one-to-many mapping relationship.

[0151] Optionally, in some embodiments, the second identification information is used to indicate a terminal, or is generated by a terminal identifier, or indicates a group of terminals, or is related to the first identification information.

[0152] It should be noted that in the embodiments of the present application, the core network node can be understood or replaced by a device or system having core network functions, that is, it can be referred to as a core network device or core network system, or it can also be referred to as a core network function. The access network node can be understood as a device or system having access network functions, that is, it can be referred to as an access network device or system, or it can also be referred to as a base station or access network function.

[0153] Optionally, in some embodiments, the method includes at least one of the following:

[0154] The terminal further performs security protection on the first information or part of the first information based on the first calculation parameter;

[0155] The terminal further performs security processing on the second information or part of the second information based on the first calculation parameter;

[0156] The first calculation parameter includes at least one of the following:

[0157] Information in the terminal core network context;

[0158] Information in the terminal access network context;

[0159] the first identification information;

[0160] at least part of the first safety assistance information;

[0161] The third security parameter.

[0162] In an embodiment of the present application, the terminal also performs security protection on the first information or part of the content in the first information based on the first calculation parameter. It can be understood that the terminal performs security protection on the first information or part of the content in the first information based on the first security requirement and the first calculation parameter.

[0163] The terminal also securely processes the second information or part of the content in the second information based on the first calculation parameter, which can be understood as: the terminal securely processes the second information or part of the content in the second information based on the first security requirement and the first calculation parameter.

[0164] Optionally, at least a portion of the first security assistance information included in the first calculation parameter may be the same as, different from, or partially the same as at least a portion of the first security assistance information included in the first derived information. For example, in some embodiments, the first security assistance information includes two parts of information, one part (e.g., the first security parameter) being used to perform the first operation, and the other part (e.g., the second security parameter) being used to generate the security requirement.

[0165] Optionally, the first security parameter is used to represent NAS counting information, such as the number of downlink NAS signaling times, or the number of uplink NAS signaling times, or the number of NAS signaling times (the sum of the number of downlink NAS signaling times and the number of uplink NAS signaling times); the second security parameter is used to represent the counting information of access network signaling or the counting information of data messages. For example, the second security parameter can be the number of downlink access network signaling times, the number of uplink access network signaling times, or the number of access network signaling times (that is, the sum of the number of downlink access network signaling times and the number of uplink access network signaling times), or it can be the number of downlink data messages, the number of uplink data messages, or the number of data messages (that is, the number of downlink data messages and the number of uplink data messages). The third security parameter can be understood as information used to represent access network signaling counts or data message counts. For example, the second security parameter can be the number of downlink access network signaling times, the number of uplink access network signaling times, or the number of access network signaling times (i.e., the sum of the number of downlink access network signaling times and the number of uplink access network signaling times), or the number of downlink data messages, the number of uplink data messages, or the number of data messages (i.e., the number of downlink data messages and the number of uplink data messages). Optionally, in some embodiments, the third security parameter is different from the second security parameter.

[0166] Optionally, in some embodiments, the information in the terminal core network context includes at least one of the following:

[0167] Terminal identification information;

[0168] The terminal's group identification information;

[0169] NAS signaling counting information;

[0170] Counting information of non-access stratum NAS uplink signaling;

[0171] Counting information of signaling from the non-access stratum (NAS);

[0172] Count information of protocol data packets transmitted through NAS;

[0173] Count information of uplink protocol data packets transmitted through NAS;

[0174] Count information of downlink protocol data packets transmitted through NAS;

[0175] Alternatively, the information in the terminal access network context includes at least one of the following:

[0176] Terminal identification information;

[0177] The terminal's group identification information;

[0178] Access layer AS signaling counting information;

[0179] Access layer AS uplink signaling counting information;

[0180] Access layer AS downlink signaling counting information;

[0181] Counting information of protocol data packets;

[0182] Counting information of uplink protocol data packets;

[0183] Downlink protocol data packet count information.

[0184] Optionally, in some embodiments, the security protection includes at least one of confidentiality protection, encryption, and integrity protection; the security processing includes at least one of decryption, confidentiality processing, integrity processing, and integrity verification.

[0185] Optionally, in some embodiments, the target wireless signaling includes at least one of the following:

[0186] at least one first identification information and at least one first target information;

[0187] At least one pair of first identification information and first target information;

[0188] Wherein, the first target information and the first identification information are mapped one to one or more;

[0189] Alternatively, the first identification information and the first target information are a one-to-zero or one mapping;

[0190] Alternatively, there is a correspondence between N first identification information and all first target information, and N is less than or equal to the number of first identification information included in the target wireless signaling.

[0191] In the embodiments of the present application, the one-to-one or one-to-many mapping between the first target information and the first identification information can be understood as follows: the first target information can have a one-to-one mapping relationship with the first identification information, or a one-to-many mapping relationship. For example, all first target information and the first identification information are one-to-one mapped; or all first target information and the first identification information are one-to-many mapped; or some first target information and the first identification information are one-to-one mapped, and some first target information and the first identification information are one-to-many mapped.

[0192] The one-to-zero or one mapping between the first identification information and the first target information can be understood as follows: the first identification information can have a one-to-one mapping relationship with the first target information, or a one-to-zero mapping relationship, wherein a one-to-zero mapping relationship indicates that there is no first target information mapped to the first identification information. For example, all first identification information and the first target information have a one-to-one mapping; or some first identification information and the first target information have a one-to-one mapping, and some first identification information and the first target information have a one-to-zero mapping.

[0193] Optionally, when N first identification information corresponds to all first target information, if N is equal to the number of first identification information included in the target wireless signaling, it can be understood that all first identification information has mapped first target information; if N is less than the number of first identification information included in the target wireless signaling, it can be understood that only some of the first identification information has mapped first target information, and some of the first identification information does not have mapped first target information. The mapping relationship between the first target information and the first identification information can include at least one of the following: a one-to-one mapping relationship; a one-to-many mapping relationship.

[0194] Optionally, in some embodiments, the terminal is in an idle state or an inactive state, or is in an idle state or an inactive state before sending the first information, or is in an idle state or an inactive state before receiving the second information.

[0195] In the embodiment of the present application, the idle state includes two situations: the core network idle state and the wireless idle state. The core network idle state refers to a state of the terminal in which the core network cannot directly send a NAS message targeting the terminal (paging must be performed first), or the terminal cannot directly send a NAS message to the core network (the corresponding sending resources must be obtained first). It can also be said that there is no NAS connection between the terminal and the core network. The wireless idle state means that the terminal has no resources to send signaling to the base station to establish a wireless point-to-point connection between the terminal and the base station (there are dedicated wireless resources of the terminal to send and receive information, including dedicated scrambling code resources, such as Radio Network Temporary Identifier (RNTI)). Identifier, RNTI); the inactive state refers to a state of the terminal, in which the terminal is in a non-core network idle state, there is a connection or tunnel for the terminal between the core network and the base station, but there is no wireless point-to-point connection between the terminal and the base station. The state of the terminal can also be defined using other names, and there are other behaviors between the terminal and the base station. For example, there is a wireless point-to-point connection between the terminal and the base station, but the core network cannot directly send a NAS message with the terminal as the target. This state may use a new name, but still corresponds to the idle state (i.e., core network idle state) description of this application, such as the terminal is in a non-core network idle state (NAS messages with the terminal as the target can be sent directly), there is a wireless point-to-point connection between the terminal and the base station, but there is no connection for the terminal between the core network and the base station (for example, uplink or downlink NAS messages are based on UE ID to identify the source or target, rather than based on a connection or tunnel identifier (Tunnel endpoint identifier, TEID)). This state can be defined using other names, but still corresponds to the inactive state description of this application. For example, there is a NAS connection but the connection between the terminal, the base station, and then the core network is incomplete.

[0196] Optionally, in an embodiment of the present application, after the terminal enters the inactive state and before receiving the target wireless signaling, the terminal does not send any information to the access network system.

[0197] Optionally, in some embodiments, before the terminal receives the target wireless signaling, the method further includes:

[0198] The terminal sends second algorithm information to the network side, where the second algorithm information is used to indicate at least one of the following: an algorithm supported by the terminal and an algorithm used by the terminal;

[0199] The algorithm includes at least one of a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

[0200] In the embodiment of the present application, the terminal sending the second algorithm information to the network side can be understood as the terminal sending an NAS message to the core network node, and the NAS message can include the second algorithm information. Furthermore, when the access network node forwards the NAS message to the core network node, it can carry at least one of the algorithms supported by the access network node and the algorithm used by the access network node.

[0201] Optionally, after receiving the second algorithm information, the core network node may indicate the first algorithm information to the access network node.

[0202] Optionally, in some embodiments, the first identification information indicates a terminal, or is generated by a terminal identifier, or indicates a group of terminals.

[0203] In the embodiment of the present application, when the first identification information is generated by the terminal identification, different terminal identifications can generate the same first identification information. For example, the terminal identifications of a group of terminals can generate the same first identification information.

[0204] Optionally, in some embodiments, the target wireless signaling includes any one of broadcast signaling, paging signaling, wireless short message, and system message;

[0205] Alternatively, the target wireless signaling is sent through at least one of a paging channel (Paging Channel, PCH), a multicast channel (Multicast Channel, MCH), a broadcast channel (Broadcast Channel, BCH) and a downlink shared channel (Downlink Shared Channel, DL-SCH);

[0206] Alternatively, the target wireless signaling is sent through at least one of a physical downlink control channel (PDCCH), a physical downlink shared channel (PDSCH), a physical broadcast channel (PBCH) and a physical multicast channel (PMCH).

[0207] In an embodiment of the present application, the above-mentioned target wireless signaling can be a paging message in a new format sent through PCH (i.e., a paging message containing resource information), or it can be a signaling sent in PCH, where the target wireless signaling includes a traditional paging message (i.e., a paging message that does not contain resource information), as well as resource information, or it can be a traditional paging message sent in PCH, as well as resource information sent through PDCCH, or it can be a traditional paging message.

[0208] Optionally, the wireless short message may be understood as a short message involved in wireless signaling, rather than a short message involved in Short Messaging / Message Service (SMS).

[0209] Optionally, in some embodiments, before the terminal performs the first operation, the terminal performs a random access procedure, a RACH procedure, or a PRACH procedure.

[0210] In the embodiment of the present application, the first operation can be performed after the random access process is completed, or can be performed during the random access process. The random access process can be a 2-step random access process or a 4-step random access process, which is not further limited here.

[0211] In order to better understand the present application, some examples are given below for detailed description.

[0212] In the first embodiment, when the terminal is in the idle state, the interaction process is shown in FIG3 , which specifically includes the following steps:

[0213] In step 31, the terminal sends a NAS message to the core network. When the access network node forwards the NAS message to the core network node, it carries the algorithm indication information supported by the terminal (i.e., the second algorithm information), and may further carry the algorithm indication information supported by the access network node. The core network node optionally saves the algorithm indication information supported by the terminal, or the algorithm indication information supported by the terminal and the access network node.

[0214] In step 32, the core network node sends information 1 to the access network node, for example, via a Paging message or an incentive message.

[0215] Information 1 includes a first user identifier and a security requirement (including at least one of a secret key and a secret stream). The security requirement can be generated based on at least one of the secret key, the first user identifier, and the first security parameter in the terminal core network context. Optionally, Information 1 may also include at least one of the first security parameter and an algorithm indication, where the algorithm indication is used to indicate the first algorithm information.

[0216] Optionally, at least part of the information other than the first user identifier in the information 1 may be associated with the first user identifier, thereby carrying multiple pieces of other information associated with the first user identifier. Of course, in other embodiments, at least part of the information other than the first user identifier in the information 1 may also be associated with the first user identifier.

[0217] In step 33, the access network node broadcasts information 2 via the air interface, for example, via a Paging message, a system message, or an activation message, or sends information 2 in the first message sent to the terminal.

[0218] The information 2 includes the first user identifier or the second user identifier and at least one of the following: an algorithm indication, a first security parameter, a second security parameter, and indication information (used to indicate execution of at least one of data sending and data receiving).

[0219] Optionally, the second user identifier can be generated based on the first user identifier, for example, the first user identifier is a user identifier assigned by the core network node (such as TMSI), and the second user identifier is a user identifier assigned by the access network node (such as RNTI), or the first user identifier is a user identifier assigned by the access network node, and the second user identifier is a user identifier assigned by the core network node.

[0220] Optionally, other information in addition to the user identification (first user identification or second user identification) in the above information 2 may be associated with the user identification, thereby carrying other information associated with multiple user identifications. Of course, in other embodiments, other information in addition to the user identification in the above information 2 may be unrelated to the user identification.

[0221] It should be noted that, except for the user identity in the above-mentioned information 2, which is carried by the message carrying information 2, other information can be carried in the message or in the signaling carrying the message (such as RLC layer signaling or MAC layer signaling). For example, other information except the user identity can be carried in a broadcast message, signaling carrying the broadcast message, the first message sent by the access network node to the terminal, and / or the signaling carrying the first message.

[0222] Step 34: The terminal performs a random access process to access an access network node.

[0223] In step 35, the terminal may generate a new security element based on the key in the terminal core network message (e.g., using the corresponding key and agreed parameters and / or information received from the access network node). The security element may include a key or a secret stream. When sending a message to the access network node, perform at least one of the following:

[0224] Encrypting the message using a key or a secret stream (encrypting using a key and an agreed or indicated algorithm, or performing an exclusive-OR operation based on the secret stream). Where the security requirement includes a key, the encryption operation may also be performed using at least one of a received user identity, a user identity obtained based on the received user identity (e.g., obtaining a TMSI from a received RNTI, or vice versa), a first security parameter, and a second security parameter (i.e., the relevant parameters are also used as input parameters during encryption);

[0225] When the security requirements include a key, a security operation is performed on the message and / or encrypted message (the MAC value is calculated using the key and an agreed or indicated algorithm). The security operation can also be performed using the received user identifier, the user identifier obtained based on the received user identifier, the first security parameter 1 and at least one of the second security parameters (that is, the relevant parameters are also used as input in the process of calculating the MAC value).

[0226] The access network node may generate new security requirements based on the security requirements received from the core network node (e.g., using corresponding keys and agreed parameters and / or information sent by the access network node to the terminal). Upon receiving a message sent by the terminal to the access network node, the access network node may generate new security requirements based on the security requirements received from the core network node corresponding to the identification information corresponding to the message. Upon receiving a message sent by the terminal to the access network node, the access network node may perform at least one of the following:

[0227] Decrypting the signaling or part of the signaling based on the key or secret stream in the security element or the new security element;

[0228] Based on the key pair in the security requirements or new security requirements, the entire signaling (the entire ciphertext signaling), the entire decrypted (plaintext) signaling, some of the information elements in the signaling (ciphertext information elements), and / or some of the decrypted information elements in the signaling (plaintext information elements) are fully verified (using the key and the target MAC value calculated by the agreed or indicated algorithm and comparing it with the received MAC value).

[0229] Optionally, the above-mentioned security verification and / or decryption operations can also be performed based on the sent user identity, the user identity obtained based on the sent user identity, the first security parameter, the second security parameter and at least one of the third security parameters (that is, the corresponding parameters are also used as input during the calculation of the target MAC value and / or the decryption process).

[0230] At this point, security activation is completed between the terminal and the access network node, and subsequent message and data interactions can be securely protected.

[0231] It should be noted that after step 33, the core network node may send a new user identifier to the terminal through the access network node for use in the next execution of step 33 and subsequent operations, so as to update the security parameters.

[0232] 4 , an embodiment of the present application further provides a secure communication method, as shown in FIG4 , the method includes:

[0233] In step 401, the access network node sends target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security auxiliary information, where the first security auxiliary information includes first indication information, first algorithm information, first security parameter, and at least one of second security parameters, where the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

[0234] Optionally, before the access network node sends the target wireless signaling, the method further includes:

[0235] The access network node receives third information or target data from the core network node;

[0236] The third information includes second identification information and second target information; the second target information includes at least one of the following:

[0237] First safety requirement or second safety requirement;

[0238] the first algorithm information;

[0239] Second instruction information;

[0240] the second security parameter;

[0241] Second safety auxiliary information;

[0242] Among them, the first security requirement includes at least one of a secret key and a secret stream, the second security requirement includes at least one of a secret key and a secret stream, the second security auxiliary information includes information in the terminal core network context, the second indication information is used to generate the first indication information, and the second identification information is used to indicate the terminal, or is related to the first identification information.

[0243] Optionally, the third information includes at least one of the following:

[0244] at least one second identification information and at least one second target information;

[0245] at least one pair of second identification information and second target information;

[0246] Wherein, the second target information and the second identification information are mapped one to one or more;

[0247] Alternatively, the second identification information and the second target information are a one-to-zero or one mapping;

[0248] Alternatively, there is a correspondence between K second identification information and all second target information, and K is less than or equal to the number of second identification information.

[0249] Optionally, the method further includes:

[0250] The access network node performs a second operation, where the second operation includes at least one of the following:

[0251] generating a first security element based on at least one of the second derived information and the security element derivation algorithm;

[0252] receiving first information from a terminal;

[0253] receiving, from a terminal, first information carrying a third security parameter;

[0254] sending second information to the terminal;

[0255] The second derived information includes at least one of the following: an access network-related key, an AS layer-related key, a key in a terminal context, a second security requirement, information in a terminal access network context, at least part of the first security assistance information, the first identification information, at least part of the second security assistance information, and the third security parameter;

[0256] The first information or part of the first information is securely processed based on the first security requirement, and / or the second information or part of the second information is securely protected based on the first security requirement.

[0257] Optionally, the method includes at least one of the following:

[0258] The access network node further performs security processing on the first information or part of the first information based on the first calculation parameter;

[0259] The access network node further performs security protection on the second information or part of the second information based on the first calculation parameter;

[0260] The first calculation parameter includes at least one of the following:

[0261] Information in the terminal access network context;

[0262] the first identification information;

[0263] at least part of the first safety assistance information;

[0264] at least part of the second safety assistance information;

[0265] the first indication information;

[0266] the first algorithm information;

[0267] The third security parameter.

[0268] Optionally, the security protection includes at least one of confidentiality protection, encryption, and integrity protection; the security processing includes at least one of decryption, confidentiality processing, integrity processing, and integrity verification.

[0269] Optionally, the target wireless signaling includes at least one of the following:

[0270] at least one first identification information and at least one first target information;

[0271] At least one pair of first identification information and first target information;

[0272] Wherein, the first target information and the first identification information are mapped one to one or more;

[0273] Alternatively, the first identification information and the first target information are a one-to-zero or one mapping;

[0274] Alternatively, there is a correspondence between N first identification information and all first target information, and N is less than or equal to the number of first identification information.

[0275] Optionally, the target wireless signaling is any one of broadcast signaling, paging signaling, wireless short message, and system message;

[0276] Alternatively, the target wireless signaling is sent via at least one of a PCH, an MCH, a BCH, and a DL-SCH;

[0277] Alternatively, the target wireless signaling is sent through at least one of PDCCH, PDSCH, PBCH and PMCH.

[0278] Optionally, the first identification information indicates a terminal, or is generated by a terminal identifier, or indicates a group of terminals.

[0279] Optionally, after the access network node sends the target wireless signaling, the access network node and the terminal perform a random access process, a RACH process, or a PRACH process.

[0280] 5 , an embodiment of the present application further provides a secure communication method, as shown in FIG5 , the method includes:

[0281] Step 501: An access network node sends target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security assistance information, the first security assistance information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter; the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0282] Step 502: The terminal receives the target wireless signaling;

[0283] Step 503: If the first identification information is related to the terminal, the terminal generates a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm;

[0284] Step 504: the terminal performs a first operation based on the first security requirement;

[0285] The first operation includes at least one of the following:

[0286] Sending first information to the access network node;

[0287] Sending first information carrying a third security parameter to the access network node;

[0288] receiving second information from the access network node;

[0289] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0290] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0291] The first security element includes at least one of a key and a secret stream.

[0292] Optionally, before the access network node sends the target wireless signaling, the method further includes:

[0293] The core network node sends third information or target data to the access network node, where the third information includes the second identification information and the second target information;

[0294] The access network node learns or generates the first security requirement based on the second target information, and sends the target wireless signaling based on the third information;

[0295] The second target information includes at least one of the following: the first security requirement or the second security requirement, first algorithm information, second security parameters, and second security auxiliary information; the first algorithm information includes at least one of a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0296] The second security auxiliary information includes information in the terminal core network context, the second security requirement includes at least one of a secret key and a secret flow, the second identification information indicates the terminal, or is generated by the terminal identification, or indicates a group of terminals, or is related to the first identification information.

[0297] Optionally, the access network node generating the first security requirement based on the second target information includes:

[0298] The access network node generates the first security requirement based on at least one of the second derived information and the security requirement derivation algorithm;

[0299] The second derived information includes at least one of the following: an access network-related key, an AS layer-related key, a key in the terminal context, at least part of the content in the first security auxiliary information, at least part of the content in the second security auxiliary information, first identification information, first algorithm information, information in the terminal access network context, and the third security parameter.

[0300] Optionally, the method further includes:

[0301] The core network node generates the first security requirement or the second security requirement based on at least one of the third derived information and the security requirement derivation algorithm;

[0302] The third derived information includes at least one of the following: a core network related key, a NAS layer related key, a key in the terminal context, the second security parameter, and at least part of the second security auxiliary information.

[0303] In an embodiment of the present application, the above-mentioned terminal can also execute the various steps of the terminal in the embodiment of Figure 2 above, and the above-mentioned access network node can also execute the various steps of the access network node in the embodiment of Figure 4 above. For details, please refer to the description of the above embodiment. In order to avoid repetition, it will not be repeated here.

[0304] The secure communication method provided in the embodiment of the present application can be executed by a secure communication device or a secure communication system. In the embodiment of the present application, the secure communication device and secure communication system provided in the embodiment of the present application are described by taking the method of executing the secure communication method by a secure communication device as an example.

[0305] 6 , an embodiment of the present application further provides a secure communication device. As shown in FIG6 , the secure communication device 600 includes:

[0306] A first receiving module 601 is configured to receive target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security assistance information, the first security assistance information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter; the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0307] A requirement generating module 602 is configured to generate, by the terminal, a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm, when the first identification information is related to the terminal;

[0308] A first execution module 603, configured to execute a first operation based on the first security requirement;

[0309] The first operation includes at least one of the following:

[0310] Sending first information to the access network node;

[0311] Sending first information carrying a third security parameter to the access network node;

[0312] receiving second information from the access network node;

[0313] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0314] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0315] The first security element includes at least one of a key and a secret stream.

[0316] Optionally, the first execution module 603 is further configured to execute at least one of the following:

[0317] further performing security protection on the first information or a portion of the first information based on the first calculation parameter;

[0318] further performing security processing on the second information or a portion of the second information based on the first calculation parameter;

[0319] The first calculation parameter includes at least one of the following:

[0320] Information in the terminal core network context;

[0321] Information in the terminal access network context;

[0322] the first identification information;

[0323] at least part of the first safety assistance information;

[0324] The third security parameter.

[0325] Optionally, the information in the terminal core network context includes at least one of the following:

[0326] Terminal identification information;

[0327] The terminal's group identification information;

[0328] NAS signaling counting information;

[0329] Counting information of non-access stratum NAS uplink signaling;

[0330] Counting information of signaling from the non-access stratum (NAS);

[0331] Count information of protocol data packets transmitted through NAS;

[0332] Count information of uplink protocol data packets transmitted through NAS;

[0333] Count information of downlink protocol data packets transmitted through NAS;

[0334] Alternatively, the information in the terminal access network context includes at least one of the following:

[0335] Terminal identification information;

[0336] The terminal's group identification information;

[0337] Access layer AS signaling counting information;

[0338] Access layer AS uplink signaling counting information;

[0339] Access layer AS downlink signaling counting information;

[0340] Counting information of protocol data packets;

[0341] Counting information of uplink protocol data packets;

[0342] Downlink protocol data packet count information.

[0343] Optionally, the security protection includes at least one of confidentiality protection, encryption, and integrity protection; the security processing includes at least one of decryption, confidentiality processing, integrity processing, and integrity verification.

[0344] Optionally, the target wireless signaling includes at least one of the following:

[0345] at least one first identification information and at least one first target information;

[0346] At least one pair of first identification information and first target information;

[0347] Wherein, the first target information and the first identification information are mapped one to one or more;

[0348] Alternatively, the first identification information and the first target information are a one-to-zero or one mapping;

[0349] Alternatively, there is a correspondence between N first identification information and all first target information, and N is less than or equal to the number of first identification information included in the target wireless signaling.

[0350] Optionally, the terminal is in an idle state or an inactive state, or is in an idle state or an inactive state before sending the first information, or is in an idle state or an inactive state before receiving the second information.

[0351] Optionally, the safety communication device 600 further includes:

[0352] A second sending module is configured to send second algorithm information to the network side, where the second algorithm information is used to indicate at least one of the following: an algorithm supported by the terminal and an algorithm used by the terminal;

[0353] The algorithm includes at least one of a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

[0354] Optionally, the first identification information indicates a terminal, or is generated by a terminal identifier, or indicates a group of terminals.

[0355] Optionally, the target wireless signaling is any one of broadcast signaling, paging signaling, wireless short message, and system message;

[0356] Alternatively, the target wireless signaling is sent via at least one of a PCH, an MCH, a BCH, and a DL-SCH;

[0357] Alternatively, the target wireless signaling is sent through at least one of PDCCH, PDSCH, PBCH and PMCH.

[0358] Optionally, the first execution module 603 is further configured to perform a random access procedure, a RACH procedure, or a PRACH procedure before performing the first operation.

[0359] 7 , an embodiment of the present application further provides a secure communication device. As shown in FIG7 , the secure communication device 700 includes:

[0360] The first sending module 701 is used to send target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security auxiliary information, and the first security auxiliary information includes first indication information, first algorithm information, first security parameter, and at least one of the second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

[0361] Optionally, the safety communication device 700 further includes:

[0362] A second receiving module, configured to receive third information or target data from a core network node;

[0363] The third information includes second identification information and second target information; the second target information includes at least one of the following:

[0364] First safety requirement or second safety requirement;

[0365] the first algorithm information;

[0366] Second instruction information;

[0367] the second security parameter;

[0368] Second safety auxiliary information;

[0369] Among them, the first security requirement includes at least one of a secret key and a secret stream, the second security requirement includes at least one of a secret key and a secret stream, the second security auxiliary information includes information in the terminal core network context, the second indication information is used to generate the first indication information, and the second identification information is used to indicate the terminal, or is related to the first identification information.

[0370] Optionally, the third information includes at least one of the following:

[0371] at least one second identification information and at least one second target information;

[0372] at least one pair of second identification information and second target information;

[0373] Wherein, the second target information and the second identification information are mapped one to one or more;

[0374] Alternatively, the second identification information and the second target information are a one-to-zero or one mapping;

[0375] Alternatively, there is a correspondence between K second identification information and all second target information, and K is less than or equal to the number of second identification information.

[0376] Optionally, the safety communication device 700 further includes:

[0377] The second execution module is configured to execute a second operation, where the second operation includes at least one of the following:

[0378] generating a first security element based on at least one of the second derived information and the security element derivation algorithm;

[0379] receiving first information from a terminal;

[0380] receiving, from a terminal, first information carrying a third security parameter;

[0381] sending second information to the terminal;

[0382] The second derived information includes at least one of the following: an access network-related key, an AS layer-related key, a key in a terminal context, a second security requirement, information in a terminal access network context, at least part of the first security assistance information, the first identification information, at least part of the second security assistance information, and the third security parameter;

[0383] The first information or part of the first information is securely processed based on the first security requirement, and / or the second information or part of the second information is securely protected based on the first security requirement.

[0384] Optionally, the second execution module is further configured to execute at least one of the following:

[0385] further performing security processing on the first information or a portion of the first information based on a first calculation parameter;

[0386] further performing security protection on the second information or a portion of the second information based on the first calculation parameter;

[0387] The first calculation parameter includes at least one of the following:

[0388] Information in the terminal access network context;

[0389] the first identification information;

[0390] at least part of the first safety assistance information;

[0391] at least part of the second safety assistance information;

[0392] the first indication information;

[0393] the first algorithm information;

[0394] The third security parameter.

[0395] Optionally, the security protection includes at least one of confidentiality protection, encryption, and integrity protection; the security processing includes at least one of decryption, confidentiality processing, integrity processing, and integrity verification.

[0396] Optionally, the target wireless signaling includes at least one of the following:

[0397] at least one first identification information and at least one first target information;

[0398] At least one pair of first identification information and first target information;

[0399] Wherein, the first target information and the first identification information are mapped one to one or more;

[0400] Alternatively, the first identification information and the first target information are a one-to-zero or one mapping;

[0401] Alternatively, there is a correspondence between N first identification information and all first target information, and N is less than or equal to the number of first identification information.

[0402] Optionally, the target wireless signaling is any one of broadcast signaling, paging signaling, wireless short message, and system message;

[0403] Alternatively, the target wireless signaling is sent via at least one of a PCH, an MCH, a BCH, and a DL-SCH;

[0404] Alternatively, the target wireless signaling is sent through at least one of PDCCH, PDSCH, PBCH and PMCH.

[0405] Optionally, the first identification information indicates a terminal, or is generated by a terminal identifier, or indicates a group of terminals.

[0406] Optionally, after the access network node sends the target wireless signaling, the access network node and the terminal perform a random access process, a RACH process, or a PRACH process.

[0407] The secure communication device in the embodiments of the present application can be an electronic device, such as an electronic device with an operating system, or a component in an electronic device, such as an integrated circuit or chip. The electronic device can be a terminal, or it can be other devices other than a terminal. For example, the terminal can include but is not limited to the types of terminal 11 listed above, and other devices can be servers, network attached storage (NAS), etc., which are not specifically limited in the embodiments of the present application.

[0408] The secure communication device provided in the embodiment of the present application can implement the various processes implemented in the method embodiments of Figures 2 to 4 and achieve the same technical effects. To avoid repetition, they will not be described here.

[0409] The embodiment of the present application further provides a secure communication system, which includes: an access network node and a terminal, wherein:

[0410] The access network node is configured to send target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security auxiliary information, the first security auxiliary information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0411] The terminal is configured to receive the target wireless signaling; if the first identification information is related to the terminal, generate a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm; and perform a first operation based on the first security requirement;

[0412] The first operation includes at least one of the following:

[0413] Sending first information to the access network node;

[0414] Sending first information carrying a third security parameter to the access network node;

[0415] receiving second information from the access network node;

[0416] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0417] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0418] The first security element includes at least one of a key and a secret stream.

[0419] Optionally, the secure communication system further includes a core network node, wherein:

[0420] The core network node is used to send third information or target data to the access network node, where the third information includes second identification information and second target information;

[0421] The access network node is further configured to obtain or generate the first security requirement based on the second target information, and send the target wireless signaling based on the third information;

[0422] The second target information includes at least one of the following: the first security requirement or the second security requirement, first algorithm information, second security parameters, and second security auxiliary information; the first algorithm information includes at least one of a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0423] The second security auxiliary information includes information in the terminal core network context, the second security requirement includes at least one of a secret key and a secret flow, the second identification information indicates the terminal, or is generated by the terminal identification, or indicates a group of terminals, or is related to the first identification information.

[0424] Optionally, the access network node is specifically configured to generate the first security requirement based on at least one of the second derived information and the security requirement derivation algorithm;

[0425] The second derived information includes at least one of the following: an access network-related key, an AS layer-related key, a key in the terminal context, at least part of the content in the first security auxiliary information, at least part of the content in the second security auxiliary information, first identification information, first algorithm information, information in the terminal access network context, and the third security parameter.

[0426] Optionally, the core network node is further configured to generate the first security requirement or the second security requirement based on at least one of third derived information and the security requirement derivation algorithm;

[0427] The third derived information includes at least one of the following: a core network related key, a NAS layer related key, a key in the terminal context, the second security parameter, and at least part of the second security auxiliary information.

[0428] As shown in Figure 8, an embodiment of the present application also provides a communication device 800, including a processor 801 and a memory 802, and the memory 802 stores a program or instruction that can be run on the processor 801. When the program or instruction is executed by the processor 801, the various steps of the above-mentioned secure communication method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0429] The present application also provides a terminal including a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is configured to execute a program or instruction to implement the steps of the method embodiment shown in FIG2 . This terminal embodiment corresponds to the aforementioned terminal-side method embodiment, and each implementation process and implementation method of the aforementioned method embodiment is applicable to this terminal embodiment and can achieve the same technical effects. Specifically, FIG9 is a schematic diagram of the hardware structure of a terminal implementing an embodiment of the present application.

[0430] The terminal 900 includes but is not limited to: a radio frequency unit 901, a network module 902, an audio output unit 903, an input unit 904, a sensor 905, a display unit 906, a user input unit 907, an interface unit 908, a memory 909 and at least some of the components of the processor 910.

[0431] Those skilled in the art will appreciate that the terminal 900 may also include a power supply (such as a battery) to power various components. The power supply may be logically connected to the processor 910 via a power management system, thereby enabling the power management system to manage charging, discharging, and power consumption. The terminal structure shown in FIG9 does not limit the terminal. The terminal may include more or fewer components than shown, or may combine certain components, or have different component arrangements, which will not be described in detail here.

[0432] It should be understood that in an embodiment of the present application, the input unit 904 may include a graphics processing unit (GPU) 9041 and a microphone 9042, and the graphics processor 9041 processes the image data of a static picture or video obtained by an image capture device (such as a camera) in a video capture mode or an image capture mode. The display unit 906 may include a display panel 9061, and the display panel 9061 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 907 includes a touch panel 9071 and at least one of other input devices 9072. The touch panel 9071 is also called a touch screen. The touch panel 9071 may include two parts: a touch detection device and a touch controller. Other input devices 9072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and an operating stick, which will not be repeated here.

[0433] In the embodiment of the present application, after receiving downlink data from a network-side device, the RF unit 901 may transmit the data to the processor 910 for processing. Furthermore, the RF unit 901 may send uplink data to the network-side device. Typically, the RF unit 901 includes, but is not limited to, an antenna, an amplifier, a transceiver, a coupler, a low-noise amplifier, a duplexer, and the like.

[0434] The memory 909 can be used to store software programs or instructions and various data. The memory 909 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, applications or instructions required for at least one function (such as a sound playback function, an image playback function, etc.). In addition, the memory 909 may include a volatile memory or a non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDRSDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous link dynamic random access memory (SLDRAM), and a direct memory bus random access memory (DRRAM). The memory 909 in the embodiment of the present application includes but is not limited to these and any other suitable types of memory.

[0435] Processor 910 may include one or more processing units. Optionally, processor 910 integrates an application processor and a modem processor. The application processor primarily handles operations related to the operating system, user interface, and application programs, while the modem processor primarily processes wireless communication signals, such as a baseband processor. It is understood that the modem processor may not be integrated into processor 910.

[0436] The radio frequency unit 901 is configured to receive target wireless signaling, where the target wireless signaling includes first identification information and first target information; the first target information includes first security assistance information, the first security assistance information includes at least one of first indication information, first algorithm information, a first security parameter, and a second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm;

[0437] The processor 910 is configured to generate a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm when the first identification information is related to the terminal;

[0438] The radio frequency unit 901 is further configured to perform a first operation based on the first security requirement;

[0439] The first operation includes at least one of the following:

[0440] Sending first information to the access network node;

[0441] Sending first information carrying a third security parameter to the access network node;

[0442] receiving second information from the access network node;

[0443] wherein the first information or part of the first information is securely protected based on the first security requirement, and / or the second information or part of the second information is securely processed based on the first security requirement;

[0444] The first derived information includes at least one of the following: a core network related key, a non-access stratum (NAS) layer related key, an access network related key, an access stratum (AS) layer related key, a key in a terminal context, at least part of the first security assistance information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter;

[0445] The first security element includes at least one of a key and a secret stream.

[0446] It can be understood that the implementation process of each implementation method mentioned in this embodiment can refer to the relevant description of the terminal side method embodiment and achieve the same or corresponding technical effects. To avoid repetition, it will not be repeated here.

[0447] The present application also provides a network-side device, including a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is configured to execute a program or instruction to implement the steps of the method embodiment shown in FIG4 . This network-side device embodiment corresponds to the aforementioned network-side device method embodiment, and each implementation process and implementation method of the aforementioned method embodiment are applicable to this network-side device embodiment and can achieve the same technical effects.

[0448] Specifically, an embodiment of the present application also provides a network-side device. As shown in Figure 10, the network-side device 1000 includes: an antenna 1001, a radio frequency device 1002, a baseband device 1003, a processor 1004, and a memory 1005. Antenna 1001 is connected to radio frequency device 1002. In the uplink direction, radio frequency device 1002 receives information via antenna 1001 and sends the received information to baseband device 1003 for processing. In the downlink direction, baseband device 1003 processes the information to be transmitted and sends it to radio frequency device 1002. Radio frequency device 1002 processes the received information and sends it through antenna 1001.

[0449] The method executed by the network-side device in the above embodiment may be implemented in the baseband device 1003 , which includes a baseband processor.

[0450] The baseband device 1003 may include, for example, at least one baseband board, on which multiple chips are arranged, as shown in Figure 10, one of which is, for example, a baseband processor, which is connected to the memory 1005 through a bus interface to call the program in the memory 1005 and execute the network side device operations shown in the above method embodiment.

[0451] The network side device may further include a network interface 1006, which is, for example, a Common Public Radio Interface (CPRI).

[0452] Specifically, the network side device 1000 of the embodiment of the present application also includes: instructions or programs stored in the memory 1005 and executable on the processor 1004. The processor 1004 calls the instructions or programs in the memory 1005 to execute the method of execution of each module shown in Figure 7 and achieve the same technical effect. To avoid repetition, it will not be described here.

[0453] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned secure communication method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0454] The processor is the processor in the terminal described in the above embodiment. The readable storage medium includes a computer-readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk. In some examples, the readable storage medium may be a non-transitory readable storage medium.

[0455] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned secure communication method embodiment and achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0456] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0457] An embodiment of the present application further provides a computer program / program product, which is stored in a storage medium. The computer program / program product is executed by at least one processor to implement the various processes of the above-mentioned secure communication method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0458] An embodiment of the present application also provides a wireless communication system, including: a terminal and a network-side device, wherein the terminal can be used to execute the steps of the terminal-side security communication method as described above, and the network-side device can be used to execute the steps of the access network node security communication method as described above.

[0459] It should be noted that, in this article, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in the opposite order according to the functions involved. For example, the described method may be performed in an order different from that described, and various steps may also be added, omitted or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0460] Through the description of the above embodiments, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of a computer software product plus a necessary general-purpose hardware platform, or of course, by hardware. The computer software product is stored in a storage medium (such as ROM, RAM, magnetic disk, optical disk, etc.) and includes a number of instructions for enabling a terminal or network-side device to execute the methods described in each embodiment of the present application.

[0461] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of this application, ordinary technicians in this field can also make many forms of implementation methods without departing from the purpose of this application and the scope of protection of the claims. These implementation methods are all within the protection of this application.

Claims

1. A secure communication method, wherein: include: The terminal receives target wireless signaling, where the target wireless signaling includes first identification information and first target information; The first target information includes first security auxiliary information, the first security auxiliary information includes at least one of first indication information, first algorithm information, first security parameter, and second security parameter, the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm; In a case where the first identification information is related to the terminal, the terminal generates a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm; The terminal performs a first operation based on the first security requirement; The first operation includes at least one of the following: Sending first information to an access network node; Sending first information carrying a third security parameter to an access network node; receiving second information from an access network node; The first information or part of the first information is protected based on the first security requirement, and / or the second information or part of the second information is processed based on the first security requirement; The first derived information includes at least one of the following: a core network related key, a non-access layer NAS layer related key, an access network related key, an access layer AS layer related key, a key in a terminal context, at least part of the first security auxiliary information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter; The first security element includes at least one of a key and a secret stream.

2. The method according to claim 1, wherein: The method comprises at least one of the following: The terminal also performs security protection on the first information or part of the first information based on the first calculation parameter; The terminal also performs security processing on the second information or part of the second information based on the first calculation parameter; Wherein, the first calculation parameter includes at least one of the following: Information in the terminal core network context; Information in the context of the terminal access network; the first identification information; at least part of the first safety assistance information; The third safety parameter.

3. The method according to claim 1 or 2, wherein: The information in the terminal core network context includes at least one of the following: Terminal identification information; The terminal's group identification information; Counting information of non-access stratum NAS signaling; Counting information of non-access layer NAS uplink signaling; Counting information of signaling from non-access layer NAS; Count information of protocol data packets transmitted through NAS; Count information of uplink protocol data packets transmitted through NAS; Count information of downlink protocol data packets transmitted through NAS; Or, the information in the terminal access network context includes at least one of the following: Terminal identification information; The terminal's group identification information; Access layer AS signaling counting information; Access layer AS uplink signaling counting information; Access layer AS downlink signaling counting information; Counting information of protocol data packets; Counting information of uplink protocol data packets; Downstream protocol data packet count information.

4. The method according to any one of claims 1 to 3, wherein: The security protection includes at least one of confidentiality protection, encryption, and integrity protection; the security processing includes at least one of decryption, confidentiality processing, integrity processing, and integrity verification.

5. The method according to any one of claims 1 to 4, wherein: The target wireless signaling includes at least one of the following: at least one first identification information and at least one first target information; At least one pair of first identification information and first target information; Wherein, the first target information and the first identification information are one-to-one or multiple mappings; Alternatively, the first identification information and the first target information are a one-to-zero or one mapping; Alternatively, there is a correspondence between N first identification information and all first target information, and N is less than or equal to the number of the first identification information included in the target wireless signaling.

6. The method according to any one of claims 1 to 5, wherein: The terminal is in an idle state or an inactive state, or is in an idle state or an inactive state before sending the first information, or is in an idle state or an inactive state before receiving the second information.

7. The method according to any one of claims 1 to 6, wherein: Before the terminal receives the target wireless signaling, the method further includes: The terminal sends second algorithm information to the network side, where the second algorithm information is used to indicate at least one of the following: an algorithm supported by the terminal and an algorithm used by the terminal; The algorithm includes at least one of a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

8. The method according to any one of claims 1 to 7, wherein: The first identification information indicates a terminal, or is generated by a terminal identifier, or indicates a group of terminals.

9. The method according to any one of claims 1 to 8, wherein: The target wireless signaling is any one of broadcast signaling, paging signaling, wireless short message, and system message; Alternatively, the target wireless signaling is sent via at least one of PCH, MCH, BCH and DL-SCH; Alternatively, the target wireless signaling is sent via at least one of PDCCH, PDSCH, PBCH and PMCH.

10. The method according to any one of claims 1 to 9, wherein: Before the terminal performs the first operation, the terminal performs a random access procedure, a RACH procedure, or a PRACH procedure.

11. A secure communication method, wherein: include: The access network node sends a target wireless signaling, where the target wireless signaling includes first identification information and first target information; The first target information includes first security auxiliary information, which includes at least one of first indication information, first algorithm information, first security parameter, and second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

12. The method according to claim 11, wherein: Before the access network node sends the target wireless signaling, the method further includes: The access network node receives third information or target data from the core network node; The third information includes second identification information and second target information; the second target information includes at least one of the following: First safety requirement or second safety requirement; the first algorithm information; Second instruction information; the second security parameter; Second safety auxiliary information; Among them, the first security requirement includes at least one of a secret key and a secret stream, the second security requirement includes at least one of a secret key and a secret stream, the second security auxiliary information includes information in the terminal core network context, the second indication information is used to generate the first indication information, and the second identification information is used to indicate the terminal, or is related to the first identification information.

13. The method according to claim 12, wherein: The third information includes at least one of the following: at least one second identification information and at least one second target information; at least one pair of second identification information and second target information; Wherein, the second target information and the second identification information are one-to-one or multiple mappings; Alternatively, the second identification information and the second target information are a one-to-zero or one mapping; Alternatively, there is a correspondence between K second identification information and all second target information, and K is less than or equal to the number of second identification information.

14. The method according to claim 12 or 13, wherein: The method further comprises: The access network node performs a second operation, where the second operation includes at least one of the following: generating a first security element based on at least one of the second derived information and the security element derivation algorithm; receiving first information from a terminal; receiving, from a terminal, first information carrying a third security parameter; Sending second information to the terminal; The second derived information includes at least one of the following: an access network related key, an AS layer related key, a key in a terminal context, a second security requirement, information in a terminal access network context, at least part of the first security auxiliary information, the first identification information, at least part of the second security auxiliary information, and the third security parameter; The first information or part of the first information is securely processed based on the first security requirement, and / or the second information or part of the second information is securely protected based on the first security requirement.

15. The method according to claim 14, wherein: The method comprises at least one of the following: The access network node also performs security processing on the first information or part of the first information based on the first calculation parameter; The access network node also performs security protection on the second information or part of the second information based on the first calculation parameter; Wherein, the first calculation parameter includes at least one of the following: Information in the context of the terminal access network; the first identification information; at least part of the first safety assistance information; at least part of the second safety auxiliary information; the first indication information; the first algorithm information; The third safety parameter.

16. The method according to claim 14 or 15, wherein: The security protection includes at least one of confidentiality protection, encryption, and integrity protection; the security processing includes at least one of decryption, confidentiality processing, integrity processing, and integrity verification.

17. The method according to any one of claims 11 to 16, wherein: The target wireless signaling includes at least one of the following: at least one first identification information and at least one first target information; At least one pair of first identification information and first target information; Wherein, the first target information and the first identification information are one-to-one or multiple mappings; Alternatively, the first identification information and the first target information are a one-to-zero or one mapping; Alternatively, there is a correspondence between N first identification information and all first target information, and N is less than or equal to the number of first identification information.

18. The method according to any one of claims 11 to 17, wherein: The target wireless signaling is any one of broadcast signaling, paging signaling, wireless short message, and system message; Alternatively, the target wireless signaling is sent via at least one of PCH, MCH, BCH and DL-SCH; Alternatively, the target wireless signaling is sent via at least one of PDCCH, PDSCH, PBCH and PMCH.

19. The method according to any one of claims 11 to 18, wherein: The first identification information indicates a terminal, or is generated by a terminal identifier, or indicates a group of terminals.

20. The method according to any one of claims 11 to 19, wherein: After the access network node sends the target wireless signaling, the access network node and the terminal perform a random access process, a RACH process, or a PRACH process.

21. A secure communication method, wherein: include: The access network node sends a target wireless signaling, where the target wireless signaling includes first identification information and first target information; The first target information includes first security auxiliary information, the first security auxiliary information includes at least one of first indication information, first algorithm information, first security parameter, and second security parameter, the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm; The terminal receives the target wireless signaling; In a case where the first identification information is related to the terminal, the terminal generates a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm; The terminal performs a first operation based on the first security requirement; The first operation includes at least one of the following: Sending first information to an access network node; Sending first information carrying a third security parameter to an access network node; receiving second information from an access network node; The first information or part of the first information is protected based on the first security requirement, and / or the second information or part of the second information is processed based on the first security requirement; The first derived information includes at least one of the following: a core network related key, a non-access layer NAS layer related key, an access network related key, an access layer AS layer related key, a key in a terminal context, at least part of the first security auxiliary information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter; The first security element includes at least one of a key and a secret stream.

22. The method according to claim 21, wherein: Before the access network node sends the target wireless signaling, the method further includes: The core network node sends third information or target data to the access network node, where the third information includes second identification information and second target information; The access network node learns or generates the first security requirement based on the second target information, and sends the target wireless signaling based on the third information; The second target information includes at least one of the following: the first security requirement or the second security requirement, the first algorithm information, the second security parameter, and the second security auxiliary information; the first algorithm information includes at least one of the security requirement derivation algorithm, the confidentiality algorithm, and the integrity algorithm; The second security auxiliary information includes information in the terminal core network context, the second security requirement includes at least one of a secret key and a secret stream, and the second identification information indicates a terminal, or is generated by a terminal identification, or indicates a group of terminals, or is related to the first identification information.

23. The method according to claim 22, wherein: The access network node generating the first security requirement based on the second target information includes: The access network node generates the first security requirement based on at least one of the second derived information and the security requirement derivation algorithm; Among them, the second derived information includes at least one of the following: access network related keys, AS layer related keys, keys in the terminal context, at least part of the content of the first security auxiliary information, at least part of the content of the second security auxiliary information, first identification information, first algorithm information, information in the terminal access network context, and the third security parameter.

24. The method according to claim 22, wherein: The method further comprises: The core network node generates the first security requirement or the second security requirement based on at least one of the third derived information and the security requirement derivation algorithm; The third derived information includes at least one of the following: a core network related key, a NAS layer related key, a key in a terminal context, the second security parameter, and at least part of the content of the second security auxiliary information.

25. A secure communication device, applied to a terminal, wherein: include: A first receiving module, configured to receive a target wireless signaling, wherein the target wireless signaling includes first identification information and first target information; The first target information includes first security auxiliary information, the first security auxiliary information includes at least one of first indication information, first algorithm information, first security parameter, and second security parameter, the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm; A requirement generating module, configured to generate, by the terminal, a first security requirement based on at least one of the first derived information and the security requirement derivation algorithm, when the first identification information is related to the terminal; A first execution module, configured to execute a first operation based on the first safety requirement; The first operation includes at least one of the following: Sending first information to an access network node; Sending first information carrying a third security parameter to an access network node; receiving second information from an access network node; The first information or part of the first information is protected based on the first security requirement, and / or the second information or part of the second information is processed based on the first security requirement; The first derived information includes at least one of the following: a core network related key, a non-access layer NAS layer related key, an access network related key, an access layer AS layer related key, a key in a terminal context, at least part of the first security auxiliary information, the first identification information, information in a terminal core network context, information in a terminal access network context, and the third security parameter; The first security element includes at least one of a key and a secret stream.

26. The device according to claim 25, wherein The first execution module is further configured to execute at least one of the following: further performing security protection on the first information or a portion of the first information based on the first calculation parameter; further performing security processing on the second information or a portion of the second information based on the first calculation parameter; Wherein, the first calculation parameter includes at least one of the following: Information in the terminal core network context; Information in the context of the terminal access network; the first identification information; at least part of the first safety assistance information; The third safety parameter.

27. A secure communication device, applied to an access network node, wherein: include: A first sending module, configured to send a target wireless signaling, wherein the target wireless signaling includes first identification information and first target information; The first target information includes first security auxiliary information, which includes at least one of first indication information, first algorithm information, first security parameter, and second security parameter, and the first algorithm information includes at least one of the following: a security requirement derivation algorithm, a confidentiality algorithm, and an integrity algorithm.

28. The device according to claim 27, wherein The safety communication device also includes: A second receiving module, used to receive third information or target data from a core network node; The third information includes second identification information and second target information; the second target information includes at least one of the following: First safety requirement or second safety requirement; the first algorithm information; Second instruction information; the second security parameter; Second safety auxiliary information; Among them, the first security requirement includes at least one of a secret key and a secret stream, the second security requirement includes at least one of a secret key and a secret stream, the second security auxiliary information includes information in the terminal core network context, the second indication information is used to generate the first indication information, and the second identification information is used to indicate the terminal, or is related to the first identification information.

29. A terminal, wherein: The method comprises a processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, the steps of the secure communication method according to any one of claims 1 to 10 are implemented.

30. A network side device, wherein: It comprises a processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, the steps of the secure communication method according to any one of claims 11 to 24 are implemented.

31. A secure communication system, wherein: include: Network side equipment and terminals, among which, The network side device is configured to execute the steps of the secure communication method as described in any one of claims 11 to 24, and the terminal is configured to execute the steps of the secure communication method as described in any one of claims 1 to 10.

32. A readable storage medium, wherein: The readable storage medium stores a program or instruction, and when the program or instruction is executed by the processor, the steps of the secure communication method according to any one of claims 1 to 24 are implemented.

Images