Information processing method and apparatus, and system

Abstract

Embodiments of the present application provide an information processing method and apparatus, and a system, applied to a first network element. The method comprises: encrypting first information to obtain a first ciphertext of the first information, the first information comprising a first keyword; and sending second information to a second network element, the second information comprising the first ciphertext of the first information, the type of the first keyword, and a public key identifier. The method can improve privacy protection intensity.

Description

Information processing method, device, and system

[0001] This application claims priority to the Chinese patent application with application number 202410111467.7 filed with the State Intellectual Property Office of China on January 25, 2024, and priority to the Chinese patent application with the invention name “Information Processing Method, Device and System”, all contents of which are incorporated by reference into this application. Technical Field

[0002] The present application relates to the field of communication technology, and in particular to an information processing method, device, and system. Background Art

[0003] Data is a key factor in the digital world. As communications converge with capabilities beyond connectivity, such as sensing and computing, massive amounts of data will be generated. These capabilities not only serve the network or device itself but also provide services outside the network. Consequently, they may be vulnerable to various security and privacy attacks from both internal and external entities.

[0004] How to fully explore and realize the value of data while meeting high security and privacy requirements, and how to improve privacy protection while realizing new network capabilities and new services are issues that need to be urgently addressed. Summary of the Invention

[0005] This application discloses an information processing method, device, and system that can achieve privacy protection.

[0006] In a first aspect, an embodiment of the present application provides an information processing method, applied to a first network element, the method comprising: the first network element encrypting first information to obtain first ciphertext of the first information, where the first information includes a first keyword. The first network element further sends second information to a second network element, where the second information includes the first ciphertext of the first information, a type of the first keyword, and a public key identifier.

[0007] In the embodiment of the present application, the second information sent by the first network element to the second network element includes the first ciphertext of the first information. The second network element cannot obtain the plaintext of the first information, thereby protecting privacy. In addition, the second information also includes the type and public key identifier of the first keyword, allowing the second network element to perform ciphertext retrieval based on the type and public key identifier of the first keyword and further perform ciphertext calculations. In other words, information or data can be exchanged and used while protecting privacy.

[0008] In one possible implementation, the type of the first keyword may be an identification type. The identification type may be, for example, a Subscription Permanent Identifier (SUPI) type. Based on the type of the first keyword in the second information, the second network element can retrieve the ciphertext corresponding to the type of the first keyword when performing a ciphertext search.

[0009] In a possible implementation, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station (or location area, etc.) identifier, and a serial number. The network identifier may be, for example, a Public Land Mobile Network (PLMN) identifier (ID), a core network (CN)-ID, or a Network Identifier (NID); the network element identifier may be, for example, an Access and Mobility Management Function (AMF) ID or a Radio Network Controller (RNC) ID; the user identifier may be, for example, a permanent identifier or a temporary identifier, such as a SUPI or a self-control identity (scID); the location area or base station identifier may be, for example, a Location Area Identification (LAI), a Routing Area Identification (RAI), a Cell Global Identification (CGI), or a Base Station Identify Code (BSIC); and the serial number may be, for example, an increasing sequence used to identify a key update.

[0010] The public key identifier in the second information can be used to determine the index information of the calculation key required for ciphertext retrieval. For example, a PLMN-level calculation key or a user-level calculation key can be selected.

[0011] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identification information, routing instruction information, and protection scheme identification information.

[0012] The data category may be used to determine a preset database. The home network identification information may be used in the ciphertext area to find a calculation key. The routing instruction information may be used to route network signaling carrying the first ciphertext to a network element capable of serving the user. The protection scheme identification information may indicate an encryption algorithm type.

[0013] In a possible implementation manner, at least one of the first network element and the second network element is a network element in a wireless network.

[0014] In a possible implementation, the first keyword may be globally unique identification information in the first information. Exemplarily, the first keyword is at least one of a user identifier and a device identifier.

[0015] In a possible implementation, the first information includes at least one of the following: user identity information, user contract information, perception information, authentication and / or key information.

[0016] The user identity information may be, for example, at least one of the following: (1) User identification. The user identification may be a permanent identification, such as a user permanent identification SUPI (International Mobile Subscription Identity (IMSI), Network Specific Identifier (NSI), Global Line Identifier (GLI), Global Cable Identifier (GCI), etc.), a Generic Public Subscription Identifier (GPSI) (Mobile Subscription International ISDN Number MSISDN, external identifier, etc.), a self-controlled identity identification scID, etc.; or, the user identification may also be a temporary identification, such as a Globally Unique Temporary UE Identity (GUTI), a Temporary Mobile Subscriber Identity (TMSI), a SUPI hash value, a random ID, etc. (2) Device identification. The device identifier can be a permanent identifier, such as a permanent equipment identifier (PEI) (International Mobile station Equipment Identity (IMEI), Mobile station Equipment Identity and Software Version number (IMEISV), IEEE Extended Unique Identifier (EUI-64), etc.), a media access control (MAC) address, etc.; or, the device identifier can also be a temporary identifier, such as an IP address (IPv4, IPv6) assigned to the device, etc. (3) User physiological characteristics. The user physiological characteristics can be, for example, heartbeat, breathing, voice characteristics, portrait, fingerprint, iris, etc. (4) User digital assets, etc. The user digital assets can be a digital avatar, such as a virtual portrait; or, the user digital assets can also be digital items in the virtual world.

[0017] The user contract information can be general service data, such as user type, access type, access area, quality of service (QoS), roaming restrictions, etc.; the user contract information can also be a service profile Service Profile, such as contract mobility management (MM) / session management (SM), slice service parameters, user-specific configuration and parameters (billing, etc.).

[0018] The perception information may be, for example, location information, such as precise information such as the E-UTRAN Cell Global Identifier (ECGI), Tracking Area Identity (TAI), longitude and latitude, or historical information such as signaling history and data access history. Of course, other perception data (such as characteristic information of the environment and / or objects in the environment, the distance (range), angle, or instantaneous linear velocity of an object) may also be included.

[0019] The authentication information may include, for example, an operator variant algorithm configuration field (OP), a key identifier (KI), a cryptographic key K4, an operator code (Opc), etc. The key information may include, for example, a user plane UP key.

[0020] In a possible implementation manner, the first network element further encrypts the first information based on an encryption key to obtain a first ciphertext of the first information.

[0021] In a possible implementation, the encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a public reference quantity. Exemplarily, the encryption key is a PLMN-level key.

[0022] In another possible implementation, the encryption key is determined based on at least one of a user key, a serving network name, a serial number, a user identifier, an algorithm identifier, and a public reference quantity. Exemplarily, the encryption key is a UE-level key.

[0023] In one possible implementation, the first network element initially encrypts the first information based on the encryption key to obtain an initial ciphertext of the first information. The first network element further performs blinding processing on the initial ciphertext of the first information to obtain a first ciphertext of the first information.

[0024] The blinding process can be understood as re-noising the initial ciphertext. Without the need for re-encryption, the blinding process can make the same plaintext information correspond to different ciphertexts, preventing the second network element from obtaining associated information by directly comparing different received ciphertexts.

[0025] In a possible implementation manner, the first network element receives third information from a third network element, where the third information includes at least one of the encryption key, the encryption parameter, and the decryption key.

[0026] In a possible implementation, the first network element is a network element in a home network HPLMN, and the second network element is a network element in a visited network VPLMN.

[0027] Alternatively, the first network element is a high-trust level network element in the home network that stores at least one of the important data such as subscription data, authentication parameters, permanent identity identification, user root key, etc., such as at least one of the AUSF, UDM, ARPF, SIDF and other network elements of the 5G network; the second network element is a low-trust level network element that provides at least one of the user plane functions, session management, storage, access management and other functions, such as at least one of the UPF, SMF, PCF, NRF, NSSF, AMF and other network elements of the 5G network.

[0028] Alternatively, the first network element is a management plane network element of a network element having a subscription data management function, and the second network element is a control plane network element, such as the management plane network element and control plane network element of the UDM of a 5G network.

[0029] Alternatively, at least one of the first network element and the second network element is a virtual network element, and the trust zone of the first information of the first network element does not include the second network element, that is, the first network element cannot send the plain text of the first information to the second network element.

[0030] Alternatively, at least one of the first network element and the second network element is a radio access network RAN ​​node, and the trust zone of the first information of the first network element does not include the second network element.

[0031] Alternatively, the first network element is a UE, and the second network element is a RAN node and / or NF.

[0032] Alternatively, the first network element is a third-party server or a network element in the application layer, and the second network element is a network element in a wireless network.

[0033] Alternatively, the first network element is a network element in a wireless network, and the second network element is a third-party server or a network element in an application layer.

[0034] Alternatively, the first network element is a UE, an application APP server, and the second network element is a RAN node and / or NF.

[0035] The first network element is a trusted domain for the first information, and the second network element is an untrusted domain for the first information. Due to specific high privacy protection requirements, the second network element in the untrusted domain cannot obtain the plaintext of the first information. Based on the information processing method provided in the embodiments of the present application, the second network element in the untrusted domain can perform processing based on the ciphertext of the first information, such as ciphertext retrieval or ciphertext calculation. This method allows for information exchange and use while protecting privacy.

[0036] In a second aspect, an embodiment of the present application provides an information processing method, applied to a second network element, the method comprising: the second network element receiving second information from a first network element, the second information comprising a first ciphertext of the first information, a type of a first keyword, and a public key identifier, wherein the first information includes the first keyword. The second network element further determines, based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier, association information between the second ciphertext and the first ciphertext of the first information.

[0037] In an embodiment of the present application, the second information received by the second network element includes the first ciphertext of the first information (the second network element cannot obtain the plaintext of the first information, and privacy can be protected. In addition, the second information also includes the type of the first keyword and the public key identifier. The second network element can perform ciphertext retrieval based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to determine the association information between the second ciphertext and the first ciphertext of the first information. Further, ciphertext calculation can be performed. By adopting this method, information or data can be interacted and used while protecting privacy.

[0038] This association information can be understood as indicating that the second ciphertext and the first ciphertext of the first information both contain the same keyword (the first keyword). This means that the first ciphertext and the second ciphertext are related. For example, if the keyword is a user's permanent identifier, the first ciphertext and the second ciphertext are both ciphertexts corresponding to the user's permanent identifier, meaning that both the first ciphertext and the second ciphertext are related to the user's permanent identifier.

[0039] In one possible implementation, the second network element searches a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain a second ciphertext, where the second ciphertext is a ciphertext corresponding to fourth information in the preset database, and the fourth information includes the first keyword. The second network element determines association information between the second ciphertext of the fourth information and the first ciphertext of the first information.

[0040] In a possible implementation, the first ciphertext of the first information is identical to (i.e., equal to) the second ciphertext of the fourth information. It is understandable that the first information and the fourth information have the same plaintext and the same ciphertext.

[0041] In another possible implementation, the first information and the fourth information are identical, but the first ciphertext of the first information is not equal to the second ciphertext of the fourth information. That is, the first ciphertext of the first information and the second ciphertext of the fourth information are generated using different encryption keys or different encryption parameters. In other words, the first information and the fourth information have the same plaintext but different ciphertexts.

[0042] In another possible implementation, the first information is not equal to the fourth information and only contains the same first keyword. In this example, the plaintexts and ciphertexts of the two are different.

[0043] Exemplarily, after determining the association information between the second ciphertext and the first ciphertext of the first information, the second network element may perform classified storage and other processing, etc. For example, after determining that the first ciphertext and the second ciphertext are both ciphertexts of UE1, the first ciphertext and the second ciphertext are both stored in the information corresponding to UE1.

[0044] In one possible implementation, the second network element determines the target key from one or more calculated keys based on the public key identifier. The second network element also searches a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain a second ciphertext.

[0045] In a possible implementation manner, the second network element receives fifth information from the fourth network element, where the fifth information includes at least one of the one or more calculation keys and calculation parameters.

[0046] In a possible implementation manner, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

[0047] In a possible implementation manner, at least one of the first network element and the second network element is a network element in a wireless network.

[0048] In a possible implementation, the first keyword is at least one of a user identifier and a device identifier.

[0049] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identification information, routing instruction information, and protection scheme identification information.

[0050] In a possible implementation, the first information includes at least one of the following: user identity information, user contract information, perception information, authentication and / or key information.

[0051] In a possible implementation, the first network element is a network element in a home network HPLMN, and the second network element is a network element in a visited network VPLMN.

[0052] Alternatively, the first network element is a high-trust level network element in the home network that stores at least one of the important data such as subscription data, authentication parameters, permanent identity identification, user root key, etc., such as at least one of the AUSF, UDM, ARPF, SIDF and other network elements of the 5G network; the second network element is a low-trust level network element that provides at least one of the user plane functions, session management, storage, access management and other functions, such as at least one of the UPF, SMF, PCF, NRF, NSSF, AMF and other network elements of the 5G network.

[0053] Alternatively, the first network element is a management plane network element of a network element having a subscription data management function, and the second network element is a control plane network element, such as the management plane network element and control plane network element of the UDM of a 5G network.

[0054] Alternatively, at least one of the first network element and the second network element is a virtual network element, and the trust zone of the first information of the first network element does not include the second network element, that is, the first network element cannot send the plain text of the first information to the second network element.

[0055] Alternatively, at least one of the first network element and the second network element is a radio access network RAN ​​node, and the trust zone of the first information of the first network element does not include the second network element.

[0056] Alternatively, the first network element is a UE, and the second network element is a RAN node and / or NF.

[0057] Alternatively, the first network element is a third-party server or a network element in the application layer, and the second network element is a network element in a wireless network.

[0058] Alternatively, the first network element is a network element in a wireless network, and the second network element is a third-party server or a network element in an application layer.

[0059] Alternatively, the first network element is a UE, an application APP server, and the second network element is a RAN node and / or NF.

[0060] On the third aspect, an embodiment of the present application provides an information processing device, which can be used for the first network element of the first aspect. The device can be the first network element, or a device in the first network element (for example, a chip, or a chip system, or a circuit), or a device that can be used in combination with the first network element, or a logical module or software that can realize all or part of the functions of the first network element.

[0061] In one possible implementation, the device may include a module or unit corresponding to each of the methods / operations / steps / actions described in the first aspect. The module or unit may be a hardware circuit, software, or a combination of hardware circuit and software.

[0062] In one possible implementation, the device includes: a processing module for encrypting first information to obtain a first ciphertext of the first information, wherein the first information includes a first keyword; and a communication module for sending second information to a second network element, wherein the second information includes the first ciphertext of the first information, the type of the first keyword, and a public key identifier.

[0063] In a possible implementation manner, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

[0064] In a possible implementation manner, at least one of the first network element and the second network element is a network element in a wireless network.

[0065] In a possible implementation, the first keyword is at least one of a user identifier and a device identifier.

[0066] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identification information, routing instruction information, and protection scheme identification information.

[0067] In a possible implementation, the first information includes at least one of the following: user identity information, user contract information, perception information, authentication and / or key information.

[0068] In a possible implementation, the processing module is further configured to:

[0069] The first information is encrypted based on an encryption key to obtain a first ciphertext of the first information.

[0070] In a possible implementation manner, the encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a public reference value.

[0071] In another possible implementation, the encryption key is determined based on at least one of a user key, a service network name, a serial number, a user identifier, an algorithm identifier, and a public reference quantity.

[0072] In a possible implementation, the processing module is further configured to:

[0073] Initially encrypting the first information based on the encryption key to obtain initial ciphertext of the first information;

[0074] Blinding is performed on the initial ciphertext of the first information to obtain a first ciphertext of the first information.

[0075] In a possible implementation, the communication module is further configured to:

[0076] Receive third information from a third network element, where the third information includes at least one of the encryption key, encryption parameter, and decryption key.

[0077] In a possible implementation manner, the device is a network element in a home network HPLMN, and the second network element is a network element in a visited network VPLMN.

[0078] Alternatively, the device is a high-trust level network element in the home network that stores at least one of the important data such as subscription data, authentication parameters, permanent identity identification, user root key, etc., such as at least one of the AUSF, UDM, ARPF, SIDF and other network elements of the 5G network; the second network element is a low-trust level network element that provides at least one of the user plane functions, session management, storage, access management and other functions, such as at least one of the UPF, SMF, PCF, NRF, NSSF, AMF and other network elements of the 5G network.

[0079] Alternatively, the device is a management plane network element of a network element with a subscription data management function, and the second network element is a control plane network element, such as the management plane network element and control plane network element of the UDM of a 5G network.

[0080] Alternatively, at least one of the device and the second network element is a virtual network element, and the trust zone of the first information of the device does not include the second network element, that is, the device cannot send a plain text of the first information to the second network element.

[0081] Alternatively, at least one of the device and the second network element is a radio access network (RAN) node, and the trust zone of the first information of the device does not include the second network element.

[0082] Alternatively, the device is a UE, and the second network element is a RAN node and / or NF.

[0083] Alternatively, the device is a third-party server or a network element in the application layer, and the second network element is a network element in a wireless network.

[0084] Alternatively, the device is a network element in a wireless network, and the second network element is a third-party server or a network element in an application layer.

[0085] Alternatively, the device is a UE, an application APP server, and the second network element is a RAN node and / or NF.

[0086] In a fourth aspect, an embodiment of the present application provides an information processing device, which can be used for the second network element of the second aspect. The device can be the second network element, or a device in the second network element (for example, a chip, or a chip system, or a circuit), or a device that can be used in combination with the second network element, or a logical module or software that can realize all or part of the functions of the second network element.

[0087] In one possible implementation, the device may include a module or unit corresponding to the method / operation / step / action described in the second aspect. The module or unit may be a hardware circuit, software, or a combination of hardware circuit and software.

[0088] In one possible implementation, the apparatus includes: a communication module, configured to receive second information from a first network element, the second information including a first ciphertext of the first information, a type of a first keyword, and a public key identifier, wherein the first information includes the first keyword;

[0089] A processing module is used to determine association information between a second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword and the public key identifier.

[0090] In a possible implementation, the processing module is configured to:

[0091] Searching a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain a second ciphertext, where the second ciphertext is a ciphertext corresponding to fourth information in the preset database, and the fourth information includes the first keyword;

[0092] Determine association information between the second ciphertext and the first ciphertext of the first information.

[0093] In a possible implementation, the processing module is further configured to: determine a target key from one or more calculated keys according to the public key identifier;

[0094] A search is performed in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain a second ciphertext.

[0095] In a possible implementation, the communication module is further configured to: receive fifth information from a fourth network element, where the fifth information includes at least one of the one or more calculation keys and calculation parameters.

[0096] In a possible implementation manner, the public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

[0097] In a possible implementation manner, at least one of the first network element and the second network element is a network element in a wireless network.

[0098] In a possible implementation, the first keyword is at least one of a user identifier and a device identifier.

[0099] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identification information, routing instruction information, and protection scheme identification information.

[0100] In a possible implementation, the first information includes at least one of the following: user identity information, user contract information, perception information, authentication and / or key information.

[0101] In a possible implementation manner, the first network element is a network element in a home network (HPLMN), and the device is a network element in a visited network (VPLMN).

[0102] Alternatively, the first network element is a high-trust network element in the home network that stores at least one of the important data such as subscription data, authentication parameters, permanent identity identification, user root key, etc., such as at least one of the AUSF, UDM, ARPF, SIDF and other network elements of the 5G network; the device is a low-trust network element that provides at least one of the user plane functions, session management, storage, access management and other functions, such as at least one of the UPF, SMF, PCF, NRF, NSSF, AMF and other network elements of the 5G network.

[0103] Alternatively, the first network element is a management plane network element of a network element having a subscription data management function, and the device is a control plane network element, such as the management plane network element and control plane network element of the UDM of a 5G network.

[0104] Alternatively, at least one of the first network element and the device is a virtual network element, and the trust zone of the first information of the first network element does not include the device, that is, the first network element cannot send a plain text of the first information to the device.

[0105] Alternatively, at least one of the first network element and the device is a radio access network (RAN) node, and the trust zone of the first information of the first network element does not include the device.

[0106] Alternatively, the first network element is a UE, and the device is a RAN node and / or NF.

[0107] Alternatively, the first network element is a third-party server or a network element in the application layer, and the device is a network element in a wireless network.

[0108] Alternatively, the first network element is a network element in a wireless network, and the device is a third-party server or a network element in an application layer.

[0109] Alternatively, the first network element is a UE, an application APP server, and the device is a RAN node and / or NF.

[0110] In the fifth aspect, an embodiment of the present application provides an information processing method, which is applied to a third network element. The method includes: receiving a first request, the first request is used to obtain an encryption key, and the first request also includes the privacy computing capability of the first network element; and sending third information, the third information including at least one of an encryption key, an encryption parameter, and a decryption key.

[0111] Exemplarily, the first network element may be a network element in a home network HPLMN, or the first network element may be a UE, etc.

[0112] In a possible implementation manner, the encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a public reference value.

[0113] In another possible implementation, the encryption key is determined based on at least one of a user key, a service network name, a serial number, a user identifier, an algorithm identifier, and a public reference quantity.

[0114] In one possible implementation, the method also includes: receiving a second request, the second request being used to obtain a calculation key, the second request also including the privacy computing capability of the second network element; and sending sixth information, the sixth information including at least one of a calculation key and a calculation parameter.

[0115] Exemplarily, the second network element may be a network element in a visited network VPLMN, or the second network element may be a RAN node, etc.

[0116] In one possible implementation, the method also includes: receiving a first request from a first network element, the first request being used to obtain an encryption key, the first request also including the privacy computing capability of the first network element; and sending the above-mentioned third information to the first network element, the third information including at least one of an encryption key, an encryption parameter, and a decryption key.

[0117] In one possible implementation, the method also includes: receiving a second request from a fourth network element, the second request being used to obtain a calculation key, the second request also including the privacy computing capability of the second network element; and sending sixth information, the sixth information including at least one of a calculation key and a calculation parameter.

[0118] Exemplarily, the fourth network element may be a privacy computing management unit (PCM). For example, the fourth network element is the PCM corresponding to the ciphertext area.

[0119] In the sixth aspect, an embodiment of the present application provides an information processing method, which is applied to a fourth network element. The method includes: receiving a third request, the third request is used to obtain a calculation key, and the third request also includes the privacy computing capability of the second network element; and sending a second request, the second request is used to obtain a calculation key, and the request also includes the privacy computing capability of the second network element; and receiving seventh information, the seventh information includes at least one of the calculation key and the calculation parameter; and sending fifth information, the fifth information includes at least one of the calculation key and the calculation parameter.

[0120] Exemplarily, the second network element may be a network element in a visited network VPLMN, or the second network element may be a RAN node, etc.

[0121] In one possible implementation, the method also includes: receiving a third request from a second network element, the third request being used to obtain a calculation key, the request also including the privacy computing capability of the second network element; and sending a second request to the third network element, the second request being used to obtain a calculation key, the second request also including the privacy computing capability of the second network element; and receiving seventh information from the third network element, the seventh information including at least one of a calculation key and a calculation parameter; and sending fifth information to the second network element, the fifth information including at least one of the calculation key and the calculation parameter.

[0122] Exemplarily, the third network element may be a privacy computing management unit PCM. For example, the third network element is the PCM corresponding to the plaintext area.

[0123] In the seventh aspect, an embodiment of the present application provides an information processing device, which can be used for the third network element of the fifth aspect. The device can be a third network element, or a device in the third network element (for example, a chip, or a chip system, or a circuit), or a device that can be used in combination with the third network element, or a logical module or software that can realize all or part of the functions of the third network element.

[0124] In one possible implementation, the device may include a module or unit corresponding to each of the methods / operations / steps / actions described in the fifth aspect. The module or unit may be a hardware circuit, software, or a combination of hardware circuit and software.

[0125] In one possible implementation, the device includes: a communication module for receiving a first request, the first request being used to obtain an encryption key, the first request also including the privacy computing capability of the first network element; and a communication module for sending third information, the third information including at least one of an encryption key, an encryption parameter, and a decryption key.

[0126] In a possible implementation manner, the encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a public reference value.

[0127] In another possible implementation, the encryption key is determined based on at least one of a user key, a service network name, a serial number, a user identifier, an algorithm identifier, and a public reference quantity.

[0128] In one possible implementation, the communication module is also used to receive a second request, where the second request is used to obtain a calculation key, and the second request also includes the privacy computing capability of the second network element; and the communication module is also used to send sixth information, where the sixth information includes at least one of a calculation key and a calculation parameter.

[0129] In one possible implementation, the communication module is also used to: receive a first request from a first network element, where the first request is used to obtain an encryption key, and the first request also includes the privacy computing capability of the first network element; and the communication module is also used to send the above-mentioned third information to the first network element, where the third information includes at least one of an encryption key, an encryption parameter, and a decryption key.

[0130] In one possible implementation, the communication module is also used to receive a second request from a fourth network element, where the second request is used to obtain a calculation key, and the second request also includes the privacy computing capability of the second network element; and the communication module is also used to send sixth information, where the sixth information includes at least one of a calculation key and a calculation parameter.

[0131] In the eighth aspect, an embodiment of the present application provides an information processing device, which can be used for the fourth network element of the sixth aspect. The device can be the fourth network element, or a device in the fourth network element (for example, a chip, or a chip system, or a circuit), or a device that can be used in combination with the fourth network element, or a logical module or software that can realize all or part of the functions of the fourth network element.

[0132] In one possible implementation, the device may include a module or unit corresponding to each of the methods / operations / steps / actions described in the sixth aspect. The module or unit may be a hardware circuit, software, or a combination of hardware circuit and software.

[0133] In one possible implementation, the device includes: a communication module for receiving a third request, the third request being used to obtain a calculation key, the third request also including the privacy computing capability of the second network element; and a communication module for sending a second request, the second request being used to obtain a calculation key, the request also including the privacy computing capability of the second network element; and a communication module for receiving seventh information, the seventh information including at least one of the calculation key and the calculation parameter; and a communication module for sending fifth information, the fifth information including at least one of the calculation key and the calculation parameter.

[0134] In one possible implementation, the communication module is further used to: receive a third request from a second network element, the third request being used to obtain a calculation key, the request also including the privacy computing capability of the second network element; and the communication module is further used to send a second request to the third network element, the second request being used to obtain a calculation key, the second request also including the privacy computing capability of the second network element; and the communication module is further used to receive seventh information from the third network element, the seventh information including at least one of a calculation key and a calculation parameter; and the communication module is further used to send fifth information to the second network element, the fifth information including at least one of the calculation key and the calculation parameter.

[0135] In a ninth aspect, the present application provides an information processing device, comprising a processor, for causing the device to execute a computer program (or computer executable instructions) stored in a memory, and / or through a logic circuit, the method provided in the first aspect and each possible implementation of the first aspect, or the method provided in the second aspect and any possible implementation of the second aspect, or the method provided in the fifth aspect and any possible implementation of the fifth aspect, or the method provided in the sixth aspect and any possible implementation of the sixth aspect.

[0136] In a possible implementation, the device further includes a memory.

[0137] In one possible implementation, the processor and the memory are integrated together.

[0138] In another possible implementation, the memory is located outside the device.

[0139] The apparatus further includes a communication interface for communicating with other devices, such as sending or receiving data and / or signals. Exemplarily, the communication interface may be a transceiver, circuit, bus, module, or other type of communication interface.

[0140] In a tenth aspect, the present application provides an information processing system, which includes an information processing device provided in any possible implementation of the third aspect, and an information processing device provided in any possible implementation of the fourth aspect.

[0141] In one possible implementation, the system further includes an information processing device provided in any possible implementation of the seventh aspect, and an information processing device provided in any possible implementation of the eighth aspect.

[0142] In the eleventh aspect, the present application provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the method provided in any possible implementation of the first aspect is implemented, or the method provided in any possible implementation of the second aspect is implemented, or the method provided in any possible implementation of the fifth aspect is implemented, or the method provided in any possible implementation of the sixth aspect is implemented.

[0143] In the twelfth aspect, the present application provides a computer program product comprising instructions, characterized in that when the computer program product is run on a computer, the method provided in any possible implementation of the first aspect is implemented, or the method provided in any possible implementation of the second aspect is implemented, or the method provided in any possible implementation of the fifth aspect is implemented, or the method provided in any possible implementation of the sixth aspect is implemented.

[0144] It can be understood that the device described in the third aspect, the device described in the fourth aspect, the device described in the seventh aspect, the device described in the eighth aspect, the device described in the ninth aspect, the system described in the tenth aspect, the computer-readable storage medium described in the eleventh aspect, or the computer program product described in the twelfth aspect are all used to execute any of the methods provided in the first aspect, any of the methods provided in the second aspect, any of the methods provided in the fifth aspect, or any of the methods provided in the sixth aspect. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding methods and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0145] The following is an introduction to the drawings used in the embodiments of this application.

[0146] FIG1 is a schematic diagram of a communication system provided in an embodiment of the present application;

[0147] FIG2 is a schematic diagram of a non-roaming architecture based on a service-oriented interface of a fifth-generation mobile communication network;

[0148] FIG3 is a flow chart of an information processing method provided in an embodiment of the present application;

[0149] Figures 4a to 4c are schematic diagrams of scenarios provided by embodiments of the present application;

[0150] Figures 4d to 4f are schematic diagrams of a ciphertext format provided in an embodiment of the present application;

[0151] FIG5a is a schematic diagram of a key derivation and distribution process provided in an embodiment of the present application;

[0152] FIG5 b is a schematic diagram of a key generation method provided in an embodiment of the present application;

[0153] FIG5c is a schematic diagram of another key derivation and distribution process provided in an embodiment of the present application;

[0154] FIG5 d is another schematic diagram of key generation provided in an embodiment of the present application;

[0155] FIG6 is a flow chart of an authentication and key agreement method provided in an embodiment of the present application;

[0156] FIG7 is a flow chart of another information processing method provided in an embodiment of the present application;

[0157] FIG8 is a flow chart of another information processing method provided in an embodiment of the present application;

[0158] FIG9 is a schematic structural diagram of an information processing device provided in an embodiment of the present application;

[0159] FIG10 is a schematic structural diagram of another information processing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0160] The following describes the embodiments of the present application in conjunction with the accompanying drawings. The terms used in the implementation methods of the embodiments of the present application are only used to explain the specific embodiments of the present application and are not intended to limit the present application.

[0161] Figure 1 shows a possible, non-limiting system diagram. As shown in Figure 1 , communication system 1000 includes a radio access network (RAN) 100 and a core network (CN) 200. Optionally, it also includes the Internet 300. RAN 100 includes at least one RAN node (e.g., 110a and 110b in Figure 1 , collectively referred to as 110) and at least one terminal (e.g., 120a-120j in Figure 1 , collectively referred to as 120). RAN 100 may also include other RAN nodes, such as wireless relay equipment and / or wireless backhaul equipment (not shown in Figure 1 ). Terminal 120 is wirelessly connected to RAN node 110. RAN node 110 is wirelessly or wiredly connected to core network 200. The core network equipment in core network 200 and RAN node 110 in RAN 100 may be different physical devices, or they may be the same physical device that integrates core network logical functions and radio access network logical functions.

[0162] The RAN 100 may be a cellular system related to the 3rd Generation Partnership Project (3GPP), such as a 4G or 5G mobile communication system, or an evolved system after 5G (such as a 6th generation (6G) mobile communication system). The RAN 100 may also be an open radio access network (O-RAN or ORAN), a cloud radio access network (CRAN), or a wireless local area network (Wi-Fi) system based on the IEEE 802.11 standard. The RAN 100 may also be a communication system that integrates two or more of the above systems.

[0163] RAN node 110, sometimes also referred to as access network equipment, RAN entity, or access node, constitutes part of the communication system and facilitates wireless access for terminals. Multiple RAN nodes 110 in communication system 1000 can be of the same type or different types. In some scenarios, the roles of RAN node 110 and terminal 120 are relative. For example, network element 120i in Figure 1 can be a helicopter or drone, which can be configured as a mobile base station. For terminal 120j accessing RAN 100 via network element 120i, network element 120i is a base station; however, for base station 110a, network element 120i is a terminal. RAN node 110 and terminal 120 are sometimes referred to as communication devices. For example, network elements 110a and 110b in Figure 1 can be understood as communication devices with base station functionality, and network elements 120a-120j can be understood as communication devices with terminal functionality.

[0164] In one possible scenario, a RAN node may be a base station, an evolved NodeB (eNodeB), an access point (AP), a transmission reception point (TRP), a next-generation NodeB (gNB), a next-generation base station in a 6G mobile communication system, a base station in a future mobile communication system, or an access node in a WiFi system. A RAN node may be a macro base station (such as 110a in Figure 1 ), a micro base station or an indoor station (such as 110b in Figure 1 ), a relay node or a donor node, or a wireless controller in a CRAN scenario. Alternatively, a RAN node may be a server, a wearable device, a vehicle, or an onboard device. For example, the access network device in vehicle-to-everything (V2X) technology may be a roadside unit (RSU).

[0165] In another possible scenario, multiple RAN nodes assist the terminal in achieving wireless access, and different RAN nodes respectively implement part of the functions of the base station. For example, the RAN node can be a centralized unit (CU), a distributed unit (DU), a CU-control plane (CP), a CU-user plane (UP), or a radio unit (RU). The CU and DU can be set separately, or they can be included in the same network element, such as a baseband unit (BBU). The RU can be included in a radio frequency device or radio frequency unit, such as a remote radio unit (RRU), an active antenna unit (AAU), or a remote radio head (RRH).

[0166] In different systems, CU (or CU-CP and CU-UP), DU or RU may also have different names, but those skilled in the art can understand their meanings. For example, in the ORAN system, CU may also be called O-CU (Open CU), DU may also be called O-DU, CU-CP may also be called O-CU-CP, CU-UP may also be called O-CU-UP, and RU may also be called O-RU. For the convenience of description, this application uses CU, CU-CP, CU-UP, DU and RU as examples for description. Any unit of CU (or CU-CP, CU-UP), DU and RU in this application can be implemented by a software module, a hardware module, or a combination of a software module and a hardware module.

[0167] Terminals can also be referred to as terminal devices, user equipment (UE), mobile stations, or mobile terminals. They can be widely used in various scenarios, such as device-to-device (D2D), vehicle-to-everything (V2X) communication, machine-type communication (MTC), the Internet of Things (IoT), virtual reality (VR) devices, augmented reality (AR) devices, industrial control, autonomous driving, telemedicine, smart grids, smart furniture, smart offices, smart wearables, smart transportation, and smart cities. Terminals can be mobile phones, tablets, computers with wireless transceiver capabilities, wearable devices, vehicles, drones, helicopters, airplanes, ships, robots, robotic arms, smart home appliances, light UEs, reduced capability UEs (REDCAP UEs), smart point-of-sale (POS), and customer-premises equipment (CPE). The terminal may also be a vehicle device, such as a complete vehicle device, a vehicle-mounted module, a vehicle-mounted chip, an on-board unit (OBU), or a telematics box (T-BOX), etc. The embodiments of the present application do not limit the device form of the terminal.

[0168] The communication between the access network device and the terminal device follows a certain protocol layer structure. The protocol layer may include a control plane protocol layer and a user plane protocol layer. The control plane protocol layer may include at least one of the following: a radio resource control (RRC) layer, a packet data convergence protocol (PDCP) layer, a radio link control (RLC) layer, a media access control (MAC) layer, or a physical (PHY) layer. The user plane protocol layer may include at least one of the following: a service data adaptation protocol (SDAP) layer, a PDCP layer, an RLC layer, a MAC layer, or a physical layer.

[0169] For the network elements in the ORAN system and the corresponding protocol layer functions that can be implemented, please refer to Table 1:

[0170] Table 1

[0171] Base stations and terminals can be fixed or mobile. They can be deployed on land, indoors or outdoors, handheld or vehicle-mounted; on water; or on aircraft, balloons, and satellites. The embodiments of this application do not limit the application scenarios of base stations and terminals.

[0172] The roles of base stations and terminals can be relative. For example, the helicopter or drone 120i in Figure 1 can be configured as a mobile base station. To terminals 120j accessing the wireless access network 100 via 120i, terminal 120i is a base station. However, to base station 110a, 120i is a terminal, meaning that communication between 110a and 120i occurs via a wireless air interface protocol. Of course, communication between 110a and 120i can also occur via a base station-to-base station interface protocol. In this case, 120i is also a base station relative to 110a. Therefore, base stations and terminals can be collectively referred to as communication devices. 110a and 110b in Figure 1 can be referred to as communication devices with base station functionality, while 120a-120j in Figure 1 can be referred to as communication devices with terminal functionality.

[0173] In the embodiments of the present application, a base station is also referred to as an access network device. The device used to implement the functions of the access network device can be the access network device; it can also be a device that can support the access network device in implementing the functions, such as a chip system, a hardware circuit, a software module, or a hardware circuit and a software module. The device can be installed in the access network device or used in conjunction with the access network device. In the embodiments of the present application, only the device used to implement the functions of the access network device is used as an example, and the embodiments of the present application are not limited to the solutions of the embodiments of the present application.

[0174] It can be understood that the present application can be applied between access network equipment and terminals.

[0175] It should be understood that the number and type of each device in the communication system shown in Figure 1 are for illustration only, and the present application is not limited to this. In actual applications, the communication system may also include more terminals, more access network devices, and other network elements, such as core network devices, and / or network elements for implementing artificial intelligence functions.

[0176] It is understandable that all or part of the functions implemented by one or more of the terminals, access network devices, core network devices, or network elements for implementing artificial intelligence functions can be virtualized, that is, implemented by one or more of the proprietary processors or general-purpose processors and the corresponding software modules. Among them, since the terminal and the access network device involve an interface for air interface transmission, the transceiver function of the interface can be implemented by hardware. Core network equipment, such as operation administration and maintenance (OAM) network elements, can be virtualized. Optionally, one or more functions of the virtualized terminal, access network device, core network device, or network elements for implementing artificial intelligence functions can be implemented by cloud devices, such as cloud devices in an over the top (OTT) system.

[0177] The following explains several terms involved in the embodiments of this application:

[0178] 1. Privacy Computing

[0179] For example, privacy computing technologies centered on homomorphic encryption, secure multi-party computing, and federated learning follow the principle of "data is available but invisible, data does not move but the model moves". They use cryptography and trusted hardware to achieve interactive computing without releasing sensitive data from the warehouse, ensuring that participants cannot directly obtain or infer the original data through intermediate information, thereby protecting data privacy and security while promoting the release of data value.

[0180] Privacy computing refers to a type of information technology that enables data analysis and computation while protecting the data from external disclosure. It encompasses the intersection and integration of numerous technical systems, including data science, cryptography, and artificial intelligence. The underlying technologies for privacy computing encompass cryptography, distributed machine learning, trusted hardware, and other techniques. Common approaches currently include homomorphic encryption (HE), secure multi-party computing (MPC), federated learning (FL), and trusted hardware. Secure multi-party computing and federated learning rely primarily on rich cryptographic primitives to construct computational or modeling protocols to address data privacy protection between participants. Trusted hardware primarily relies on hardware processor security domains to address trusted computing issues for multi-source data. Privacy computing appliances, through a combination of hardware and software, provide a range of solutions, including data privacy and security protection and hardware acceleration.

[0181] 2. Homomorphic Encryption (HE)

[0182] It aims to complete the computation and processing of ciphertext data without exposing the plaintext data, focusing on privacy-preserving computing. It can realize data value mining under the premise of providing privacy protection.

[0183] Homomorphic encryption (HE) is an encryption scheme that can perform operations directly on ciphertext. Plaintext data is homomorphically encrypted to produce ciphertext data. This ciphertext data is then processed to produce an output. This output is then decrypted homomorphically, and the result is the same as the output obtained by processing the unencrypted plaintext data using the same method.

[0184] 3. Encryption Key

[0185] Secret key encryption is an encryption method in which both the sender and receiver use the same or symmetric key to encrypt and decrypt plaintext.

[0186] 4. Subscription Permanent Identifier (SUPI)

[0187] The SUPI is globally unique and can be understood as the Subscriber Identity Module (SIM) card identifier. It is assigned to each user and is globally unique. It is issued by the Unified Data Management (UDM) / Unified Data Repository (UDR) function and is used within the 3GPP system.

[0188] SUPI types include the following: International Mobile Subscription Identity (IMSI), Network Specific Identifier (NSI), Global Cable Identifier (GCI), and Global Line Identifier (GLI). For example, IMSI is used for 3GPP access, and Network Access Identifier (NAI) is used for non-3GPP access.

[0189] For example, 0: IMSI. This is the number assigned to a mobile user that uniquely identifies the user internationally. 1: NSI, in the form of NAI. 2: GLI, in the form of NAI. 3: GCI, in the form of NAI.

[0190] 5. Permanent Equipment Identifier (PEI)

[0191] PEI types include the following:

[0192] 0: International Mobile Station Equipment Identity (IMEI). IMEI is a identifier that identifies a mobile device and is stored in the mobile device.

[0193] Type Allocation Code (TAC) + Serial Number (SNR) + Check Digit / Spare Digit (CD / SD).

[0194] 1: International mobile station equipment identity and software version number (IMEISV), which is an extended version of the international mobile station equipment identity IMEI.

[0195] 2: Media Access Control Address (MAC).

[0196] 3: IEEE Extended Unique Identifier (EUI-64), used for UEs that do not support any 3GPP access technology.

[0197] 6. Generic Public Subscription Identifier (GPSI)

[0198] The GPSI is required to address a 3GPP subscription in a different data network outside the 3GPP system. The 3GPP system stores the association between the GPSI and the SUPI in the subscription data.

[0199] GPSI types include:

[0200] 0: Mobile Subscriber ISDN number (MSISDN).

[0201] 1: External identifier.

[0202] The following specifically introduces the communication system applicable to this application using the non-roaming architecture based on the service-oriented interface of the fifth-generation mobile communication network shown in Figure 2 as an example. The communication system mainly includes an access and mobility management function (AMF), a session management function (SMF), a user plane function (UPF), a network exposure function (NEF), and an application function (AF). It may also include a policy control function (PCF) entity, a unified data repository function (UDR) entity (not shown in the figure), and a unified data management (UDM) function entity.

[0203] The functions of the functional entities in Figure 2 are as follows:

[0204] AMF: Mainly responsible for signaling processing, such as access control, mobility management, attach and detach, and gateway selection. When the AMF provides services for a session in the terminal, it provides control plane storage resources for the session to store the session identifier and the SMF entity identifier associated with the session identifier.

[0205] SMF: Mainly responsible for session management, specifically responsible for the selection of user plane functional entities, redirection of user plane functional entities, Internet Protocol (IP) address allocation, establishment, modification and release of bearers, and quality of service (QoS) control.

[0206] The UPF is responsible for forwarding and receiving user data from terminals. It receives user data from the data network and transmits it to the terminal via access network equipment. It also receives user data from the terminal via access network equipment and forwards it to the data network. The transmission resources and scheduling functions provided by the UPF entity to the terminal are managed and controlled by the SMF entity.

[0207] NEF: This primarily supports secure interaction between 3GPP networks and third-party applications. NEF securely exposes network capabilities and events to third-party applications to enhance or improve the quality of service. 3GPP networks can also securely retrieve relevant data from third-party applications to enhance intelligent network decision-making. This functional entity also supports recovering structured data from UDRs and storing structured data in UDRs.

[0208] AF: Mainly supports interaction with 3GPP networks to provide services, such as influencing data routing decisions, policy control functions, or providing some business services to the network side (these services can be third-party or non-third-party).

[0209] PCF: Mainly supports providing a unified policy framework to control network behavior, provides policy rules to the control layer network functions, and is responsible for obtaining user contract information related to policy decisions.

[0210] UDR: Mainly responsible for storing structured data, including contract data and policy data, externally exposed structured data, and application-related data.

[0211] UDM: Mainly used to manage user contract information.

[0212] It should be noted that the above functional entities are merely names and do not limit the entities themselves. For example, the session management function entity could be replaced by "session management function" or another name. Furthermore, the session management function entity could correspond to an entity that includes other functions in addition to the session management function. The user plane function entity could also be replaced by "user plane function" or another name, and could correspond to an entity that includes other functions in addition to the user plane function. This is explained here in a unified manner and will not be repeated below.

[0213] User equipment accesses the network through a RAN node or an access network (AN) node. RAN nodes are primarily wireless network devices in a 3GPP network, while ANs can be non-3GPP defined access network devices.

[0214] The relevant functions of the first network element, the third network element, etc. in the embodiment of the present application can be implemented by one device, or can be implemented by multiple devices together, or can be implemented by one or more functional modules within a device, and the embodiment of the present application does not make specific limitations on this. The relevant functions of the second network element, the fourth network element, etc. in the embodiment of the present application can be implemented by one device, or can be implemented by multiple devices together, or can be implemented by one or more functional modules within a device, and the embodiment of the present application does not make specific limitations on this. It is understandable that the above functions can be network elements in hardware devices, or software functions running on dedicated hardware, or a combination of hardware and software, or virtualization functions instantiated on a platform (for example, a cloud platform).

[0215] The following is an introduction to the functions of 5G network elements.

[0216] (I) As an example, the functions of security network elements (with root keys) are first introduced.

[0217] 1. UDM, which includes all the capabilities of the home subscriber server (HSS). It includes the following functions:

[0218] a. Contract data management.

[0219] b. User Service NF Registration Management: In 4G, the HSS stores the Host Name of the Mobility Management Entity (MME). This means that when a user registers with the network, the MME performs a Tracking Area Update (TAU) process, and the HSS stores the MME's information. The same is true in 5G. The UDM stores the information of the AMF and SMF, and informs the UDM which AMF or SMF is currently providing services to the UE.

[0220] c. Generate 3GPP Authentication and Key Agreement (AKA) authentication parameters: Generate a four-tuple or five-tuple authentication parameter according to the authentication type.

[0221] d. Access authorization based on contract data (e.g. roaming restrictions): prohibiting roaming or accessing the network in a certain area.

[0222] e. Ensure service / session continuity: This is generally guaranteed by UPF, but the scenario here refers to the 4G / 5G interoperability process. Suppose you move from a 5G coverage area to a 4G coverage area, how to select a converged gateway (gateway, GW) (UPF and GW-U fusion). Generally, AMF and MME transmit user context information to each other through the N26 interface when the UE moves, and select a converged GW based on the information of the converged network element carried in the context information. However, if the N26 interface does not exist, you can only address the converged UDM+HSS, obtain the converged GW information reported and saved by AMF or MME from the converged UDM+HSS, and then address the corresponding converged GW to ensure service continuity.

[0223] 2. Authentication Server Function (AUSF):

[0224] Integrated with UDM in the same product. This independent NF function is deployed in the home network in roaming scenarios (5G Phase 1).

[0225] The Extensible Authentication Protocol (EAP) authentication server (the authentication server is in the home domain) performs EAP authentication. 5G AKA authentication completes home domain confirmation. The authentication vector (RAND / AUTH / HXRES*) is calculated based on 5G HEAV and sent to SEAF. The anchor key is derived and sent to SEAF.

[0226] It supports unified authentication service functions, including 3GPP access authentication and non-3GPP access authentication. In non-3GPP access authentication, it will first access the non-3GPP interworking function (N3IWF), then the N3IWF will access the AMF and send a message to the AUSF for authentication.

[0227] 3. Security Anchor function (SEAF):

[0228] It is deployed together with the AMF. In roaming scenarios, it is deployed in the visited network. It derives the underlying non-access stratum (NAS) and access stratum (AS) keys based on the anchor key. 5G AKA performs authentication result comparison.

[0229] 4. Access and Mobility Management Function AMF:

[0230] AMF is a network element that can interact directly with the terminal. Other network elements need to interact with the terminal through AMF.

[0231] a. Registration management functions: connection management, reachability management, mobility management, access authentication, and access authorization. The AMF retains the MME's access authentication and access authorization functions, and the AMF performs authentication and authorization for the visited location.

[0232] b. Forwarding SM messages between UE and SMF: The interactive messages between the terminal and other network elements are encapsulated into messages sent to AMF, and AMF decapsulates and forwards them.

[0233] c. Forwarding SMS messages between the UE and the short message service function (SMSF).

[0234] (2) The functions of data network elements are introduced below.

[0235] Unified Data Repository (UDR)

[0236] The UDR can be deployed in every PLMN, and the PLMN is associated with the NF where the data is stored. The UDR can store application data for roaming users. NFs accessing the UDR through Nudr can add, delete, and update data according to their permissions.

[0237] (3) The functions of other types of network elements are introduced below.

[0238] 1. Session Management Function (SMF): This is the network element that interacts with the core network user plane. Interactions between other network elements and the user plane must be transmitted through the SMF. Its functions include:

[0239] a. Session management.

[0240] b. UE IP address allocation and management.

[0241] c. Select and control UPF, configure UPF traffic direction, and forward traffic to the appropriate destination network.

[0242] 2. User Plane Function (UPF): The user plane network element on the core network side. Its functions include:

[0243] a. Data plane anchor point: If the UE moves while performing business, the UPF remains unchanged to ensure business continuity.

[0244] b. The packet data unit (PDU) session point that connects to the data network.

[0245] 3. Policy Control Function (PCF): Its functions include:

[0246] a. Support unified policy management of network behavior.

[0247] b. Provide slice-based policies: Provide mobile, session, and user-related policies based on certain specific slices.

[0248] c. Provide session-related policies to SMF (available in 4G): Based on the session policies, perform some speed limits, gating (not allowing access to certain specific networks, or triggering some policies when the data usage reaches a certain limit), busy-time policies, idle-time policies, etc. on data packets.

[0249] d. Providing user-related policies to the UE: There is a UE Route Selection Policy (URSP). When the UE establishes a session, there are many session establishment conditions, such as the slice, the data network name (DNN), or other conditions. These conditions determine whether the UE's data packets are routed to an established PDU session, a new PDU session, or a third-party data session. The access network discovery and selection policy (ANDSP) is used when accessing non-3GPP networks.

[0250] 4. Network Capability Exposure Function (NEF): Its functions include:

[0251] a. Provide a secure way to expose 3GPP network functions and capabilities to the AF, such as game acceleration packages and externally triggered QoS control.

[0252] b. Provide a secure path for AF to provide information to 3GPP network functions.

[0253] The above describes the architecture of the embodiment of the present application. The following describes the method of the embodiment of the present application in detail.

[0254] FIG3 is a flow chart of an information processing method provided by an embodiment of the present application. Optionally, the method can be applied to the aforementioned communication system, such as the communication system shown in FIG1 . The information processing method shown in FIG3 can include steps 301-303. Steps 301-303 are as follows:

[0255] 301. A first network element encrypts first information to obtain a first ciphertext of the first information, where the first information includes a first keyword.

[0256] The first information includes a first keyword, which may be globally unique identification information in the first information.

[0257] Optionally, the first keyword is at least one of a user identifier and a device identifier. For an introduction to the user identifier and the device identifier, please refer to the following description and will not be repeated here.

[0258] For example, if the first information includes SUPI, the first keyword may include SUPI. If the first information includes PEI, the first keyword may include PEI.

[0259] In one possible implementation, the first network element may be a data holder. For example, the first network element may be a network element in a home public land mobile network (HPLMN), hereinafter referred to as a network element in the home network HPLMN, such as a core network element (NF), an authentication server function (AUSF), or a UDM. For an introduction to the first network element, please refer to the description of step 302 below and will not be repeated here.

[0260] The first information is introduced below. The first information may be sensitive information. In one possible implementation, the first information may include user identity information. The user identity information may be, for example, at least one of the following:

[0261] (1) User identification. The user identification can be a permanent identification, such as a user permanent identification SUPI (International Mobile Subscription Identity IMSI, Network Specific Identifier NSI, Global Line Identifier GLI, Global Cable Identifier GCI, etc.), a general public subscription identifier GPSI (Mobile Subscription International ISDN Number MSISDN, external identifier, etc.), a self-control identity (scID), etc.; or the user identification can also be a temporary identification, such as a Globally Unique Temporary UE Identity (GUTI), a Temporary Mobile Subscriber Identity (TMSI), a SUPI hash value, a random ID, etc.

[0262] (2) Equipment identification. The equipment identification can be a permanent identification, such as a permanent equipment identifier PEI (International Mobile Station Equipment Identity IMEI, IMEISV, IEEE Extended Unique Identifier EUI-64, etc.), a MAC address, etc.; or, the equipment identification can be a temporary identification, such as an IP address (Internet Protocol version 4 (IPv4), Internet Protocol version 6 (IPv6), etc.).

[0263] (3) User physiological characteristics. The user physiological characteristics may be, for example, heartbeat, breathing, voice characteristics, portrait, fingerprint, iris, etc.

[0264] (4) User digital assets, etc. The user digital assets can be digital avatars, such as virtual portraits; or the user digital assets can be digital items in the virtual world.

[0265] In another possible implementation, the first information may include user subscription information. The user subscription information may be general service data, such as user type, access type, access area, quality of service (QoS), roaming restrictions, etc. The user subscription information may also be a service profile, such as subscription mobility management (MM) / session management (SM), slice service parameters, user-specific configuration and parameters (billing, etc.).

[0266] In another possible implementation, the first information may include perception information. The perception information may be, for example, location information, such as an E-UTRAN Cell Global Identifier (ECGI), a Tracking Area Identity (TAI), longitude and latitude, or historical information, such as signaling history or data access history. Of course, other perception data (such as characteristic information of the environment and / or objects in the environment, the distance (range), angle, or instantaneous linear velocity of an object) may also be included, and this solution does not impose any restrictions on this.

[0267] In another possible implementation, the first information may include authentication and / or key information. The authentication information may include, for example, an operator root key (e.g., an operator variant algorithm configuration field (OP)), an authentication key (KI), a cryptographic key K4, an operator code (Opc), etc. The key information may include, for example, a root key K of a Universal Subscriber Identity Module (USIM), a key for confidentiality and integrity protection of a user plane (UP), a network element key (e.g., a key Kausf of a network element AUSF, a key Kseaf of a network element SEAF, a key Kamf of a network element AMF, a root key Kgnb of a base station), a key Kn3iwf of a non-3GPP access point, etc.

[0268] It is understandable that the above-mentioned first information may also include user identity information, user contract information, perception information, at least two of authentication and / or key information, etc., and this solution does not impose any restrictions on this.

[0269] The above example introduces the first information, which can also be other information such as device twin information, and this solution does not limit this.

[0270] The following describes how the first network element obtains the first ciphertext. In one possible implementation, the first network element encrypts the first information based on the encryption key to obtain the first ciphertext of the first information.

[0271] For example, the first network element encrypts the first information based on the encryption key and the encryption parameter to obtain a first ciphertext of the first information.

[0272] Among them, the encryption algorithm used by the first network element to encrypt the first information can be a homomorphic encryption algorithm, or a symmetric searchable encryption algorithm constructed by the Advanced Encryption Standard (AES) symmetric encryption algorithm, or a searchable encryption algorithm based on public key encryption constructed by an asymmetric encryption algorithm (Rivest-Shamir-Adleman, RSA), etc. This scheme does not impose any restrictions on this.

[0273] Exemplarily, the encryption key, encryption parameters, etc. corresponding to the homomorphic encryption algorithm may include at least one of the following:

[0274] Encryption parameters: ciphertext modulus q, gadget decomposition dimension d, etc. Among them, the homomorphic ciphertext belongs to the integer set Z d or polynomial ring Z d represents a set of integers of dimension d, Represents a polynomial ring with ciphertext modulus q and dimension d.

[0275] Among them, the encryption key K enc It can be expressed as: K enc =pk=(b,a), where b can be generated as follows: Where a is a common reference string (CRS) such as a random polynomial vector s=HMAC-SHA-256(Key,FC||P0||L0||P1||L1||P2||L2||P3||L3), where e represents random noise.

[0276] HMAC-SHA-256 refers to a specific key derivation algorithm that calculates a hash-based message authentication code (HMAC) using the SHA256 (Secure Hash Algorithm with 256 bits) hash function.

[0277] FC = a value that distinguishes different examples of the algorithm;

[0278] P0 = service network name; L0 = service network name length;

[0279] P1 = sequence number SQN; L1 = length of sequence number SQN.

[0280] P2 = encryption algorithm identifier; L2 = algorithm identifier length.

[0281] P3 = SUPI; L3 = SUPI length. If it is a UE-level key, this parameter is present; if it is a PLMN-level key, this parameter is not present.

[0282] Key=K AUSF (UE-level key); Key = Home Network Key (PLMN-level key).

[0283] For example, the encryption parameters may also include the homomorphic encryption algorithm identifier: additive monohomomorphic Paillier, multiplicative monohomomorphic ElGamal, multiplicative monohomomorphic RSA, quasi-homomorphic BGN 05, BGV (Brakerski, Gentry, Vaikuntanathan) (without bootstrapping: hierarchical homomorphism, with bootstrapping: full homomorphism), BFV (Brakerski, Fan, Vercauteren), CKKS (Cheon, Andrey Kim, Miran Kim, Yongsoo Song), TFHE (Fully Homomorphic Encryption scheme over the Torus, TFHE), and others.

[0284] For another example, the encryption parameters may further include at least one of the following:

[0285] Security level λ; decryption circuit depth p; ciphertext modulus Q; plaintext modulus t; upper limit B of noise distribution, or noise standard deviation; number of decimal places corresponding to calculation accuracy; ciphertext calculation vector dimension n.

[0286] Among them, the encryption party (such as UDM, AUSF) performs encryption on the plaintext message m i Encryption can be expressed as:

[0287] ct=(c0,c1)=(r·b+m i +e1,r·a+e2), randomly selected

[0288] ct is the plaintext message m i The ciphertext, is a uniformly distributed random matrix, N>n; a is a random vector related to key derivation, The positive integer n is the vector dimension, q is the ciphertext modulus, and the set Noise e∈χ N , the noise distribution χ = χ (n) is a distribution set on Z, and a discrete Gaussian distribution can be selected.

[0289] in represents a set of integers, Indicates the value range is The subscript q is the ciphertext modulus, that is, all The numbers above need to be modulo q. The superscript n indicates the vector dimension. The superscript N×n indicates the matrix dimension.

[0290] In a possible implementation manner, the encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a public reference value.

[0291] Exemplarily, the first network element receives third information from a third network element, the third information including the encryption key. The third network element can manage the key, including key derivation, distribution, use, update, storage, and destruction.

[0292] For example, the third network element is a privacy computing management unit (PCM). Exemplarily, the third network element is a PCM corresponding to the plaintext area.

[0293] For example, PCM sets encryption parameters: the ciphertext modulus is q, the dimension of the small number decomposition gadget is d, etc. d represents a set of integers of dimension d, Represents a polynomial ring with ciphertext modulus q and dimension d.

[0294] PCM generates common reference quantity CRS: random polynomial vector gadget decomposition vector g∈Z d .

[0295] Among them, the encryption key K enc It can be expressed as: Kenc =pk=(b,a), where b can be generated as follows: e represents random noise.

[0296] Based on the encryption key, the first network element may encrypt the first information.

[0297] In a possible implementation, the first network element initially encrypts the first information based on the encryption key to obtain an initial ciphertext of the first information. The initial ciphertext can be understood as ciphertext obtained by encrypting the first information based on the encryption key.

[0298] Furthermore, the first network element also performs blinding processing on the initial ciphertext of the first information to obtain a first ciphertext of the first information.

[0299] The blinding process can be understood as re-noising the initial ciphertext.

[0300] For example, the home network sends the homomorphic ciphertext of the plaintext "0" to the visited network in advance. The home network or the visited network adds or subtracts the homomorphic ciphertext HE(m1) of the plaintext m1 from the homomorphic ciphertext of "0" to obtain the blinded homomorphic ciphertext HE′(m1).

[0301] This blinding process can be expressed as: HE(m1) + HE(0) = HE′(m1). It can be understood that HE(m1) represents the ciphertext obtained by initially encrypting the plaintext information m1, i.e., the initial ciphertext mentioned above. HE′(m1) represents the ciphertext obtained by blinding the homomorphic ciphertext HE(m1), i.e., the first ciphertext mentioned above.

[0302] It can be understood that the plaintext corresponding to the homomorphic ciphertext HE(m1) and the homomorphic ciphertext HE′(m1) is m1, and the two homomorphic ciphertexts only differ in the noise.

[0303] In the absence of re-encryption, the blinding process can make the ciphertexts corresponding to the same plaintext information different, thereby preventing the second network element from obtaining associated information by directly comparing different received ciphertexts.

[0304] In one possible implementation, the first network element further decrypts the received ciphertext based on the decryption key to obtain the plaintext corresponding to the ciphertext. In this way, the first network element can directly process the plaintext, which is more efficient.

[0305] Exemplarily, the first network element obtains the decryption key from a third network element. For example, the third network element is a privacy computing management unit PCM.

[0306] The decryption key derivation may include the following parameters: s=HMAC-SHA-256(Key,FC||P0||L0||P1||L1||P2||L2||P3||L3);

[0307] The decryption key can be generated as above For an introduction to the parameter s, please refer to the aforementioned description of the encryption key, which will not be repeated here.

[0308] For example, the decryption It can be expressed as: Among them, m is the plaintext information and e is the random noise.

[0309] Based on the above decryption, the first network element can obtain the plain text of the first information through decryption, and the first network element can directly use the plain text to perform calculation processing.

[0310] 302. The first network element sends second information to the second network element, where the second information includes the first ciphertext of the first information, the type of the first keyword, and the public key identifier. Correspondingly, the second network element receives the second information.

[0311] In one possible implementation, the second network element may be a data computing party. In one possible implementation, at least one of the first network element and the second network element is a network element in a wireless network.

[0312] For example, a wireless network is deployed as small cells, each with tens of thousands of terminals wirelessly accessing its service cell. Smart cars, smartphones, VR / AR devices, and other terminals equipped with onboard units (OBUs) may all have privacy-preserving computing capabilities. When privacy protection is required, the generated data is encrypted and then transmitted to other terminal nodes, roadside stations (RSUs), base stations, core network elements (NFs), cloud providers, and other nodes within the communication network for encrypted privacy computation. The ciphertext data is then transmitted to the data user for decryption and subsequent use.

[0313] In one possible implementation, the first network element may be a network element in a home network HPLMN within a trusted area of ​​the first information, and the second network element may be a network element in a visited public land mobile network (VPLMN) within a non-trusted area of ​​the first information, referred to as a network element in the visited network VPLMN.

[0314] It can be understood that the trust area or privacy domain in this solution is a region where network elements can obtain the plain text of the first information, and the untrust area is a region where network elements can only obtain the cipher text of the first information.

[0315] In a possible implementation, the first network element is a network element of a high trust level, and the second network element is a network element of a low trust level.

[0316] Exemplarily, the first network element is a high-trust level network element in the home network that stores one or more of the important data such as subscription data, authentication parameters, permanent identity, user root key, etc. For example, the first network element is at least one network element such as AUSF, UDM, Authentication Credential Repository and Processing Function (ARPF), Subscription Identifier De-concealing Function (SIDF) and other network elements of the 5G network.

[0317] Exemplarily, the second network element is a low-trust level network element that provides one or more of the functions of user plane function, session management, storage, access management, etc. For example, the second network element is at least one network element such as UPF, SMF, PCF, Network Repository Function (NRF), Network Slice Selection Function (NSSF), AMF, etc. of a 5G network.

[0318] In a possible implementation, the first network element is a management plane network element, and the second network element is a control plane network element.

[0319] Exemplarily, the first network element is a management plane network element of a network element having a subscription data management function, and the second network element is a control plane network element, such as a management plane network element and a control plane network element of a UDM of a 5G network.

[0320] In one possible implementation, at least one of the first network element and the second network element is a virtual network element, and the first network element's trusted zone does not include the second network element. In other words, the first network element cannot send the plaintext of the first information to the second network element. For example, the first network element may be a virtual network element (VNF1) within the trusted zone of the first information, and the second network element may be a virtual network element (VNF2) within the untrusted zone of the first information.

[0321] In a possible implementation, at least one of the first network element and the second network element is a radio access network RAN ​​node, and the trust zone of the first network element does not include the second network element.

[0322] For example, the first network element may be a RAN node within the trusted zone of the first information, and the second network element may be a RAN node within the untrusted zone of the first information. As shown in Figure 4a, nodes RAN1 and RAN3 are within the trusted zone of the first information, while node RAN2 is within the untrusted zone of the first information. Exemplarily, a federated learning task is performed among nodes RAN1, RAN2, and RAN3. Nodes RAN1 and RAN3 perform training locally, encrypt the model gradients, and transmit them to node RAN2. After receiving the gradient ciphertext, node RAN2 performs federated learning aggregation operations based on the received ciphertext, such as executing the FedAvg aggregation algorithm. Node RAN2 then distributes the updated model parameters to nodes RAN1 and RAN3.

[0323] In a possible implementation, the first network element is a user equipment UE or an application APP server, and the second network element is a RAN node or a core network element.

[0324] Exemplarily, the first network element may be UE1 or UE2 within the trusted zone of the first information, and the second network element may be a RAN node and / or a core network element (NF) within the untrusted zone of the first information. As shown in Figure 4b, UE1 and UE2 encrypt sensitive data and transmit it to the RAN node and / or core network element (NF). After receiving the ciphertext, the RAN node and / or core network element (NF) performs privacy-preserving computations. The privacy-preserving computation management unit (PCM) sends encryption keys, decryption keys, encryption parameters, and the like to UE1 and UE2. The PCM also sends computation keys and computation parameters to the RAN node and / or NF.

[0325] For another example, the first network element may be a UE or an application (APP) server within the trusted zone of the first information; the second network element may be a network element in a wireless network within the untrusted zone of the first information, such as a RAN node and / or NF. As shown in Figure 4c, the UE and APP server encrypt the sensitive data and transmit it to the RAN node and / or core network element (NF). After receiving the ciphertext, the RAN node and / or core network element (NF) performs privacy-preserving computations. The privacy-preserving computation management unit (PCM) sends encryption keys, decryption keys, encryption parameters, and other information to the UE and APP server. The PCM also sends computation keys, computation parameters, and other information to the RAN node and / or NF.

[0326] In a possible implementation, the first network element may be a third-party server or a network element in the application layer, and the second network element may be a network element in a wireless network.

[0327] In a possible implementation, the first network element may be a network element in a wireless network, and the second network element may be a third-party server or a network element in an application layer.

[0328] The above description uses the first network element and the second network element as examples, and they may also be other network elements, and this solution does not limit this.

[0329] The second information is introduced below. The second information includes the first ciphertext of the first information, the type of the first keyword and the public key identifier.

[0330] The type of the first keyword may be an identification type. Optionally, the type of the first keyword may be represented in the following manner: [type type, subtype subtype].

[0331] Among them, type is the first-level classification of the search keyword. For example, type can take the value 0: SUPI; 1: PEI; 2: GPSI; etc. subtype is the second-level classification of the search keyword. For example, if type is the SUPI type, then subtype refers to the subtype of SUPI, which can be selected as follows: 0: IMSI; 1: Network Specific Identifier (NSI); 2: Global Line Identifier (GLI); 3: Global Cable Identifier (GCI).

[0332] The type of the first keyword in the second information is used for the second network element to query the ciphertext corresponding to the type of the first keyword when performing ciphertext retrieval.

[0333] The public key identifier may include at least one of a network identifier, a network element identifier, a user identifier, a base station (or location area, etc.) identifier, and a serial number. The network identifier may be, for example, a PLMN ID, a CN-ID, or a network identifier (NID); the network element identifier may be, for example, an AMF ID or a radio network controller (RNC) ID; the user identifier may be, for example, a permanent identifier or a temporary identifier such as a SUPI or scID as described in step 301; the location area or base station identifier may be, for example, a location area identifier (LAI), a routing area identifier (RAI), a cell global identifier (CGI), or a base station identification code (BSIC); and the serial number may be, for example, an increasing sequence used to identify a key update.

[0334] Based on the public key identifier in the second information, index information of the calculation key required for ciphertext retrieval can be determined, for example, a PLMN-level calculation key or a user-level calculation key can be selected.

[0335] In a possible implementation manner, the second information further includes at least one of the following: data category, home network identification information, routing instruction information, and protection scheme identification information.

[0336] The data category may include at least one of the following: identity category, contract category, location category, authentication / key category, and perception category.

[0337] The home network identification information can be used to find a calculation key in the ciphertext area.

[0338] The routing instruction information is allocated by the home network operator and is used to route network signaling or data carrying the first ciphertext to a network element instance that can serve the user.

[0339] The protection scheme identification information can indicate the encryption algorithm type and can be determined during cryptographic algorithm and key negotiation. For example, 0: null scheme; 1: additive monomorphic Paillier; 2: multiplicative monomorphic ElGamal; 3: fully homomorphic encryption BGV; 4: fully homomorphic encryption BFV; 5: fully homomorphic encryption CKKS; 6: fully homomorphic encryption TFHE.

[0340] Exemplarily, as shown in FIG4d , the second information includes a first keyword type (keyword Type 1), a public key ID, and a first ciphertext value of the first information. The second information also includes a second keyword type (keyword Type 2), a Home Network Identifier (Home Network Identifier), a Routing Indicator (Routing Indicator), and a Protection Scheme Identifier (Protection Scheme Identifier).

[0341] The second keyword type Keyword Type2 can be a data category. For example, the bit value corresponding to Keyword Type2 is 0: identity category; 1: contract category; 2: location category; 3: authentication / key category; 4: perception and other categories.

[0342] The type of the second keyword is used to determine the preset database. Exemplarily, one keyword type corresponds to at least one preset database. Optionally, different types correspond to different preset databases. For example, when the second keyword type is 1, the second network element performs a ciphertext search in a contract-related database. For example, when the second keyword type is 4, the second network element performs a ciphertext search in a perception-related database.

[0343] Optionally, the second information may further include a MAC tag value. The MAC tag value may be used for integrity protection.

[0344] Exemplarily, as shown in Figures 4e and 4f, a SUPI ciphertext format (SUCF) and a PEI ciphertext format (ECF) are provided in embodiments of the present application. Exemplarily, the SUPI ciphertext format includes the type of the first keyword (such as SUPI), home network identification information, routing indication information (optional), a public key identifier, and the first ciphertext value of the SUPI. The PEI ciphertext format includes the type of the first keyword (such as PEI), home network identification information, routing indication information (optional), a public key identifier, and the first ciphertext value of the PEI.

[0345] The above example introduces the second information, which may also include other information, etc., and this solution does not limit this.

[0346] 303. The second network element determines association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

[0347] The associated information can be understood as meaning that the second ciphertext and the first ciphertext of the first information both contain the same keyword (the first keyword). That is, there is a correlation between the first ciphertext and the second ciphertext. For example, if the keyword is a user's permanent identifier, the first ciphertext and the second ciphertext are both ciphertexts corresponding to the user's permanent identifier, meaning that both the first ciphertext and the second ciphertext are related to the user's permanent identifier.

[0348] The first ciphertext includes the ciphertext of the first keyword. The first ciphertext may also include the ciphertext of other information in the first information except the first keyword.

[0349] In a possible implementation manner, the second network element searches a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain the second ciphertext.

[0350] Exemplarily, the first information corresponding to the first ciphertext includes not only the first keyword but also perceptual information. Furthermore, the first keyword is arranged before the perceptual information in the first information. In one possible implementation, the second network element intercepts the ciphertext of the first keyword from the front of the first ciphertext. In another possible implementation, after the user successfully authenticates access to the network, the second network element obtains the ciphertext of the first keyword sent by the first network element.

[0351] Exemplarily, the preset database stores at least one ciphertext. The second ciphertext is the ciphertext corresponding to the fourth information in the preset database, and the fourth information includes the first keyword. The second network element can perform a secret state search in the preset database to obtain the second ciphertext.

[0352] The following introduces the secret state search. In one possible implementation, searching in a preset database specifically includes searching in the preset database based on a secret state search function.

[0353] For example, the secret state retrieval function is ciphertext subtraction. If the difference between two ciphertexts equals the homomorphic ciphertext "0", the retrieval is considered successful. HE(m1)-HE(m2)=HE(0).

[0354] For another example, the secret state retrieval function is ciphertext division. If the division of two ciphertexts equals the homomorphic ciphertext "1", the retrieval is considered successful. HE(m1) / HE(m2)=HE(1).

[0355] The second network element can retrieve the ciphertext it needs (such as the second ciphertext) based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier, and further determine the association information between the retrieved ciphertext and the first ciphertext of the first information.

[0356] In one possible implementation, the second network element determines a target key from one or more computation keys based on a public key identifier. The public key identifier can be used to determine index information of the computation key required for ciphertext retrieval. For example, a PLMN-level computation key or a user-level computation key can be selected. The second network element determines the target key from the one or more computation keys based on the index information of the computation key determined by the public key identifier.

[0357] Furthermore, the second network element searches a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain the second ciphertext. Exemplarily, the second network element first selects a preset database based on the type of the first keyword, and then performs a secret-state search based on the ciphertext of the first keyword, the target key, and the ciphertexts in the preset database. The secret-state search function used in the secret-state search can be the aforementioned ciphertext subtraction or ciphertext division, for example.

[0358] For example, the calculation key (target key) can be used to perform ciphertext calculations (such as multiplication or other operations, logical AND gates, etc.), and can also be used to control noise growth or ciphertext size expansion. Based on these multiplication or other operations, logical AND gates, and other calculations, the above-mentioned secret state retrieval function (i.e., ciphertext subtraction or ciphertext division, etc.) can be constructed.

[0359] In one possible implementation, the second network element may further calculate the third ciphertext based on the calculation key to obtain a fourth ciphertext. The second network element then sends the fourth ciphertext to a fifth network element. The fifth network element may decrypt the fourth ciphertext based on the decryption key.

[0360] In a possible implementation, the third ciphertext may be the first ciphertext mentioned above.

[0361] In a possible implementation, the fifth network element may be a network element in a plain text area. For example, the preset network element may be the first network element.

[0362] Optionally, the second network element receives fifth information from a fourth network element, the fifth information including the one or more computation keys. The fourth network element may be a privacy computing management unit (PCM). For an introduction to the fourth network element, please refer to the aforementioned description of the third network element and will not be repeated here. Exemplarily, the fourth network element is the PCM corresponding to the ciphertext area.

[0363] It is understandable that the fifth information may also include one or more calculation parameters. The calculation parameters and calculation keys are listed below:

[0364] For homomorphic encryption algorithms, homomorphic computation keys, also known as homomorphic evaluation keys, are used to perform homomorphic computations (usually homomorphic products or other equivalent operations, such as logical AND gates) during homomorphic evaluation, and to control noise growth or ciphertext size expansion. Homomorphic computation keys generally include bootstrap keys and key switching keys. For example, when the homomorphic encryption algorithm BFV (Brakerski, Fan, Vercauteren) performs homomorphic products, because each ciphertext has two ciphertext components, the output result of the homomorphic product of the two ciphertexts will have three ciphertext components, causing the ciphertext size to expand, and an exponential term appears in the key corresponding to the output ciphertext. The homomorphic computation key is needed to adjust the ciphertext to obtain the correct dimension as the final output result of the homomorphic product.

[0365] The homomorphic encryption algorithm TFHE differs from other methods in that it proposes a special bootstrapping method that is very fast and can homomorphically evaluate functions while reducing noise. For example, TFHE can perform operations such as AND on ciphertext during the gate bootstrapping process, which requires a bootstrapping key and a key conversion key.

[0366] Taking the fully homomorphic encryption algorithm TFHE as an example, the homomorphic computing parameters include: security level λ, three levels of LWE dimensions, ciphertext modulus Q, the basis for gadget decomposition during outer product operations in function bootstrapping, the length of the gadget decomposition during outer product operations, the basis for gadget decomposition during key switching, and the length of the gadget decomposition during key switching.

[0367] Homomorphic computation key eval For example, the BSK bootstrap key and the KSK key conversion key are used for bootstrapping noise reduction in homomorphic computing. Key conversion keys are used to address situations where key conversion is required during homomorphic computing, such as eliminating key cross-terms after homomorphic multiplication or switching between different levels of keys during circuit bootstrapping.

[0368] Homomorphic calculation key size: for example, KSK key conversion key n s ×(n t +1), BSK key size, etc.

[0369] Homomorphic computation keys include:

[0370] 1) Bootstrapping of multi-valued functions from level 0 to level 2: Bootstrapping key.

[0371] 2) Level 2 to Level 1: Key switching key, scheme switching key.

[0372] 3) Level 1 to Level 0: Key switching key.

[0373] As shown in Table 2, examples of parameter sets for the fully homomorphic encryption algorithm TFHE at different levels provided in the embodiments of the present application are provided.

[0374] Table 2

[0375] In one possible implementation, after determining the association information between the second ciphertext and the first ciphertext of the first information, the second network element may perform classified storage and other processing. For example, after determining that the first ciphertext and the second ciphertext are both ciphertexts of terminal 1, the first ciphertext and the second ciphertext are both stored in the information corresponding to terminal 1.

[0376] In an embodiment of the present application, a first network element encrypts first information to obtain a first ciphertext of the first information; then, the first network element sends second information to a second network element. The second network element determines the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword in the second information, the type of the first keyword, and the public key identifier. By adopting this method, the second network element cannot obtain the plaintext of the first information, and privacy can be protected. In addition, the second information also contains the type and public key identifier of the first keyword, so that the second network element can perform ciphertext retrieval based on the type and public key identifier of the first keyword, and further perform ciphertext calculation. In other words, information or data can be interacted and used while protecting privacy.

[0377] Figure 5a shows a schematic diagram of a key derivation and distribution process according to an embodiment of the present application. In this example, the first network element may be a network element in a home network (HPLMN), and the second network element may be a network element in a visited network (VPLMN). Exemplarily, the key is derived at the PLMN level. The process may include steps 501-505b, as follows:

[0378] 501: After the secure channel between the home network PLMN2 (i.e., HPLMN) and the visited network PLMN1 (i.e., VPLMN) is established, the AUSF / UDM and other network elements in the home network PLMN2 report their privacy computing capabilities to the privacy computing management unit PCM2 in the same PLMN.

[0379] 502a: Network elements such as NF1, AUSF / UDM in the visited network PLMN1 report their privacy computing capabilities to the privacy computing management unit PCM1 in the same PLMN, and request the computing keys and parameters of PLMN2.

[0380] 502b: PCM1 sends a request to PCM2 in the home network PLMN2 to apply for calculation of keys and parameters, and carries the privacy computing capability of the visited network element.

[0381] 503: Based on the privacy computing capabilities of the visited network and the home network, PCM2 of the home network selects an encryption algorithm and derives a PLMN-level key.

[0382] As shown in Figure 5b, the input parameters for key derivation include the home network key, serving network name, serial number, privacy-preserving algorithm identifier, and algorithm public reference quantity. By inputting these parameters into the key generator, encryption keys, decryption keys, and computation keys can be obtained.

[0383] Among them, the encryption key is used by the encryption party to encrypt plaintext information, the decryption key is used by the decryption party to decrypt the ciphertext, and the calculation key is used by the calculation party to process the ciphertext.

[0384] 504: PCM2 of the home network sends encryption keys, decryption keys, parameters, etc. to AUSF / UDM of the home network.

[0385] 505a: PCM2 of the home network sends the calculated key and parameters to PCM1 of the visited network PLMN1.

[0386] 505b: PCM1 sends the calculation key and parameters to NF1 in the visited network.

[0387] Based on the above-mentioned key derivation and distribution, for example, after the UE completes access authentication, the visited network requests sensitive information from the home network. The high-trust level network elements such as AUSF / UDM of the home network encrypt the sensitive information to obtain the ciphertext format of the sensitive information (Sensitive Information Concealed Format, SICF), and then the home network sends the ciphertext of the sensitive information to the network elements of the visited network.

[0388] In another possible implementation, the encryption key is determined based on at least one of a user key, a service network name, a serial number, a user identifier, an algorithm identifier, and a public reference quantity. Exemplarily, the third network element is a privacy computing management unit PCM.

[0389] FIG5c is a flow chart of another key derivation and distribution process provided in an embodiment of the present application. Exemplarily, the key is a UE-level key derivation process. The process may include steps 511-515b, as follows:

[0390] 511: After the UE completes access authentication, the AUSF / UDM and other network elements in the home network PLMN2 report their privacy computing capabilities to the privacy computing management unit PCM2 in the same PLMN.

[0391] 512a: Network elements such as NF1, AUSF / UDM in the visited network PLMN1 report their privacy computing capabilities to the privacy computing management unit PCM1 in the same PLMN, and request the computing keys and parameters of PLMN2.

[0392] 512b: PCM1 sends a request to PCM2 in the home network PLMN2 to apply for calculation of keys and parameters, and carries the privacy computing capability of the visited network element.

[0393] 513: Based on the privacy computing capabilities of the visited network and the home network, PCM2 of the home network selects a privacy computing algorithm and derives a UE-level key.

[0394] As shown in Figure 5d, the input parameters for key derivation are UE key, serving network name, serial number, user identifier, algorithm identifier, public reference quantity, etc. By inputting these parameters into the key generator, encryption key, decryption key, calculation key, etc. can be obtained.

[0395] The UE key may be obtained from a key management center (KMC) or generated based on the Universal Mobile Telecommunications System (UMTS) subscriber identity module (USIM) key architecture, which is not a limitation in this solution. After the UE completes access authentication in step 511, both the UE and the network have derived a symmetric key architecture for the user. If the UE-level key is derived based on the USIM key architecture, keys in the USIM key architecture, such as Kseaf and Kamf, may be used as input to a key derivation function.

[0396] 514: PCM2 of the home network sends encryption keys, decryption keys, parameters, etc. to AUSF / UDM of the home network.

[0397] 515a: PCM2 of the home network sends the calculated key and parameters to PCM1 of the visited network PLMN1.

[0398] 515b: PCM1 sends the calculation key and parameters to NF1 in the visited network.

[0399] Based on the key derivation and distribution described above, for example, a visited network sends a request for sensitive information to the home network. High-trust network elements (e.g., AUSF / UDM) in the home network encrypt the sensitive information to generate a ciphertext SICF. The home network then sends the ciphertext of the sensitive information to network elements in the visited network. UE-level keys offer greater granularity and privacy protection.

[0400] FIG5a and FIG5c respectively take the PLMN-level key derivation and the UE-level key derivation as examples for introduction. Other keys may also be used, and this solution does not impose any limitation on this.

[0401] 6, which is a flow chart of an authentication and key agreement method provided by an embodiment of the present application. This example is introduced by taking the example of the first information including the user identity identifier SUPI. The method shown in FIG6 may include steps 601-616. In this example, the high-trust level network elements AUSF, UDM and UE in the plaintext area are taken as an example, and the low-trust level network element SEAF / AMF in the ciphertext area is taken as an example. Steps 601-616 are specifically as follows:

[0402] 601. The UE sends an attach / registration request to the SEAF / AMF. The attach / registration request includes a subscription concealed identifier (SUCI). In response, the SEAF / AMF receives the attach / registration request.

[0403] 602. SEAF / AMF sends an authentication request to AUSF, which includes SUCI and serving network (SN) name. In response, AUSF receives the authentication request.

[0404] 603. AUSF sends an authentication request to UDM. Correspondingly, UDM receives the authentication request.

[0405] 604. UDM calls SIDF, selects an authentication method, and generates an authentication vector AV.

[0406] 605. UDM sends an authentication response to AUSF. Correspondingly, AUSF receives the authentication response.

[0407] The above authentication response includes AV (RAND, authentication token (AUTN), XRES*, K AUSF ), SUPI, Authentication and Key Management for Applications (AKMA) indication, routing indication.

[0408] For example, AUSF / Mobile Equipment (ME) uses the input SUPI, SN name and other parameters and the upper key K AUSF , derive the key K SEAF .

[0409] Based on the input parameters such as ABBA and the upper key K SEAF , Security Anchor Function SEAF / ME derived key K AMF .

[0410] 606. AUSF calculates HXRES* from XRES* and stores XRES* and SUPI.

[0411] 607. AUSF sends an authentication response to SEAF / AMF, which includes RAND, AUTN, and HXRES*. SEAF / AMF receives the authentication response accordingly.

[0412] 608. SEAF / AMF sends an authentication request to the UE. The authentication request includes parameters such as RAND, AUTN, next generation key set identifier (ngKSI), and Anti-Bidding down Between Architectures (ABBA). Accordingly, the UE receives the authentication request.

[0413] 609. The UE verifies the network and calculates the authentication response RES*.

[0414] 610. The UE sends an authentication response to the SEAF / AMF, where the authentication response includes RES*. Accordingly, the SEAF / AMF receives the authentication response.

[0415] 611. SEAF / AMF performs serving network authentication. Based on RES*, SEAF / AMF calculates HRES* and compares HRES* with HXRES*. If they match, indicating success, SEAF / AMF sends RES* to AUSF for subsequent verification and comparison. If they differ, indicating failure, access is denied.

[0416] 612. SEAF / AMF sends an authentication request to AUSF, which includes RES*. In response, AUSF receives the authentication request.

[0417] 613. The AUSF compares the authentication response RES* sent by the UE with the authentication response XRES* calculated by the network. If they are the same, authentication is successful. After successful authentication, the AUSF generates the ciphertext SUCF of the SUPI.

[0418] The ciphertext SUCF of SUPI is an example of the second information mentioned above, and the specific content can be referred to above.

[0419] 614. AUSF sends an authentication response to SEAF / AMF, which includes the result and K SEAF , the ciphertext SUCF of SUPI. Accordingly, SEAF / AMF receives the authentication response.

[0420] Exemplarily, SEAF / AMF stores the ciphertext SUCF of SUPI, so that when other information is subsequently received, it can obtain related information based on the ciphertext SUCF such as a keyword, perform associated storage and corresponding operations, etc.

[0421] 615. The AUSF also sends an authentication confirmation request to the UDM, which includes the plaintext SUPI and the ciphertext SUCF. Correspondingly, the UDM receives the authentication confirmation request.

[0422] 616. The UDM sends an authentication confirmation response to the AUSF. Accordingly, the AUSF receives the authentication confirmation response.

[0423] In this example, the permanent identity information is hidden from the service network, and the plain text SUPI is no longer sent to the encrypted area (such as SEAF / AMF), so as to enhance the privacy protection of the identity SUPI.

[0424] 7 is a flow chart of another information processing method provided by an embodiment of the present application. This example takes the first information as SUPI, the plaintext area including network elements UDR and UDM, and the ciphertext area including network elements NEF and AMF as an example. The information processing method shown in FIG7 may include steps 701-705. Steps 701-705 are specifically as follows:

[0425] 701. NEF sends an event exposure subscription request to UDM, where the subscription request includes UE ID ciphertext (SUCF), operation instructions, report type, maximum number of reports and duration, etc. Correspondingly, UDM receives the subscription request.

[0426] 702a. The UDM sends an event exposure subscription request to all relevant AMFs. The subscription request includes the UE ID ciphertext (SUCF) and an operation instruction. In response, the AMF receives the subscription request.

[0427] 702b. The AMF sends an event exposure subscription response to the UDM to confirm the subscription. Correspondingly, the UDM receives the subscription response.

[0428] 703. UDM sends an event exposure subscription response to NEF to confirm the subscription. Correspondingly, NEF receives the subscription response.

[0429] 704a. The UDM detects the occurrence of a monitored event, sends an event exposure notification to the NEF, and sends an event report and a timestamp to the NEF, including the UE ID ciphertext (SUCF). In response, the NEF receives the notification.

[0430] The NEF may perform associated storage and other processing of subsequent information based on the received UE ID ciphertext (SUCF).

[0431] 704b. NEF sends a create / update request to UDR and stores the received notification in UDR.

[0432] 704c. The AMF detects the occurrence of a monitored event and sends an event exposure notification to the NEF, including an event report and a timestamp, including the UE ID ciphertext (SUCF). Accordingly, the NEF receives the notification.

[0433] 704d. NEF sends a create / update request to UDR and stores the received notification in UDR.

[0434] 705. The AMF detects that an event related to a subscription change (such as AMF reallocation or new group UE registration) has occurred and sends an event exposure notification to the UDM, which includes the UE ID ciphertext (SUCF). In response, the UDM receives the notification.

[0435] If the Subscription Permanent Identifier (SUPI) is provided to the service network in plain text, it may cause many security threats. In this embodiment of the application, the SUPI is no longer provided to the service network in plain text, ensuring the required enhancement of the security and privacy of the SUPI in the service network, while also providing normal network interaction services.

[0436] 8 , which is a flow chart of another information processing method provided by an embodiment of the present application. This example takes the plaintext area including the home user plane function (H-UPF) network element, the home session management function (H-SMF) network element, the home policy control function (H-PCF), and the UDM as an example, and takes the ciphertext area including the network element UE, (R)AN, AMF, visit user plane function (V-UPF), and visit session management function (V-SMF) network element as an example for introduction. The information processing method shown in FIG8 may include steps 801-813. Steps 801-813 are specifically as follows:

[0437] 801. The UE sends a PDU session creation request to the AMF. The AMF receives the request accordingly.

[0438] 802. AMF selects SMF.

[0439] Among them, the results of AMF selection include V-SMF.

[0440] 803a. AMF sends an SM context creation request to V-SMF. The request includes the UE ID ciphertext (SUCF), Network Slice Selection Assistance Information (NSSAI), H-SMF identifier, etc. Correspondingly, V-SMF receives the request.

[0441] 803b. The V-SMF sends an SM Context Create Response to the AMF. Correspondingly, the AMF receives the response.

[0442] 804. V-SMF selects UPF.

[0443] Among them, the result of V-SMF selection includes V-UPF.

[0444] 805a. The V-SMF sends a session creation request to the V-UPF via the N4 interface. Correspondingly, the V-UPF receives the request.

[0445] Among them, the N4 interface is the interface between SMF and UPF.

[0446] 805b. The V-UPF sends a session creation response to the V-SMF via the N4 interface. Correspondingly, the V-SMF receives the response.

[0447] 806. The V-SMF sends a PDU session creation request to the H-SMF. The request includes the UE ID ciphertext (SUCF), GPSI, V-SMF SM Context ID, data network name DNN, S-NSSAI, PDU Session ID, V-SMF identifier, etc. Correspondingly, the H-SMF receives the request.

[0448] 807. The H-SMF may choose to use service operations such as Nudm_SDM_Get or Nudm_SDM_Subscribe to obtain session management subscription data, where the service operation signaling includes the UE ID (SUPI).

[0449] 808. PDU session authentication / authorization.

[0450] 809a. H-SMF selects PCF.

[0451] 809b. H-SMF establishes SM policy association or modifies SM policy association initiated by SMF.

[0452] 810. H-SMF performs UPF selection.

[0453] 811. H-SMF initiates SM policy association modification.

[0454] 812a. The H-SMF sends an N4 session creation request to the H-UPF. The H-UPF receives the request accordingly.

[0455] 812b. The H-UPF sends an N4 session creation response to the H-SMF, and the H-SMF receives the response accordingly.

[0456] 812c, H-SMF is registered.

[0457] 813. The H-SMF sends a PDU session creation response to the V-SMF, where the response includes the UE ID ciphertext (SUCF), etc. Correspondingly, the V-SMF receives the response.

[0458] If the Subscription Permanent Identifier (SUPI) is provided to the service network in plain text, it may cause many security threats. In this embodiment of the application, the SUPI is no longer provided to the service network in plain text, ensuring the required enhancement of the security and privacy of the SUPI in the service network, while also providing normal network interaction services.

[0459] It should be noted that in the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between the various embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form new embodiments according to their internal logical relationships.

[0460] The above describes in detail the method of the embodiment of the present application, and the following provides the device of the embodiment of the present application. It will be understood that in the various device embodiments of the present application, the division of multiple units or modules is only a logical division based on function, and is not intended to limit the specific structure of the device. In a specific implementation, some functional modules may be subdivided into more small functional modules, and some functional modules may be combined into one functional module, but no matter whether these functional modules are subdivided or combined, the general process performed by the device is the same. For example, some devices include a receiving unit and a sending unit. In some designs, the sending unit and the receiving unit can also be integrated into a communication unit, which can implement the functions implemented by the receiving unit and the sending unit. Typically, each unit corresponds to its own program code (or program instructions), and when the program code corresponding to each of these units runs on the processor, the unit is controlled by the processing unit to execute the corresponding process to implement the corresponding function.

[0461] An embodiment of the present application also provides a device for implementing any of the above methods. For example, an information processing device is provided, including modules (or means) for implementing the steps performed by the first network element, the second network element, the third network element, the fourth network element, etc. in any of the above methods.

[0462] For example, referring to Figure 9, which is a schematic diagram of the structure of an information processing device provided by an embodiment of the present application, the information processing device is used to implement the steps (or means) performed by the first network element in the aforementioned information processing method.

[0463] As shown in Figure 9, the device may include a processing module 901 and a communication module 902, specifically as follows: the processing module 901 is used to encrypt the first information to obtain the first ciphertext of the first information, and the first information contains a first keyword; the communication module 902 is used to send the second information to the second network element, and the second information includes the first ciphertext of the first information, the type of the first keyword and the public key identifier.

[0464] For other optional implementations of the device, please refer to the above description and will not be repeated here.

[0465] For another example, an information processing device is provided, including modules (or means) for implementing each step performed by the second network element in any of the above methods.

[0466] As shown in FIG9 , the apparatus may include a processing module 901 and a communication module 902 , specifically as follows:

[0467] A communication module 902 is configured to receive second information from a first network element, where the second information includes a first ciphertext of the first information, a type of the first keyword, and a public key identifier, wherein the first information includes the first keyword;

[0468] The processing module 901 is configured to determine association information between a second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

[0469] For other optional implementations of the device, please refer to the above description and will not be repeated here.

[0470] For another example, an information processing device is provided, including modules (or means) for implementing the steps performed by the third network element in any of the above methods.

[0471] The information processing device includes: a communication module, configured to receive a first request for obtaining an encryption key, the first request also including a privacy computing capability of a first network element;

[0472] And the communication module is further used to send third information, where the third information includes at least one of an encryption key, an encryption parameter, and a decryption key.

[0473] For other optional implementations of the device, please refer to the above description and will not be repeated here.

[0474] For another example, an information processing device is provided, including modules (or means) for implementing the steps performed by the fourth network element in any of the above methods.

[0475] An information processing device, comprising: a communication module, configured to receive a third request for obtaining a computation key, the third request further comprising a privacy computing capability of a second network element;

[0476] and a communication module, further configured to send a second request for obtaining a computation key, the second request also including the privacy computing capability of the second network element;

[0477] and a communication module, further configured to receive seventh information, wherein the seventh information includes at least one of a calculation key and a calculation parameter;

[0478] And the communication module is also used to send fifth information, where the fifth information includes at least one of the calculation key and the calculation parameter.

[0479] For other optional implementations of the device, please refer to the above description and will not be repeated here.

[0480] The introduction of the above modules can be found in the description of the aforementioned embodiments and will not be repeated here.

[0481] It should be understood that the division of the modules in the above devices is only a division of logical functions. In actual implementation, they can be fully or partially integrated into a physical entity, or they can be physically separated. In addition, the modules in the information processing device can be implemented in the form of a processor calling software; for example, the information processing device includes a processor, the processor is connected to a memory, and the memory stores instructions. The processor calls the instructions stored in the memory to implement any of the above methods or realize the functions of the modules of the device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory within the device or a memory outside the device. Alternatively, the modules in the device can be implemented in the form of hardware circuits, and the functions of some or all units can be realized by designing the hardware circuits. The hardware circuit can be understood as one or more processors. For example, in one implementation, the hardware circuit is an application-specific integrated circuit (ASIC), which realizes the functions of some or all of the above units by designing the logical relationship of the components in the circuit. For another example, in another implementation, the hardware circuit can be implemented by a programmable logic device (PLD). Taking a field programmable gate array (FPGA) as an example, it can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by configuring the configuration file, thereby realizing the functions of some or all of the above units. All modules of the above devices can be implemented in the form of software called by the processor, or in the form of hardware circuits, or in part by the form of software called by the processor, and the rest by hardware circuits.

[0482] 10 is a schematic diagram of the hardware structure of another information processing device provided by an embodiment of the present application. As shown in FIG10 , the information processing device 1000 includes one or more processors 1001 (one processor is shown in the figure).

[0483] Processor 1001 is a circuit with signal processing capabilities. In one implementation, processor 1001 can be a circuit with instruction reading and execution capabilities, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, processor 1001 can implement certain functions through the logical relationship of a hardware circuit. The logical relationship of the hardware circuit is fixed or reconfigurable. For example, processor 1002 is a hardware circuit implemented by an ASIC or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration file and implementing the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above modules. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc. The processor 1001 is used to execute relevant programs to implement the functions required to be performed by the units in the information processing device of the embodiment of the present application, or to execute the information processing method of the method embodiment of the present application.

[0484] Optionally, the information processing device 1000 may further include a memory (e.g., memory 1003, memory 1004, memory 1005) (indicated by dotted lines in the figure). The memory is used to store instructions executed by the processor 1001, or to store input data required by the processor 1001 to execute instructions, or to store data generated after the processor 1001 executes instructions.

[0485] Optionally, the memory may be located in the one or more processors (such as memory 1003), or located outside the one or more processors (such as memory 1004, memory 1005), or may include a storage part located in the one or more processors and a storage part located outside the one or more processors.

[0486] In the embodiment of the present application, memory (such as memory 1003, memory 1004, memory 1005) may include but is not limited to cache (cache), read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), synchronous dynamic random access memory (synchronous dynamic random access memory, SDRAM), hard disk (hard disk drive, HDD) or solid-state drive (solid-state drive, SSD), erasable programmable read-only memory (Erasable Programmable ROM, EPROM) or portable read-only memory (Compact Disc Read-Only Memory, CD-ROM) and the like. Memory is any other medium that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory in the embodiment of the present application can also be a circuit or other arbitrarily capable of implementing a storage function, for storing computer programs or instructions, and / or data.

[0487] Optionally, the information processing device 1000 may further include a communication interface 1002 (indicated by a dotted line in the figure). The processor 1001 and the communication interface 1002 are coupled to each other. The communication interface 1002 may be a transceiver or an interface circuit, a bus, a module, or other types of communication interfaces.

[0488] The memory can store programs. When the program stored in the memory is executed by the processor 1001, the processor 1001 and the communication interface 1002 are used to execute the various steps of the information processing method of the embodiment of the present application.

[0489] It can be seen that each module in the above device can be one or more processors (or processing circuits) configured to implement the above method, such as: CPU, GPU, NPU, TPU, DPU, microprocessor, DSP, ASIC, FPGA, or a combination of at least two of these processor forms or part of the processing circuits in these processors.

[0490] In addition, the modules in the above device can be fully or partially integrated together, or can be implemented independently. In one implementation, these modules are integrated together and implemented in the form of a system-on-a-chip (SOC). The SOC may include at least one processor for implementing any of the above methods or implementing the functions of the modules of the device. The type of the at least one processor can be different, for example, including a CPU and FPGA, a CPU and an artificial intelligence processor, a CPU and a GPU, etc.

[0491] It should be noted that although the device 1000 shown in FIG10 only shows a memory, a processor, and a communication interface, during the specific implementation process, those skilled in the art will understand that the device 1000 also includes other components necessary for normal operation. At the same time, according to specific needs, those skilled in the art will understand that the device 1000 may also include hardware components that implement other additional functions. In addition, those skilled in the art will understand that the device 1000 may also include only the components necessary to implement the embodiments of the present application, and does not necessarily include all the components shown in FIG10.

[0492] An embodiment of the present application also provides a computer-readable storage medium, which stores instructions. When the computer-readable storage medium is executed on a computer or a processor, the computer or processor executes one or more steps in any of the above methods.

[0493] The present application also provides a computer program product comprising instructions, which, when executed on a computer or processor, causes the computer or processor to execute one or more steps in any of the above methods.

[0494] It should be understood that in the description of this application, unless otherwise specified, " / " indicates that the objects associated with each other are in an "or" relationship. For example, A / B can mean A or B; where A and B can be singular or plural. Also, in the description of this application, unless otherwise specified, "multiple" means two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or plural. In addition, to facilitate the clear description of the technical solutions of the embodiments of this application, in the embodiments of this application, words such as "first" and "second" are used to distinguish between identical or similar items with substantially the same functions and effects. Those skilled in the art will understand that words such as "first" and "second" do not limit the quantity or execution order, and words such as "first" and "second" do not necessarily mean different. At the same time, in the embodiments of this application, words such as "exemplary" or "for example" are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of this application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Rather, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner to facilitate understanding.

[0495] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices, and methods can be implemented in other ways. For example, the division of the units is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. The mutual coupling, direct coupling, or communication connection shown or discussed can be through some interface, indirect coupling or communication connection of devices or units, and can be electrical, mechanical or other forms.

[0496] Units described as separate components may or may not be physically separate, and components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0497] In the above embodiments, all or part of the embodiments may be implemented by software, hardware, firmware, or any combination thereof. When implemented using software, all or part of the embodiments may be implemented in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions according to the embodiments of the present application are generated. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium or transmitted via the computer-readable storage medium. The computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via a wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) method. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server or data center that includes one or more available media integrated therein. The available medium may be a read-only memory (ROM), a random access memory (RAM), a magnetic medium such as a floppy disk, a hard disk, a tape, a magnetic disk, or an optical medium such as a digital versatile disc (DVD), or a semiconductor medium such as a solid state disk (SSD).

[0498] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present invention should be included in the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be based on the scope of protection of the claims.

Claims

1. An information processing method, applied to a first network element, characterized in that The method includes: Encrypting the first information to obtain the first ciphertext of the first information, where the first information includes a first keyword; Sending second information to a second network element, where the second information includes the first ciphertext of the first information, the type of the first keyword, and a public key identifier.

2. The method according to claim 1, wherein The public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

3. The method according to claim 1 or 2, characterized in that At least one of the first network element and the second network element is a network element in a wireless network.

4. The method according to claim 3, characterized in that The first keyword is at least one of a user identifier and a device identifier.

5. The method according to any one of claims 1 to 4, characterized in that The second information further includes at least one of the following: Data category, home network identifier information, routing indication information, protection scheme identifier information.

6. The method according to any one of claims 1 to 5, characterized in that, The first information includes at least one of the following: User identity information, user subscription information, perception information, authentication and / or key information.

7. The method according to any one of claims 1 to 6, characterized in that The method further includes: Encrypting the first information based on an encryption key to obtain the first ciphertext of the first information.

8. The method according to claim 7, wherein The encryption key is determined based on at least one of a home network key, a serving network name, a serial number, an encryption algorithm identifier, and a common reference quantity; or, The encryption key is determined based on at least one of a user key, a serving network name, a serial number, a user identifier, an algorithm identifier, and a common reference quantity.

9. The method according to claim 7 or 8, characterized in that, The encrypting the first information based on the encryption key to obtain the first ciphertext of the first information includes: Performing initial encryption on the first information based on the encryption key to obtain an initial ciphertext of the first information; Performing blinding processing on the initial ciphertext of the first information to obtain the first ciphertext of the first information.

10. The method according to any one of claims 7 to 9, characterized in that The method further includes: Receiving third information from a third network element, where the third information includes the encryption key.

11. The method according to any one of claims 1 to 10, wherein The first network element is a network element in a home network, and the second network element is a network element in a visited network; or, The first network element is a network element with a high trust level, and the second network element is a network element with a low trust level; or, The first network element is a management plane network element, and the second network element is a control plane network element; Or, At least one of the first network element and the second network element is a virtual network element, and the trust area of the first network element does not include the second network element; Or, At least one of the first network element and the second network element is a radio access network RAN node, and the trust area of the first network element does not include the second network element; Or, The first network element is a user equipment UE or an application program APP server, and the second network element is a RAN node or a core network element; Or, The first network element is a third-party server or a network element in the application layer, and the second network element is a network element in a wireless network; or, The first network element is a network element in a wireless network, and the second network element is a third-party server or a network element in the application layer.

12. An information processing method, applied to a second network element, characterized in that, The method includes: Receiving second information from a first network element, where the second information includes the first ciphertext of the first information, the type of the first keyword, and a public key identifier, where the first information includes the first keyword; Determine the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

13. The method according to claim 12, wherein The determining the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier includes: Retrieve in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain the second ciphertext, where the second ciphertext is the ciphertext corresponding to the fourth information in the preset database, and the fourth information includes the first keyword; Determine the association information between the second ciphertext and the first ciphertext of the first information.

14. The method according to claim 13, wherein The retrieving in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain the second ciphertext includes: Determine a target key from one or more computing keys according to the public key identifier; Retrieve in the preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain the second ciphertext.

15. The method according to claim 14, wherein The method further includes: Receive fifth information from a fourth network element, where the fifth information includes the one or more computing keys.

16. The method according to any one of claims 12 to 15, characterized in that, The public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

17. The method according to any one of claims 12 to 16, characterized in that, At least one of the first network element and the second network element is a network element in a wireless network.

18. The method according to claim 17, wherein The first keyword is at least one of a user identifier and a device identifier.

19. The method according to any one of claims 12 to 18, characterized in that, The second information further includes at least one of the following: Data category, home network identifier information, routing indication information, protection scheme identifier information.

20. The method according to any one of claims 12 to 19, characterized in that The first information includes at least one of the following: User identity information, user subscription information, perception information, authentication and / or key information.

21. The method according to any one of claims 12 to 20, wherein The first network element is a network element in the home network, and the second network element is a network element in the visited network; or The first network element is a network element with a high trust level, and the second network element is a network element with a low trust level; or The first network element is a management plane network element, and the second network element is a control plane network element; Or At least one of the first network element and the second network element is a virtual network element, and the trust area of the first network element does not include the second network element; Or At least one of the first network element and the second network element is a radio access network RAN node, and the trust area of the first network element does not include the second network element; Or The first network element is a user equipment UE or an application program APP server, and the second network element is a RAN node or a core network element; Or The first network element is a third-party server or a network element in the application layer, and the second network element is a network element in a wireless network; or The first network element is a network element in a wireless network, and the second network element is a third-party server or a network element in the application layer.

22. An information processing apparatus, characterized in that, Includes: A processing module, configured to encrypt the first information to obtain the first ciphertext of the first information, where the first information includes a first keyword; A communication module, configured to send second information to a second network element, where the second information includes a first ciphertext of the first information, a type of the first keyword, and a public key identifier.

23. The device according to claim 22, characterized in that, The public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a sequence number.

24. The device according to claim 22 or 23, characterized in that At least one of the first network element and the second network element is a network element in a wireless network.

25. The device according to claim 24, characterized in that, The first keyword is at least one of a user identifier and a device identifier.

26. The device according to any one of claims 22 to 25, characterized in that The second information further includes at least one of the following: a data category, home network identifier information, routing indication information, and protection scheme identifier information.

27. The device according to any one of claims 22 to 26, characterized in that, The first information includes at least one of the following: user identity information, user subscription information, sensing information, and authentication and / or key information.

28. The device according to any one of claims 22 to 27, characterized in that The processing module is further configured to: Encrypt the first information based on an encryption key to obtain a first ciphertext of the first information.

29. The device according to claim 28, characterized in that, The encryption key is determined based on at least one of a home network key, a serving network name, a sequence number, an encryption algorithm identifier, and a common reference quantity; or The encryption key is determined based on at least one of a user key, a serving network name, a sequence number, a user identifier, an algorithm identifier, and a common reference quantity.

30. The device according to claim 28 or 29, characterized in that, The processing module is further configured to: Perform initial encryption on the first information based on the encryption key to obtain an initial ciphertext of the first information; Perform blinding processing on the initial ciphertext of the first information to obtain a first ciphertext of the first information.

31. The device according to any one of claims 28 to 30, characterized in that, The communication module is further configured to: Receive third information from a third network element, where the third information includes at least one of the encryption key, encryption parameters, and decryption key.

32. The apparatus according to any one of claims 22 to 31, wherein The apparatus is a network element in a home public land mobile network (HPLMN), and the second network element is a network element in a visited public land mobile network (VPLMN); or The apparatus is a network element with a high trust level, and the second network element is a network element with a low trust level; or The apparatus is a management plane network element, and the second network element is a control plane network element; Or At least one of the apparatus and the second network element is a virtual network element, and a trust area of the first information of the apparatus does not include the second network element; Or At least one of the apparatus and the second network element is a radio access network (RAN) node, and a trust area of the apparatus does not include the second network element; Or The apparatus is a user equipment (UE), and the second network element is a RAN node and / or a network function (NF); or The apparatus is a third-party server or a network element in an application layer, and the second network element is a network element in a wireless network; or The apparatus is a network element in a wireless network, and the second network element is a third-party server or a network element in an application layer; or The apparatus is a UE or an application program (APP) server, and the second network element is a RAN node and / or an NF.

33. An information processing apparatus, characterized in that, Comprising: A communication module, configured to receive second information from a first network element, where the second information includes a first ciphertext of a first information, a type of a first keyword, and a public key identifier, where the first information includes the first keyword. A processing module, configured to determine the association information between the second ciphertext and the first ciphertext of the first information based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier.

34. The device according to claim 33, characterized in that, The processing module is configured to: Retrieve in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the public key identifier to obtain a second ciphertext, where the second ciphertext is the ciphertext corresponding to fourth information in the preset database, and the fourth information includes the first keyword; Determine the association information between the second ciphertext and the first ciphertext of the first information.

35. The device according to claim 34, wherein, The processing module is further configured to: Determine a target key from one or more computing keys according to the public key identifier; Retrieve in a preset database based on the ciphertext of the first keyword, the type of the first keyword, and the target key to obtain a second ciphertext.

36. The device according to claim 35, characterized in that, The communication module is further configured to: Receive fifth information from a fourth network element, where the fifth information includes at least one of the one or more computing keys and computing parameters.

37. The device according to any one of claims 33 to 36, characterized in that, The public key identifier includes at least one of a network identifier, a network element identifier, a user identifier, a base station identifier, and a serial number.

38. The device according to any one of claims 33 to 37, characterized in that At least one of the first network element and the second network element is a network element in a wireless network.

39. The device according to claim 38, characterized in that, The first keyword is at least one of a user identifier and a device identifier.

40. The device according to any one of claims 33 to 39, characterized in that, The second information further includes at least one of the following: data category, home network identifier information, routing indication information, and protection scheme identifier information.

41. The device according to any one of claims 33 to 40, characterized in that, The first information includes at least one of the following: user identity information, user subscription information, perception information, and authentication and / or key information.

42. The apparatus according to any one of claims 33 to 41, characterized in that, The first network element is a network element in a home public land mobile network (HPLMN), and the device is a network element in a visited public land mobile network (VPLMN); or The first network element is a network element with a high trust level, and the device is a network element with a low trust level; or The first network element is a management plane network element, and the device is a control plane network element; or At least one of the first network element and the device is a virtual network element, and the trust area of the first information of the first network element does not include the device; or At least one of the first network element and the device is a radio access network (RAN) node, and the trust area of the first information of the first network element does not include the device; or The first network element is a user equipment (UE), and the device is a RAN node and / or a network function (NF); or The first network element is a third-party server or a network element in an application layer, and the device is a network element in a wireless network; or The first network element is a network element in a wireless network, and the device is a third-party server or a network element in an application layer; or The first network element is a UE or an application program (APP) server, and the device is a RAN node and / or an NF.

43. An information processing apparatus, characterized in that, The device includes a processor, and the processor is configured to cause the device to execute the method according to any one of claims 1-11 by executing computer programs (or computer-executable instructions) stored in a memory and / or through logic circuits.

44. An information processing apparatus, characterized in that, The device includes a processor, and the processor is configured to cause the device to implement the method according to any one of claims 12-21 by executing a computer program (or computer-executable instructions) stored in a memory and / or by means of a logic circuit.

45. The device according to claim 43 or 44, characterized in that, The memory is further included.

46. An information processing system, characterized in that, The system includes the information processing device according to claim 43 and the information processing device according to claim 44.

47. A computer-readable storage medium, characterized in that, A computer program is stored, and when the computer program is executed by a processor, it causes the method according to any one of claims 1-11 to be implemented; or causes the method according to any one of claims 12-21 to be implemented.

48. A computer program product comprising instructions which, when run on a processor, cause the method according to any one of claims 1-11 to be implemented; or cause the method according to any one of claims 12-21 to be implemented.

Images