Communication method, and device, system and storage medium

Abstract

The embodiments of the present disclosure relate to the technical field of communications. Disclosed are a communication method, and an apparatus and a computer-readable storage medium. The communication method comprises: acquiring a discovery security material; and on the basis of the discovery security material, executing a relay discovery process, wherein the discovery security material comprises at least one of the following: a first discovery security material corresponding to a first relay device; and a second discovery security material corresponding to at least one second relay device. By using the embodiments of the present disclosure, security protection of a multi-hop U2N relay discovery process can be realized, and an attacker can be prevented from impersonating an intermediate relay to disseminate false information of a U2N relay, such that a remote UE can securely discover a potential U2N relay by means of an intermediate relay.

Description

Communication method, device, system and storage medium TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of communication, and in particular, the present disclosure relates to a communication method, device, system and storage medium. BACKGROUND

[0002] In order to support communication between terminals not in network coverage and the network, proximity services (ProSe) are introduced. An intermediate relay is a ProSe UE located on a path between a remote UE and a UE-to-network relay (U2N), providing a function of supporting a 5G ProSe remote UE to connect to a network, thereby supporting a multi-hop U2N relay service.

[0003] SUMMARY

[0004] Embodiments of the present disclosure provide a communication method, device, system and storage medium.

[0005] In a first aspect, a communication method is provided, applied to a first relay device, and the method comprises:

[0006] obtaining discovery security material;

[0007] performing a relay discovery procedure based on the discovery security material;

[0008] The discovery security material comprises at least one of:

[0009] a first discovery security material corresponding to the first relay device;

[0010] a second discovery security material corresponding to at least one second relay device.

[0011] In a second aspect, a communication method is provided, applied to a terminal, and the method comprises:

[0012] obtaining discovery security material;

[0013] performing a relay discovery procedure based on the discovery security material;

[0014] The discovery security material comprises at least one of:

[0015] a first discovery security material corresponding to the first relay device;

[0016] a second discovery security material corresponding to at least one second relay device.

[0017] In a third aspect, a communication method is provided. The method is applied to a first network node and includes:

[0018] receiving a first message sent by a first relay device, the first message including a relay service code (RSC) for requesting discovery security material;

[0019] sending a second message to the first relay device, the second message including at least one of:

[0020] first discovery security material related to a first ID of the first relay device;

[0021] at least one second discovery security material related to a second ID of a second relay device.

[0022] In a fourth aspect, a communication method is provided. The method is applied to a third network node and includes:

[0023] receiving a third message sent by a terminal, the third message including a relay service code (RSC) for requesting discovery security material;

[0024] sending a fourth message to the terminal, the fourth message including at least one of:

[0025] first discovery security material related to a first ID of a first relay device;

[0026] at least one second discovery security material related to a second ID of a second relay device.

[0027] In a fifth aspect, a communication method is provided. The method is applied to a second network node and includes:

[0028] receiving a fifth message sent by a first network node, the fifth message including a RSC for requesting discovery security material;

[0029] sending a sixth message to the first network node, the sixth message including second discovery security material related to a second ID of a second relay device;

[0030] wherein the first network node is a network node corresponding to a first relay device.

[0031] In a sixth aspect, a relay device is provided. The relay device includes:

[0032] a first receiving module configured to obtain discovery security material;

[0033] a first processing module configured to perform a relay discovery process based on the discovery security material;

[0034] The discovery security material includes at least one of the following:

[0035] The first discovery security material corresponding to the first relay device;

[0036] The second discovery security material corresponding to the at least one second relay device.

[0037] In a seventh aspect, an embodiment of the present disclosure provides a terminal, comprising:

[0038] The second transceiver is configured to obtain a discovery security material;

[0039] The second processing module is configured to perform a relay discovery process based on the discovery security material;

[0040] The discovery security material includes at least one of the following:

[0041] The first discovery security material corresponding to the first relay device;

[0042] The second discovery security material corresponding to the at least one second relay device.

[0043] In an eighth aspect, an embodiment of the present disclosure provides a first network node, comprising:

[0044] The third transceiver is configured to receive a first message sent by a first relay device, the first message including a relay service code (RSC) used to request a discovery security material; and send a second message to the first relay device, the second message including at least one of the following:

[0045] The first discovery security material related to a first ID of the first relay device;

[0046] The second discovery security material related to a second ID of the second relay device.

[0047] In a ninth aspect, an embodiment of the present disclosure provides a third network node, comprising:

[0048] The fourth transceiver is configured to receive a third message sent by a terminal, the third message including a relay service code (RSC) used to request a discovery security material; and send a fourth message to the terminal, the fourth message including at least one of the following:

[0049] The first discovery security material related to a first ID of the first relay device;

[0050] The second discovery security material related to a second ID of the second relay device.

[0051] In a tenth aspect, an embodiment of the present disclosure provides a second network node, comprising:

[0052] a fifth transceiving module, configured to receive a fifth message sent by the first network node, the fifth message comprising an RSC for requesting discovery of security material; and send a sixth message to the first network node, the sixth message comprising a second discovery security material related to a second ID of the second relay device; wherein the first network node is a network node corresponding to the first relay device.

[0053] In a eleventh aspect, an embodiment of the present disclosure provides a relay device, comprising:

[0054] one or more processors;

[0055] The processor is configured to perform the method described in the optional implementation of the first aspect.

[0056] In a twelfth aspect, an embodiment of the present disclosure provides a terminal, comprising:

[0057] one or more processors;

[0058] The processor performs the method described in the optional implementation of the second aspect.

[0059] In a thirteenth aspect, an embodiment of the present disclosure provides a first network node, comprising:

[0060] one or more processors;

[0061] The processor is configured to perform the method described in the optional implementation of the third aspect.

[0062] In a fourteenth aspect, an embodiment of the present disclosure provides a third network node, comprising:

[0063] one or more processors;

[0064] The processor is configured to perform the method described in the optional implementation of the fourth aspect.

[0065] In a fifteenth aspect, an embodiment of the present disclosure provides a second network node, comprising:

[0066] one or more processors;

[0067] The processor is configured to perform the method described in the optional implementation of the fifth aspect.

[0068] In a sixteenth aspect, the embodiments of the present disclosure provide a communication system, comprising: a relay device, a terminal and a network node, wherein the relay device is configured to implement the method described in the optional implementation of the first aspect, the terminal is configured to implement the method described in the optional implementation of the second aspect, and the network node is configured to implement the method described in the optional implementation of the third aspect, or the fourth aspect, or the fifth aspect.

[0069] In a seventeenth aspect, the embodiments of the present disclosure provide a storage medium, which stores instructions, when the instructions are executed on a communication device, causing the communication device to perform the method described in the first aspect, or the second aspect, or the third aspect, or the fourth aspect, or the optional implementation of the fifth aspect.

[0070] It should be understood that the foregoing general description and the following detailed description are only exemplary and explanatory, and are not limiting to the present disclosure. BRIEF DESCRIPTION OF DRAWINGS

[0071] The accompanying drawings, which are incorporated in and constitute a part of the specification, illustrate embodiments consistent with the present disclosure and serve to explain the principles of the present disclosure together with the specification.

[0072] FIG. 1a is a schematic diagram of a structure of a wireless communication system according to an exemplary embodiment;

[0073] FIG. 1b is a schematic diagram of a structure of a wireless communication system according to an exemplary embodiment;

[0074] FIG. 2a is a flowchart of a communication method according to an exemplary embodiment;

[0075] FIG. 2b is a flowchart of a communication method according to an exemplary embodiment;

[0076] FIG. 3a is a flowchart of a communication method according to an exemplary embodiment;

[0077] FIG. 3b is a flowchart of a communication method according to an exemplary embodiment;

[0078] FIG. 4a is a flowchart of a communication method according to an exemplary embodiment;

[0079] FIG. 4b is a flowchart of a communication method according to an exemplary embodiment;

[0080] FIG. 5a is a flowchart of a communication method according to an exemplary embodiment;

[0081] FIG. 5b is a flowchart of a communication method according to an exemplary embodiment;

[0082] FIG. 5c is a flowchart of a communication method according to an exemplary embodiment;

[0083] FIG. 6a is a flow diagram illustrating a communication method according to an embodiment of the present disclosure;

[0084] FIG. 6b is a flow diagram illustrating a communication method according to an embodiment of the present disclosure;

[0085] FIG. 7 is a flow diagram illustrating a communication method according to an embodiment of the present disclosure;

[0086] FIG. 8a is a flow diagram illustrating a communication method according to an embodiment of the present disclosure;

[0087] FIG. 8b is a flow diagram illustrating a communication method according to an embodiment of the present disclosure;

[0088] FIG. 9 is a flow diagram illustrating a communication method according to an embodiment of the present disclosure;

[0089] FIG. 10a is a structural diagram of a relay device according to an embodiment of the present disclosure;

[0090] FIG. 10b is a structural diagram of a terminal according to an embodiment of the present disclosure;

[0091] FIG. 10c is a structural diagram of a first network node according to an embodiment of the present disclosure;

[0092] FIG. 10d is a structural diagram of a third network node according to an embodiment of the present disclosure;

[0093] FIG. 10e is a structural diagram of a second network node according to an embodiment of the present disclosure;

[0094] FIG. 11a is a structural diagram of a communication device according to an embodiment of the present disclosure;

[0095] FIG. 11b is a structural diagram of a chip according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0096] The present disclosure provides a communication method, a device, a communication system, and a storage medium.

[0097] In a first aspect, the present disclosure provides a communication method, applied to a first relay device, and the method comprises:

[0098] obtaining discovery security material;

[0099] performing a relay discovery process based on the discovery security material;

[0100] The discovery security material comprises at least one of the following:

[0101] a first discovery security material corresponding to the first relay device;

[0102] The second discovery security material corresponding to the at least one second relay device.

[0103] In the above embodiment, the first relay device can obtain the discovery security material for forwarding the discovery message, the security protection of the multi-hop U2N relay discovery process can be implemented, the attacker can be prevented from impersonating an intermediate relay to publish false information of a U2N relay, and it can be ensured that a remote UE can securely discover a potential U2N relay through an intermediate relay.

[0104] In combination with some embodiments of the first aspect, in some embodiments, the obtaining the discovery security material comprises:

[0105] sending a first message to the first network node, the first message comprising a relay service code (RSC) for requesting the discovery security material;

[0106] receiving a second message sent by the first network node, the second message comprising at least one of:

[0107] first discovery security material related to a first ID of the first relay device;

[0108] at least one second discovery security material related to a second ID of the second relay device.

[0109] In the above embodiment, the discovery security material for forwarding the discovery message is obtained by sending the first message for requesting the discovery security material to the first network node.

[0110] In combination with some embodiments of the first aspect, if the first relay device is a first terminal-to-network (U2N) relay and supports a multi-hop U2N relay service, the second discovery security material is obtained by the first network node from a second network node, wherein the second network node is a network node corresponding to the second relay device.

[0111] In the above embodiment, if the first relay device is a U2N relay and supports a multi-hop U2N relay service, the first network node can obtain the second discovery security material from a network node corresponding to another U2N relay supporting the multi-hop U2N relay service, i.e., the first network node can obtain the second discovery security material related to the second ID of the second relay device from a second network node corresponding to the second relay device, so as to perform security protection in the multi-hop U2N relay discovery process.

[0112] In combination with some embodiments of the first aspect, in some embodiments, if the first relay device is a first intermediate relay, the second discovery security material is obtained by the first network node from a second network node, wherein the second network node is a network node corresponding to the second relay device.

[0113] In the above embodiments, if the first relay device is an intermediate relay, the first network node can obtain the second discovery security material from the network node corresponding to the other intermediate relay and / or the U2N relay, i.e., the first network node can obtain the second discovery security material related to the second ID of the second relay device from the second network node corresponding to the second relay device, so as to perform security protection in the multi-hop U2N relay discovery process.

[0114] With reference to some embodiments of the first aspect, in some embodiments, the second relay device comprises at least one of:

[0115] a second U2N relay;

[0116] a second intermediate relay.

[0117] With reference to some embodiments of the first aspect, in some embodiments, the first message further comprises at least one of:

[0118] a second ID of the second relay device, the second relay device being authorized to provide a multi-hop U2N relay service;

[0119] role information of the first relay device;

[0120] first indication information indicating that the first relay device supports the multi-hop U2N service.

[0121] In the above embodiments, the second ID of the second relay device is carried in the first message, which facilitates the first network node to determine the corresponding second network node to obtain the second discovery security material related to the second ID of the second relay device. The role information of the first relay device and / or the first indication information are carried in the first message, which facilitates the first network node to determine whether the first relay device supports the multi-hop U2N service.

[0122] With reference to some embodiments of the first aspect, in some embodiments, the performing a relay discovery process based on the discovery security material comprises:

[0123] receiving a first announcement message broadcast by the second relay device, the first announcement message being securely protected by the discovery security material related to the second ID of the second relay device;

[0124] verifying the first announcement message based on the discovery security material determined by the second ID and the RSC.

[0125] In the above embodiment, in the multi-hop U2N relay discovery process, the announcement message is secured and verified based on the discovery security material related to the second ID of the second relay device, which can prevent an attacker from impersonating an intermediate relay to publish false information of the U2N relay, and ensure that the remote UE can safely discover the potential U2N relay through the intermediate relay.

[0126] In some embodiments of the first aspect, in some embodiments, the method further comprises:

[0127] broadcasting a second announcement message if the first announcement message is verified;

[0128] wherein the second announcement message is secured by the discovery security material related to the first ID.

[0129] In the above embodiment, the first relay device verifies the received first announcement message based on the discovery security material related to the second ID of the second relay device, and broadcasts a second announcement message secured by the discovery security material related to the first ID after verification, so that an attacker can be prevented from impersonating an intermediate relay to publish false information of the U2N relay, and the remote UE can safely discover the potential U2N relay through the intermediate relay.

[0130] In some embodiments of the first aspect, in some embodiments, the broadcasting of the second announcement message comprises:

[0131] broadcasting the second announcement message if a first hop value obtained based on the first announcement message satisfies a first condition, the second announcement message comprising information related to the first relay device; or

[0132] broadcasting the second announcement message if the first hop value satisfies the first condition and information in the first announcement message satisfies a second condition.

[0133] In the above embodiment, the second announcement message is broadcasted in the case that the received first announcement message satisfies the condition, which can ensure that the multi-hop U2N service provided by the first relay device satisfies the service QoS (Quality of Service).

[0134] In some embodiments of the first aspect, in some embodiments, the information in the first announcement message satisfying the second condition comprises:

[0135] the RSC in the first announcement message and / or the related information of the second relay device is not stored in the information entry; or

[0136] The RSC in the first announcement message and the related information of the second relay device are stored in an information entry, and the first hop value is smaller than the second hop value stored in the information entry.

[0137] In the above embodiment, in a case where the information in the received first announcement message meets the condition, the second announcement message is broadcasted, and it can be ensured that the first relay device can provide an optimal path to the potential U2N relay.

[0138] In combination with some embodiments of the first aspect, in some embodiments, the method further includes updating the stored information entry.

[0139] In a second aspect, the embodiments of the present disclosure provide a communication method applied to a terminal, and the method includes:

[0140] obtaining discovery security material;

[0141] performing a relay discovery process based on the discovery security material;

[0142] The discovery security material includes at least one of the following:

[0143] first discovery security material corresponding to the first relay device;

[0144] second discovery security material corresponding to at least one second relay device.

[0145] In combination with some embodiments of the second aspect, in some embodiments, the obtaining of the discovery security material includes:

[0146] sending a third message to a third network node, the third message including a relay service code (RSC) for requesting the discovery security material;

[0147] receiving a fourth message sent by the third network node, the fourth message including at least one of the following:

[0148] first discovery security material related to a first ID of the first relay device;

[0149] at least one second discovery security material related to a second ID of the second relay device.

[0150] In combination with some embodiments of the second aspect, in some embodiments, the second discovery security material is obtained by the third network node from a second network node, where the second network node is a network node corresponding to the second relay device;

[0151] The first discovery security material is obtained by the third network node from a first network node, where the first network node is a network node corresponding to the first relay device.

[0152] In some embodiments in combination with the second aspect, in some embodiments, the third message further comprises at least one of:

[0153] a first ID of the first relay device;

[0154] a second ID of the second relay device.

[0155] In some embodiments in combination with the second aspect, in some embodiments, the second relay device comprises at least one of:

[0156] a second U2N relay;

[0157] a second intermediate relay.

[0158] In some embodiments in combination with the second aspect, in some embodiments, performing a relay discovery procedure based on the discovery security material comprises:

[0159] receiving a second announcement message broadcasted by the first relay device, the second announcement message being secured by a discovery security material related to a first ID of the first relay device;

[0160] verifying the second announcement message based on a discovery security material determined by the first ID and the RSC;

[0161] In some embodiments in combination with the second aspect, in some embodiments, the first relay device comprises at least one of:

[0162] a first U2N relay;

[0163] a first intermediate relay.

[0164] In a third aspect, the embodiments of the present disclosure provide a communication method applied to a first network node, the method comprising:

[0165] receiving a first message sent by a first relay device, the first message comprising a relay service code (RSC) for requesting a discovery security material;

[0166] sending a second message to the first relay device, the second message comprising at least one of:

[0167] a first discovery security material related to a first ID of the first relay device;

[0168] at least one second discovery security material related to a second ID of a second relay device.

[0169] In some embodiments in combination with the third aspect, in some embodiments, before sending the second message to the first network node, the method further comprises:

[0170] sending, to a second network node, a fifth message including the RSC, for requesting the discovery security material;

[0171] receiving a sixth message sent by the second network node, the sixth message including second discovery security material related to a second ID of the second relay device;

[0172] wherein the second network node is a network node corresponding to the second relay device.

[0173] In some embodiments in combination with the third aspect, in some embodiments, the second relay device includes at least one of:

[0174] a second U2N relay;

[0175] a second intermediate relay.

[0176] In some embodiments in combination with the third aspect, in some embodiments, the first message further includes at least one of:

[0177] a second ID of the second relay device, the second relay device being authorized to provide a multi-hop U2N relay service;

[0178] role information of the first relay device;

[0179] first indication information indicating that the first relay device supports a multi-hop U2N service.

[0180] In some embodiments in combination with the third aspect, in some embodiments, if the first message includes the second ID of the second relay device, the sending, to a second network node, a fifth message includes:

[0181] sending, to a corresponding second network node, the fifth message based on the second ID.

[0182] In some embodiments in combination with the third aspect, in some embodiments, the sending, to a second network node, a fifth message includes:

[0183] sending, to the second network node, the fifth message based on a first mapping relationship;

[0184] wherein the first mapping relationship is a mapping relationship between the RSC and the second ID.

[0185] In some embodiments in combination with the third aspect, in some embodiments, the first mapping relationship is locally configured by the first network node.

[0186] In some embodiments in combination with the third aspect, in some embodiments, the method further includes:

[0187] receive a seventh message sent by the third network node, the seventh message including the RSC, for requesting the discovery security material;

[0188] send an eighth message to the third network node, the eighth message including at least one of:

[0189] first discovery security material related to a first ID of the first relay device;

[0190] second discovery security material related to a second ID of the second relay device;

[0191] wherein the third network node is a network node corresponding to the terminal.

[0192] In a fourth aspect, embodiments of the present disclosure provide a communication method, applied to a third network node, the method comprising:

[0193] receive a third message sent by a terminal, the third message including a relay service code (RSC), for requesting discovery security material;

[0194] send a fourth message to the terminal, the fourth message including at least one of:

[0195] first discovery security material related to a first ID of the first relay device;

[0196] at least one of second discovery security material related to a second ID of the second relay device.

[0197] In combination with some embodiments of the fourth aspect, in some embodiments, before sending the fourth message to the terminal, the method further comprises:

[0198] send a seventh message to a second network node and / or a first network node, the seventh message including the RSC, for requesting the discovery security material;

[0199] receive an eighth message sent by the second network node and / or the first network node, the eighth message including at least one of:

[0200] first discovery security material related to a first ID of the first relay device;

[0201] second discovery security material related to a second ID of the second relay device.

[0202] In combination with some embodiments of the fourth aspect, in some embodiments, the first network node is a network node corresponding to the first relay device, and the second network node is a network node corresponding to the second relay device.

[0203] In some embodiments combining with the fourth aspect, in some embodiments, the second relay device comprises at least one of:

[0204] a second U2N relay;

[0205] a second intermediate relay.

[0206] In some embodiments combining with the fourth aspect, in some embodiments, the third message further comprises at least one of:

[0207] a first ID of the first relay device;

[0208] a second ID of the second relay device.

[0209] In some embodiments combining with the fourth aspect, in some embodiments, the sending the seventh message to the second network node and / or the first network node comprises at least one of:

[0210] sending the seventh message to a corresponding first network node based on the first ID;

[0211] sending the seventh message to a corresponding second network node based on the second ID.

[0212] In some embodiments combining with the fourth aspect, in some embodiments, the sending the seventh message to the second network node and / or the first network node comprises:

[0213] sending the seventh message to the second network node and / or the first network node based on a second mapping relationship;

[0214] wherein the second mapping relationship comprises at least one of:

[0215] a mapping relationship between the RSC and the second ID;

[0216] a mapping relationship between the RSC and the first ID.

[0217] In some embodiments combining with the fourth aspect, in some embodiments, the second mapping relationship is configured locally by the third network node.

[0218] In a fifth aspect, the embodiments of the present disclosure provide a communication method, applied to a second network node, the method comprising:

[0219] receiving a fifth message sent by a first network node, the fifth message comprising an RSC, for requesting to discover security material;

[0220] sending a sixth message to the first network node, the sixth message comprising a second discovery security material related to a second ID of a second relay device;

[0221] The first network node is a network node corresponding to the first relay device.

[0222] In some embodiments in combination with the fifth aspect, the method further comprises:

[0223] receiving a seventh message sent by a third network node, the seventh message comprising the RSC, for requesting the discovery security material;

[0224] sending an eighth message to the third network node, the eighth message comprising at least one of:

[0225] first discovery security material related to a first ID of the first relay device;

[0226] second discovery security material related to a second ID of the second relay device;

[0227] The third network node is a network node corresponding to the terminal.

[0228] In a sixth aspect, the embodiments of the present disclosure provide a relay device, comprising:

[0229] a first transceiver module configured to obtain discovery security material;

[0230] a first processing module configured to perform a relay discovery process based on the discovery security material;

[0231] The discovery security material comprises at least one of:

[0232] first discovery security material corresponding to the first relay device;

[0233] second discovery security material corresponding to at least one second relay device.

[0234] In a seventh aspect, the embodiments of the present disclosure provide a terminal, comprising:

[0235] a second transceiver module configured to obtain discovery security material;

[0236] a second processing module configured to perform a relay discovery process based on the discovery security material;

[0237] The discovery security material comprises at least one of:

[0238] first discovery security material corresponding to the first relay device;

[0239] second discovery security material corresponding to at least one second relay device.

[0240] In an eighth aspect, the embodiments of the present disclosure provide a first network node, comprising:

[0241] a third transceiver, configured to receive a first message sent by a first relay device, the first message comprising a relay service code (RSC) used to request discovery security material, and send a second message to the first relay device, the second message comprising at least one of:

[0242] first discovery security material related to a first ID of the first relay device;

[0243] at least one second discovery security material related to a second ID of a second relay device.

[0244] In a ninth aspect, an embodiment of the present disclosure provides a third network node, comprising:

[0245] a fourth transceiver, configured to receive a third message sent by a terminal, the third message comprising a relay service code (RSC) used to request discovery security material, and send a fourth message to the terminal, the fourth message comprising at least one of:

[0246] first discovery security material related to a first ID of a first relay device;

[0247] at least one second discovery security material related to a second ID of a second relay device.

[0248] In a tenth aspect, an embodiment of the present disclosure provides a second network node, comprising:

[0249] a fifth transceiver, configured to receive a fifth message sent by a first network node, the fifth message comprising a RSC used to request discovery security material, and send a sixth message to the first network node, the sixth message comprising second discovery security material related to a second ID of a second relay device, wherein the first network node is a network node corresponding to a first relay device.

[0250] In an eleventh aspect, an embodiment of the present disclosure provides a relay device, comprising:

[0251] one or more processors;

[0252] The processor is configured to perform the method described in the optional implementation of the first aspect.

[0253] In a twelfth aspect, an embodiment of the present disclosure provides a terminal, comprising:

[0254] one or more processors;

[0255] The processor is configured to perform the method described in the optional implementation of the second aspect.

[0256] In a thirteenth aspect, the embodiments of the present disclosure provide a first network node, comprising:

[0257] one or more processors;

[0258] The processor is configured to perform the method described in the optional implementation of the third aspect.

[0259] In a fourteenth aspect, the embodiments of the present disclosure provide a third network node, comprising:

[0260] one or more processors;

[0261] The processor is configured to perform the method described in the optional implementation of the fourth aspect.

[0262] In a fifteenth aspect, the embodiments of the present disclosure provide a second network node, comprising:

[0263] one or more processors;

[0264] The processor is configured to perform the method described in the optional implementation of the fifth aspect.

[0265] In a sixteenth aspect, the embodiments of the present disclosure provide a communication system, comprising: a relay device, a terminal and a network node, wherein the relay device is configured to implement the method described in the optional implementation of the first aspect, the terminal is configured to implement the method described in the optional implementation of the second aspect, and the network node is configured to implement the method described in the optional implementation of the third aspect, or the fourth aspect, or the fifth aspect.

[0266] In a seventeenth aspect, the embodiments of the present disclosure provide a storage medium, which stores instructions, and when the instructions are run on a communication device, the communication device is caused to perform the method described in the optional implementation of the first aspect or the second aspect or the third aspect or the fourth aspect or the fifth aspect.

[0267] In an eighteenth aspect, the embodiments of the present disclosure provide a program product, which is executed by a communication device, and causes the communication device to perform the method described in the optional implementation of the first aspect or the second aspect or the third aspect or the fourth aspect or the fifth aspect.

[0268] In a nineteenth aspect, the embodiments of the present disclosure provide a computer program, which, when run on a computer, causes the computer to perform the method described in the optional implementation of the first aspect or the second aspect or the third aspect or the fourth aspect or the fifth aspect.

[0269] In the twentieth aspect, an embodiment of the present disclosure proposes a chip or a chip system, which includes a processing circuit for executing the method described in the optional implementation of the first aspect or the second aspect or the third aspect or the fourth aspect or the fifth aspect above.

[0270] It is understandable that the above-mentioned communication devices, communication systems, storage media, program products, and computer programs are all used to perform the methods proposed in the embodiments of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the corresponding methods and will not be repeated here. Among them, the communication device can be a terminal or a network node.

[0271] The present disclosure provides a communication method, a communication device, a communication system, and a storage medium. In some embodiments, the terms communication method and information processing method are interchangeable, the terms communication device and information processing device are interchangeable, and the terms information processing system and communication system are interchangeable.

[0272] The embodiments of the present disclosure are not exhaustive and are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the embodiments of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined. For example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

[0273] In each embodiment of the present disclosure, unless otherwise specified or provided for by logic, the terms and / or descriptions between the embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form a new embodiment based on their inherent logical relationships.

[0274] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the embodiments of the present disclosure.

[0275] In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular, such as "a", "an", "the", "above", "said", "the", "the", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun following the article may be understood as a singular expression or a plural expression.

[0276] In the embodiments of the present disclosure, "plurality" refers to two or more.

[0277] In some embodiments, the terms "at least one of", "at least one of", "at least one of", "one or more", "a plurality of", "multiple", and the like can be replaced with each other.

[0278] In the embodiments of the present disclosure, the description modes such as "at least one of A, B, C, and the like", "A and / or B and / or C, and the like" include any one of A, B, C, and the like existing alone, and also include any combination of any multiple of A, B, C, and the like, each of which can exist alone; for example, "at least one of A, B, C" includes the cases of A alone, B alone, C alone, A and B in combination, A and C in combination, B and C in combination, A and B and C in combination; for example, A and / or B includes the cases of A alone, B alone, and the combination of A and B.

[0279] In some embodiments, the description modes such as "A in one case and B in another case", "in response to one case A and in response to another case B", and the like can include the following technical solutions according to the cases: A is executed regardless of B, that is, A in some embodiments; B is executed regardless of A, that is, B in some embodiments; A and B are selectively executed, that is, A and B are selected from A and B to be executed in some embodiments; A and B are both executed, that is, A and B in some embodiments. When there are more branches of A, B, C, and the like, it is similar to the above.

[0280] The prefix words of "first", "second" and the like in the embodiments of the present disclosure are merely used to distinguish different description objects, and do not constitute limitation on the position, order, priority, quantity or content of the description objects. The description objects are described in the claims or embodiments, and should not be construed as redundant limitation because of the use of the prefix words. For example, the description object is "field", and the ordinal words before "field" in "first field" and "second field" do not limit the position or order between "fields", and "first" and "second" do not limit whether the "fields" modified thereby are in the same message or not, nor limit the order of "first field" and "second field". For another example, the description object is "level", and the ordinal words before "level" in "first level" and "second level" do not limit the priority between "levels". For another example, the quantity of the description object is not limited by the ordinal words, and can be one or more. For example, "first device", wherein the quantity of "device" can be one or more. In addition, the objects modified by different prefix words can be the same or different, for example, the description object is "device", and "first device" and "second device" can be the same device or different devices, and the types thereof can be the same or different. For another example, the description object is "information", and "first configuration" and "second configuration" can be the same information or different information, and the contents thereof can be the same or different.

[0281] In some embodiments, "including A", "containing A", "for indicating A", "carrying A" can be interpreted as directly carrying A, or indirectly indicating A.

[0282] In some embodiments, the terms of "in response to", "in response to determining", "in the case of", "when", "when", "if", "if" and the like can be replaced with each other.

[0283] In some embodiments, the terms of "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not lower than", "above" and the like can be replaced with each other, and the terms of "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "not more than", "lower than", "lower than or equal to", "not higher than", "below" and the like can be replaced with each other.

[0284] In some embodiments, an apparatus or the like can be interpreted as an entity, and can also be interpreted as virtual, and the name thereof is not limited to the name described in the embodiments, and the terms "apparatus", "equipment", "device", "circuit", "network element", "node", "function", "unit", "section", "system", "network", "chip", "chip system", "entity", "subject" and the like can be replaced with each other.

[0285] In some embodiments, the terms "access network device (AN device)", "radio access network device (RAN device)", "base station (BS)", "radio base station", "fixed station", "node", "access point", "transmission point (TP)", "reception point (RP)", "transmission / reception point (TRP)", "panel", "antenna panel", "antenna array", "cell", "macro cell", "small cell", "femto cell", "pico cell", "sector", "cell group", "carrier", "component carrier", "bandwidth part (BWP)" and the like can be replaced with each other.

[0286] In some embodiments, the terms "terminal", "terminal device", "user equipment (UE)", "user terminal", "mobile station (MS)", "mobile terminal (MT)", "subscriber station", "mobile unit", "subscriber unit", "wireless unit", "remote unit", "mobile device", "wireless device", "wireless communication device", "remote device", "mobile subscriber station", "access terminal", "mobile terminal", "wireless terminal", "remote terminal", "handset", "user agent", "mobile client", "client", and the like can be replaced with each other.

[0287] In some embodiments, the access network device, the core network device, or the network device can be replaced with a terminal. For example, for a structure in which communication between the access network device, the core network device, or the network device and the terminal is replaced with communication between a plurality of terminals (for example, also referred to as device-to-device (D2D), vehicle-to-everything (V2X), and the like), the embodiments of the present disclosure can also be applied. In this case, it can also be configured as a structure in which the terminal has all or part of the functions of the access network device. In addition, the language of "uplink", "downlink", and the like can also be replaced with language corresponding to the inter-terminal communication (for example, "side").

[0288] For example, the uplink channel, the downlink channel, and the like can be replaced with a sidelink channel, and the uplink, the downlink, and the like can be replaced with a sidelink.

[0289] In some embodiments, the terms "uplink", "uplink", "physical uplink", and the like can be replaced with each other, the terms "downlink", "downlink", "physical downlink", and the like can be replaced with each other, and the terms "side", "sidelink", "sidelink communication", "sidelink communication", "direct connection", "direct connection link", "direct connection communication", "direct connection link communication", and the like can be replaced with each other.

[0290] In some embodiments, the terms "downlink control information (DCI)", "downlink (DL) assignment", "DL DCI", "uplink (UL) grant", "UL DCI", and the like can be replaced with each other.

[0291] In some embodiments, the terms "physical downlink shared channel (PDSCH)", "DL data", and the like can be replaced with each other, and the terms "physical uplink shared channel (PUSCH)", "UL data", and the like can be replaced with each other.

[0292] In some embodiments, determination or judgment can be made by a value represented by 1 bit (0 or 1), or by a true or false value (Boolean value) represented by true or false, or by comparison of numerical values (for example, comparison with a predetermined value), but is not limited thereto.

[0293] In some embodiments, "network" can be interpreted as devices (for example, access network devices, core network devices, and the like) contained in the network.

[0294] In some embodiments, obtaining data, information, and the like can comply with the laws and regulations of the country where the location is located.

[0295] In some embodiments, data, information, and the like can be obtained after obtaining the consent of the user.

[0296] FIG. 1a is a schematic diagram of the architecture of a communication system according to an embodiment of the present disclosure.

[0297] As shown in FIG. 1a, the communication system 100 includes a terminal (terminal) 101 and a network device 102.

[0298] In some embodiments, the terminal 101 includes at least one of a mobile phone, a wearable device, an Internet of Things device, a communication-capable automobile, a smart automobile, a tablet (Pad), a wireless transceiver-equipped computer, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, a wireless terminal device in a smart home, and the like, but is not limited thereto.

[0299] In some embodiments, the network device 102 can include at least one of an access network device and a core network device.

[0300] In some embodiments, the access network device is at least one of a node or a device that accesses a terminal to a wireless network, for example, an evolved NodeB (eNB) in a 5G communication system, a next generation eNB (ng-eNB), a next generation NodeB (gNB), a node B (NB), a home node B (HNB), a home evolved node B (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an Open RAN, a Cloud RAN, a base station in other communication systems, an access node in a wireless fidelity (WiFi) system, and the like, but is not limited thereto.

[0301] In some embodiments, the technical solutions of the embodiments of the present disclosure can be applicable to an Open RAN architecture, at this time, the interfaces between or within the network devices involved in the embodiments of the present disclosure can become internal interfaces of the Open RAN, and the processes and information interactions between the internal interfaces can be implemented through software or programs.

[0302] In some embodiments, the access network device can be composed of a central unit (CU) and a distributed unit (DU), wherein the CU can also be referred to as a control unit. The CU-DU structure can split the protocol layers of the network device, and the functions of part of the protocol layers are controlled by the CU, and the functions of the remaining part or all of the protocol layers are distributed in the DU and controlled by the CU. However, the present disclosure is not limited to this.

[0303] In some embodiments, the access network device can be one device, or a plurality of devices or device groups, and respectively includes all or part of the first network element, the second network element, and the like. The network element can be virtual or physical. The network device includes at least one of an evolved packet core (EPC), a 5G core network (5GCN), and a next generation core (NGC).

[0304] In some embodiments, the core network device can be one device including one or more network elements, or a plurality of devices or device groups, and respectively includes all or part of the one or more network elements. The network element can be virtual or physical. The core network includes at least one of an evolved packet core (EPC), a 5G core network (5GCN), and a next generation core (NGC).

[0305] In some embodiments, the network device 102 can include a core network element, for example: at least one of a PKMF, a DDNMF, a UDM, and a PCF. Among them, the PKMF (ProSe Key Management Function) is a 5G proximity service (Proximity-based Service, ProSe) key management function. The DDNMF (Direct Discovery Name Management Function) is a proximity communication service name management function. The UDM (Unified Data Management) is a unified data management function, responsible for user identification, subscription data, authentication data management, user service network element registration management, etc. The PCF (Policy Control Function) is a policy control function, which provides policy rules for network entities.

[0306] It can be understood that the communication system described in the embodiments of the present disclosure is for more clearly illustrating the technical solutions of the embodiments of the present disclosure, and does not constitute a limitation on the technical solutions proposed in the embodiments of the present disclosure. Those skilled in the art can know that, as the system architecture evolves and new business scenarios appear, the technical solutions proposed in the embodiments of the present disclosure are also applicable to similar technical problems.

[0307] The following embodiments of the present disclosure can be applied to the communication system 100 shown in FIG. 1a or part of the subject, but are not limited thereto. The subjects shown in FIG. 1a are exemplary, and the communication system can include all or part of the subjects in FIG. 1a, or other subjects other than FIG. 1a. The number and form of each subject is arbitrary, and the connection relationship between each subject is exemplary. Each subject can be connected or not connected, and the connection can be in any way, can be direct connection or indirect connection, can be wired connection or wireless connection.

[0308] Embodiments of the present disclosure can be applied to Long Term Evolution (LTE), LTE-Advanced (LTE-A), LTE-Beyond (LTE-B), SUPER 3G, IMT-Advanced, 4th generation mobile communication system (4G), 5th generation mobile communication system (5G), 5G new radio (NR), Future Radio Access (FRA), New-Radio Access Technology (RAT), New Radio (NR), New radio access (NX), Future generation radio access (FX), Global System for Mobile communications (GSM (registered trademark)), CDMA2000, Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, Ultra-WideBand (UWB), Bluetooth (Bluetooth (registered trademark)), Public Land Mobile Network (PLMN) network, Device-to-Device (D2D) system, Machine to Machine (M2M) system, Internet of Things (IoT) system, Vehicle-to-Everything (V2X), system using other communication methods, next-generation system expanded based thereon, and the like. Further, a plurality of systems can be applied in combination (for example, combination of LTE or LTE-A and 5G, and the like).

[0309] Sidelink (SL) communication mode, or called Proximity-based Services (ProSe), is introduced to support the communication between terminals out of network coverage and the network. As shown in FIG. 1b, a terminal can not be directly connected with a base station, but can realize the communication with the base station through the relay function of another terminal. The communication interface between UEs is PC5 interface. A UE can not be directly connected with a network device (such as a base station), but can realize the communication with the network device through the relay of another UE. Among them, the UE without connection with the network device is called remote UE, and the UE providing relay function is called relay UE. The remote UE and the relay UE communicate through the sidelink, and this architecture is called UE to NW (UE-to-Network Relay, UE-to-Network Relay) relay.

[0310] It is found that security material can be used to protect the announcement messages and request / response messages of the U2N discovery process and the ranging / SL positioning discovery process.

[0311] The single-hop relay discovery, selection, authorization, connection establishment and data transmission of ProSe UE-to-Network Relay have been solved. With the development of communication technology, it is necessary to support multi-hop U2N relay on the PC5 reference point. The intermediate relay is a ProSe UE located on the path between the remote UE and the UE-to-Network Relay (UE-to-Network Relay), which provides the function of supporting the connection of 5G ProSe (Proximity-based Services, Proximity-based Services) remote UE to the network.

[0312] In order to realize this new function of multi-hop U2N relay, it is necessary to study how to support the discovery of multi-hop U2N relay. For model A discovery process, the U2N relay sends an announcement message, and the intermediate relay forwards the announcement message. Based on the received announcement message, the remote UE can select the path for establishing the connection to the network.

[0313] However, there is currently no related security protection scheme to ensure the security of multi-hop U2N relay discovery. Without security protection, an attacker can impersonate an intermediate relay and publish false information of a U2N relay, making it impossible for a remote UE to discover potential U2N relays and thus unable to connect to the network. Therefore, the security protection of the multi-hop U2N relay discovery process is a problem that needs to be solved.

[0314] The scheme provided by the embodiments of the present disclosure provides a communication method, which can realize the security protection of the multi-hop U2N relay discovery process, can prevent an attacker from impersonating an intermediate relay to publish false information of a U2N relay, and can ensure that a remote UE can safely discover potential U2N relays through an intermediate relay.

[0315] Based on the above wireless communication system, various embodiments of the communication method proposed by the present disclosure are described in detail below.

[0316] FIG. 2a is an interaction diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 2a, the communication method is used in the communication system 100, and the method comprises:

[0317] S201, the first relay device sends a first message to the first network node, wherein the first message comprises a relay service code (RSC).

[0318] In some embodiments, the role of the first relay device can be similar to that of an announcing UE (A-UE) in a relay discovery process, which can also be referred to as an announcing UE or a broadcasting UE, and can also be referred to as a discoveree UE or a UE-to-network relay UE (U2N relay UE).

[0319] In some embodiments, the first network node receives the first message sent by the first relay device.

[0320] In some embodiments, the first message is used to request discovery security material.

[0321] In some embodiments, the first message is used to request discovery security material associated with the RSC. Optionally, the first message is used to request the first network node to provide discovery security material associated with the RSC.

[0322] In some embodiments, the RSC represents a relay service code, which can be used to identify a proximity service (ProSe) provided by a 5G ProSe relay, and each ProSe service has a corresponding RSC. Optionally, the RSC can include service information, security policies, etc. of the ProSe service.

[0323] In some embodiments, the remote UE establishes a PC5 connection with the first relay device through a preconfigured relay service code. It can be understood that the relay service code locally configured by the remote UE is the same as the relay service code preconfigured by the first relay device, or is equivalent, or the peer-to-peer information of the two can be obtained through a specific encryption / decryption algorithm, for example: the relay service code of the remote UE corresponds to the same application identifier as the relay service code of the first relay device.

[0324] In some embodiments, the discovery security material is used to verify and / or secure information in the discovery procedure.

[0325] In some embodiments, the discovery security material can be described as key material, or as discovery security parameters.

[0326] In some embodiments, the first message can be a discovery key request message, or a relay discovery key request message, but the name of the message is not limited thereto.

[0327] In some embodiments, the names of information, etc. are not limited to the names described in the embodiments, and the terms of “information”, “message”, “signal”, “signaling”, “report”, “configuration”, “indication”, “instruction”, “command”, “channel”, “parameter”, “domain”, “field”, “symbol”, “data”, etc. can be replaced with each other.

[0328] In some embodiments, the terms of “send”, “transmit”, “report”, “issue”, “transmit”, “bidirectional transmission”, “send and / or receive”, etc. can be replaced with each other.

[0329] In some embodiments, the first network node is a network node corresponding to the first relay device.

[0330] In some embodiments, the first network node can be a network node corresponding to a 5G Proximity-based Service (ProSe) Key Management Function (PKMF), or a network node corresponding to a Direct Discovery Name Management Function (DDNMF).

[0331] Optionally, the PKMF or the DDNMF is a PKMF or a DDNMF corresponding to the first relay device.

[0332] In some embodiments, the first relay device can be a relay device supporting a multi-hop U2N relay service. Optionally, the first relay device can be a U2N relay, or an intermediate relay.

[0333] In some embodiments, the first relay device can be a device whose role information is U2N relay, which supports multi-hop U2N relay service. Optionally, the first relay device can act as a U2N relay and / or an intermediate relay in the multi-hop U2N relay service.

[0334] In some embodiments, the first relay device can also be a device whose role information is intermediate relay. Optionally, the first relay device can act as an intermediate relay in the multi-hop U2N relay service, i.e., responsible for transferring communication information between a remote UE and a U2N relay.

[0335] In some embodiments, the first message can further include at least one of the following:

[0336] a second ID of a second relay device authorized to provide multi-hop U2N relay service;

[0337] role information of the first relay device;

[0338] a first indication information indicating that the first relay device supports multi-hop U2N service.

[0339] In some embodiments, the first message can further carry a second ID of a second relay device. Optionally, the first message can further carry a list of second IDs of the second relay device authorized to provide multi-hop U2N relay service.

[0340] In some embodiments, the first network node can determine a second network node corresponding to the second relay device based on the second ID of the second relay device in the first message. Optionally, the second ID can be a home network identifier of the second relay device, e.g., HPLMN ID, based on which the second network node can be determined.

[0341] In some embodiments, the first message can further carry role information of the first relay device.

[0342] Optionally, the role of the first relay device can be indicated by carrying bit information in the first message. For example, 1 bit can be used to indicate the role of the first relay device, e.g., a bit value of "0" indicates that the first relay device is a U2N relay, and a bit value of "1" indicates that the first relay device is an intermediate relay. However, the present application is not limited thereto.

[0343] Optionally, the role of the first relay device is indicated by carrying an identifier in the first message. For example, the identifier is 1, indicating that the first relay device is a U2N relay; the identifier is 2, indicating that the first relay device is an intermediate relay; the identifier is 3, indicating that the first relay device is a remote UE, but not limited thereto.

[0344] In some embodiments, if the role information of the first relay device carried in the first message indicates that the first relay device is a U2N relay, the first indication information is further carried, indicating that the U2N relay supports multi-hop U2N service.

[0345] In some embodiments, the first network node can determine the second network node corresponding to the second relay device based on a mapping relationship between the locally configured RSC and the second ID.

[0346] In some embodiments, the names of mapping relationship and the like are not limited to the names described in the embodiments, and the terms of "correspondence", "mapping relationship", "binding relationship", "association relationship" and the like can be replaced with each other.

[0347] In some embodiments, the names of determination and the like are not limited to the names described in the embodiments, and the terms of "identify", "determine", "obtain" and the like can be replaced with each other.

[0348] S202, the first network node sends a fifth message to the second network node in response to the first message.

[0349] In some embodiments, the fifth message includes an RSC, which is the RSC included in the first message.

[0350] In some embodiments, the second network node receives the fifth message sent by the first network node.

[0351] In some embodiments, the fifth message is used to request discovery security material.

[0352] In some embodiments, the fifth message is used to request discovery security material associated with the RSC. Optionally, the fifth message is used to request the second network node to provide discovery security material associated with the RSC.

[0353] In some embodiments, the discovery security material can be described as key material, or as discovery security parameter.

[0354] In some embodiments, the fifth message can be a discovery key request message, or a relay discovery key request message, but the name of the message is not limited thereto.

[0355] In some embodiments, the second network node is a network node corresponding to the second relay device.

[0356] In some embodiments, the second network node can be a network node corresponding to a PKMF, or a network node corresponding to a DDNMF. Optionally, the PKMF or the DDNMF is a PKMF or a DDNMF corresponding to the second relay device.

[0357] In some embodiments, the second relay device can be a relay device that potentially supports a multi-hop U2N relay service. Optionally, the second relay device can be a potential U2N relay, or a potential intermediate relay.

[0358] In some embodiments, if the first message further carries a second ID of the second relay device, the first network node can send the fifth message to the corresponding second network node based on the second ID.

[0359] In some embodiments, the first network node can determine the corresponding second network node based on the second ID in the first message, and send the fifth message to the second network node.

[0360] In some embodiments, the first network node can send the fifth message to the corresponding second network node based on a mapping relationship between the RSC and the second ID.

[0361] In some embodiments, the first network node is locally configured with the mapping relationship between the RSC and the second ID.

[0362] In some embodiments, the first network node can determine the second network node corresponding to the second ID based on the locally configured mapping relationship between the RSC and the second ID, and send the fifth message to the second network node.

[0363] S203, the second network node sends a sixth message to the first network node in response to the fifth message.

[0364] In some embodiments, the sixth message includes second discovery security material related to the second ID of the second relay device.

[0365] In some embodiments, at least one relay device can correspond to one network node, and for all relay devices belonging to one network node, the corresponding security material is the same, and therefore, the corresponding discovery security material of the relay device can be obtained based on the ID of the relay device, wherein the ID of the relay device is used to indicate the corresponding network node.

[0366] Optionally, if the first network node sends the fifth message to the at least one second network node, the sixth message sent by the at least one second network node can be received, and at least one second discovery security material related to a second ID of the second relay device can be obtained.

[0367] In some embodiments, the sixth message is a response message of the fifth message, and the sixth message can be a discovery key response message or a relay discovery key response message, but the name of the message is not limited thereto.

[0368] S204, the first network node sends, in response to the first message, a second message to the first relay device, and the second message includes discovery security material.

[0369] In some embodiments, the discovery security material is sent to the first relay device in response to the first message for a proximity service discovery process.

[0370] In some embodiments, the discovery security material includes at least one of the following:

[0371] first discovery security material related to a first ID of the first relay device;

[0372] at least one second discovery security material related to a second ID of a second relay device.

[0373] In some embodiments, the discovery security material includes at least one set of key material.

[0374] In some embodiments, the first network node can carry multiple sets of key material in a response message in response to the first message.

[0375] It should be noted that the multiple sets in the present embodiment can be understood as more than one set.

[0376] In some embodiments, the second message is a response message of the first message, and the second message can be a discovery key response message or a relay discovery key response message, but the name of the message is not limited thereto.

[0377] In some embodiments, if the first message further includes PC5 UE security capability, the sixth message further includes a selected PC5 encryption algorithm, and the second message can further include PC5 security policy, current time information, maximum offset parameter, and the like.

[0378] In some embodiments, the first ID can be a home network identifier corresponding to the first relay device, for example, an HPLMN ID, based on which the first network node can be corresponded.

[0379] On the basis of the method, the method can further include: performing, by the first relay device, a relay discovery process based on discovery security material. Specifically, the method can include the following steps:

[0380] S205: The first relay device receives the first announcement message broadcast by the second relay device.

[0381] In some embodiments, the first announcement message broadcast by the second relay device is secured based on discovery security material related to the second ID of the second relay device.

[0382] In some embodiments, the first announcement message received by the first relay device is secured by discovery security material related to the second ID of the second relay device. Optionally, the discovery security material related to the second ID of the second relay device is discovery security material determined by the second relay device based on the second ID and the RSC carried in the fifth message, for example, denoted as discovery security material 1.

[0383] In some embodiments, the announcement message (Announcement Message) can also be described as an announcement message, an announcement message, but the name of the message is not limited thereto.

[0384] S206: The first relay device verifies the received first announcement message.

[0385] In some embodiments, the first relay device verifies the received first announcement message based on discovery security material determined by the second ID and the RSC.

[0386] In some embodiments, the first relay device determines discovery security material 1 from the discovery security material obtained from the second message of step S204 based on the second ID and the RSC, and verifies the received first announcement message based on the discovery security material 1.

[0387] S207: If the first announcement message is verified, the first relay device broadcasts a second announcement message.

[0388] In some embodiments, the second announcement message broadcast by the first relay device is secured by discovery security material related to the first ID. Optionally, after the first announcement message received by the first relay device is verified, the second announcement message can be secured by discovery security material determined based on the RSC and the first ID (for example, discovery security material 2).

[0389] In some embodiments, if the first hop value obtained based on the first announcement message satisfies the first condition, the first relay device broadcasts the second announcement message.

[0390] In some embodiments, the second announcement message comprises information related to the first relay device. Optionally, the information related to the first relay device can comprise a user info ID of the first relay device.

[0391] In some embodiments, the second announcement message can further comprise an RSC and a first hop count value.

[0392] In some embodiments, the first relay device can add its user info ID to the received first announcement message, and broadcast the second announcement message with the added user info ID of the first relay device.

[0393] In some embodiments, the first hop count value obtained based on the first announcement message can be the hop count value in the first announcement message plus 1.

[0394] In some embodiments, the first hop count value satisfying the first condition can comprise that the first hop count value is less than a hop count threshold. Optionally, the hop count value in the first announcement message plus 1 is less than the hop count threshold.

[0395] In some embodiments, the hop count threshold can be pre-defined, protocol-defined, or configured by high layer signaling, but not limited thereto.

[0396] In some embodiments, the first relay device broadcasts the second announcement message if the first hop count value obtained based on the first announcement message satisfies the first condition, and information in the first announcement message satisfies a second condition.

[0397] In some embodiments, the information in the first announcement message satisfying the second condition can comprise:

[0398] at least one of the RSC in the first announcement message and the information related to the second relay device is not stored in the information entry; or

[0399] the RSC in the first announcement message and the information related to the second relay device are stored in the information entry, and the first hop count value is less than a second hop count value stored in the information entry.

[0400] In some embodiments, the first relay device broadcasts the second announcement message if the first hop count value satisfies the first condition, and the RSC in the first announcement message and / or the information related to the second relay device is not stored in the information entry. Optionally, the first hop count value satisfying the first condition can comprise that the first hop count value is less than a hop count threshold.

[0401] In some embodiments, the first relay device broadcasts the second announcement message if the first hop count value satisfies the first condition, and the RSC in the first announcement message and the related information of the second relay device are stored in the information entry, and the first hop count value is less than the second hop count value stored in the information entry.

[0402] In some embodiments, the second hop count value can be less than the hop count threshold.

[0403] In some embodiments, the second announcement message includes the RSC, the first hop count value, and the information related to the first relay device. Optionally, the information related to the first relay device can include the user information ID of the first relay device.

[0404] It should be noted that, in the case that the first relay device maintains the information entry, whether to broadcast the second announcement message can be determined based on whether the information in the first announcement message satisfies the second condition.

[0405] S208, if the announcement message is verified, the first relay device updates the stored information entry.

[0406] In some embodiments, the first relay device can update the information entry based on the information included in the announcement message. Optionally, the information included in the announcement message can include at least one of the RSC, the first hop count value, and the user information ID of the first relay device.

[0407] In some embodiments, the information entry can include at least one of the RSC, the user information ID of the first relay device, the first hop count, the source Layer-2 ID of the announcement message, the count based on the universal time coordinate (UTC), and the user information ID of the second relay device.

[0408] The method related to the embodiments of the present disclosure can include at least one of steps S201-S208. For example, steps S201, S204, S205, and S206 can be implemented as independent embodiments, steps S201, S204, S205, S206, and S207 can be implemented as independent embodiments, steps S201, S204, S205, S206, and S208 can be implemented as independent embodiments, steps S201, S202, S203, S204, S205, and S206 can be implemented as independent embodiments, steps S201, S202, S203, S204, S205, S206, and S207 can be implemented as independent embodiments, steps S201, S202, S203, S204, S205, S206, and S208 can be implemented as independent embodiments, but are not limited thereto.

[0409] In some embodiments, steps S202 and S203 are optional, and one or more of these steps can be omitted or replaced in different embodiments.

[0410] In some embodiments, step S207 is optional, and one or more of these steps can be omitted or replaced in different embodiments.

[0411] In some embodiments, step S208 is optional, and one or more of these steps can be omitted or replaced in different embodiments.

[0412] FIG. 2b is an interaction diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 2b, the communication method is used in the communication system 100, and the method comprises:

[0413] S211. The terminal sends a third message to the third network node, wherein the third message comprises the RSC.

[0414] In some embodiments, the terminal is a remote terminal of the discovery process.

[0415] Optionally, in the relay discovery process, the terminal can be a discoverer UE.

[0416] In some embodiments, the third network node is a network node corresponding to the terminal.

[0417] In some embodiments, the third network node can be a network node corresponding to the PKMF, or a network node corresponding to the DDNMF. Optionally, the PKMF or the DDNMF is a PKMF or a DDNMF corresponding to the terminal.

[0418] In some embodiments, the third message is used to request discovery security material.

[0419] In some embodiments, the third message is used to request discovery security material associated with the RSC.

[0420] In some embodiments, the discovery security material can be described as key material, or can be described as discovery security parameter.

[0421] In some embodiments, the third message can be a Relay Discovery Key Request message, or can be a Discovery Key Request message, but the name of the message is not limited thereto.

[0422] In some embodiments, the third message can further comprise at least one of the following:

[0423] a first ID of the first relay device;

[0424] a second ID of the second relay device.

[0425] In some embodiments, the first network node is a network node corresponding to the first relay device, and the second network node is a network node corresponding to the second relay device.

[0426] In this embodiment, the related content of the first network node and the first relay device can refer to the related description in step S201 in FIG. 2a described above, and will not be repeated here. The related content of the second network node and the second relay device can refer to the related description in step S202 in FIG. 2a described above, and will not be repeated here.

[0427] In some embodiments, the first ID of the first relay device and / or the second ID of the second relay device can be included in the third message. Optionally, the terminal is authorized to use the multi-hop U2N relay service provided by the first relay device and / or the second relay device.

[0428] In some embodiments, in the case that the terminal is authorized to use the multi-hop U2N relay service provided by the first relay device and / or the second relay device, the first ID of the first relay device and / or the second ID of the second relay device can be included in the third message sent by the terminal to the third network node. Optionally, the terminal can obtain the first ID and the second ID from the PCF.

[0429] Optionally, the first ID of the first relay device and the second ID of the second relay device can be included in the third message, wherein the terminal is authorized to use the multi-hop U2N relay service provided by the first relay device and the second relay device.

[0430] Optionally, the first ID of the first relay device can be included in the third message, wherein the terminal is authorized to use the multi-hop U2N relay service provided by the first relay device.

[0431] Optionally, the second ID of the second relay device can be included in the third message, wherein the terminal is authorized to use the multi-hop U2N relay service provided by the second relay device.

[0432] In some embodiments, the third network node can determine the first network node corresponding to the first relay device based on the first ID of the first relay device in the third message.

[0433] In some embodiments, the third network node can determine the second network node corresponding to the second relay device based on the second ID of the second relay device in the third message.

[0434] In some embodiments, the third network node is configured with at least one of the second mapping relationship:

[0435] a mapping relationship between the RSC and the second ID;

[0436] a mapping relationship between the RSC and the first ID.

[0437] In some embodiments, the third network node can determine the corresponding second network node based on the mapping relationship between the RSC and the second ID configured locally.

[0438] In some embodiments, the third network node can determine the corresponding first network node based on the mapping relationship between the RSC and the first ID configured locally.

[0439] S212, in response to the third message, the third network node sends a seventh message to the second network node and / or the first network node.

[0440] In some embodiments, the third network node can send the seventh message to the corresponding first network node and / or the second network node based on the first ID of the first relay device and / or the second ID of the second relay device included in the third message.

[0441] In some embodiments, the seventh message is used to request the first network node and / or the second network node to provide discovery security material. Optionally, the discovery security material can be described as key material or discovery security parameter.

[0442] In some embodiments, the seventh message includes the RSC.

[0443] In some embodiments, the seventh message is used to request the first network node and / or the second network node to provide discovery security material associated with the RSC.

[0444] In some embodiments, the seventh message can be a Relay Discovery Key Request message or a Discovery Key Request message, but the name of the message is not limited thereto.

[0445] In some embodiments, S212 can specifically include S212a: the third network node sends the seventh message to the first network node.

[0446] In some embodiments, the seventh message is used to request the first network node to provide first discovery security material.

[0447] In some embodiments, the third network node can determine the first network node corresponding to the first relay device based on the first ID of the first relay device included in the third message, and send the seventh message to it.

[0448] In some embodiments, the third network node can determine the corresponding first network node based on a mapping relationship between the locally configured RSC and the first ID, and send the seventh message to the first network node.

[0449] In some embodiments, S212 can specifically include S212b: the third network node sends the seventh message to the second network node.

[0450] In some embodiments, the seventh message is used to request the second network node to provide the second discovery security material.

[0451] In some embodiments, the third network node can determine the second network node corresponding to the second relay device based on the second ID of the second relay device included in the third message, and send the seventh message to the second network node.

[0452] In some embodiments, the third network node can determine the corresponding second network node based on a mapping relationship between the locally configured RSC and the second ID, and send the seventh message to the second network node.

[0453] In some embodiments, the third network node can send the seventh message to the second network node and the first network node.

[0454] In some embodiments, the third network node can determine the first network node corresponding to the first relay device based on the first ID of the first relay device included in the third message, and send the seventh message to the first network node, and determine the second network node corresponding to the second relay device based on the second ID of the second relay device included in the third message, and send the seventh message to the second network node.

[0455] In some embodiments, the third network node can determine the corresponding first network node based on a mapping relationship between the locally configured RSC and the first ID, and send the seventh message to the first network node, and determine the corresponding second network node based on a mapping relationship between the locally configured RSC and the second ID, and send the seventh message to the second network node.

[0456] S213, the second network node and / or the first network node sends an eighth message to the third network node in response to the seventh message.

[0457] In some embodiments, the eighth message is a response message of the seventh message, and the eighth message can be a discovery key response message or a relay discovery key response message, but the name of the message is not limited thereto.

[0458] S213 can specifically include S213a: the first network node sends the eighth message to the third network node.

[0459] In some embodiments, the eighth message is used to provide the first discovery security material to the third network node.

[0460] In some embodiments, the first network node can determine the corresponding first discovery security material based on the RSC included in the third message, and send an eighth message to the third network node.

[0461] In some embodiments, S213 can specifically include S213b: the second network node sends an eighth message to the third network node.

[0462] In some embodiments, the eighth message is used to provide the second discovery security material to the third network node.

[0463] In some embodiments, the second network node can determine the corresponding second discovery security material based on the RSC included in the third message, and send an eighth message to the third network node.

[0464] In some embodiments, if the third network node sends the seventh message to the second network node and the first network node, the first network node sends the first discovery security material to the third network node, and the second network node sends the second discovery security material to the third network node.

[0465] It should be understood that if the second network node is multiple, the second discovery security material is multiple. Wherein multiple can be understood as more than one.

[0466] S214, the third network node sends a fourth message to the terminal in response to the third message.

[0467] In some embodiments, the fourth message is a response message of the third message, and the fourth message can be a discovery key response message or a relay discovery key response message, but the name of the message is not limited thereto.

[0468] In some embodiments, the fourth message includes at least one of:

[0469] The first discovery security material related to the first ID of the first relay device;

[0470] At least one discovery security material related to the second ID of the second relay device.

[0471] In some embodiments, if the PC5 UE security capability is also included in the third message, the eighth message also includes: the selected PC5 encryption algorithm, and the fourth message can also include: the PC5 security policy, and the current time information and the maximum offset parameter, etc.

[0472] On the basis of the above method, it can also include: the terminal performs a relay discovery process based on the discovery security material. Specifically, it can include the following steps:

[0473] S215, the terminal receives the second announcement message broadcast by the first relay device.

[0474] In some embodiments, the terminal can receive a second announcement message broadcast by the first relay device.

[0475] In some embodiments, the terminal can receive a second announcement message broadcast by at least one of the first relay devices.

[0476] In this embodiment, the second announcement message is secured by discovery security material (e.g., discovery security material 2) determined by the first relay device based on the RSC and the first ID.

[0477] S216, the terminal verifies the received second announcement message.

[0478] In some embodiments, the terminal verifies the received second announcement message based on discovery security material determined by the first ID and the RSC.

[0479] In some embodiments, the terminal determines discovery security material 2 from the discovery security material obtained from the fourth message of step S214 based on the first ID and the RSC, and verifies the received second announcement message based on the discovery security material 2.

[0480] In some embodiments, the terminal can receive the second announcement message from the first relay devices with different hop counts, and can select one of the first relay devices to connect to the network after the second announcement message is verified.

[0481] The method related to the embodiments of the present disclosure can include at least one of steps S211-S216. For example, steps S211, S214, S215, S216 can be implemented as independent embodiments, steps S211, S212a, S213a, S214, S215, S216 can be implemented as independent embodiments, steps S211, S212b, S213b, S214, S215, S216 can be implemented as independent embodiments, but are not limited thereto.

[0482] In some embodiments, steps S212a, S213a are optional, and one or more of these steps can be omitted or replaced in different embodiments.

[0483] In some embodiments, steps S212b, S213b are optional, and one or more of these steps can be omitted or replaced in different embodiments.

[0484] FIG. 3a is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 3a, the communication method can be performed by a first relay device, and the method includes:

[0485] S301. Send a first message to a first network node, wherein the first message comprises an RSC.

[0486] In some embodiments, the first message is used to request the first network node to provide discovery security material.

[0487] Optional implementation of step S301 can refer to the optional implementation of step S201 of FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0488] In some embodiments, the first network node is a network node corresponding to the first relay device. Optionally, the first network node can be a PKMF or a DDNMF.

[0489] S302. Receive a second message sent by the first network node.

[0490] In some embodiments, the second message comprises at least one of:

[0491] a first discovery security material related to a first ID of the first relay device;

[0492] at least one second discovery security material related to a second ID of a second relay device.

[0493] Optional implementation of step S302 can refer to the optional implementation of step S204 of FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0494] In some embodiments, the second discovery security material is obtained by the first network node from a second network node. Optionally, the second network node is a network node corresponding to the second relay device.

[0495] The above optional implementation can refer to the optional implementation of steps S202-S203 of FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0496] S303. Receive a first announcement message broadcast by a second relay device.

[0497] In some embodiments, the first announcement message broadcast by the second relay device is securely protected based on discovery security material related to a second ID of the second relay device.

[0498] Optional implementation of step S303 can refer to the optional implementation of step S205 of FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0499] S304. Verify the first announcement message based on discovery security material determined by the second ID and the RSC.

[0500] In some embodiments, the first relay device verifies the received first announcement message based on the discovery security material determined by the second ID and the RSC.

[0501] The optional implementation of step S304 can refer to the optional implementation of step S206 of FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0502] S305, if the first announcement message is verified, broadcast the second announcement message.

[0503] In some embodiments, if the first hop value obtained based on the first announcement message satisfies the first condition, the first relay device adds its user information ID in the first announcement message to obtain the second announcement message for broadcasting.

[0504] Optionally, the first hop value obtained based on the first announcement message satisfies the first condition can be that the hop value in the first announcement message + 1 is less than the hop threshold. Wherein, the first hop value is the hop value in the announcement message + 1.

[0505] In some embodiments, if the first hop value obtained based on the first announcement message satisfies the first condition, and the information in the first announcement message satisfies the second condition, the first relay device broadcasts the second announcement message.

[0506] Optionally, the information in the first announcement message satisfies the second condition, including:

[0507] At least one of the RSC in the first announcement message and the related information of the second relay device is not stored in the information entry; or,

[0508] The RSC in the first announcement message and the related information of the second relay device are stored in the information entry, and the first hop value is less than the second hop value stored in the information entry.

[0509] The optional implementation of step S305 can refer to the optional implementation of step S207 of FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0510] On the basis of the above-mentioned embodiments, it can also include: if the first announcement message is verified, updating the stored information entry.

[0511] The optional implementation can refer to the optional implementation of step S208 of FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0512] The method involved in the embodiments of the present disclosure can include at least one of steps S301-S305.

[0513] FIG. 3b is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 3b, the communication method can be performed by a first relay device, and the method includes:

[0514] S311, obtaining discovery security material.

[0515] The optional implementation of step S311 can refer to the optional implementation of step S201 of FIG. 2a, step S301 of FIG. 3a, and other associated parts in the embodiments related to FIG. 2a and FIG. 3a, which will not be repeated here.

[0516] In some embodiments, the first relay device receives the discovery security material sent by the first network node.

[0517] In some embodiments, the discovery security material includes at least one of:

[0518] the first discovery security material corresponding to the first relay device;

[0519] the second discovery security material corresponding to the at least one second relay device.

[0520] In some embodiments, step S311 can include:

[0521] sending a first message to the first network node, the first message including a relay service code (RSC) for requesting the discovery security material;

[0522] receiving a second message sent by the first network node.

[0523] In some embodiments, the second message includes at least one of:

[0524] the first discovery security material related to the first ID of the first relay device;

[0525] the second discovery security material related to the second ID of the at least one second relay device.

[0526] The optional implementation described above can refer to the optional implementation of steps S201 and S204 of FIG. 2a, and other associated parts in the embodiments related to FIG. 2a, which will not be repeated here.

[0527] In some embodiments, if the first relay device is a first terminal-to-network (U2N) relay and supports a multi-hop U2N relay service, the second discovery security material is obtained by the first network node from a second network node, where the second network node is a network node corresponding to the second relay device.

[0528] In some embodiments, the second discovery security material is obtained by the first network node from a second network node if the first relay device is a first intermediate relay, wherein the second network node is a network node corresponding to the second relay device.

[0529] In some embodiments, the second relay device comprises at least one of:

[0530] a second U2N relay;

[0531] a second intermediate relay.

[0532] The optional implementation manners above can refer to the optional implementation manners of steps S202-S203 in FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0533] In some embodiments, the first message further comprises at least one of:

[0534] a second ID of the second relay device, the second relay device being authorized to provide a multi-hop U2N relay service;

[0535] role information of the first relay device;

[0536] first indication information, used to indicate that the first relay device supports a multi-hop U2N service.

[0537] S312, performing a relay discovery procedure based on the discovery security material.

[0538] The optional implementation manners of step S312 can refer to the optional implementation manners of step S206 in FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0539] In some embodiments, a first announcement message broadcast by the second relay device is received, the first announcement message being securely protected by discovery security material related to a second ID of the second relay device; and the announcement message is verified based on the discovery security material determined by the second ID and the RSC.

[0540] In some embodiments, the method further comprises: if the first announcement message is verified, broadcasting a second announcement message.

[0541] Optionally, the second announcement message is securely protected by discovery security material related to the first ID.

[0542] In some embodiments, the broadcasting of the second announcement message comprises:

[0543] if a first hop value obtained based on the first announcement message satisfies a first condition, broadcasting the second announcement message, the second announcement message comprising information related to the first relay device; or

[0544] If the first hop value satisfies the first condition and the information in the first announcement message satisfies the second condition, a second announcement message is broadcasted.

[0545] In some embodiments, the information in the first announcement message satisfying the second condition comprises:

[0546] The RSC in the first announcement message and / or the related information of the second relay device are not stored in the information entry; or,

[0547] The RSC in the first announcement message and the related information of the second relay device are stored in the information entry, and the first hop value is smaller than the second hop value stored in the information entry.

[0548] The optional implementation manners of the above can refer to the optional implementation manners of step S207 in FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0549] In some embodiments, the above method further comprises: if the first announcement message is verified, updating the stored information entry.

[0550] The optional implementation manners of the above can refer to the optional implementation manners of step S208 in FIG. 2a and other associated parts in the embodiments involved in FIG. 2a, which will not be repeated here.

[0551] FIG. 4a is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 4a, the method involved in the embodiment of the present disclosure is executed by a terminal, and the above method comprises:

[0552] S401, a third message is sent to a third network node, and the third message comprises an RSC.

[0553] In some embodiments, the third message is used to request the third network node to provide discovery security material.

[0554] The optional implementation manners of step S401 can refer to the optional implementation manners of step S211 in FIG. 2b and other associated parts in the embodiments involved in FIG. 2b, which will not be repeated here.

[0555] In some embodiments, the third network node is a network node corresponding to the terminal. Optionally, the third network node can be a PKMF or a DDNMF.

[0556] S402, a fourth message sent by the third network node is received.

[0557] In some embodiments, the fourth message comprises at least one of:

[0558] first discovery security material related to the first ID of the first relay device;

[0559] at least one second discovery security material related to a second ID of the second relay device.

[0560] The optional implementation of step S402 can refer to the optional implementation of step S214 in FIG. 2b and other associated parts in the embodiments involved in FIG. 2b, which will not be repeated here.

[0561] In some embodiments, the first relay device is the device that initiates the discovery procedure.

[0562] In some embodiments, the second discovery security material is obtained by the third network node from the second network node and / or the first network node. Optionally, the second network node is a network node corresponding to the second relay device. The first network node is a network node corresponding to the first relay device.

[0563] The optional implementation of the above can refer to the optional implementation of steps S212a-S213a and S212b-S213b in FIG. 2b and other associated parts in the embodiments involved in FIG. 2b, which will not be repeated here.

[0564] S403, receiving the second announcement message broadcast by the first relay device.

[0565] In some embodiments, the second announcement message broadcast by the first relay device is securely protected based on the discovery security material related to the first ID of the first relay device.

[0566] The optional implementation of step S403 can refer to the optional implementation of step S215 in FIG. 2b and other associated parts in the embodiments involved in FIG. 2b, which will not be repeated here.

[0567] S404, verifying the second announcement message based on the discovery security material determined by the first ID and the RSC.

[0568] In some embodiments, the terminal verifies the received second announcement message based on the discovery security material determined by the first ID and the RSC.

[0569] The optional implementation of step S404 can refer to the optional implementation of step S216 in FIG. 2b and other associated parts in the embodiments involved in FIG. 2b, which will not be repeated here.

[0570] FIG. 4b is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 4b, the method involved in the embodiments of the present disclosure is executed by a terminal, and the above method comprises:

[0571] S411, obtaining a discovery security material.

[0572] The optional implementation of step S411 can refer to the optional implementation of step S211 in FIG. 2b, the optional implementation of step S401 in FIG. 4a, and other associated parts in the embodiments related to FIG. 2b and FIG. 4a, which will not be repeated here.

[0573] In some embodiments, the terminal receives the discovery security material sent by the third network node.

[0574] In some embodiments, the discovery security material comprises at least one of:

[0575] The first discovery security material corresponding to the first relay device;

[0576] The second discovery security material corresponding to the at least one second relay device.

[0577] In some embodiments, step S411 can comprise:

[0578] Sending a third message to the third network node, the third message comprising a relay service code RSC, for requesting the discovery security material;

[0579] Receiving a fourth message sent by the third network node.

[0580] In some embodiments, the fourth message comprises at least one of:

[0581] The first discovery security material related to the first ID of the first relay device;

[0582] The second discovery security material related to the second ID of the at least one second relay device.

[0583] The optional implementation described above can refer to the optional implementation of steps S211 and S214 in FIG. 2b, and other associated parts in the embodiments related to FIG. 2b, which will not be repeated here.

[0584] In some embodiments, the second discovery security material is obtained by the third network node from a first network node, wherein the first network node is a network node corresponding to the first relay device.

[0585] The optional implementation described above can refer to the optional implementation of steps S212a and S213a in FIG. 2b, and other associated parts in the embodiments related to FIG. 2b, which will not be repeated here.

[0586] In some embodiments, the second discovery security material is obtained by the third network node from a second network node, wherein the second network node is a network node corresponding to the second relay device.

[0587] The optional implementation manner of the above can refer to the optional implementation manners of steps S212b and S213b in FIG. 2b and other associated parts in the embodiments involved in FIG. 2b, which will not be repeated here.

[0588] In some embodiments, the second relay device comprises at least one of:

[0589] a second U2N relay;

[0590] a second intermediate relay.

[0591] In some embodiments, the third message further comprises at least one of:

[0592] a first ID of the first relay device;

[0593] a second ID of the second relay device.

[0594] S412, performing a relay discovery procedure based on the discovery security material.

[0595] The optional implementation manner of step S412 can refer to the optional implementation manner of step S216 in FIG. 2b and other associated parts in the embodiments involved in FIG. 2b, which will not be repeated here.

[0596] In some embodiments, a second announcement message broadcast by the first relay device is received, and the second announcement message is secured by a discovery security material related to a first ID of the first relay device;

[0597] The second announcement message is verified based on a discovery security material determined by the first ID and the RSC;

[0598] Optionally, the first relay device comprises at least one of:

[0599] a first U2N relay;

[0600] a first intermediate relay.

[0601] FIG. 5a is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 5a, the method involved in the embodiment of the present disclosure is performed by a first network node, and the above method comprises:

[0602] S501, receiving a first message sent by a first relay device.

[0603] In some embodiments, the first message comprises a relay service code RSC, which is used to request the first network node to provide a discovery security material.

[0604] The optional implementation of step S501 can refer to the optional implementation of step S201 in FIG. 2a, the optional implementation of step S301 in FIG. 3a, and other associated parts in the embodiments related to FIG. 2a and FIG. 3a, which are not described herein again.

[0605] S502, sending a fifth message to the second network node.

[0606] The optional implementation of step S502 can refer to the optional implementation of step S202 in FIG. 2a, and other associated parts in the embodiments related to FIG. 2a, which are not described herein again.

[0607] In some embodiments, the fifth message includes a relay service code RSC, for requesting the second network node to provide discovery security material.

[0608] In some embodiments, the first network node can send the fifth message to the corresponding second network node based on the second ID in the first message.

[0609] In some embodiments, the first network node can send the fifth message to the corresponding second network node based on a mapping relationship between the RSC and the second ID configured locally.

[0610] S503, receiving a sixth message sent by the second network node.

[0611] The optional implementation of step S503 can refer to the optional implementation of step S203 in FIG. 2a, and other associated parts in the embodiments related to FIG. 2a, which are not described herein again.

[0612] In some embodiments, the sixth message is a response message of the fifth message.

[0613] In some embodiments, the sixth message includes second discovery security material related to the second ID of the second relay device.

[0614] S504, sending a second message to the first relay device.

[0615] The optional implementation of step S504 can refer to the optional implementation of step S204 in FIG. 2a, and other associated parts in the embodiments related to FIG. 2a, which are not described herein again.

[0616] In some embodiments, the second message is a response message of the first message.

[0617] In some embodiments, the second message includes at least one of the following:

[0618] first discovery security material related to the first ID of the first relay device;

[0619] at least one second discovery security material related to a second ID of a second relay device.

[0620] The method related to the embodiments of the present disclosure can comprise at least one of steps S501-S504. For example, steps S501 and S504 can be implemented as independent embodiments, but are not limited thereto.

[0621] In some embodiments, steps S502 and S503 are optional, and one or more of these steps can be omitted or replaced in different embodiments.

[0622] FIG. 5b is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 5b, the method related to the embodiments of the present disclosure is performed by a first network node, and the above method comprises:

[0623] S511, receiving a first message sent by a first relay device.

[0624] In some embodiments, the first message comprises a relay service code RSC, used to request the first network node to provide discovery security material.

[0625] The optional implementation of step S511 can refer to the optional implementation of step S201 of FIG. 2a, step S301 of FIG. 3a, and other associated parts in the embodiments related to FIG. 2a and FIG. 3a, which will not be repeated here.

[0626] S512, sending a second message to the first relay device.

[0627] The optional implementation of step S512 can refer to the optional implementation of step S204 of FIG. 2a, step S302 of FIG. 3a, and other associated parts in the embodiments related to FIG. 2a and FIG. 3a, which will not be repeated here.

[0628] In some embodiments, the second message is a response message of the first message.

[0629] In some embodiments, the second message comprises at least one of:

[0630] a first discovery security material related to a first ID of the first relay device;

[0631] at least one second discovery security material related to a second ID of a second relay device.

[0632] S513, receiving a seventh message sent by a third network node.

[0633] In some embodiments, the seventh message comprises a relay service code RSC, used to request the first network node to provide discovery security material.

[0634] The optional implementation of step S513 can refer to the optional implementation of step S212a in FIG. 2b and other associated parts in the embodiments related to FIG. 2b, which will not be repeated here.

[0635] S514, sending an eighth message to the third network node.

[0636] The optional implementation of step S514 can refer to the optional implementation of step S213a in FIG. 2b and other associated parts in the embodiments related to FIG. 2b, which will not be repeated here.

[0637] In some embodiments, the eighth message is a response message of the seventh message.

[0638] In some embodiments, the eighth message includes first discovery security material related to the first ID of the first relay device.

[0639] In some embodiments, before step S512, steps S502 and S503 in FIG. 5a can also be included.

[0640] FIG. 5c is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 5c, the method related to the embodiments of the present disclosure is performed by a first network node, and the above method includes:

[0641] S521, receiving a first message sent by a first relay device.

[0642] In some embodiments, the first message includes a relay service code RSC, which is used to request the first network node to provide discovery security material.

[0643] The optional implementation of step S521 can refer to the optional implementation of step S201 in FIG. 2a, the optional implementation of step S301 in FIG. 3a, and other associated parts in the embodiments related to FIG. 2a and FIG. 3a, which will not be repeated here.

[0644] S522, sending a second message to the first relay device.

[0645] The optional implementation of step S522 can refer to the optional implementation of step S204 in FIG. 2a, the optional implementation of step S302 in FIG. 3a, and other associated parts in the embodiments related to FIG. 2a and FIG. 3a, which will not be repeated here.

[0646] In some embodiments, the second message is a response message of the first message.

[0647] In some embodiments, the second message includes at least one of the following:

[0648] first discovery security material related to the first ID of the first relay device;

[0649] at least one second discovery security material related to a second ID of a second relay device.

[0650] In some embodiments, before step S522, the method further comprises:

[0651] sending a fifth message to a second network node, the fifth message comprising the RSC, for requesting the discovery security material;

[0652] receiving a sixth message sent by the second network node, the sixth message comprising: a second discovery security material related to a second ID of a second relay device.

[0653] Optionally, the second network node is a network node corresponding to the second relay device.

[0654] In some embodiments, the second relay device comprises at least one of:

[0655] a second U2N relay;

[0656] a second intermediate relay.

[0657] In some embodiments, the first message further comprises at least one of:

[0658] a second ID of the second relay device, the second relay device being authorized to provide a multi-hop U2N relay service;

[0659] role information of the first relay device;

[0660] first indication information indicating that the first relay device supports a multi-hop U2N service.

[0661] In some embodiments, if the first message comprises the second ID of the second relay device, the sending the fifth message to the second network node comprises: sending the fifth message to a corresponding second network node based on the second ID.

[0662] In some embodiments, the sending the fifth message to the second network node comprises: sending the fifth message to the second network node based on a first mapping relationship.

[0663] Optionally, the first mapping relationship is a mapping relationship between the RSC and the second ID.

[0664] In some embodiments, the first mapping relationship is configured locally by the first network node.

[0665] The optional implementation manner can refer to the optional implementation manners of steps S202 and S203 in FIG. 2a, steps S502 and S503 in FIG. 5a, and other associated parts in the embodiments related to FIG. 2a and FIG. 5a, which will not be repeated here.

[0666] In some embodiments, the method further includes:

[0667] receiving a seventh message sent by the third network node, the seventh message including the RSC, for requesting the discovery security material;

[0668] sending an eighth message to the third network node.

[0669] Optionally, the eighth message includes at least one of:

[0670] first discovery security material related to the first ID of the first relay device;

[0671] second discovery security material related to the second ID of the second relay device;

[0672] Optionally, the third network node is a network node corresponding to the terminal.

[0673] The optional implementation manner can refer to the optional implementation manners of steps S212a and S213a in FIG. 2b, steps S513 and S514 in FIG. 5b, and other associated parts in the embodiments related to FIG. 2b and FIG. 5b, which will not be repeated here.

[0674] FIG. 6a is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 6a, the method related to the embodiments of the present disclosure is performed by a third network node, and the method includes:

[0675] S601, receiving a third message sent by a terminal, the third message including an RSC.

[0676] In some embodiments, the third message is used to request the third network node to provide discovery security material.

[0677] The optional implementation manner of step S601 can refer to the optional implementation manners of steps S211 in FIG. 2b and S401 in FIG. 4a, and other associated parts in the embodiments related to FIG. 2b and FIG. 4a, which will not be repeated here.

[0678] S602, sending a seventh message to a second network node and / or a first network node.

[0679] In some embodiments, the seventh message includes a relay service code RSC, for requesting the first network node to provide discovery security material.

[0680] The optional implementation of step S602 can refer to steps S212a and S212b in FIG. 2B, the optional implementation of step S513 in FIG. 5B, and other associated parts in the embodiments related to FIG. 2B and FIG. 5B, which will not be repeated here.

[0681] S603, receiving the eighth message sent by the second network node and / or the first network node.

[0682] In some embodiments, the eighth message is a response message of the seventh message.

[0683] In some embodiments, the eighth message includes at least one of:

[0684] first discovery security material related to the first ID of the first relay device;

[0685] at least one second discovery security material related to the second ID of the second relay device.

[0686] The optional implementation of step S603 can refer to steps S213a and S213b in FIG. 2B, the optional implementation of step S514 in FIG. 5B, and other associated parts in the embodiments related to FIG. 2B and FIG. 5B, which will not be repeated here.

[0687] S604, sending a fourth message to the terminal.

[0688] In some embodiments, the fourth message is a response message of the third message.

[0689] In some embodiments, the fourth message includes at least one of:

[0690] first discovery security material related to the first ID of the first relay device;

[0691] at least one second discovery security material related to the second ID of the second relay device.

[0692] The optional implementation of step S601 can refer to step S214 in FIG. 2B, the optional implementation of step S402 in FIG. 4A, and other associated parts in the embodiments related to FIG. 2B and FIG. 4A, which will not be repeated here.

[0693] FIG. 6B is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 6B, the method related to the embodiments of the present disclosure is performed by a third network node, and the above method includes:

[0694] S611, receiving a third message sent by a terminal, the third message including an RSC.

[0695] In some embodiments, the third message is used to request the third network node to provide discovery security material.

[0696] The optional implementation of step S601 can refer to step S211 of FIG. 2b, the optional implementation of step S401 of FIG. 4a, and other associated parts in the embodiments related to FIG. 2b and FIG. 4a, which are not described herein again.

[0697] S612, sending a fourth message to the terminal.

[0698] In some embodiments, the fourth message is a response message of the third message.

[0699] In some embodiments, the fourth message includes at least one of:

[0700] first discovery security material related to a first ID of the first relay device;

[0701] at least one second discovery security material related to a second ID of the second relay device.

[0702] In some embodiments, before S612, the above method can further include: sending a seventh message to the second network node and / or the first network node, the seventh message including the RSC, for requesting the discovery security material;

[0703] receiving an eighth message sent by the second network node and / or the first network node, the eighth message including at least one of:

[0704] first discovery security material related to a first ID of the first relay device;

[0705] second discovery security material related to a second ID of the second relay device.

[0706] In some embodiments, the first network node is a network node corresponding to the first relay device, and the second network node is a network node corresponding to the second relay device.

[0707] In some embodiments, the second relay device includes at least one of:

[0708] a second U2N relay;

[0709] a second intermediate relay.

[0710] In some embodiments, the third message further includes at least one of:

[0711] a first ID of the first relay device;

[0712] a second ID of the second relay device.

[0713] In some embodiments, the seventh message is sent to the second network node and / or the first network node, including at least one of:

[0714] The seventh message is sent to the corresponding first network node based on the first ID;

[0715] The seventh message is sent to the corresponding second network node based on the second ID.

[0716] In some embodiments, the seventh message is sent to the second network node and / or the first network node, including:

[0717] The seventh message is sent to the second network node and / or the first network node based on a second mapping relationship;

[0718] The second mapping relationship includes at least one of:

[0719] A mapping relationship between the RSC and the second ID;

[0720] A mapping relationship between the RSC and the first ID.

[0721] In some embodiments, the second mapping relationship is configured locally by the third network node.

[0722] The optional implementation manners of the above can refer to the optional implementation manners of steps S212a, S213a, S212b, S213b in FIG. 2b, steps S513, S514 in FIG. 5b, steps S602, S603 in FIG. 6a, and other associated parts in the embodiments related to FIG. 2b, FIG. 5b and FIG. 6a, which will not be repeated here.

[0723] FIG. 7 is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 7, the method related to the embodiments of the present disclosure is performed by the second network node, and the above method includes:

[0724] S701, receiving a fifth message sent by a first network node.

[0725] The optional implementation manners of step S701 can refer to the optional implementation manners of step S202 in FIG. 2a, step S502 in FIG. 5a, and other associated parts in the embodiments related to FIG. 2a and FIG. 5a, which will not be repeated here.

[0726] In some embodiments, the fifth message includes a relay service code RSC, used to request the second network node to provide discovery security material.

[0727] In some embodiments, the first network node can send the fifth message to the corresponding second network node based on the second ID in the first message.

[0728] In some embodiments, the first network node can send the fifth message to the corresponding second network node based on a mapping relationship between the locally configured RSC and the second ID.

[0729] S702, sending a sixth message to the first network node.

[0730] The optional implementation of step S702 can refer to the optional implementation of step S203 of FIG. 2a, step S503 of FIG. 5a, and other associated parts in the embodiments related to FIG. 2a and FIG. 5a, which will not be repeated here.

[0731] In some embodiments, the sixth message is a response message of the fifth message.

[0732] In some embodiments, the sixth message includes: second discovery security material related to the second ID of the second relay device.

[0733] On the basis of the above-mentioned embodiments, the following can also be included:

[0734] S703, receiving a seventh message sent by the third network node.

[0735] S704, sending an eighth message to the third network node.

[0736] The optional implementation of the above-mentioned can refer to the optional implementation of steps S212b and S213b of FIG. 2b, steps S602 and S603 of FIG. 6a, and other associated parts in the embodiments related to FIG. 2b and FIG. 6a, which will not be repeated here.

[0737] FIG. 8a is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 8a, the method related to the present disclosure is used in the communication system 100, and the above-mentioned method includes:

[0738] S801, the first relay device sends a first message to the first network node, and the first message includes an RSC.

[0739] The optional implementation of step S801 can refer to the optional implementation of steps S201 of FIG. 2a, S302 of FIG. 3a, S501 of FIG. 5a, and S511 of FIG. 5b, and other associated parts in the embodiments related to FIG. 2a, FIG. 3a, FIG. 5a, and FIG. 5b, which will not be repeated here.

[0740] S802, the first network node sends a second message to the first relay device in response to the first message, and the second message includes discovery security material.

[0741] The optional implementation of step S802 can refer to the optional implementation of steps S202-S204 in FIG. 2a, step S302 in FIG. 3a, step S502 in FIG. 5a, step S512 in FIG. 5b, and other associated parts in the embodiments related to FIG. 2a, FIG. 3a, FIG. 5a, and FIG. 5b, which are not described here again.

[0742] S803, the first relay device performs a relay discovery procedure based on the discovery security material.

[0743] The optional implementation of step S803 can refer to the optional implementation of steps S205-S208 in FIG. 2a, steps S303-S305 in FIG. 3a, and other associated parts in the embodiments related to FIG. 2a and FIG. 3a, which are not described here again.

[0744] FIG. 8b is a flow diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG. 8b, the method according to the embodiment of the present disclosure is used in the communication system 100, and the method includes the following steps.

[0745] S811, the terminal sends a third message to the third network node, and the third message includes the RSC.

[0746] The optional implementation of step S811 can refer to step S211 in FIG. 2b, the optional implementation of step S401 in FIG. 4a, and other associated parts in the embodiments related to FIG. 2b and FIG. 4a, which are not described here again.

[0747] S812, the third network node sends a fourth message to the terminal in response to the third message, and the fourth message includes the discovery security material.

[0748] The optional implementation of step S812 can refer to steps S212a-S214 in FIG. 2b, the optional implementation of step S402 in FIG. 4a, and other associated parts in the embodiments related to FIG. 2b and FIG. 4a, which are not described here again.

[0749] S813, the first relay device performs a relay discovery procedure based on the discovery security material.

[0750] The optional implementation of step S813 can refer to steps S215-S216 in FIG. 2b, the optional implementation of steps S403-S404 in FIG. 4a, and other associated parts in the embodiments related to FIG. 2b and FIG. 4a, which are not described here again.

[0751] In some embodiments, the above method can include the method described in the embodiments of the communication system side, the terminal side, the network device side, the core network device side, and the like, which are not described here again.

[0752] The embodiments of the present disclosure further provide an optional implementation, as shown in FIG. 9, including the following steps:

[0753] In some embodiments, step S901 is related to the U2N relay (which can correspond to the first relay device or the second relay device in the foregoing), and can include the following steps:

[0754] S901a, the 5G ProSe U2N relay sends a relay discovery key request message.

[0755] Optionally, the relay discovery key request message includes a relay service code (RSC) and PC5 security capabilities of the 5G ProSe U2N relay.

[0756] S901b, the 5G DDNMF / PKMF of the U2N relay (which can correspond to the first network node or the second network node in the foregoing) can interact with a unified data management function (UDM) to check whether the U2N relay is authorized to provide a U2N relay service.

[0757] Optionally, if the U2N relay is authorized, the 5G DDNMF / PKMF of the U2N relay returns a home public land mobile network (HPLMN) ID (which can correspond to the first ID or the second ID in the foregoing), discovery security material (which can correspond to the first discovery security material or the second discovery security material in the foregoing), a selected PC5 encryption algorithm, a PC5 security policy, and CURRENT_TIME and MAX_OFFSET parameters.

[0758] It should be noted that if the U2N relay can simultaneously play the role of an intermediate relay, the U2N relay can correspond to the first relay device in the foregoing. In this case, the second relay device can be another potential U2N relay and / or another potential intermediate relay. If the U2N relay can only play the role of a U2N relay and cannot play the role of an intermediate relay, i.e., the intermediate relay can correspond to the first relay device in the foregoing, and the U2N relay corresponds to the second relay device in the foregoing. In this case, the second relay device can be a potential U2N relay (i.e., the U2N relay or another potential U2N relay), and / or another potential intermediate relay. Whether the U2N relay device plays the role of an intermediate relay, a U2N relay, or both an intermediate relay and a U2N relay is indicated by authorization information or role information of the device.

[0759] Optionally, if the U2N relay supports multi-hop service, the 5G DDNMF / PKMF can return a pair of PLMN ID and discovery security material (i.e., one PLMN ID corresponds to one discovery security material). Optionally, the pair of PLMN ID (which can correspond to the second ID above) and discovery security material (which can correspond to the second discovery security material above) can be received from the 5G DDNMF / PKMF (which can correspond to the second network node above) of other potential U2N relay or potential intermediate relay associated with the RSC. Wherein, the potential U2N relay or potential intermediate relay can correspond to the second relay device above.

[0760] It should be noted that in step S901b, the 5G DDNMF / PKMF of the U2N relay can return the pair of PLMN ID and discovery security material to the U2N relay by sending a relay discovery key response message.

[0761] In some embodiments, step S902, which can be related to an intermediate relay (which can correspond to the first relay device above), can comprise at least one of the following steps:

[0762] S902a, the intermediate relay sends a relay discovery key request message (which can correspond to the first message above).

[0763] Optionally, the relay discovery key request message comprises the RSC, the PC5 security capability of the intermediate relay, and a list of PLMN ID (which can correspond to the second ID of the second relay device above) authorized to provide multi-hop U2N relay service.

[0764] Optionally, the relay discovery key request message can further comprise role information of the intermediate relay, or indication information (which can correspond to the first indication information above) of providing multi-hop U2N relay service.

[0765] S902b, the 5G DDNMF / PKMF (which can correspond to the first network node above) of the intermediate relay can interact with the UDM to check whether the intermediate relay is authorized as an intermediate relay.

[0766] Optionally, if authorized as an intermediate relay, its 5G DDNMF / PKMF generates discovery security material associated with the HPLMN ID of the intermediate relay (may correspond to the first ID above) and sends a Relay Discovery Key Request message (may correspond to the fifth message above) to the 5G DDNMF / PKMF (may correspond to the second network node above) of the potential U2N relay or other potential intermediate relay (may correspond to the second relay device above) based on the PLMN ID provided in step S902a.

[0767] Optionally, if authorized as an intermediate relay, its 5G DDNMF / PKMF can send a Relay Discovery Key Request message to the 5G DDNMF / PKMF of the potential U2N relay based on a locally configured mapping relationship between the HPLMN ID and the RSC (may correspond to the first mapping relationship above).

[0768] Optionally, if authorized as an intermediate relay, its 5G DDNMF / PKMF can send a Relay Discovery Key Request message to the 5G DDNMF / PKMF of the other potential intermediate relay based on a locally configured mapping relationship between the HPLMN ID and the RSC.

[0769] S902c, if the PC5 UE security capability in step S902a includes a selected PC5 encryption algorithm, the 5G DDNMF / PKMF returns the RSC, the corresponding discovery security material, the PLMN ID and the selected PC5 encryption algorithm.

[0770] S902d, the 5G DDNMF / PKMF of the intermediate relay returns the HPLMN ID and the discovery security material pair associated with the HPLMN ID of the intermediate relay, the PLMN ID and the discovery security material pair received from the 5G DDNMF / PKMF of the potential U2N relay or the potential intermediate relay associated with the PLMN ID, the PC5 security policy, and the TIME and MAX_OFFSET parameters.

[0771] Optionally, the 5G DDNMF / PKMF can obtain the HPLMN ID of the potential 5G ProSe U2N relay or the potential intermediate relay in different ways (e.g., from a Policy Control Function (PCF) or based on local configuration).

[0772] It should be noted that in step S902d, the 5G DDNMF / PKMF of the intermediate relay can return the PLMN ID and the discovery security material pair to the U2N relay by sending a Relay Discovery Key Response message (may correspond to the second message above).

[0773] Step S903 is related to Remote UE, and can include at least one of the following steps:

[0774] S903a, the Remote UE (which can correspond to the terminal in the foregoing) sends a Relay Discovery Key Request message (which can correspond to the third message in the foregoing).

[0775] Optionally, the Relay Discovery Key Request message includes the RSC, the PC5 security capabilities of the Remote UE, and a list of PLMN IDs (which can correspond to the first ID and / or the second ID in the foregoing) for which the UE is authorized to use the multi-hop U2N relay service.

[0776] S903b, the 5G DDNMF / PKMF of the Remote UE (which can correspond to the third network node in the foregoing) can interact with the UDM to check whether the UE is authorized to use the multi-hop U2N relay service.

[0777] Optionally, if the UE is authorized, its 5G DDNMF / PKMF sends a Relay Discovery Key Request message (which can correspond to the seventh message in the foregoing) to the 5G DDNMF / PKMFs of potential U2N relays and potential intermediate relays (which can correspond to the first relay device and / or the second relay device in the foregoing) based on the PLMN IDs provided in step S903a.

[0778] Optionally, if the UE is authorized, its 5G DDNMF / PKMF can send a Relay Discovery Key Request message to the 5G DDNMF / PKMF of the potential U2N relay based on a locally configured mapping relationship between the HPLMN ID (which can correspond to the first ID in the foregoing) and the RSC (which can correspond to the second mapping relationship in the foregoing).

[0779] Optionally, if the UE is authorized, its 5G DDNMF / PKMF can send a Relay Discovery Key Request message to the 5G DDNMF / PKMF of the other potential intermediate relay based on a locally configured mapping relationship between the HPLMN ID (which can correspond to the first ID in the foregoing) and the RSC (which can correspond to the second mapping relationship in the foregoing).

[0780] S903c, if the PC5 UE security capabilities in step S903a include a selected PC5 encryption algorithm, the 5G DDNMF / PKMF of the potential U2N relay or the potential intermediate relay returns the RSC, the corresponding discovery security material, the PLMN ID, and the selected PC5 encryption algorithm.

[0781] S903d. The 5G DDNMF / PKMF of the remote UE returns the discovery security material received from the 5G DDNMF / PKMF of the potential U2N relay or the potential intermediate relay, the associated PLMN ID, the PC5 security policy, and the CURRENT TIME and MAX OFFSET parameters.

[0782] S904. The U2N relay (may correspond to the second relay device in the foregoing) broadcasts an announcement message (may correspond to the first announcement message in the foregoing).

[0783] Optionally, the announcement message includes the RSC, the hop count, and the user information ID of the U2N relay.

[0784] Optionally, the announcement message is protected by the discovery security material associated with the RSC and the HPLMN ID of the U2N relay.

[0785] Optionally, the announcement message further includes the PLMN ID (i.e., the HPLMN ID of the U2N relay) in plaintext.

[0786] Optionally, the announcement message can also be described as an advertisement message, or a solicitation message. The present embodiment does not limit this.

[0787] S905. The intermediate relay (may correspond to the first relay device in the foregoing) verifies the announcement message (may correspond to the first announcement message in the foregoing) by using the discovery security material associated with the RSC and the PLMN ID of the U2N relay.

[0788] In some embodiments, if the announcement message is verified, the announcement message (may correspond to the second announcement message in the foregoing) is further broadcasted by the intermediate relay if the hop count + 1 (may correspond to the first hop count value in the foregoing) in the announcement message is less than the hop limit and the announcement message satisfies the first principle.

[0789] Optionally, the announcement message includes the RSC, the hop count + 1, the user information ID (User info ID) of the U2N relay, and the User info ID of the intermediate relay.

[0790] Optionally, the first principle includes that the RSC and / or the user information of the U2N relay in the announcement message received by the intermediate relay is not stored in the information entry; or the RSC and the user information of the U2N relay in the announcement message received by the intermediate relay are stored in the information entry, but the hop count + 1 is less than the stored hop count value (may correspond to the second hop count value in the foregoing).

[0791] In some embodiments, the intermediate relay can update the stored information entry.

[0792] Optionally, the information item includes the RSC, the user information of the U2N relay, the user information of the intermediate relay (optionally), the hop value, the source Layer-2 ID of the announcement message, and the UTC-based counter.

[0793] In some embodiments, if the announcement message is verified, the intermediate relay further broadcasts the announcement message by adding additional information related to the intermediate relay, in the case that the hop count + 1 in the announcement message (which can correspond to the first hop value above) is less than the hop limit threshold.

[0794] Optionally, the additional information related to the intermediate relay can be the user information ID of the intermediate relay. Optionally, the intermediate relay can be the relay device corresponding to each hop in the discovery process, or the relay device corresponding to the current hop, or the relay device corresponding to the current hop and the final hop, but not limited thereto.

[0795] In some embodiments, the intermediate relay can add the user information ID of the intermediate relay in the received announcement message, and broadcast the announcement message with the added user information ID of the intermediate relay (which can correspond to the second announcement message above).

[0796] In some embodiments, the above-mentioned announcement message is protected by discovery security material associated with the RSC and the HPLMN ID of the intermediate relay.

[0797] In some embodiments, the above-mentioned announcement message further includes the PLMN ID (i.e., the HPLMN ID of the intermediate relay) in plaintext form.

[0798] In some embodiments, if the announcement message is not verified, the intermediate relay discards the announcement message.

[0799] In some embodiments, the remote UE can receive announcement messages from different intermediate relays with different hop counts. The remote UE can select one of the intermediate relays after verification.

[0800] FIG. 10a is a structural schematic diagram of a relay device according to an embodiment of the present disclosure. As shown in FIG. 10a, the relay device can include at least one of a first transceiver module 1011, a first processing module 1012, and the like.

[0801] In some embodiments, the first transceiver module 1011 is configured to obtain discovery security material, and the first processing module 1012 is configured to perform a relay discovery process based on the discovery security material. The discovery security material includes at least one of the following:

[0802] the first discovery security material corresponding to the first relay device;

[0803] a second discovery security material corresponding to at least one second relay device.

[0804] Optionally, the first transceiver 1011 is configured to perform the steps related to transceiving signaling performed by the first relay device in any of the above methods, for example, at least one of steps S201, S204, S205, S207 shown in FIG. 2a, S215 shown in FIG. 2b, which will not be described herein again.

[0805] Optionally, the first processing module 1012 is configured to perform the steps related to performing a relay discovery procedure based on a discovery security material performed by the first relay device in any of the above methods, for example, at least one of steps S206, S208 shown in FIG. 2a, which will not be described herein again.

[0806] FIG. 10b is a structural schematic diagram of a terminal according to an embodiment of the present disclosure. As shown in FIG. 10b, the terminal can include at least one of a second transceiver 1021, a second processing module 1022, and the like.

[0807] In some embodiments, the second transceiver 1021 is configured to obtain a discovery security material; and the second processing module 1022 is configured to perform a relay discovery procedure based on the discovery security material. The discovery security material includes at least one of the following:

[0808] a first discovery security material corresponding to the first relay device;

[0809] a second discovery security material corresponding to at least one second relay device.

[0810] Optionally, the second transceiver 1021 is configured to perform the steps related to transceiving signaling performed by the terminal in any of the above methods, for example, at least one of steps S211, S214, S215 shown in FIG. 2b, which will not be described herein again.

[0811] Optionally, the second processing module 1022 is configured to perform the steps related to performing a relay discovery procedure based on a discovery security material performed by the first relay device in any of the above methods, for example, step S216 shown in FIG. 2b, which will not be described herein again.

[0812] FIG. 10c is a structural schematic diagram of a first network node according to an embodiment of the present disclosure. As shown in FIG. 10c, the first network node can include at least one of a third transceiver 1031, a third processing module 1032, and the like.

[0813] In some embodiments, the third transceiver module 1031 is configured to receive a first message sent by the first relay device, the first message comprising a relay service code (RSC) for requesting discovery security material; and send a second message to the first relay device, the second message comprising at least one of:

[0814] a first discovery security material related to a first ID of the first relay device;

[0815] at least one second discovery security material related to a second ID of the second relay device.

[0816] Optionally, the third transceiver module 1031 is configured to perform the steps related to transceiving signaling performed by the first network node in any of the above methods, for example, at least one of steps S201-S204 shown in FIG. 2a, steps S212a, S213a shown in FIG. 2b, which will not be described herein again.

[0817] FIG. 10d is a schematic diagram of a structure of a third network node according to an embodiment of the present disclosure. As shown in FIG. 10d, the third network node can comprise at least one of a fourth transceiver module 1041, a fourth processing module 1042, and the like.

[0818] In some embodiments, the fourth transceiver module 1041 is configured to receive a third message sent by a terminal, the third message comprising a relay service code (RSC) for requesting discovery security material; and send a fourth message to the terminal, the fourth message comprising at least one of:

[0819] a first discovery security material related to a first ID of the first relay device;

[0820] at least one second discovery security material related to a second ID of the second relay device.

[0821] Optionally, the fourth transceiver module 1041 is configured to perform the steps related to transceiving signaling performed by the third network node in any of the above methods, for example, at least one of steps S211-S214 shown in FIG. 2b, which will not be described herein again.

[0822] FIG. 10e is a schematic diagram of a structure of a second network node according to an embodiment of the present disclosure. As shown in FIG. 10e, the second network node can comprise at least one of a fifth transceiver module 1051, a fifth processing module 1052, and the like.

[0823] In some embodiments, the fifth transceiver module 1051 is configured to receive a fifth message sent by the first network node, the fifth message comprising the RSC for requesting discovery of security material; and send a sixth message to the first network node, the sixth message comprising: a second discovery security material related to a second ID of the second relay device; wherein the first network node is a network node corresponding to the first relay device.

[0824] Optionally, the fifth transceiver module 1051 is configured to perform the steps of receiving and sending the messages related to transceiving signaling performed by the second network node in any of the above methods, for example, at least one of steps S202, S203 shown in FIG. 2a, steps S212b, S213b shown in FIG. 2b, which will not be repeated here.

[0825] It should be understood that the division of each unit or module in the above apparatus is only a logical functional division, and all or part of them can be integrated into one physical entity, or can be physically separated. In addition, the units or modules in the apparatus can be implemented in the form of processor invoking software: for example, the apparatus includes a processor, a memory connected to the processor, and the memory stores instructions, and the processor invokes the instructions stored in the memory to implement any of the above methods or realize the functions of the units or modules of the apparatus, wherein the processor is, for example, a general processor such as a central processing unit (CPU) or a microprocessor, and the memory is an internal memory of the apparatus or an external memory of the apparatus. Alternatively, the units or modules in the apparatus can be implemented in the form of hardware circuit, and the functions of part or all of the units or modules can be realized by the design of hardware circuit. The above hardware circuit can be understood as one or more processors; for example, in one implementation, the above hardware circuit is an application-specific integrated circuit (ASIC), and the functions of part or all of the units or modules are realized by the design of the logical relationship between the elements in the circuit; for another example, in another implementation, the above hardware circuit is a programmable logic device (PLD), and a field programmable gate array (FPGA) is taken as an example, which can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by a configuration file, so as to realize the functions of part or all of the units or modules.

[0826] All units or modules of the above apparatus can be implemented in the form of processor invoking software, or in the form of hardware circuit, or partially in the form of processor invoking software and partially in the form of hardware circuit. In the embodiments of the present disclosure, the processor is a circuit with signal processing capability, and in one implementation, the processor can be a circuit with instruction reading and running capability, for example, a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), a digital signal processor (DSP), etc.; in another implementation, the processor can implement certain functions through a logical relationship of hardware circuit, and the logical relationship of the above hardware circuit is fixed or reconfigurable, for example, the hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), for example, an FPGA. In the reconfigurable hardware circuit, the processor loads a configuration document to implement the configuration of the hardware circuit, and the process of loading the configuration document by the processor can be understood as the process of loading instructions by the processor to implement the functions of part or all of the units or modules described above. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, for example, a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0827] FIG. 11a is a structural schematic diagram of a communication device 1100 according to an embodiment of the present disclosure. The communication device 1100 can be a network device (for example, the first network device, the second network device, the third network device, etc. described above), a terminal (for example, a user equipment, etc.), a chip, a chip system, or a processor supporting the network device to implement any of the above methods, or a chip, a chip system, or a processor supporting the terminal to implement any of the above methods. The communication device 1100 can be used to implement the methods described in the above method embodiments, and details can be referred to the descriptions in the above method embodiments.

[0828] As shown in FIG. 11a, the communication device 1100 includes one or more processors 1101. The processor 1101 can be a general processor or a special-purpose processor, etc., for example, a baseband processor or a central processing unit. The baseband processor can be used to process communication protocols and communication data, the central processing unit can be used to control a communication apparatus (e.g., a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute programs, and process data of the programs. The processor 1101 is configured to invoke instructions to enable the communication device 1100 to perform any of the above methods.

[0829] In some embodiments, the communication device 1100 further includes one or more transceivers 1102. When the communication device 1100 includes one or more transceivers 1102, the transceiver 1102 performs at least one of the communication steps (e.g., at least one of steps S201-S205, S207 shown in FIG. 2a, steps S211-S215 shown in FIG. 2b, but not limited to this) of the above methods, and the processor 1101 performs at least one of the other steps (e.g., at least one of steps S206, S208 shown in FIG. 2a, step S216 shown in FIG. 2b, but not limited to this). In alternative embodiments, the transceiver can include a receiver and / or a transmitter, which can be separate or integrated together. Alternatively, the terms transceiver, transceiving unit, transceiver, transceiving circuit, interface circuit, interface, etc. can be replaced with each other, the terms transmitter, transmitting unit, transmitter, transmitting circuit, etc. can be replaced with each other, and the terms receiver, receiving unit, receiver, receiving circuit, etc. can be replaced with each other.

[0830] In some embodiments, the communication device 1100 further includes one or more memories 1102 for storing instructions. Alternatively, all or part of the memory 1102 can also be outside the communication device 1100.

[0831] In some embodiments, the communication device 1100 further includes one or more transceivers 1103. When the communication device 1100 includes one or more transceivers 1103, the communication steps in the above methods are performed by the transceiver 1103, and the other steps are performed by the processor 1101.

[0832] In some embodiments, the transceiver can include a receiver and a transmitter, which can be separate or integrated together. Alternatively, the terms transceiver, transceiving unit, transceiver, transceiving circuit, etc. can be replaced with each other, the terms transmitter, transmitting unit, transmitter, transmitting circuit, etc. can be replaced with each other, and the terms receiver, receiving unit, receiver, receiving circuit, etc. can be replaced with each other.

[0833] Optionally, the communication device 1100 further includes one or more interface circuits 1104 connected with the memory 1102, which can be used to receive signals from the memory 1102 or other devices, and can be used to send signals to the memory 1102 or other devices. For example, the interface circuit 1104 can read instructions stored in the memory 1102 and send the instructions to the processor 1101.

[0834] The communication device 1100 in the above embodiment description can be a network device or a terminal, but the range of the communication device 1100 described in the embodiment of the present disclosure is not limited to this, and the structure of the communication device 1100 can not be limited by FIG. 11a. The communication device can be an independent device or can be part of a larger device. For example, the communication device can be: 1) an independent integrated circuit (IC), or a chip, or a chip system or subsystem; (2) a set of one or more ICs, which can optionally include a storage component for storing data, programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, a smart terminal device, a cellular phone, a wireless device, a handset, a mobile unit, a vehicle-mounted device, a network device, a cloud device, an artificial intelligence device, etc.; (6) other, etc.

[0835] FIG. 11b is a structural schematic diagram of a chip 1110 according to an embodiment of the present disclosure. For the case that the communication device 1100 is a chip or a chip system, the structural schematic diagram of the chip 1110 shown in FIG. 11b can be referred to, but is not limited to this.

[0836] The chip 1110 includes one or more processors 1111. The chip 1110 is configured to execute any of the above methods.

[0837] In some embodiments, the chip 1110 further includes one or more interface circuits 1112. Optionally, the terms interface circuit, interface, transceiver pin, etc. can be replaced with each other. In some embodiments, the chip 1110 further includes one or more memories 1113 for storing data. Optionally, all or part of the memory 1113 can be outside the chip 1110. Optionally, the interface circuit 1112 is connected with the memory 1113, and the interface circuit 1112 can be used to receive data from the memory 1113 or other devices, and the interface circuit 1112 can be used to send data to the memory 1113 or other devices. For example, the interface circuit 1112 can read data stored in the memory 1113 and send the data to the processor 1111.

[0838] In some embodiments, the interface circuit 1112 performs at least one of the communication steps (for example, at least one of steps S201-S205, S207 illustrated in FIG. 2a, steps S211-S215 illustrated in FIG. 2b, but not limited thereto) of transmitting and / or receiving in the above-described methods. The interface circuit 1112 performing the communication steps of transmitting and / or receiving in the above-described methods refers to, for example, the interface circuit 1112 performing data interaction between the processor 1111, the chip 1110, the memory 1113, or the transceiver device. In some embodiments, the processor 1111 performs at least one of other steps (for example, at least one of steps S206, S208 illustrated in FIG. 2a, step S216 illustrated in FIG. 2b, but not limited thereto).

[0839] The disclosure also proposes a program product which, when executed by the communication device 1100, causes the communication device 1100 to perform any of the above methods. Optionally, the program product is a computer program product.

[0840] The disclosure also proposes a computer program which, when running on a computer, causes the computer to perform any of the above methods.

[0841] The technical solutions described in the embodiments of the disclosure can be combined arbitrarily without conflict, if any.

[0842] Other embodiments of the application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. The disclosure is intended to cover any variations, uses or adaptations of the application following, in general, the principles of the application and including such steps that are apparent to those skilled in the art to which the disclosure pertains. It is to be understood that the specification and examples are illustrative only and not restrictive of the present application whose true scope and spirit are to be indicated by the appended claims.

[0843] It should be understood that the application is not limited to the precise construction that has been described above and illustrated in the accompanying drawings and that various modifications and changes can be made by those skilled in the art without departing from the scope of the application. The scope of the application should be limited only by the appended claims.

Claims

1. A communication method, characterized in that: Applied to the first relay device, including: Access to discovery security materials; performing a relay discovery process based on the discovery security material; The security material found includes at least one of the following: a first discovered security material corresponding to the first relay device; The second discovered security material corresponding to the at least one second relay device.

2. The method according to claim 1, characterized in that The acquisition and discovery of security materials includes: Sending a first message to a first network node, wherein the first message includes a relay service code RSC for requesting the discovery of the security material; receiving a second message sent by the first network node, where the second message includes at least one of the following: a first discovered security material related to the first ID of the first relay device; at least one second discovered security material related to the second ID of the second relay device.

3. The method according to claim 2, characterized in that If the first relay device is a first terminal-to-network U2N relay and supports multi-hop U2N relay service, the second discovery security material is obtained by the first network node from a second network node, wherein the second network node is a network node corresponding to the second relay device.

4. The method according to claim 2, characterized in that If the first relay device is a first intermediate relay, the second discovered security material is obtained by the first network node from a second network node, where the second network node is a network node corresponding to the second relay device.

5. The method according to claim 4, characterized in that The second relay device includes at least one of the following: Second U2N relay; Second intermediate relay.

6. The method according to any one of claims 3 to 5, characterized in that The first message further includes at least one of the following: a second ID of the second relay device, where the second relay device is authorized to provide a multi-hop U2N relay service; role information of the first relay device; The first indication information is used to indicate that the first relay device supports multi-hop U2N service.

7. The method according to any one of claims 1 to 6, characterized in that The performing of a relay discovery process based on the discovery security material includes: receiving a first notification message broadcast by a second relay device, where the first notification message is secured by discovery security material associated with a second ID of the second relay device; The first announcement message is verified based on discovery security material determined by the second ID and the RSC.

8. The method according to claim 7, characterized in that Also includes: If the first notification message passes the verification, broadcast the second notification message; The second notification message is securely protected by discovery security material related to the first ID.

9. The method according to claim 8, characterized in that The broadcasting of the second notification message includes: If the first hop value obtained based on the first notification message meets the first condition, broadcast the second notification message, where the second notification message includes information related to the first relay device; or If the first hop value satisfies a first condition and the information in the first notification message satisfies a second condition, the second notification message is broadcast.

10. The method according to claim 9, characterized in that The information in the first notification message satisfies the second condition, including: The relevant information of the RSC and / or the second relay device in the first notification message is not stored in the information entry; or, The RSC in the first notification message and the related information of the second relay device are stored in the information entry, and the first hop value is smaller than the second hop value stored in the information entry.

11. The method according to claim 10, characterized in that Also includes: Updates a stored information entry.

12. A communication method, characterized in that: Applied to terminals, including: Access to discovery security materials; performing a relay discovery process based on the discovery security material; The security material found includes at least one of the following: a first discovered security material corresponding to the first relay device; The second discovered security material corresponding to the at least one second relay device.

13. The method according to claim 12, characterized in that The acquisition and discovery of security materials includes: sending a third message to a third network node, wherein the third message includes a relay service code RSC for requesting the discovery of the security material; receiving a fourth message sent by the third network node, where the fourth message includes at least one of the following: a first discovered security material related to the first ID of the first relay device; at least one second discovered security material related to the second ID of the second relay device.

14. The method according to claim 13, wherein: The second discovered security material is obtained by the third network node from a second network node, wherein the second network node is a network node corresponding to the second relay device; The first discovered security material is acquired by the third network node from a first network node, where the first network node is a network node corresponding to the first relay device.

15. The method according to any one of claims 12 to 14, characterized in that The third message further includes at least one of the following: a first ID of the first relay device; a second ID of the second relay device.

16. The method according to any one of claims 12 to 15, characterized in that The second relay device includes at least one of the following: Second U2N relay; Second intermediate relay.

17. The method according to any one of claims 13 to 16, characterized in that The performing of a relay discovery process based on the discovery security material includes: receiving a second notification message broadcast by the first relay device, where the second notification message is securely protected by discovery security material associated with the first ID of the first relay device; verifying the second notification message based on discovery security material determined by the first ID and the RSC; The first relay device includes at least one of the following: First U2N relay; First intermediate relay.

18. A communication method, characterized in that: Applied to a first network node, comprising: receiving a first message sent by a first relay device, wherein the first message includes a relay service code RSC for requesting discovery of security material; Sending a second message to the first relay device, where the second message includes at least one of the following: a first discovered security material related to the first ID of the first relay device; at least one second discovered security material related to the second ID of the second relay device.

19. The method according to claim 18, characterized in that Before sending the second message to the first network node, the method further includes: sending a fifth message to the second network node, the fifth message including the RSC, for requesting the discovery of the security material; receiving a sixth message sent by the second network node, the sixth message including: second discovery security material related to the second ID of the second relay device; The second network node is a network node corresponding to the second relay device.

20. The method according to claim 18 or 19, characterized in that The second relay device includes at least one of the following: Second U2N relay; Second intermediate relay.

21. The method according to any one of claims 18 to 20, characterized in that The first message further includes at least one of the following: a second ID of the second relay device, where the second relay device is authorized to provide a multi-hop U2N relay service; role information of the first relay device; The first indication information is used to indicate that the first relay device supports multi-hop U2N service.

22. The method according to claim 21, characterized in that If the first message includes the second ID of the second relay device, the sending of the fifth message to the second network node includes: Based on the second ID, the fifth message is sent to the corresponding second network node.

23. The method according to any one of claims 18 to 21, characterized in that The sending the fifth message to the second network node includes: Based on the first mapping relationship, sending the fifth message to the second network node; The first mapping relationship is a mapping relationship between the RSC and the second ID.

24. The method according to claim 23, wherein The first mapping relationship is locally configured by the first network node.

25. The method according to any one of claims 18 to 23, characterized in that The method further comprises: receiving a seventh message sent by a third network node, the seventh message including the RSC, for requesting discovery of the security material; Sending an eighth message to the third network node, where the eighth message includes at least one of the following: a first discovered security material related to the first ID of the first relay device; a second discovered security material related to the second ID of the second relay device; The third network node is the network node corresponding to the terminal.

26. A communication method, characterized in that: Applicable to the third network node, including: receiving a third message sent by the terminal, wherein the third message includes a relay service code RSC for requesting discovery of security material; Sending a fourth message to the terminal, where the fourth message includes at least one of the following: a first discovered security material associated with the first ID of the first relay device; At least one discovery security material related to the second ID of the second relay device.

27. The method according to claim 26, characterized in that Before sending the fourth message to the terminal, the method further includes: Sending a seventh message to the second network node and / or the first network node, wherein the seventh message includes the RSC and is used to request the discovery of the security material; receiving an eighth message sent by the second network node and / or the first network node, where the eighth message includes at least one of the following: a first discovered security material related to the first ID of the first relay device; Second discovered security material related to the second ID of the second relay device.

28. The method according to claim 27, characterized in that The first network node is a network node corresponding to the first relay device, and the second network node is a network node corresponding to the second relay device.

29. The method according to any one of claims 26 to 28, characterized in that The second relay device includes at least one of the following: Second U2N relay; Second intermediate relay.

30. The method according to any one of claims 26 to 29, characterized in that The third message further includes at least one of the following: a first ID of the first relay device; a second ID of the second relay device.

31. The method according to claim 30, characterized in that The sending of the seventh message to the second network node and / or the first network node includes at least one of the following: Based on the first ID, sending the seventh message to the corresponding first network node; Based on the second ID, the seventh message is sent to the corresponding second network node.

32. The method according to any one of claims 27 to 30, characterized in that The sending the seventh message to the second network node and / or the first network node includes: Based on the second mapping relationship, sending the seventh message to the second network node and / or the first network node; The second mapping relationship includes at least one of the following: A mapping relationship between the RSC and the second ID; A mapping relationship between the RSC and the first ID.

33. The method according to claim 32, characterized in that The second mapping relationship is locally configured by the third network node.

34. A communication method, characterized in that: Applied to the second network node, comprising: receiving a fifth message sent by the first network node, the fifth message including the RSC, for requesting discovery of security material; a sixth message sent to the first network node, the sixth message including: second discovery security material related to the second ID of the second relay device; The first network node is a network node corresponding to the first relay device.

35. The method according to claim 32, wherein The method further comprises: receiving a seventh message sent by a third network node, the seventh message including the RSC, for requesting discovery of the security material; Sending an eighth message to the third network node, where the eighth message includes at least one of the following: a first discovered security material related to the first ID of the first relay device; a second discovered security material related to the second ID of the second relay device; The third network node is the network node corresponding to the terminal.

36. A relay device, characterized in that: include: A first transceiver module is used to obtain and discover security materials; a first processing module, configured to perform a relay discovery process based on the discovery security material; The security material found includes at least one of the following: a first discovered security material corresponding to the first relay device; The second discovered security material corresponding to the at least one second relay device.

37. A terminal, characterized in that: include: The second transceiver module is used to obtain and discover security materials; a second processing module, configured to perform a relay discovery process based on the discovery security material; The security material found includes at least one of the following: a first discovered security material corresponding to the first relay device; The second discovered security material corresponding to the at least one second relay device.

38. A first network node, characterized in that: include: The third transceiver module is configured to receive a first message sent by a first relay device, the first message including a relay service code (RSC) for requesting discovery of security material; and send a second message to the first relay device, the second message including at least one of the following: a first discovered security material related to the first ID of the first relay device; at least one second discovered security material related to the second ID of the second relay device.

39. A third network node, characterized in that: include: a fourth transceiver module, configured to receive a third message sent by a terminal, the third message including a relay service code (RSC) for requesting discovery of security material; and send a fourth message to the terminal, the fourth message including at least one of the following: a first discovered security material associated with the first ID of the first relay device; At least one discovery security material related to the second ID of the second relay device.

40. A second network node, characterized in that: include: a fifth transceiver module, configured to receive a fifth message sent by the first network node, wherein the fifth message includes an RSC for requesting discovery of security material; A sixth message is sent to the first network node, the sixth message including: second discovery security material related to the second ID of the second relay device; wherein the first network node is a network node corresponding to the first relay device.

41. A relay device, characterized in that: include: one or more processors; The processor is configured to execute the communication method according to any one of claims 1 to 11.

42. A terminal, characterized in that: include: one or more processors; The processor is configured to execute the communication method according to any one of claims 12 to 17.

43. A first network node, characterized in that: include: one or more processors; The processor is configured to execute the communication method described in any one of claims 18 to 25.

44. A second network node, characterized in that include: one or more processors; The second network node is configured to execute the communication method described in any one of claims 34 to 35.

45. A third network node, characterized in that: include: one or more processors; The third network node is configured to execute the communication method according to any one of claims 26 to 33.

46. ​​A communication system, characterized in that include: A relay device, a terminal and a network node, wherein the relay device is used to implement the communication method according to any one of claims 1 to 11, the terminal is used to implement the communication method according to any one of claims 12 to 17, and the network node is used to implement the communication method according to any one of claims 18 to 25, or claims 26 to 33, or claims 34 to 35.

47. A computer-readable storage medium having a computer program stored thereon, characterized in that: The computer-readable storage medium stores executable instructions, which are loaded and executed by the processor to implement the communication method described in any one of claims 1 to 11, or claims 12 to 17, or claims 18 to 25, or claims 26 to 33, or claims 34 to 35.

Images