Communication method and communication apparatus

Abstract

Provided in the present application are a communication method and a communication apparatus. The method comprises: receiving a first request message, wherein the first request message is used for requesting the execution of a privacy computing task; and on the basis of the first request message, sending first information, which is used for generating a privacy computing security context, wherein the privacy computing security context comprises a computing key, and the computing key is used for performing privacy computing on data. On the basis of the above-described solution, a privacy computing task can be completed in a wireless network.

Description

A communication method and a communication apparatus

[0001] The present application claims priority to the Chinese patent application No. 202411025428.1, filed on July 26, 2024, with the State Intellectual Property Office of China, and the Chinese patent application No. 202411025428.1 has the title of “A communication method and a communication apparatus”, the content of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0002] Embodiments of the present application relate to the field of wireless communication technology, and more specifically, to a communication method and a communication apparatus. BACKGROUND

[0003] The privacy computing technology, which takes homomorphic encryption, secure multi-party computation, federated learning, etc. as the core, follows the principle of “data available but invisible, data not moving model moving”, and realizes the purpose of interactive computation of sensitive data without leaving the library by using cryptography and trusted hardware, so as to ensure that the participants cannot directly obtain or infer the original data through intermediate information, and thus protect the data privacy and security while promoting the release of data value.

[0004] The privacy computing can improve the data privacy and security. In the actual application of privacy computing, how to implement the privacy computing task in the wireless network has become a problem to be solved. SUMMARY

[0005] The present application provides a communication method and apparatus, which can implement the management of the privacy computing task in the wireless network.

[0006] In a first aspect, a method is provided, which is applied to a first communication apparatus. The first communication apparatus can be a network side apparatus, for example, can be a privacy computing management network element, a component (such as a chip, a chip system or a circuit) in the privacy computing management network element, a logic module or software capable of implementing part or all of the functions of the privacy computing management network element, or an apparatus capable of being used with the privacy computing management network element.

[0007] The method includes: receiving a first request message, the first request message being used to request to execute a privacy computing task; and sending first information based on the first request message, the first information being used to generate a privacy computing security context, wherein the privacy computing security context includes a computing key, and the computing key is used to perform privacy computing on data.

[0008] In a possible implementation manner, the privacy computing management unit sends the first information to a key generation participant, wherein the key generation participant can include one or more of the following: a terminal side apparatus, an application function side apparatus, and a key management center.

[0009] Based on the above scheme, the privacy calculation management unit can send the first information to obtain the privacy calculation security context for executing the privacy calculation task according to the received first request message, thereby realizing the management of the privacy calculation task and enabling the privacy calculation task to be executed smoothly, thereby improving the data privacy security.

[0010] In some implementations, the first request message includes security requirements and security parameters of the privacy calculation task.

[0011] In some implementations, the first request message further includes one or more of the following: a privacy calculation task identifier, a security level of the privacy calculation task, a security cipher algorithm identifier, requirements for input data of the privacy calculation task, and an expected output result of the privacy calculation task.

[0012] Based on the above scheme, the first request message sent by the privacy calculation task initiator includes parameters for privacy calculation task execution, so that the privacy calculation task can be executed smoothly.

[0013] In some implementations, the first request message is from a terminal device, or the first request message is from an application function network element.

[0014] In one possible implementation, the first request message is forwarded via a first core network element.

[0015] The first core network element is any one of the following: an access and mobility management network element, a user plane function network element, a data plane function network element, and a network exposure function network element.

[0016] Specifically, when the first request message is from a terminal device, the first request message is forwarded via an access and mobility management network element, or the first request message is forwarded via a user plane function network element, or the first request message is forwarded via a data plane function network element.

[0017] When the first request message is from an application function network element, the first request message is forwarded via a network exposure function network element.

[0018] Based on the above scheme, on the one hand, when initiated by the terminal device, the terminal device can have the initiative whether to request to perform the privacy computing task. When initiated by the application function network element, the application function network element can have the initiative whether to request to perform the privacy computing task. On the other hand, when initiated by the terminal device, the terminal device can interact with the access and mobility management network element, the user plane function network element, and the data plane function network element in the existing core network architecture to exchange information related to the privacy computing task; when initiated by the application function network element, the application function network element can interact with the network exposure function network element in the existing core network architecture to exchange information related to the privacy computing task, so that the existing core network architecture can be used to support the execution of the privacy computing task.

[0019] In some implementations, the first information includes security requirements and security parameters of the privacy computing task, and the method further includes: the privacy computing management unit obtaining a computing key by sending the first information, the computing key being determined according to the security requirements and the security parameters of the privacy computing task and the application layer anchor key.

[0020] In a possible implementation, the privacy computing management unit sends the first information to the terminal device, and the terminal device generates a computing key according to the security requirements and the security parameters of the privacy computing task included in the first information and the application layer anchor key, and the privacy computing management unit obtains the computing key from the terminal device.

[0021] In another possible implementation, the privacy computing management unit sends the first information to the application anchor key function network element, and the application anchor key function network element generates a computing key according to the security requirements and the security parameters of the privacy computing task included in the first information and the application layer anchor key, and the privacy computing management unit obtains the computing key from the application anchor key function network element.

[0022] In some implementations, when the first request message comes from the terminal device, the first request message further includes information of the terminal device; or, when the first request message comes from the application function network element, the first request message further includes information of the application function network element.

[0023] In some implementations, the first information includes security requirements and security parameters of the privacy computing task, and in the case where the first request message comes from the terminal device, the first information is further used to determine the privacy computing security capability of the privacy computing management unit and the privacy computing security capability of the terminal device; or, in the case where the first request message comes from the application function network element, the first information is further used to determine the privacy computing security capability of the privacy computing management unit and the privacy computing security capability of the application function network element; and the method further includes:

[0024] The privacy computing management unit obtains a computing key based on the first information, where the computing key is determined according to a security requirement and a security parameter of the privacy computing task, a privacy computing security capability of the privacy computing management unit, and a privacy computing security capability of the terminal device; or the computing key is determined according to the security requirement and the security parameter of the privacy computing task, the privacy computing security capability of the privacy computing management unit, and a privacy computing security capability of an application function network element.

[0025] Based on the above scheme, the key generation mode has multiple choices, and different key generation schemes can be selected according to the specific situation of the privacy computing task, so that the communication process is more flexible and efficient.

[0026] In some implementations, the first information is used to indicate generation of a computing key or generation of a privacy computing security context, and a key generation participant generates a key parameter according to a security requirement and a security parameter of the privacy computing task included in the first request message.

[0027] Based on the above scheme, the first information only plays an indicating role, and the key generation participant obtains the relevant parameters required for generating the key parameter from the first request message that has been obtained, thereby reducing the indicating overhead.

[0028] In some implementations, the privacy computing security context further includes one or more of the following: a privacy computing task identifier, a privacy computing task detection rule, an expiration time of the computing key, and a security cipher algorithm identifier.

[0029] Based on the above scheme, the privacy computing security context includes parameters for the privacy computing task, so that the privacy computing task is successfully executed.

[0030] In some implementations, the method further includes: determining a policy according to the first request message, the policy being used to determine a privacy computing unit that executes the privacy computing task; and sending configuration information to the determined privacy computing unit, the configuration information being used for the privacy computing unit to execute the privacy computing task.

[0031] In some implementations, the method further includes: sending a second request message to a second core network network element, the second request message including the privacy computing security context, the second request message being used to request to obtain a policy; and receiving the policy sent by the second core network network element.

[0032] In a possible implementation, the second core network network element is a policy control function network element.

[0033] Based on the above scheme, the privacy computing task management unit determines a privacy computing unit that can execute the privacy computing task in combination with the policy, thereby improving the execution efficiency of the privacy computing task.

[0034] In some embodiments, the policy comprises one or more of the following: a data flow detection rule of the privacy computing task, a security requirement and a security parameter of the privacy computing task, a configuration parameter of the privacy computing task, a traffic control rule of the privacy computing task, a charging policy of the privacy computing task.

[0035] In some embodiments, the configuration information comprises one or more of the following: a task flow description, a security cipher algorithm identifier, a privacy computing task type, a privacy computing task identifier, a data flow detection rule of the privacy computing task, a security requirement and a security parameter of the privacy computing task, a path of input data and output data of the privacy computing task.

[0036] Based on the above scheme, the privacy computing management unit sends the configuration information to the determined privacy computing unit, so that the privacy computing unit successfully completes the execution of the privacy computing task according to the configuration information.

[0037] In a second aspect, a method is provided, which is applied to a second communication device. The second communication device can be a terminal side device, for example, can be a terminal device, a component (for example, a chip, a chip system or a circuit) in the terminal device, a logic module or software capable of realizing part or all of the functions of the terminal device, or a device capable of being matched with the terminal device. Alternatively, the second communication device can be an application function side device, for example, can be an application function network element, a component (for example, a chip, a chip system or a circuit) in the application function network element, a logic module or software capable of realizing part or all of the functions of the application function network element, or a device capable of being matched with the application function network element.

[0038] The method comprises: determining a first request message, the first request message being used to request execution of a privacy computing task; and sending the first request message to a privacy computing management unit through a first core network element.

[0039] In some embodiments, the second communication device is a terminal device; or the second communication device is an application function network element.

[0040] In some embodiments, the first core network element is any one of the following: an access and mobility management network element, a user plane function network element, a data plane function network element, and a network exposure function network element.

[0041] In some embodiments, the first request message comprises a security requirement and a security parameter of the privacy computing task.

[0042] In some embodiments, the first request message further comprises one or more of the following: a privacy computing task identifier, a security level of the privacy computing task, a security cipher algorithm identifier, a requirement on input data of the privacy computing task, and an expected output result of the privacy computing task.

[0043] In some implementations, when the second communication device is a terminal device, the method further includes: receiving, by the terminal device, first information, the first information including security requirements and security parameters of the privacy computing task, the first information being used to request obtaining a computing key, the computing key being used to perform privacy computation on data; determining, by the terminal device, the computing key according to the security requirements and the security parameters of the privacy computing task and an application layer anchor key; and sending, by the terminal device, the computing key.

[0044] Based on the above technical solution, the terminal device is the initiator of the privacy computing task, and the computing key is sent to the privacy computing management unit after being generated by the terminal device, so that the computing key does not need to be obtained from other nodes, thereby reducing the security risks caused by transmission of the computing key among multiple nodes.

[0045] In some implementations, the method further includes: receiving, by the second communication device, first information, the first information including security requirements and security parameters of the privacy computing task, the first information being used to request obtaining a computing key, the computing key being used to perform privacy computation on data; and sending, by the second communication device, a privacy computing security capability of the second communication device according to the first information, the privacy computing security capability being used to generate the computing key.

[0046] In some implementations, the first information is used to indicate generation of the computing key or generation of a privacy computing security context, and a key generation participant generates a key parameter according to the security requirements and the security parameters of the privacy computing task included in the first request message.

[0047] The beneficial effects of the second aspect and possible implementations can be referred to the description related to the first aspect, which will not be repeated here.

[0048] In a third aspect, a method is provided, which is applied to a third communication device. The third communication device can be a network side device, for example, can be a privacy computing network element, a component (such as a chip, a chip system or a circuit) in the privacy computing network element, a logic module or software capable of realizing part or all functions of the privacy computing network element, or a device capable of being used with the privacy computing network element.

[0049] The method includes: receiving configuration information, the configuration information being used for execution of a privacy computing task; and executing the privacy computing task.

[0050] Based on the above solution, the privacy computing unit executes the privacy computing task according to the received configuration information, thereby improving privacy data protection.

[0051] In some implementations, the configuration information includes one or more of the following: a task flow description, a security cipher algorithm identifier, a privacy computing task type, a privacy computing task identifier, a data flow detection rule of the privacy computing task, a security requirement and a security parameter of the privacy computing task, and a path of input data and output data of the privacy computing task.

[0052] In a possible implementation, the configuration information further includes a computing key.

[0053] In another possible implementation, the method further includes receiving a computing key, where the computing key is used for execution of the privacy computing task.

[0054] Based on the above scheme, the privacy computing unit obtains the computing key from the received configuration information, so that the computing key does not need to be received separately, thereby improving communication efficiency; or the privacy computing unit receives the computing key separately, for example, from an encryption channel, thereby improving flexibility of the communication process and security of execution of the privacy computing task.

[0055] In some implementations, the method further includes sending, to the privacy computing management unit, a privacy computing task completion response message.

[0056] The beneficial effects of the third aspect and possible implementations can be referred to the foregoing descriptions related thereto, and will not be repeated here.

[0057] In a fourth aspect, a method is provided, which is applied to a fourth communication device. The fourth communication device can be a network side device, for example, can be a first core network element, a component (for example, a chip, a chip system or a circuit) in the first core network element, a logic module or software capable of implementing part or all of the functions of the first core network element, or a device capable of being used with the first core network element. The first core network element can be, for example, an access and mobility management network element, a user plane function network element, a data plane function network element, or a network exposure network element.

[0058] The method includes: receiving, by the first core network element, a first request message from a second communication device; and sending, by the first core network element, the first request message to a privacy computing management unit. In some implementations, when the second communication device is a terminal device, the first core network element is any one of the following: an access and mobility management network element, a user plane function network element, or a data plane function network element; and when the second communication device is an application function network element, the first core network element is a network exposure function network element.

[0059] In some implementations, the first request message includes a security requirement and a security parameter of the privacy computing task.

[0060] In some implementations, the first request message further comprises one or more of: a privacy computing task identifier, a security level of the privacy computing task, a security cipher algorithm identifier, a requirement on input data of the privacy computing task, an expected output result of the privacy computing task.

[0061] In some implementations, the method further comprises: performing identity authentication on the second communication device by the first core network element.

[0062] Based on the above technical solution, the first core network element performs identity authentication on the second communication device, avoids illegal data transmission, and thus improves the security of the privacy computing task.

[0063] In some implementations, the method further comprises: receiving, by the first core network element, a privacy computing task completion response message; and sending, by the first core network element, the privacy computing task completion response message to the second communication device.

[0064] The beneficial effects of the fourth aspect and possible implementations can be referred to the foregoing descriptions related thereto, which will not be repeated here.

[0065] In the fifth aspect, a communication device is provided, which is configured to perform the method provided in any one of the first aspect to the fourth aspect. Specifically, the device can comprise units and / or modules for performing the method provided in any one of the first aspect to the fourth aspect and any one of the implementations thereof, such as a processing unit and / or a communication unit.

[0066] In one implementation, the device is a communication apparatus (such as a terminal apparatus, or a network apparatus). When the device is a communication apparatus, the communication unit can be a transceiver, or an input / output interface; and the processing unit can be at least one processor. Optionally, the transceiver can be a transceiver circuit. Optionally, the input / output interface can be an input / output circuit.

[0067] In another implementation, the device is a chip, chip system or circuit used in a communication apparatus. When the device is a chip, chip system or circuit used in a communication apparatus, the communication unit can be an input / output interface, interface circuit, output circuit, input circuit, pin or related circuit on the chip, chip system or circuit; and the processing unit can be at least one processor, processing circuit or logic circuit.

[0068] In the sixth aspect, a communication device is provided, which comprises at least one processor configured to execute computer programs or instructions stored in a memory to perform the method provided in any one of the first aspect to the fourth aspect and any one of the implementations thereof.

[0069] In an implementation, the communication apparatus further comprises the memory described above. Optionally, the memory and the processor are integrated together.

[0070] In an implementation, the memory described above is located outside the communication apparatus.

[0071] In an implementation, the apparatus is a communication device (e.g., a terminal device, or a network device).

[0072] In another implementation, the apparatus is a chip, a chip system, or a circuit used in a communication device.

[0073] In a seventh aspect, the present application provides a processor for executing the method provided in any of the above aspects.

[0074] For the sending and obtaining / receiving operations involved in the processor, if no special description is made, or if it does not contradict the actual role or inherent logic in the related description, it can be understood as the processor output and input operations, or the sending and receiving operations performed by the radio frequency circuit and the antenna, and the present application does not limit this.

[0075] In an eighth aspect, a computer readable storage medium is provided, the computer readable storage medium is used for program codes executed by a device, and the program codes comprise instructions for executing the method provided in any of the above implementations of any of the first aspect to the fourth aspect.

[0076] In a ninth aspect, a computer program product comprising instructions is provided, when the instructions comprised in the computer program product are executed by a processor on a computer, the computer executes the method provided in any of the above implementations of any of the first aspect to the fourth aspect.

[0077] In a tenth aspect, a chip is provided, the chip comprises a processor and a communication interface, the processor reads instructions stored on a memory through the communication interface, and executes the method provided in any of the above implementations of any of the first aspect to the fourth aspect.

[0078] Optionally, as an implementation, the chip further comprises a memory, the memory stores a computer program or instructions, and the processor is configured to execute the computer program or instructions stored on the memory, when the computer program or instructions are executed, the processor is configured to execute the method provided in any of the above implementations of any of the first aspect to the fourth aspect.

[0079] In an eleventh aspect, a communication system is provided, including a network side device, for example, including the first communication device, the third communication device, and the fourth communication device, the first communication device is configured to perform the method provided in any of the implementation manners of the first aspect, the third communication device is configured to perform the method provided in any of the implementation manners of the third aspect, and the fourth communication device is configured to perform the method provided in any of the implementation manners of the fourth aspect.

[0080] Optionally, as an implementation manner, the communication system further includes a terminal side device, for example, including the second communication device, the second communication device is configured to perform the method provided in any of the implementation manners of the second aspect.

[0081] The beneficial effects of the fifth aspect to the eleventh aspect and possible implementation manners can refer to the related description in the foregoing content, and will not be repeated here. BRIEF DESCRIPTION OF DRAWINGS

[0082] FIG. 1 is a schematic diagram of a communication system suitable for embodiments of the present application.

[0083] FIG. 2 shows a schematic diagram of a network architecture.

[0084] FIG. 3 shows a key architecture taking 5G authentication and key agreement (5G AKA) as an example.

[0085] FIG. 4 is a schematic diagram of a communication method 400 according to an embodiment of the present application.

[0086] FIG. 5 is a schematic diagram of a communication method 500 for deriving key parameters based on symmetric keys according to an embodiment of the present application.

[0087] FIG. 6 is a schematic diagram of a communication method 600 for deriving key parameters based on asymmetric keys according to an embodiment of the present application.

[0088] FIG. 7 is an example diagram of a method 700 for performing a privacy computing task in a wireless network according to an embodiment of the present application.

[0089] FIG. 8 is an example diagram of a method 800 for performing a privacy computing task in a wireless network according to an embodiment of the present application.

[0090] FIG. 9 is an example diagram of a method 900 for performing a privacy computing task in a wireless network according to an embodiment of the present application.

[0091] FIG. 10 is a schematic diagram of a communication device 1000 according to an embodiment of the present application.

[0092] FIG. 11 is a schematic diagram of another communication device 1100 according to an embodiment of the present application.

[0093] FIG. 12 is a schematic diagram of a chip system 1200 according to an embodiment of the present application. DETAILED DESCRIPTION

[0094] The technical solutions in the present application will be described below with reference to the drawings.

[0095] The technical solutions provided by the present application can be applied to various communication systems, such as a fourth generation (4G) system, a fifth generation (5G) or new radio (NR) system, a long term evolution (LTE) system, an LTE frequency division duplex (FDD) system, an LTE time division duplex (TDD) system, etc. The technical solutions provided by the present application can also be applied to future communication systems. The technical solutions provided by the present application can also be applied to device to device (D2D) communication, vehicle-to-everything (V2X) communication, machine to machine (M2M) communication, machine type communication (MTC), and internet of things (IoT) communication system or other communication systems.

[0096] FIG. 1 is a schematic diagram of a communication system to which embodiments of the present application are applicable. As shown in FIG. 1, the communication system includes a radio access network (RAN) 100, a core network (CN) 200, and an Internet 300. The RAN 100 includes at least one RAN node (e.g., 110a and 110b, collectively referred to as 110) and at least one terminal device (e.g., 120a-120j, collectively referred to as 120). The RAN 100 can further include other RAN nodes, such as a wireless relay device and / or a wireless backhaul device (not shown in FIG. 1), etc. The terminal devices 120 are connected to the RAN nodes 110 in a wireless manner. The RAN nodes 110 are connected to the CN 200 in a wireless or wired manner. The core network devices in the CN 200 and the RAN nodes 110 in the RAN 100 can be different physical devices respectively, or can be the same physical device integrated with the logical functions of the CN and the RAN.

[0097] The RAN 100 can be a third generation partnership project (3GPP) RAN, such as an evolved universal mobile telecommunications system (UMTS) terrestrial radio access network (E-UTRAN), a 5G NR, a new radio access network (NRAN), or a multi-standard RAN (MSR) RAN that supports radio access standards other than 3GPP access standards (e.g., wireless local area network (WLAN) interface such as IEEE 802.11). rdThe RAN 100 can be a 5G New Radio (NR) or 5G NR system, a 5G system (5G System, 5GS) or a 5G NR system (5G NR System, 5GNS) related cellular system, e.g., a 4G, 5G communication system or a future evolvement system. The RAN 100 can also be an open radio access network (O-RAN or ORAN), a cloud radio access network (C-RAN or CRAN), a wireless fidelity (Wi-Fi) system. The RAN 100 can also be a communication system in which two or more of the above systems are fused.

[0098] The RAN nodes 110 can also be access network devices, RAN entities, or access nodes, etc., to implement wireless access. The RAN nodes 110 can be of the same type or different types. In some scenarios, the roles of the RAN nodes 110 and the terminal devices 120 are relative, e.g., the network element 120i is a helicopter or a drone, which can be configured as a mobile base station. For a terminal device 120j accessing the RAN 100 through the network element 120i, the network element 120i is a base station. But for the base station 110a, the network element 120i is a terminal device. The RAN nodes 110 and the terminal devices 120 are sometimes referred to as communication apparatuses, e.g., the network elements 110a and 110b can be understood as communication apparatuses with base station functions, and the network elements 120a-120j can be understood as communication apparatuses with terminal functions.

[0099] In a possible scenario, the RAN node can be a base station (BS), an evolved Node B (eNB), an access point (AP), a transmission point (TP), a transmission reception point (TRP), a next generation NodeB (gNB), a future communication network node, or an access node in a Wi-Fi system, etc.

[0100] The RAN node can also be a server, a wearable device, a vehicle, or a vehicle-mounted device, etc. The RAN node can also be a logical node, a logical module, or software that implements all or part of the functions of the RAN node, by running on a hardware, or by virtualization of an instance on a platform such as a cloud platform. In addition, the RAN node can also be a logic node, a logic module, or software that implements all or part of the functions of the RAN node.

[0101] In another possible scenario, a plurality of RAN nodes cooperate to assist a terminal device to access wirelessly, and different RAN nodes respectively implement part of functions of a base station. For example, a RAN node is a central unit (CU), a distributed unit (DU), a CU-control plane (CP), a CU-user plane (UP), or a radio unit (RU), etc. The CU and the DU can be separately arranged, or can be included in the same network element, for example, a baseband unit (BBU). The RU can be included in a radio frequency device or a radio frequency unit, for example, a remote radio unit (RRU), an active antenna unit (AAU), or a remote radio head (RRH).

[0102] In different communication systems, the CU (or CU-CP and CU-UP), the DU, or the RU can have different names, but those skilled in the art can understand their meanings. For example, in an ORAN system, the CU can be referred to as an O-CU (open CU), the DU can be referred to as an O-DU, the CU-CP can be referred to as an O-CU-CP, the CU-UP can be referred to as an O-CU-UP, and the RU can be referred to as an O-RU. For the sake of description, the CU, the CU-CP, the CU-UP, the DU, and the RU are taken as examples for description in this application. Any one of the CU (or the CU-CP, the CU-UP), the DU, and the RU in this application can be implemented by a software module, a hardware module, or a combination of a software module and a hardware module.

[0103] It can be understood that the number of each device in the above communication system is only illustrative, and is not limited thereto. In actual applications, the communication system can further include more terminal devices, more RAN devices, and other devices.

[0104] In the embodiments of this application, a terminal device is a device with wireless transceiving function, which can be referred to as a user equipment (UE), an access terminal, a subscriber unit, a user station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a wireless communication device, a user agent, or a user apparatus.

[0105] In the embodiments of the present application, the terminal device can also be a satellite phone, a cellular phone, a smart phone, a wireless data card, a wireless modem, a machine type communication device, a cordless phone, a session initiation protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a customer-premises equipment (CPE), a smart point of sale (POS) machine, a handheld device with wireless communication function, a computing device or other processing device connected to a wireless modem, a vehicle-mounted device, a communication device carried on an aerial vehicle, a wearable device, a drone, a robot, a terminal in device-to-device (D2D) communication, a terminal in vehicle-to-everything (V2X) communication, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a terminal in industrial control, a terminal in self driving, a terminal in telemedicine or telehealth services, a terminal in smart grid, a terminal in transportation safety, a terminal in smart city, a terminal in smart home, or a terminal device in a communication network evolved after 5G, and the like, without limitation.

[0106] In the embodiments of the present application, the terminal device can also be a device with communication function in a future communication network, without limitation on the form or type of the terminal device in the future communication network, and the like.

[0107] In the embodiments of the present application, the communication apparatus for implementing the function of the terminal device can be a terminal device, or an apparatus capable of supporting the terminal device to implement the function, such as a chip system. The apparatus can be installed in the terminal device or used in matching with the terminal device. In the present application, the chip system can be composed of a chip, or can include a chip and other discrete devices.

[0108] In the embodiments of the present application, the network device is a device with wireless transceiving function, which is used for communication with the terminal device. The network device can be a node in the RAN, which can be a base station or a RAN node or an eNB of long term evolution (LTE) or a base station of a 5G network or a base station in a public land mobile network (PLMN) evolved after 5G or a broadband network gateway (BNG) or a convergence switch or a network device in 3GPP, etc.

[0109] In the embodiments of the present application, the network device can include various forms of base stations, such as: macro base station, micro base station, relay station, TRP, TP, mobile switching center, and devices that undertake the function of base station in D2D, V2X, machine-to-machine (M2M) communication, network device in non-terrestrial network (NTN), etc.

[0110] The embodiments of the present application do not limit the device form of the terminal, and the device for realizing the function of the terminal device can be a terminal device; or can be a device capable of supporting the terminal device to realize the function, such as a chip system. The device can be installed in the terminal device or used in matching with the terminal device. In the embodiments of the present application, the chip system can be composed of a chip, or can include a chip and other discrete devices. All or part of the functions of the terminal device in the present application can also be realized by software functions running on hardware, or by virtualized functions instantiated on a platform (such as a cloud platform).

[0111] FIG. 2 shows a schematic diagram of a network architecture. In the following, the network architecture applicable to the present application is introduced by taking the network architecture composed of a 5G core network, an access network and a data network (DN) as an example in combination with FIG. 2.

[0112] As shown in FIG. 2, the 5G core network can include a user plane function (UPF) network element, an authentication server function (AUSF) network element, an access and mobility management function (AMF) network element, a session management function (SMF) network element, a network exposure function (NEF) network element, a network repository function (NRF) network element, a policy control function (PCF) network element, a network slice selection function (NSSF) network element, a unified data management (UDM) network element, and an application function (AF) network element.

[0113] The UPF mainly provides user plane functions such as forwarding, processing, connection with a DN, session anchor, quality of service (QoS) policy implementation, and the like. For example, the UPF can receive user plane data from the DN and send the user plane data to the terminal device through the RAN device. The UPF can also receive user plane data from the terminal device through the RAN device and forward the user plane data to the DN. It should be understood that the UPF remains unchanged in order to ensure service continuity when the UE moves in location during service.

[0114] The AUSF is mainly used for user authentication and the like.

[0115] The AMF is mainly used for functions such as access control, mobility management, attachment and detachment, and the like.

[0116] The UDM is mainly used for management of subscription data of the UE, including storage and management of UE identification, access authorization of the UE, and the like.

[0117] The NEF is mainly used to enable third parties to use services provided by the network, support network exposure of capabilities, event and data analysis, provision of information to PLMN security equipment from external applications, conversion of information for interaction within and outside the PLMN, and the like.

[0118] The AF is mainly used to provide corresponding services by interacting with other NFs in the PLMN, for example, providing roaming UE visit network selection information, guiding data flow routing, accessing the NEF, and the like.

[0119] The PCF is mainly used to guide the unified policy framework of network behavior, and provides policy rule information and the like for network network elements (such as AMF, SMF network elements, and the like) or terminal devices. In addition, the PCF internally stores QoS rules. In addition, the PCF can generate corresponding QoS rules according to requirements to ensure that the services provided by the network meet the requirements proposed by the third party.

[0120] The network architecture shown in FIG. 2 can further include a privacy computation management (PCM) and a privacy computation enabler (PCE), an application anchor function network element (AAnF) (not shown in FIG. 2), and the like.

[0121] The AAnF is used to interact with the AUSF to generate a privacy computation key according to an application anchor key.

[0122] It should be understood that the various network elements (such as AF, AMF, UPF, NEF, PCF, PCM, PCE, AAnF, and the like) involved in the embodiments of the present application are only examples, and the names thereof do not limit the protection scope of the present application. The present application does not exclude the possibility that other names are used to replace the above-mentioned network elements in future protocols to realize the same or similar functions thereof.

[0123] In the network architecture shown in FIG. 2, the network elements can communicate with each other through the interfaces shown in the figure, and some interfaces can be realized in the form of service interfaces. As shown in FIG. 2, the SMF and the UPF can communicate with each other through the N4 interface. The UPF and the DN can communicate with each other through the N6 interface. The relationship between other interfaces and network elements is shown in FIG. 2, and for the sake of brevity, it will not be described one by one.

[0124] It should be understood that the network architecture shown above is only an example, and the network architecture applicable to the embodiments of the present application is not limited thereto. Any network architecture capable of realizing the functions of the above-mentioned network elements is applicable to the embodiments of the present application.

[0125] It should also be understood that the functions or network elements shown in FIG. 2 can be understood as network elements for realizing different functions, which can be combined as needed to form network slices, for example. These network elements can be independent devices, or can be integrated into the same device to realize different functions, or can be network elements in a hardware device, or can be software functions running on a dedicated hardware, or can be virtualized functions instantiated on a platform (such as a cloud platform), and the present application does not limit the specific form of the above-mentioned network elements.

[0126] It should also be understood that the above network elements or functions can be divided into one or more services, and further, services independent of network functions can also exist. In this application, the above-mentioned function instances, or the above-mentioned service instances included in the above-mentioned functions, or the service instances independent of the network functions can be referred to as service instances.

[0127] In the embodiments of the present application, the chip system can be composed of a chip, or can include a chip and other discrete devices.

[0128] It should also be understood that the above-mentioned names are only defined for the purpose of distinguishing different functions and should not constitute any limitation on the present application. The present application does not exclude the possibility of using other names in future communication systems. For example, in future communication systems, part or all of the above-mentioned network elements can use the terms in 5G, or other names, etc.

[0129] It should also be understood that the interface names between the network elements in FIG. 2 are only an example, and the names of the interfaces in the specific implementation can be other names, which are not limited in the present application. In addition, the names of the messages (or signaling) transmitted between the above-mentioned network elements are also only an example, and do not constitute any limitation on the functions of the messages themselves.

[0130] For the purpose of understanding the embodiments of the present application, the terms involved in the present application are briefly explained.

[0131] 1. Privacy computing.

[0132] The privacy computing technology centered on homomorphic encryption, secure multi-party computation, federated learning, etc. follows the principle of "data available but invisible, data not moving model moving", and uses cryptography and trusted hardware to realize the purpose of interactive computation of sensitive data without leaving the library, to ensure that the participants cannot directly obtain or infer the original data through intermediate information, and thus protect the data privacy and security while promoting the release of data value.

[0133] 2. Key architecture.

[0134] FIG. 3 shows a key architecture taking the 5G authentication key agreement protocol as an example. The keys related to identity verification include K, CK (cipher Key), IK (integrity Key), and the key hierarchy includes the following keys in turn: AUSF key (KAUSF), anchor key (K SEAF ), AMF key (K AMF ), NAS signaling key (K NASint , K NASenc ), non-3GPP access key (K N3IWF ), NG-RAN key (K gNB ), key for UP user plane transmission (K UPint , KUPenc ), RRC signaling key (K RRCint , K RRCenc ).

[0135] Specifically, in the 5G system, the security type network element (or the network element with the root key) includes the UDM, the AMF, the AUSF, the authentication credential repository and processing function (ARPF) network element, and the security anchor function (SEAF) network element. The ARPF is mainly used for storing the root key of the user and the related subscription data of the authentication, and calculating the 5G authentication and authorization vector. The SEAF is mainly used for deriving the lower layer NAS and AS keys according to the anchor key, and comparing the authentication results.

[0136] The above keys are described as follows:

[0137] (1) K AUSF : K AUSF in the home network is derived by the mobile equipment (ME) and the ARPF from CK and IK, and K AUSF is received from the ARPF as part of the 5G home environment authentication vector (HEAV).

[0138] (2) K SEAF : K AUSF is the anchor key derived by the ME and the AUSF from K AUSF . K AMF is provided by the AUSF to the SEAF in the service network.

[0139] (3) K AMF : K SEAF in the service network is derived by the ME and the SEAF from K AMF . K NASint is further derived by the ME and the source AMF when performing horizontal key derivation.

[0140] (4) NAS signaling key: K AMF is the key derived by the ME and the AMF from K NASenc , which is applied to protect the NAS signaling using a specific integrity algorithm. K AMF is the key derived by the ME and the AMF from K N3IWF , which is used to protect the NAS signaling using a specific encryption algorithm.

[0141] (5) K N3IWF : K N3IWF is a key derived by the ME and the AMF from K AMF for non-3GPP access. K N3IWF is not forwarded between N3IWF.

[0142] (6) K gNB : K gNB is a key derived by the ME and the AMF from K AMF . K gNB is further derived by the ME and the source gNB at the time of performing horizontal or vertical key derivation.

[0143] (7) User plane UP transport key: K UPint is a key derived by the ME and the gNB from K gNB , which is applied to protect user plane data between the ME and the gNB using a specific integrity algorithm. K UPenc is a key derived by the ME and the gNB from K gNB , which is applied to protect data for UP transport using a specific encryption algorithm.

[0144] (8) RRC signaling key: K RRCint is a key derived by the ME and the gNB from K gNB , which is applied to protect RRC signaling using a specific integrity algorithm. K RRCenc is a key derived by the ME and the gNB from K gNB , which is applied to protect RRC signaling using a specific encryption algorithm.

[0145] It should be understood that when a new key is derived according to a key, a key derivation function (KDF) can be used for derivation. The key derivation function refers to deriving one or more keys from a master key using a pseudo-random function, and the key derivation function can have the key expanded to a longer key or obtain a key of a required format.

[0146] 3. Privacy computing tasks in a wireless network.

[0147] The privacy computing task involved in the embodiments of the present application refers to that a privacy computing task initiator initiates a request to perform a privacy computing task on some privacy data (denoted as first data). In the execution process of the privacy computing task, the keys involved include an encryption key, a decryption key, and a computing key. Specifically, the encryption key is used to encrypt the first data to obtain first ciphertext, the computing key is used to perform privacy computing on the first ciphertext to obtain second ciphertext, and the decryption key is used to decrypt the second ciphertext to obtain the first data.

[0148] In some possible implementations, scenarios in which the wireless network provides a privacy computing service can include the following possible cases according to different data flows.

[0149] (1) Data flow: from an application layer of an application server (APP Server) / a terminal device to the wireless network.

[0150] In this case, the APP Server / the terminal device offloads a privacy computing task to the wireless network, that is, the APP Server / the terminal device is in a plaintext region (or the APP Server / the terminal device can obtain plaintext data), is responsible for encrypting first data (that is, plaintext data) to obtain first ciphertext, and sends the first ciphertext to the wireless network. Correspondingly, the wireless network is in a ciphertext region (or the wireless network can only obtain encrypted data), and is responsible for performing privacy computation on the received first ciphertext to obtain second ciphertext.

[0151] (2) Data flow: from the terminal device to the wireless network and then to the APP Server.

[0152] In this case, the APP Server / the terminal device offloads a privacy computing task to the wireless network, that is, the terminal device encrypts first data to obtain first ciphertext, and sends the first ciphertext to the wireless network. The wireless network performs privacy computation on the first ciphertext to obtain second ciphertext, and sends the second ciphertext to the APP Server. The APP Server decrypts the second ciphertext to obtain the first data, that is, the APP Server and the terminal device are in a plaintext region, and the wireless network is in a ciphertext region.

[0153] (3) Data flow: from the wireless network to the APP Server.

[0154] In this case, the wireless network offloads a privacy computing task to the APP Server, that is, the wireless network encrypts first data to obtain first ciphertext, sends the first ciphertext to the APP Server, the APP Server performs privacy computation on the first ciphertext to obtain second ciphertext, and sends the second ciphertext to the wireless network. The wireless network decrypts the second ciphertext to obtain the first data, that is, the wireless network is in a plaintext region, and the APP Server is in a ciphertext region.

[0155] 4. Privacy computing management unit and privacy computing unit: The privacy computing management unit is configured to manage a privacy computing task. For example, the privacy computing management unit can be referred to as a privacy computing management (PCM), and can also be referred to by other names, which are not limited in the present application.

[0156] The privacy computing unit is used to perform a privacy computing task, and can be encapsulated by an algorithm function (for example, privacy computing, encryption, decryption, and the like such as data processing and model calculation), software and hardware resource information (for example, computing / storage, and the like), and the like. Exemplarily, the privacy computing unit can be referred to as a privacy computing enabler (PCE), and can also have other names, which are not limited in the present application.

[0157] In a possible implementation, the privacy computing management unit can include a privacy computation resource management (PCRM), a privacy computation task management (PCTM), a privacy computation key management (PCKM), and a privacy computation data management (PCDM), and the like, to ensure smooth execution of the privacy computing task.

[0158] The privacy computing can improve data privacy security. In actual application of the privacy computing, how to implement the privacy computing task in a wireless network becomes a problem to be solved.

[0159] FIG. 4 is a schematic diagram of a communication method 400 according to an embodiment of the present application. The method 400 includes a first communication device, a second communication device, a third communication device, and a fourth communication device. The first communication device is, for example, a privacy computing management unit. The second communication device is, for example, a terminal device or an application function network element. The third communication device is, for example, a privacy computing unit. The fourth communication device is, for example, a first core network network element.

[0160] S401, the second communication device sends a first request message to the fourth communication device, and correspondingly, the fourth communication device receives the first request message.

[0161] S402, the fourth communication device forwards the first request message to the first communication device, and correspondingly, the first communication device receives the first request message. The first request message is used to request execution of a privacy computing task.

[0162] Specifically, the privacy computing management unit receives a first request message from a privacy computing task initiator (hereinafter referred to as a second communication device), and determines to execute a privacy computing task according to the first request message.

[0163] The second communication device is not limited in the embodiments of the present application. Alternatively, the second communication device is a terminal device, or the second communication device is an application function network element.

[0164] In a possible implementation, the first request message is forwarded via a fourth communication device (for example, a first core network element), that is, after determining the first request message, the second communication device sends the first request message to the first core network element, and the first core network element sends the first request message to the privacy computing management unit, that is, the privacy computing management unit obtains the first request message from the first core network element.

[0165] In a possible implementation, the first core network element is any one of the following: an access and mobility management network element, a user plane function network element, a data plane function network element, and a network exposure function network element.

[0166] The embodiments of the present application do not limit the specific name of the first request message and the specific content included in the first request message, so that the privacy computing management unit can determine that the privacy computing task has been initiated according to the first request message.

[0167] In a possible implementation, the first request message includes security requirements and security parameters of the privacy computing task.

[0168] Optionally, the first request message further includes one or more of the following: a privacy computing task identifier, a security cipher algorithm identifier, a security level of the privacy computing task, a requirement for input data of the privacy computing task, and an expected output result of the privacy computing task.

[0169] The following illustrates the parameters included in the first request message, and the following content is only an example and is not a final limitation.

[0170] (1) Security requirements and security parameters of the privacy computing task.

[0171] The security requirements of the privacy computing task include at least one of the following: data privacy protection (ensuring that the first data is not leaked), algorithm security (the algorithm used in the privacy computing task execution process is a secure algorithm and can resist various attack means), or communication security (communication security between nodes participating in privacy computing).

[0172] For example, the security parameters include one or more of the following: a security cipher algorithm identifier, a random public reference quantity, a ciphertext modulus, a ciphertext calculation vector dimension, an upper limit of noise distribution, a noise standard deviation, lengths and bases of ciphertext decomposition at different levels, a security level, a decryption circuit depth, and a plaintext modulus.

[0173] For another example, the security parameters further include at least one of the following: input data parameters (for example, types and formats of input data), algorithm parameters (for example, algorithm complexity and time complexity of the algorithm), or performance parameters (for example, calculation time, communication overhead, and resource consumption).

[0174] (2) The privacy computing task identifier is used to uniquely identify the privacy computing task (or to identify or distinguish different privacy computing tasks). For example, the privacy computing task identifier includes at least one of the following: a user identifier, a transmission tunnel identifier, a data flow identifier, an application identifier, and the like.

[0175] (3) The security algorithm identifier is used to indicate the security algorithm used by the privacy computing unit when performing privacy computing. For example, a recurrent neural network (RNN), a convolutional neural network (CNN) algorithm, a BGV (Brakerski, Gentry, Vaikuntanathan) algorithm, a BFV (Brakerski, Fan, Vercauteren) algorithm, a CKKS (Cheon, Andrey Kim, Miran Kim, Yongsoo Song) algorithm, and a fully homomorphic encryption scheme over the Torus (TFHE) algorithm.

[0176] It should be understood that the higher the complexity of the algorithm involved, the greater the security gain, but at the same time, the time and resource cost will also increase.

[0177] (4) The security level of the privacy computing task refers to the division of the security level of the privacy computing task for the purpose of improving efficiency and saving resources. Different security levels correspond to different execution strategies, and the specific division method is not limited in the embodiments of the present application.

[0178] In one possible implementation, the security level of the privacy computing task corresponds to the security algorithm. For example, when the security level is high, a security algorithm with high complexity is matched, and when the security level is low, a security algorithm with low complexity is matched.

[0179] For example, the privacy computing task is divided into a first security level and a second security level according to the importance of the first data. The first security level indicates that the importance of the first data is high and requires the highest level of protection, so more security defense strategies (such as using a security algorithm with high complexity) need to be introduced during the execution of the privacy computing task, thereby improving the security of the privacy data. The second security level indicates that the importance of the first data is low and only requires basic protection, so the basic security of the data during transmission and storage can be ensured (for example, a security algorithm with low complexity is used) during the execution of the privacy computing task, thereby improving the communication efficiency while saving resources.

[0180] (5) Requirements for input data of the privacy computing task.

[0181] For example, the input data should comply with specific data formats and standards, so that the relevant data can be correctly parsed and processed during the execution of the privacy computing task.

[0182] For another example, the input data should be pre-processed to ensure that sensitive information is not directly exposed.

[0183] (6) Expected output result of the privacy computing task.

[0184] For example, the expected output result of the privacy computing task includes the calculation result or model output (such as the prediction result of an RNN or CNN model) after privacy computing.

[0185] In S403, the privacy computing management unit sends first information to the key generation participant based on the first request message, the first information being used for generating a privacy computing security context.

[0186] In a possible implementation, the first information includes security requirements and security parameters of the privacy computing task.

[0187] In a possible implementation, the first information is used as indication information, and the first information is used for indicating generation of a computing key or for indicating generation of a privacy computing security context. Embodiments of the present application do not limit the specific name and form of the first information.

[0188] Generally, the key generation participant refers to a node participating in the key generation process, and the key generation participant may be, for example, a privacy computing task initiator (such as a terminal device or an application function network element) or a key management center. The specific process of key generation will be described in detail later.

[0189] Specifically, the privacy computing management unit obtains the privacy computing security context by sending the first information, and manages the privacy computing task based on the privacy computing security context.

[0190] In the privacy computing security context, a computing key required in the process of executing the privacy computing task is included.

[0191] Optionally, the privacy computing security context further includes one or more of the following: a privacy computing task identifier, a privacy computing task detection rule, an expiration time of the computing key, and a security cipher algorithm identifier.

[0192] The following illustrates the parameters included in the privacy computing security context, and the following content is only for example and is not limited.

[0193] (1) The privacy computing task detection rule is an important mechanism to ensure that the privacy computing task can be executed as expected while ensuring data privacy and security. Optionally, the privacy computing task detection rule includes the following multiple stages: detection rules in the privacy computing task initialization stage (such as detecting the format and quality of the first data), detection rules in the privacy computing task execution stage (such as detecting whether there is a data leakage risk in the privacy computing process), and detection rules in the privacy computing task monitoring and result verification stage (such as detecting the data format of the output result, and further detecting whether the privacy computing task is successfully executed, whether there is a leakage risk when transmitting the data after privacy computing, and the like).

[0194] (2) Expiration time of the computing key: In order to improve the security of the privacy computing task execution process, the computing key can be set as an expirable computing key, which cannot be used or stopped after expiration, thereby improving security; or the computing key is set with a valid time, and the computing key cannot be used or stopped after the valid time of the computing key is exhausted, without limitation.

[0195] The scheme of obtaining the privacy computing security context by the privacy computing management unit by sending the first information will be described in detail subsequently.

[0196] In one possible implementation, the method 400 further includes step S404.

[0197] S404, the first communication device determines a third communication device capable of executing the privacy computing task.

[0198] The selection of the third communication device capable of executing the privacy computing task by the first communication device can be understood as selecting a matching third communication device according to the specific requirements of the privacy computing task, or selecting a third communication device currently in an idle state, so as to ensure that the privacy computing task is successfully executed.

[0199] The embodiments of the present application do not limit the specific method of the first communication device determining the third communication device capable of executing the privacy computing task, and the following gives several possible implementation modes.

[0200] Mode 1

[0201] The first communication device sends a second request message to the second core network element to request the second core network element to send a policy for determining the privacy computing unit. After receiving the policy from the second core network element, the privacy computing management unit determines the privacy computing unit capable of executing the privacy computing task according to the policy.

[0202] Mode 2

[0203] The first communication device sends a second request message to the second core network element, the second request message including a list of third communication devices currently available for selection, the second core network element receiving the second request message and, in combination with a privacy calculation task to be performed, determining a third communication device capable of performing the privacy calculation task according to a policy, and returning the selected third communication device to the first communication device.

[0204] The second core network element is not specifically limited in the embodiments of the present application, and is exemplarily a policy control function element. The second core network element stores a policy by itself or obtains the policy from another element, which is not limited.

[0205] The embodiments of the present application do not limit the specific name of the second request message and the specific content included therein.

[0206] In a possible implementation, the second request message includes a privacy calculation security context.

[0207] Optionally, the second request message further includes one or more of the following: a privacy calculation task identifier, a privacy calculation task type, and a privacy calculation task requirement (e.g., including a calculation function description of privacy calculation, a data processing rate of privacy calculation task related data, a security level of privacy calculation task, and the like).

[0208] The embodiments of the present application do not limit the specific name of the policy and the content included therein, and exemplarily, the policy includes one or more of the following: a data flow detection rule of a privacy calculation task, a security requirement and security parameter of a privacy calculation task, a configuration parameter of a privacy calculation task, a traffic control rule of a privacy calculation task, and a billing policy of a privacy calculation task.

[0209] S405, the first communication device sends configuration information to the selected third communication device, the configuration information being used for execution of the privacy calculation task.

[0210] The embodiments of the present application do not limit the specific name of the configuration information and the content included therein, and exemplarily, the configuration information includes one or more of the following: a task flow description, a security cipher algorithm identifier, a privacy calculation task type, a privacy calculation task identifier, a data flow detection rule of a privacy calculation task, a security requirement and security parameter of a privacy calculation task, and a path of input data and output data of a privacy calculation task.

[0211] Exemplarily, the task flow description is used to describe the following content:

[0212] A list of privacy calculation units: including information of at least one privacy calculation unit, the information of one privacy calculation unit including a privacy calculation unit identifier, an algorithm resource identifier, an input parameter, and an output parameter.

[0213] Running order between the privacy computing units and the dependency relationship between the input and output between the privacy computing units.

[0214] Interaction protocol between the privacy computing units, such as “Privacy Computing Cross-Platform Interconnection” published by China Information and Communication Research Institute (China Institute of Information and Communication), International Electrotechnical Commission (IEC), International Organization for Standardization (ISO), or Institute of Electrical and Electronics Engineers (IEEE), and “IEEE P3117 Standard for Interworking Framework for Privacy-Preserving Computation”.

[0215] S406, the third communication device performs the privacy computing task.

[0216] Specifically, the third communication device performs privacy computation on the first ciphertext according to the received configuration information to obtain a second ciphertext, and then sends the second ciphertext to the decryption party.

[0217] For example, when the second communication device is the privacy computing task initiator and the third communication device is the privacy computing performer, the second communication device is responsible for encrypting the first data to obtain the first ciphertext, and sending the first ciphertext to the third communication device. The third communication device performs privacy computation on the first ciphertext according to the configuration information to obtain the second ciphertext, and then sends the second ciphertext to the decryption party (not shown in FIG. 4). The decryption party decrypts the second ciphertext to obtain the first data.

[0218] Taking the first communication device as the privacy computing management unit and the third communication device as the privacy computing unit as an example, the deployment scheme of the privacy computing management unit and the privacy computing unit provided in the embodiments of the present application is introduced as follows.

[0219] The embodiments of the present application do not limit the specific manner in which the privacy computing management unit and the privacy computing unit are deployed in a certain node, so that the privacy computing management unit and the privacy computing unit can perform related privacy computing tasks. The following gives several possible implementation manners.

[0220] Implementation manner 1: The privacy computing management unit is separately deployed, and the privacy computing unit is separately deployed.

[0221] For example, the privacy computing management unit is deployed in a public land mobile network (PLMN) alone or in a RAN alone; the privacy computing unit is deployed in the PLMN alone or in the RAN alone.

[0222] Implementation 2: The privacy computing management unit is integrated in a certain node, and the privacy computing unit is integrated in a certain node.

[0223] For example, the privacy computing management unit is integrated in an SMF; or the privacy computing management unit is integrated in a sensing service control function (SSCF); or the privacy computing management unit is integrated in a task anchor (TA) / task scheduler (TS).

[0224] For another example, the privacy computing unit is integrated in a network data analytics function (NWDAF); or the privacy computing unit is integrated in a RAN; or the privacy computing unit is integrated in a RAN; or the privacy computing unit is integrated in a UPF; or the privacy computing unit is integrated in a sensing data process function (SDPF); or the privacy computing unit is integrated in a task executer (TE).

[0225] Implementation 3: The privacy computing management unit is deployed alone, and the privacy computing unit is integrated in a certain node.

[0226] Implementation 4: The privacy computing management unit is integrated in a certain node, and the privacy computing unit is deployed alone.

[0227] Next, the scheme that the privacy computing management unit generates a privacy computing security context based on first information in the embodiment of the application will be described in detail in combination with FIG. 5 and FIG. 6.

[0228] The privacy computing security context includes a computing key. The application provides two ways of generating a key parameter based on symmetric key derivation and based on asymmetric key derivation.

[0229] FIG. 5 is a schematic diagram of a communication method 500 for deriving a key parameter based on a symmetric key according to an embodiment of the application. As shown in FIG. 5, taking a wireless network as a plaintext area and an AF as a ciphertext area as an example, a key generation task is completed in the wireless network.

[0230] S501, identity authentication.

[0231] Specifically, identity authentication is performed between the terminal device and the core network to avoid unauthorized access.

[0232] S502, the privacy computing management unit receives a first request message for requesting to perform a privacy computing task.

[0233] The first request message is from a second communication device, and embodiments of the present application do not limit the second communication device. Optionally, the second communication device is a terminal device in a plaintext area.

[0234] Optionally, the privacy computing management unit sends the received first request message to a plurality of nodes including a terminal device, an AUSF, an AAnF, and an AF; or the first request message is sent through broadcasting or groupcasting, i.e., the plurality of nodes can all receive the first request message, which is not limited.

[0235] After the plurality of nodes obtain the first request message, the plurality of nodes can actively respond to the first request message. For example, after a key generation participant (a terminal device, an AAnF, and an AF) receives the first request message, the key generation process is entered, and thus no additional indication information is needed to indicate separately, thereby reducing communication overhead.

[0236] S503, the privacy computing management unit sends first information to the terminal device and the AAnF based on the first request message.

[0237] Optionally, the first information includes security requirements and security parameters of the privacy computing task.

[0238] Optionally, the first information indicates to generate a computing key or generate a privacy computing security context as indication information.

[0239] S503-1, the privacy computing management unit sends the first information to the terminal device.

[0240] S503-2, the privacy computing management unit sends the first information to the AAnF.

[0241] The terminal device performs S504-1 and S506-1 according to the received first information.

[0242] S504-1, the terminal device obtains an application anchor key K AAK In one possible implementation, the terminal device derives the application anchor key K AUSF based on an AUSF key K AAK .

[0243] In embodiments of the present application, the terminal device obtains K AUSFThe specific manner of storing K AUSF Or the terminal device actively obtains K AUSF .

[0244] S506-1, the terminal device generates an encryption key, a decryption key and a calculation key for the privacy calculation task based on the security requirements and security parameters of the privacy calculation task in the first request message and K AAK .

[0245] The AAnF performs S504-2, S505 and S506-2 according to the received first information.

[0246] S504-2, the AUSF derives an application anchor key K AUSF based on K AAK .

[0247] S505, the AUSF sends the application anchor key K AAK to the AAnF.

[0248] Wherein, the AUSF can actively send K AAK to the AAnF after receiving the first request message, or the AAnF initiates a request to the AUSF to obtain K AAK , without limitation.

[0249] S506-2, the AAnF generates an encryption key, a decryption key and a calculation key for the privacy calculation task based on the security requirements and security parameters of the privacy calculation task in the first request message and / or the first information and K AAK .

[0250] S507, the AAnF sends the calculation key to the AF, for the AF to obtain the application layer privacy calculation security context.

[0251] S508, the AF sends the application layer privacy calculation security context to the privacy calculation management unit, and the privacy calculation management unit receives the application layer privacy calculation security context sent by the AF.

[0252] Optionally, the application layer privacy calculation security context includes one or more of the following: calculation key, key identifier, key expiration time, security parameter.

[0253] S509, based on receiving the application layer privacy calculation security context, the privacy calculation management unit generates and stores the privacy calculation security context.

[0254] Specifically, the application layer privacy calculation security context belongs to part of the privacy calculation security context, in which case the privacy calculation management unit can obtain the calculation key from the application layer privacy calculation security context.

[0255] S510, the privacy computing management unit determines a privacy computing unit capable of performing the privacy computing task, and then sends configuration information to the privacy computing unit. As shown in FIG. 5, the privacy computing management unit selects a privacy computing unit deployed in the AF, and sends configuration information to the privacy computing unit.

[0256] S511, the privacy computing unit performs the privacy computing task according to the received configuration information.

[0257] Specifically, the privacy computing unit performs privacy computation on the first ciphertext to obtain a second ciphertext according to the received configuration information, and then sends the second ciphertext to the decryption party.

[0258] For example, when the terminal device serves as the encryption party and the decryption party, and the AF in the ciphertext area serves as the privacy computing task performer, the terminal device is responsible for encrypting the first data to obtain the first ciphertext, and sending the first ciphertext to the AF. The AF performs privacy computation on the first ciphertext to obtain a second ciphertext according to the configuration information, and then sends the second ciphertext to the terminal device. The terminal device decrypts the second ciphertext to obtain the first data.

[0259] The method can be applied to an extended reality (XR) scene or a practical application scene of a meta universe. In one possible implementation, the AF is a computing server at the edge of a wireless network.

[0260] FIG. 6 is a schematic diagram of a communication method 600 based on asymmetric key derivation key parameters according to an embodiment of the present application. As shown in FIG. 6, taking the wireless network as the ciphertext area and the AF as the plaintext area as an example, the key generation task is offloaded to a key management center (KMC) for completion.

[0261] S601, a secure channel is established.

[0262] For example, a secure channel (for example, HTTPS, IPSec, etc.) is established between each node (terminal device, privacy computing management unit, AUSF, AF, and KMC) to ensure the security of data transmission.

[0263] S602, the privacy computing management unit receives a first request message, which is used to request to perform a privacy computing task.

[0264] The first request message is from a second communication device, and the second communication device is not limited in the embodiments of the present application. Optionally, the second communication device is the AF in the plaintext area.

[0265] Optionally, the privacy computing management unit sends the received first request message to multiple nodes such as a terminal device, an AUSF, an AF, and a KMC; or the first request message is sent in a broadcast or groupcast manner, i.e., the first request message can be received by multiple nodes, without limitation.

[0266] S603, the privacy computing management unit sends first information based on the first request message, the first information being used for the KMC to determine privacy computing security capabilities of the privacy computing management unit and the second communication apparatus, so as to generate a computing key.

[0267] Optionally, the privacy computing security capabilities include a security level and a security cryptographic algorithm identifier.

[0268] Specifically, after determining the privacy computing security capabilities of the privacy computing management unit and the second communication apparatus, the KMC generates a computing key applicable to the privacy computing management unit and the second communication apparatus, so that the generated computing key matches the security level indicated by the privacy computing security capabilities, or so that the generated computing key can be used for a security algorithm indicated by the security cryptographic algorithm identifier.

[0269] In a possible implementation, S603-1, the privacy computing management unit sends first information (denoted as first information #1) to the KMC, and after receiving the first information #1, the KMC obtains the privacy computing security capabilities of the privacy computing management unit and the second communication apparatus.

[0270] In a possible implementation, the first request message further includes information of a privacy computing task initiator (i.e., the second communication apparatus). For example, when the terminal device sends the first request message as the privacy computing task initiator, the first request message further includes identity information (e.g., an identity identifier) of the terminal device; for another example, when the AF sends the first request message as the privacy computing task initiator, the first request message further includes identity information (e.g., an identity identifier) of the AF.

[0271] Optionally, the first information #1 includes security requirements and security parameters of the privacy computing task.

[0272] Optionally, the first information #1 is used as indication information, and the first information #1 is used to indicate generation of a computing key or to indicate generation of a privacy computing security context.

[0273] In a possible implementation, the first request message is from the terminal device, and the KMC obtains the privacy computing security capabilities of the privacy computing management unit and the terminal device.

[0274] In another possible implementation, the first request message is from the AF, and the KMC obtains the privacy computing security capabilities of the privacy computing management unit and the AF.

[0275] In a possible implementation, the privacy computing management unit sends first information (denoted as first information #2) to the second communication device, and the second communication device sends the privacy computing security capability to the KMC after receiving the first information #2.

[0276] Optionally, the first information #2 includes security requirements and security parameters of the privacy computing task.

[0277] Optionally, the first information #2 is used as indication information, and the first information #2 is used to indicate generation of the computing key or generation of the privacy computing security context.

[0278] In a possible implementation, the first request message is from the terminal device, and the privacy computing management unit sends the first information #2 to the terminal device, and the terminal device sends the privacy computing security capability to the KMC.

[0279] In another possible implementation, the first request message is from the AF, and the privacy computing management unit sends the first information #2 to the AF, and the AF sends the privacy computing security capability to the KMC.

[0280] In a possible implementation, the privacy computing management unit actively sends the privacy computing security capability to the KMC based on the first request message, or the KMC further obtains the privacy computing security capability of the privacy computing management unit based on the privacy computing security capability of the second communication device, which is not limited.

[0281] In a possible implementation, the KMC measures the privacy computing security capability of the privacy computing management unit, and the KMC configures the key according to the privacy computing security capability of the privacy computing management unit, so that the privacy computing management unit can deploy a subsequent process according to a security algorithm matched by the computing key, for example, selecting a suitable privacy computing unit.

[0282] S603-1 and S603-2 are parallel steps, and one of the steps can be performed.

[0283] S604, the KMC obtains the privacy computing security capability of the privacy computing management unit and the second communication device.

[0284] S605, the KMC generates an encryption key, a decryption key, a computing key, and a security parameter for performing the privacy computing task based on the privacy computing security capability of the privacy computing management unit and the second communication device and the security requirements and parameters of the privacy computing task in the first request message.

[0285] Optionally, the KMC generates other related parameters, for example, a key expiration time.

[0286] S606, the KMC sends the encryption key, the decryption key, and the security parameter to the second communication device.

[0287] S607, the KMC sends the computation key and the security parameter to the privacy computation management unit.

[0288] Optionally, the KMC sends the key expiration time and other parameters to the privacy computation management unit.

[0289] S608, the privacy computation management unit generates and stores a privacy computation security context based on the computation key and the security parameter.

[0290] Based on the methods in FIG. 5 and FIG. 6, there are multiple choices for the way of key generation, and in actual application, different key generation schemes can be selected according to the specific situation of the privacy computation task, so that the communication process is more flexible and efficient.

[0291] The method for the initiator of different privacy computation tasks to perform a privacy computation task in a wireless network is described below in conjunction with FIG. 7-FIG. 9.

[0292] FIG. 7 is an example diagram of a method 700 for performing a privacy computation task in a wireless network according to an embodiment of the present application, as shown in FIG. 7, an AF as a privacy computation task initiator sends a first request message to a privacy computation management unit through a first core network element (for example, NEF).

[0293] S701, the AF sends a first request message to the NEF.

[0294] Specifically, the first request message is used for the AF to request to perform a privacy computation task, wherein the specific content included in the first request message can refer to the content in S402, which will not be described here.

[0295] S702, the NEF performs identity authentication on the AF.

[0296] Specifically, the NEF performs identity authentication on the AF based on the received first request message, and the specific way of identity authentication of the NEF is not limited in the present application.

[0297] Optionally, the NEF obtains subscription information from the UDM or the AUSF, and performs identity authentication on the AF according to the subscription information, and further, the NEF performs service authorization and configuration update on the privacy computation service request initiated by the AF based on the subscription information.

[0298] Optionally, the subscription information includes a privacy computation service type, a privacy computation security requirement, location information, and the like.

[0299] S703, the NEF forwards the first request message to the privacy computation management unit.

[0300] S704, the privacy computing management unit generates a privacy computing security context and transmits according to the first request message by using the method in the method 500 or the method 600.

[0301] Specifically, the privacy computing management unit stores the generated privacy computing security context and transmits the privacy computing security context. Wherein, the privacy computing management unit can selectively transmit part or all of the contents in the privacy computing security context according to different needs of each node.

[0302] For example, when the AF is responsible for encrypting the first data, the privacy computing management unit sends the privacy computing security context #1 to the AF, and the privacy computing security context #1 includes an encryption key, that is, the AF can encrypt the first data to obtain the first ciphertext according to the privacy computing security context #1.

[0303] For another example, a node (denoted as node A) needs to decrypt the ciphertext after privacy computing (i.e. the second ciphertext), and the privacy computing management unit sends the privacy computing security context #2 to the node A, and the privacy computing security context #2 includes a decryption key, that is, the node A can decrypt the second ciphertext to obtain the first data according to the privacy computing security context #2.

[0304] S705, the privacy computing management unit sends a second request message to a second core network element (e.g. PCF) according to the first request message.

[0305] Specifically, the second request message is used to request a policy from the PCF, and the specific content included in the second request message can refer to the content in S404, which will not be repeated here.

[0306] S706, the PCF sends a policy.

[0307] Specifically, the PCF sends a policy to the privacy computing management unit based on the received second request message, and the policy is used to determine a privacy computing unit capable of executing the privacy computing task initiated by the AF. Wherein, the specific content included in the policy can refer to the content in S404, which will not be repeated here.

[0308] S707, the privacy computing management unit determines a privacy computing unit based on the received policy.

[0309] Specifically, the privacy computing management unit determines a privacy computing unit (denoted as privacy computing unit #A) capable of executing the privacy computing task initiated by the AF based on the policy and the privacy computing capabilities of one or more privacy computing units available for selection, wherein the determined privacy computing unit #A can include one privacy computing unit or multiple privacy computing units, which is not limited.

[0310] S708, the privacy computing management unit sends configuration information to the privacy computing unit #A, the configuration information being used for execution of the privacy computing task. Specific contents included in the configuration information can refer to the contents in S405, and will not be described here again.

[0311] S709, the privacy computing unit #A sends a privacy computing task configuration completion response message to the privacy computing management unit.

[0312] Specifically, the privacy computing unit #A performs configuration update according to the received configuration information, and sends a privacy computing task configuration completion response to the privacy computing management unit after the configuration is completed.

[0313] S710, the privacy computing management unit sends a privacy computing task configuration completion response message to the NEF, and the NEF sends the privacy computing task configuration completion response message to the AF.

[0314] S710 is an optional step.

[0315] S711, the AF performs an encryption process.

[0316] Specifically, the AF encrypts the first data according to the encryption key to obtain the first ciphertext.

[0317] Optionally, the AF encrypts the first data based on the received privacy computing service configuration completion response message; or the AF manages the process of encrypting the first data by itself, which is not limited.

[0318] S712, a privacy computing data stream is transmitted.

[0319] Specifically, the privacy computing data stream includes the first ciphertext.

[0320] S713, the privacy computing unit #A executes the privacy computing task.

[0321] Specifically, the privacy computing unit #A performs privacy computing on the first ciphertext in the privacy computing data stream based on the computing key.

[0322] The privacy computing unit #A obtains the computing key through the configuration information in S708; or the privacy computing unit #A obtains the computing key through other ways (for example, the privacy computing unit #A obtains the computing key through an encryption channel), which is not limited.

[0323] S714, the privacy computing unit #A sends a privacy computing task completion response message to the privacy computing management unit.

[0324] S715, the privacy computing management unit sends the privacy computing task completion response message to the AF.

[0325] Optionally, the privacy computing management unit sends the privacy computing task completion response message directly to the AF; or the privacy computing management unit sends the privacy computing task completion response message to the NEF, and the NEF sends the privacy computing task completion response message to the AF, which is not limited.

[0326] S714 and S715 are optional steps.

[0327] FIG. 8 is an example diagram of a method 800 for performing a privacy computing task in a wireless network according to an embodiment of the present application. As shown in FIG. 8, a terminal device as a privacy computing task initiator sends a first request message to a privacy computing management unit through a first core network element (for example, an AMF).

[0328] S801, the terminal device sends a first request message to the privacy computing management unit through the AMF.

[0329] Specifically, the first request message is used for the terminal device to request to perform a privacy computing task, wherein the specific content included in the first request message can refer to the content in S402, which will not be described here.

[0330] S802, the AMF performs identity authentication on the terminal device.

[0331] Specifically, the AMF performs identity authentication on the terminal device based on the received first request message, and the specific identity authentication method of the AMF is not limited in the present application.

[0332] Optionally, the AMF obtains subscription information from the UDM or the AUSF, and performs identity authentication on the terminal device according to the subscription information.

[0333] Optionally, the subscription information includes a privacy computing service type, a privacy computing security requirement, location information, etc.

[0334] S803, the privacy computing management unit generates and transmits a privacy computing security context according to the first request message by using the method 500 or the method 600.

[0335] The specific content in this step can refer to the content in S704, which will not be described here.

[0336] S804, the privacy computing management unit sends a second request message to the PCF according to the first request message.

[0337] Specifically, the second request message is used to request a policy from the PCF, wherein the specific content included in the second request message can refer to the content in S404, which will not be described here.

[0338] S805, the PCF sends a policy.

[0339] Specifically, the PCF sends a policy to the privacy computing management unit based on the received second request message, the policy being used to determine a privacy computing unit capable of performing the privacy computing task initiated by the terminal device. The specific content included in the policy can refer to that in S404, and will not be described here.

[0340] S806, the privacy computing management unit determines a privacy computing unit based on the received policy.

[0341] Specifically, the privacy computing management unit determines a privacy computing unit (denoted as privacy computing unit #A) capable of performing the privacy computing task initiated by the terminal device based on the policy and the privacy computing capabilities of the multiple privacy computing units available for selection, wherein the determined privacy computing unit #A can include one privacy computing unit or multiple privacy computing units, which are not limited.

[0342] S807, the privacy computing management unit sends configuration information to the privacy computing unit #A, the configuration information being used for the execution of the privacy computing task. The specific content included in the configuration information can refer to that in S405, and will not be described here.

[0343] S808, the privacy computing unit #A sends a privacy computing task configuration completion response message to the privacy computing management unit.

[0344] Specifically, the privacy computing unit #A performs configuration update according to the received configuration information, and sends a privacy computing task configuration completion response to the privacy computing management unit after the configuration is completed.

[0345] S809, the privacy computing management unit sends a privacy computing task configuration completion response message to the AMF, and the AMF sends the privacy computing task configuration completion response message to the terminal device.

[0346] S809 is an optional step.

[0347] S810, the terminal device performs an encryption process.

[0348] Specifically, the terminal device encrypts the first data according to the encryption key to obtain the first ciphertext.

[0349] Optionally, the terminal device encrypts the first data based on the received privacy computing service configuration completion response message, or the terminal device manages the process of encrypting the first data by itself, which is not limited.

[0350] S811, a privacy computing data stream is transmitted.

[0351] Specifically, the privacy computing data stream includes the first ciphertext.

[0352] S812, the privacy computing unit #A performs the privacy computing task.

[0353] Specifically, the privacy computing unit #A performs privacy computation on the first ciphertext in the privacy computation data stream based on the computation key.

[0354] The privacy computing unit #A obtains the computation key through the configuration information in S807, or the privacy computing unit #A obtains the computation key through other manners (for example, the privacy computing unit #A obtains the computation key through an encrypted channel), which is not limited.

[0355] S813, the privacy computing unit #A sends a privacy computing task completion response message to the privacy computing management unit.

[0356] S814, the privacy computing management unit sends the privacy computing task completion response message to the terminal device.

[0357] Optionally, the privacy computing management unit directly sends the privacy computing task completion response message to the terminal device, or the privacy computing management unit sends the privacy computing task completion response message to the AMF, and the AMF forwards the privacy computing task completion response message to the terminal device. Not limited.

[0358] S813 and S814 are optional steps.

[0359] FIG. 9 is an example diagram of a method 900 for performing a privacy computing task in a wireless network according to an embodiment of the present application. As shown in FIG. 9, a terminal device as a privacy computing task initiator sends a first request message to a privacy computing management unit through a first core network element (for example, a UPF).

[0360] S901, the terminal device sends a first request message to the privacy computing management unit through the UPF.

[0361] Specifically, the first request message is used for the terminal device to request to perform a privacy computing task, wherein the specific content included in the first request message can refer to the content in S402, which will not be described here.

[0362] S902, the UPF performs identity authentication on the terminal device.

[0363] Specifically, the UPF performs identity authentication on the terminal device based on the received first request message, and the specific manner of identity authentication of the UPF is not limited in the present application.

[0364] Optionally, the UPF obtains subscription information from the UDM or the AUSF, and performs identity authentication on the terminal device according to the subscription information.

[0365] Optionally, the contract information may include the type of privacy computing service, privacy computing security requirements, location information, etc.

[0366] S903, UPF forwards the first request message to the privacy computing management unit.

[0367] S904, the privacy computing management unit generates and transmits a privacy computing security context according to the first request message using method 500 or method 600.

[0368] The specific details of this step can be found in S704, and will not be repeated here.

[0369] S905, the privacy computing management unit sends a second request message to the PCF based on the first request message.

[0370] Specifically, the second request message is used to request a policy from the PCF. The specific content of the second request message can be found in S404, and will not be repeated here.

[0371] S906, PCF transmission strategy.

[0372] Specifically, the PCF sends a policy to the privacy computing management unit based on the received second request message. This policy is used to determine the privacy computing unit capable of executing the privacy computing task initiated by the terminal device. The specific content of the policy can be found in S404, and will not be repeated here.

[0373] S907, the privacy computing management unit determines the privacy computing unit based on the received policy.

[0374] Specifically, the privacy computing management unit determines the privacy computing unit (denoted as privacy computing unit #A) that can be used to perform the privacy computing task initiated by the terminal device based on the privacy computing capabilities of multiple selectable privacy computing units according to the policy. The determined privacy computing unit #A may include one privacy computing unit or multiple privacy computing units, without limitation.

[0375] In step S908, the privacy computing management unit sends configuration information to the privacy computing unit #A. This configuration information is used for the execution of privacy computing tasks. The specific content of the configuration information can be found in step S405, and will not be repeated here.

[0376] S909, Privacy Computing Unit #A sends a Privacy Computing Task Configuration Complete Response Message to Privacy Computing Management Unit.

[0377] Specifically, privacy computing unit #A updates its configuration based on the received configuration information, and after the configuration is complete, sends a privacy computing task configuration completion response to the privacy computing management unit.

[0378] S910, the privacy computing management unit sends a privacy computing task configuration completion response message to the UPF, and the UPF sends the privacy computing task configuration completion response message to the terminal device.

[0379] S910 is an optional step.

[0380] S911, the terminal device performs an encryption process.

[0381] Specifically, the terminal device encrypts the first data according to the encryption key to obtain the first ciphertext.

[0382] Optionally, the terminal device encrypts the first data based on the received privacy computing service configuration completion response message; or the terminal device manages the process of encrypting the first data by itself, which is not limited.

[0383] S912, a privacy computing data stream is transmitted.

[0384] Specifically, the privacy computing data stream includes the first ciphertext.

[0385] S913, the privacy computing unit #A performs a privacy computing task.

[0386] Specifically, the privacy computing unit #A performs privacy computing on the first ciphertext in the privacy computing data stream based on the computing key.

[0387] The privacy computing unit #A obtains the computing key through the configuration information in S908; or the privacy computing unit #A obtains the computing key through other manners (for example, the privacy computing unit #A obtains the computing key through an encryption channel), which is not limited.

[0388] S914, the privacy computing unit #A sends a privacy computing task completion response message to the privacy computing management unit.

[0389] S915, the privacy computing management unit sends the privacy computing task completion response message to the terminal device.

[0390] In one possible manner, in S915-1, the privacy computing management unit sends the privacy computing task completion response message to the UPF, and the UPF sends the privacy computing task completion response message to the terminal device.

[0391] In another possible manner, in S915-2, the privacy computing management unit directly sends the privacy computing task completion response message to the terminal device.

[0392] The embodiments of the present application do not limit the specific manner in which the privacy computing management unit sends the privacy computing task completion response message to the terminal device.

[0393] S914 and S915 are optional steps.

[0394] The scheme for implementing the privacy computing task in the wireless network is described in FIGS. 7 to 9, so as to ensure the privacy and security of data transmission in the wireless network.

[0395] FIG. 10 is a schematic block diagram of a communication apparatus 1000 provided by an embodiment of the present application, which comprises a transceiver unit 1010. The transceiver unit 1010 can be used to implement the corresponding communication function. The transceiver unit 1010 can also be referred to as a communication interface or a communication unit. Optionally, the apparatus 1000 further comprises a processing unit 1020. The processing unit 1020 can be used to implement the processing operation.

[0396] Optionally, the apparatus 1000 can further comprise a storage unit, which can be used to store instructions and / or data. The processing unit 1020 can read the instructions and / or data in the storage unit, so as to enable the apparatus to implement the foregoing method embodiments.

[0397] The first possible design is that the apparatus 1000 is a privacy computing management unit (PCM) in the foregoing embodiments, or can be a component (such as a chip) of the privacy computing management unit, wherein the transceiver unit and the processing unit can be used to implement the related operation of the privacy computing management unit.

[0398] In a possible implementation, the transceiver unit 1010 is configured to receive a first request message, the first request message being used to request to perform a privacy computing task; and the transceiver unit 1010 is further configured to send first information, the first information being used to generate a privacy computing security context, wherein the privacy computing security context comprises a computing key, and the computing key is used to perform privacy computing on data.

[0399] Optionally, the first request message comprises a security requirement and a security parameter of the privacy computing task.

[0400] Optionally, the first request message further comprises one or more of the following: a privacy computing task identifier, a security level of the privacy computing task, a security cipher algorithm identifier, a requirement on input data of the privacy computing task, and an expected output result of the privacy computing task.

[0401] Optionally, the first request message is from a terminal device, or the first request message is from an AF.

[0402] Optionally, in the case that the first request message is from a terminal device, the first request message is forwarded via an access and mobility management network element, or the first request message is forwarded via a user plane function network element, or the first request message is forwarded via a data plane function network element.

[0403] Optionally, in a case that the first request message is from an application function network element, the first request message is forwarded via a network exposure function network element.

[0404] Optionally, the first information comprises security requirements and security parameters of the privacy computing task.

[0405] Optionally, the transceiver 1010 is further configured to obtain a computing key, the computing key being determined according to the security requirements and the security parameters of the privacy computing task and the application layer anchor key.

[0406] Optionally, the first information is further used to determine the privacy computing security capability of the second communication device (the privacy computing task initiator) and the privacy computing management unit in the foregoing embodiments.

[0407] Optionally, the transceiver 1010 is further configured to obtain a computing key, the computing key being determined according to the security requirements and the security parameters of the privacy computing task, the privacy computing security capability of the privacy computing management unit, and the privacy computing security capability of the second communication device.

[0408] Optionally, the privacy computing security context further comprises one or more of the following: a privacy computing task identifier, a privacy computing task detection rule, an expiration time of a computing key, and a security cipher algorithm identifier.

[0409] Optionally, the processing unit 1020 is configured to determine a policy, the policy being used to determine a privacy computing unit that executes the privacy computing task; and the transceiver 1010 is further configured to send configuration information to the determined privacy computing unit, the configuration information being used for the privacy computing unit to execute the privacy computing task.

[0410] Optionally, the transceiver 1010 is configured to send a second request message, the second request message comprising the privacy computing security context, the second request message being used to request the policy; and the transceiver 1010 is further configured to receive the policy.

[0411] Optionally, the policy comprises one or more of the following: a data flow detection rule of the privacy computing task, security requirements and security parameters of the privacy computing task, a configuration parameter of the privacy computing task, a flow control rule of the privacy computing task, and a charging policy of the privacy computing task.

[0412] Optionally, the configuration information comprises one or more of the following: a task flow description, a security cipher algorithm identifier, a privacy computing task type, a privacy computing task identifier, a data flow detection rule of the privacy computing task, security requirements and security parameters of the privacy computing task, and a path of input data and output data of the privacy computing task.

[0413] In a second possible design, the apparatus 1000 is a second communication device in the foregoing embodiments, for example, can be a terminal device or an application function network element in the foregoing embodiments, or can be a component (for example, a chip) of the second communication device. The transceiver and the processing unit can be used to implement related operations of the second communication device.

[0414] In a possible implementation, the processing unit 1020 is configured to determine a first request message, the first request message being used to request to perform a privacy computing task; and the transceiver 1010 is configured to send the first request message to a privacy computing management unit through a first core network element.

[0415] Optionally, the first core network element is any one of an access and mobility management network element, a user plane function network element, a data plane function network element, and a network exposure function network element.

[0416] Optionally, the first request message includes a security requirement and a security parameter of the privacy computing task.

[0417] Optionally, the first request message further includes one or more of a privacy computing task identifier, a security level of the privacy computing task, a security cipher algorithm identifier, a requirement on input data of the privacy computing task, and an expected output result of the privacy computing task.

[0418] Optionally, in a case where the second communication device is a terminal device, the transceiver 1010 is configured to receive first information, the first information including a security requirement and a security parameter of the privacy computing task, the first information being used to request to obtain a computing key, the computing key being used to perform privacy computation on data; the processing unit 1020 is configured to determine the computing key according to the security requirement and the security parameter of the privacy computing task and an application layer anchor key; and the transceiver 1010 is further configured to send the computing key.

[0419] Optionally, the transceiver 1010 is configured to receive first information, the first information including a security requirement and a security parameter of the privacy computing task, the first information being used to request to obtain a computing key, the computing key being used to perform privacy computation on data; and the transceiver 1010 is further configured to send a privacy computing security capability of the second communication device, the privacy computing security capability being used to generate the computing key.

[0420] In a third possible design, the apparatus 1000 is a privacy computing unit (PCE) in the foregoing embodiments, or can be a component (for example, a chip) of the privacy computing unit. The transceiver and the processing unit can be used to implement related operations of the privacy computing unit.

[0421] In a possible implementation, the transceiver 1010 is configured to receive configuration information, where the configuration information is used for execution of a privacy computing task; and the processor 1020 is configured to execute the privacy computing task.

[0422] Optionally, the configuration information comprises one or more of the following: a task flow description, a security cipher algorithm identifier, a privacy computing task type, a privacy computing task identifier, a data flow detection rule of the privacy computing task, a security requirement and a security parameter of the privacy computing task, and a path of input data and output data of the privacy computing task.

[0423] Optionally, the transceiver 1010 is further configured to receive a computing key, where the computing key is used for execution of the privacy computing task.

[0424] Optionally, the transceiver 1010 is further configured to send, to the privacy computing management unit, a privacy computing task completion response message.

[0425] In a fourth possible design, the apparatus 1000 is a first core network element, which can be, for example, an access and mobility management network element, a user plane function network element, a data plane function network element, a network exposure function network element, or a component (e.g., a chip) of the first core network element. The transceiver and the processor can be configured to perform operations of the first core network element.

[0426] In a possible implementation, the transceiver 1010 is configured to receive a first request message from a second communication apparatus; and the transceiver 1010 is further configured to send, to a privacy computing management unit, the first request message.

[0427] Optionally, the second communication apparatus is a terminal device, or the second communication apparatus is an application function network element.

[0428] Optionally, the first request message comprises a security requirement and a security parameter of the privacy computing task.

[0429] Optionally, the first request message further comprises one or more of the following: a privacy computing task identifier, a security level of the privacy computing task, a security cipher algorithm identifier, a requirement on input data of the privacy computing task, and an expected output result of the privacy computing task.

[0430] Optionally, the processor 1020 is configured to perform identity authentication on the second communication apparatus.

[0431] Optionally, the transceiver 1010 is configured to receive a privacy computing task completion response message; and the transceiver 1010 is further configured to send, to the second communication apparatus, the privacy computing task completion response message.

[0432] FIG. 11 is a schematic diagram of another communication apparatus 1100 according to an embodiment of the present application. The apparatus 1100 includes a processor 1110 coupled with a memory 1120, the memory 1120 being configured to store computer programs or instructions and / or data, and the processor 1110 being configured to execute the computer programs or instructions stored in the memory 1120, or read the data stored in the memory 1120, to perform the methods in the above method embodiments.

[0433] Optionally, the processor 1110 is one or more.

[0434] Optionally, the memory 1120 is one or more.

[0435] Optionally, the memory 1120 is integrated with the processor 1110, or is separately arranged.

[0436] Optionally, as shown in FIG. 11, the apparatus 1100 further includes a transceiver 1130 configured to receive and / or send signals. For example, the processor 1110 is configured to control the transceiver 1130 to receive and / or send signals.

[0437] As an option, the apparatus 1100 is configured to implement the operations performed by the communication apparatus in the above method embodiments.

[0438] For example, the processor 1110 is configured to execute the computer programs or instructions stored in the memory 1120 to implement the related operations of the terminal device or the network device in the above method embodiments.

[0439] It should be understood that the processor mentioned in the embodiments of the present application can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), microprocessor units (MPUs), microcontroller units (MCUs), graphics processing units (GPUs), artificial intelligence processors (AI processors), or neural network processors (Neural Processing Units, NPUs), field programmable gate arrays (FPGAs) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor.

[0440] It should also be understood that the memory mentioned in the embodiments of the present application can be a volatile memory and / or a non-volatile memory. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically EPROM (EEPROM) or a flash memory. The volatile memory can be a random access memory (RAM). For example, the RAM can be used as an external cache. As an example but not limitation, the RAM includes the following various forms: static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchlink DRAM (SLDRAM) and direct rambus RAM (DR RAM).

[0441] It should be noted that when the processor is a general processor, a DSP, an ASIC, a FPGA or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, the memory (storage module) can be integrated in the processor.

[0442] It should also be noted that the memory described herein is intended to include, but not limited to, these and any other suitable types of memory.

[0443] FIG. 12 is a schematic block diagram of a chip system 1200 provided by the embodiments of the present application. The chip system 1200 (or also can be referred to as a processing system) includes a logic circuit 1210 and an input / output interface 1220.

[0444] The logic circuit 1210 can be a processing circuit in the chip system 1200. The logic circuit 1210 can be coupled to a storage unit, and invoke instructions in the storage unit, so that the chip system 1200 can implement the methods and functions of the embodiments of the present application. The input / output interface 1220 can be an input / output circuit in the chip system 1200, and output information processed by the chip system 1200, or input data or signaling information to be processed by the chip system 1200.

[0445] As an option, the chip system 1200 is configured to implement operations performed by a communication apparatus (e.g., a terminal device, or a network device) in the methods described above.

[0446] For example, the logic circuit 1210 is configured to implement processing-related operations performed by a communication apparatus (e.g., a terminal device, or a network device) in the methods described above; and the input / output interface 1220 is configured to implement sending and / or receiving-related operations performed by a communication apparatus (e.g., a terminal device, or a network device) in the methods described above.

[0447] The embodiments of the present application also provide a computer readable storage medium, having stored thereon computer instructions for implementing the methods performed by a communication apparatus (e.g., a terminal device, or a network device) in the methods described above.

[0448] For example, the computer program, when executed by a computer, enables the computer to implement the methods performed by a communication apparatus (e.g., a terminal device, or a network device) in the methods described above.

[0449] The embodiments of the present application also provide a computer program product, containing instructions, which, when executed by a computer, implement the methods performed by a communication apparatus (e.g., a terminal device, or a network device) in the methods described above.

[0450] The embodiments of the present application also provide a communication system, which includes the network-side apparatuses (e.g., the first communication apparatus, the third communication apparatus, and the fourth communication apparatus) in the embodiments described above. Optionally, the communication system also includes a terminal-side apparatus (e.g., the second communication apparatus).

[0451] The explanations and beneficial effects of the related contents in any of the apparatuses described above can refer to the corresponding method embodiments provided above, and will not be repeated here.

[0452] In several embodiments provided in the present application, it should be understood that the disclosed apparatus and method can be implemented by other manners. For example, the apparatus embodiments described above are only illustrative, for example, the division of the units is only a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units or components shown or discussed can be indirect coupling or communication connection through some interfaces, apparatuses or units, and can be electrical, mechanical or other forms.

[0453] In the above embodiments, all or part of the embodiments can be implemented by software, hardware, firmware or any combination thereof. When implemented by software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network or other programmable devices. For example, the computer can be a personal computer, a server or a network device. The computer instructions can be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center through wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.) mode. The computer readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. integrated with one or more available media. The available media can be magnetic media (such as floppy disk, hard disk, magnetic tape), optical media (such as DVD), or semiconductor media (such as solid state disk (SSD) and the like. For example, the foregoing available media includes but is not limited to: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk and various media that can store program codes.

[0454] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical range disclosed in the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A communication method characterized by comprising: The method is applied to a first communication device, and comprises: receiving a first request message, the first request message being used to request execution of a privacy computing task; sending first information based on the first request message, the first information being used to generate a privacy computing security context, the privacy computing security context comprising a computing key, the computing key being used to perform privacy computation on data.

2. The method of claim 1, wherein the first request message comprises security requirements and security parameters of the privacy computing task.

3. The method of claim 2, wherein the first request message further comprises one or more of the following: a privacy computing task identifier, a security level of the privacy computing task, a security cipher algorithm identifier, requirements for input data of the privacy computing task, and an expected output result of the privacy computing task.

4. The method according to any one of claims 1 to 3, characterized in that, comprises: the first request message is from a second communication device, the second communication device being a terminal-side device or an application function-side device.

5. The method of claim 4, wherein when the second communication device is the terminal-side device, the first request message further comprises information of the terminal-side device; when the second communication device is the application function-side device, the first request message further comprises information of the application function-side device.

6. The method of claim 4 or 5, wherein when the second communication device is the terminal-side device, the first request message is forwarded via an access and mobility management network element, or the first request message is forwarded via a user plane function network element, or the first request message is forwarded via a data plane function network element; when the second communication device is the application function-side device, the first request message is forwarded via a network exposure function network element.

7. The method of any one of claims 2 to 6, wherein the first information comprises security requirements and security parameters of the privacy computing task; the method further comprises: obtaining the computing key by sending the first information, the computing key being determined according to the security requirements and security parameters of the privacy computing task and an application layer anchor key.

8. The method of claim 7, wherein, the obtaining of the computing key by sending the first information comprises: sending the first information to a terminal-side device and receiving the computing key from the terminal-side device; or sending the first information to an application anchor key function network element and receiving the computing key from the application anchor key function network element.

9. The method of any one of claims 4 to 6, wherein the first information comprises security requirements and security parameters of the privacy computing task; the method further comprises: In a case that the first request message is from the terminal-side device, the first information is further used to determine a privacy computing security capability of the privacy computing management unit and a privacy computing security capability of the terminal-side device; or, in a case that the first request message is from the application function-side device, the first information is further used to determine a privacy computing security capability of the privacy computing management unit and a privacy computing security capability of the application function-side device. The computing key is determined according to the security requirement and the security parameter of the privacy computing task, the privacy computing security capability of the privacy computing management unit and the privacy computing security capability of the terminal-side device; or, the computing key is determined according to the security requirement and the security parameter of the privacy computing task, the privacy computing security capability of the privacy computing management unit and the privacy computing security capability of the application function-side device.

10. The method of any one of claims 1-9, wherein The privacy computing security context further comprises one or more of the following: a privacy computing task identifier, a privacy computing task detection rule, an expiration time of the computing key, a security cipher algorithm identifier.

11. The method according to any one of claims 1 to 10, characterized in that, The method further comprises: determining a policy according to the first request message, the policy being used to determine a privacy computing unit that performs the privacy computing task; sending configuration information to the privacy computing unit, the configuration information being used for execution of the privacy computing task.

12. The method of claim 11, wherein, The determining of the policy according to the first request message comprises: sending a second request message, the second request message comprising the privacy computing security context, the second request message being used to request the policy; receiving the policy.

13. The method of any one of claims 11-12, wherein The policy comprises one or more of the following: a data flow detection rule of the privacy computing task, a security requirement and a security parameter of the privacy computing task, a configuration parameter of the privacy computing task, a traffic control rule of the privacy computing task, a charging policy of the privacy computing task.

14. The method of any one of claims 11-13, wherein The configuration information comprises one or more of the following: a task flow description, a security cipher algorithm identifier, a privacy computing task type, a privacy computing task identifier, a data flow detection rule of the privacy computing task, a security requirement and a security parameter of the privacy computing task, a path of input data and output data of the privacy computing task.

15. A method of communication, comprising: The method applied to a second communication device comprises: determining a first request message, the first request message being used to request execution of a privacy computing task; sending the first request message to a privacy computing management unit through a first core network element.

16. The method of claim 15, wherein The second communication device is a terminal-side device; or The second communication device is an application function-side device.

17. The method of any one of claims 15-16, wherein The first core network element is any one of the following: an access and mobility management network element, a user plane function network element, a data plane function network element, and a network exposure function network element.

18. The method of any one of claims 15-17, wherein, The first request message includes security requirements and security parameters of the privacy computing task.

19. The method of claim 18, wherein, The first request message further includes one or more of the following: a privacy computing task identifier, a security level of the privacy computing task, a security cipher algorithm identifier, requirements on input data of the privacy computing task, and expected output results of the privacy computing task.

20. The method of any one of claims 16-19, wherein, In a case where the second communication device is a terminal-side device, the method further includes: The terminal-side device receives first information including security requirements and security parameters of a privacy computing task, the first information being used to request obtaining a computing key used for privacy computing on data; The computing key is determined according to the security requirements and security parameters of the privacy computing task and an application layer anchor key; The computing key is sent.

21. The method of any one of claims 16-19, wherein, The method further includes: The second communication device receives first information including security requirements and security parameters of a privacy computing task, the first information being used to request obtaining a computing key used for privacy computing on data; The second communication device sends a privacy computing security capability of the second communication device according to the first information, the privacy computing security capability being used to generate the computing key.

22. A communications device, characterized by comprises: means for performing the method of any one of claims 1-14, or means for performing the method of any one of claims 15-21.

23. A communications device, characterized by comprises: a processor; the processor is configured to execute a computer program stored in a memory, so that the communication device performs the method of any one of claims 1-14, or so that the communication device performs the method of any one of claims 15-21.

24. The apparatus of claim 23, wherein, The communication device further includes the memory.

25. A computer-readable storage medium, comprising: comprises: The computer program stored on the computer readable storage medium, when executed on a computer, causes the computer to perform the method of any one of claims 1-14, or causes the computer to perform the method of any one of claims 15-21.

26. A computer program product, characterised in that, The computer program product includes instructions executed by a processor for performing the method of any one of claims 1-14, or includes instructions executed by a processor for performing the method of any one of claims 15-21.

Images