Communication method, user equipment, base station, storage medium and program product

Abstract

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Specifically, the embodiments of the present disclosure provide a communication method, a user equipment, a base station, a storage medium and a program product. The method executed by a UE comprises steps of: receiving a first message, the first message being used for instructing to perform cell handover, the first message comprising first configuration information, the first configuration information comprising first information for instructing handover to a first cell, information of a first radio frequency fingerprinting (RFF) feature corresponding to the first cell and second information related to a reference signal; and performing RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell, and performing cell handover based on whether the first RFF feature and the second RFF feature are matched.

Description

COMMUNICATION METHOD, USER EQUIPMENT, BASE STATION, STORAGE MEDIUM AND PROGRAM PRODUCT

[0001] The present disclosure relates to the technical field of wireless communication, and in particular to a communication method, a user equipment, a base station, a storage medium and a program product.

[0002] 5G mobile communication technologies define broad frequency bands such that high transmission rates and new services are possible, and can be implemented not only in "Sub 6GHz" bands such as 3.5GHz, but also in "Above 6GHz" bands referred to as mmWave including 28GHz and 39GHz. In addition, it has been considered to implement 6G mobile communication technologies (referred to as Beyond 5G systems) in terahertz bands (for example, 95GHz to 3THz bands) in order to accomplish transmission rates fifty times faster than 5G mobile communication technologies and ultra-low latencies one-tenth of 5G mobile communication technologies.

[0003] At the beginning of the development of 5G mobile communication technologies, in order to support services and to satisfy performance requirements in connection with enhanced Mobile BroadBand (eMBB), Ultra Reliable Low Latency Communications (URLLC), and massive Machine-Type Communications (mMTC), there has been ongoing standardization regarding beamforming and massive MIMO for mitigating radio-wave path loss and increasing radio-wave transmission distances in mmWave, supporting numerologies (for example, operating multiple subcarrier spacings) for efficiently utilizing mmWave resources and dynamic operation of slot formats, initial access technologies for supporting multi-beam transmission and broadbands, definition and operation of BWP (BandWidth Part), new channel coding methods such as a LDPC (Low Density Parity Check) code for large amount of data transmission and a polar code for highly reliable transmission of control information, L2 pre-processing, and network slicing for providing a dedicated network specialized to a specific service.

[0004] Currently, there are ongoing discussions regarding improvement and performance enhancement of initial 5G mobile communication technologies in view of services to be supported by 5G mobile communication technologies, and there has been physical layer standardization regarding technologies such as V2X (Vehicle-to-everything) for aiding driving determination by autonomous vehicles based on information regarding positions and states of vehicles transmitted by the vehicles and for enhancing user convenience, NR-U (New Radio Unlicensed) aimed at system operations conforming to various regulation-related requirements in unlicensed bands, NR UE Power Saving, Non-Terrestrial Network (NTN) which is UE-satellite direct communication for providing coverage in an area in which communication with terrestrial networks is unavailable, and positioning.

[0005] Moreover, there has been ongoing standardization in air interface architecture / protocol regarding technologies such as Industrial Internet of Things (IIoT) for supporting new services through interworking and convergence with other industries, IAB (Integrated Access and Backhaul) for providing a node for network service area expansion by supporting a wireless backhaul link and an access link in an integrated manner, mobility enhancement including conditional handover and DAPS (Dual Active Protocol Stack) handover, and two-step random access for simplifying random access procedures (2-step RACH for NR). There also has been ongoing standardization in system architecture / service regarding a 5G baseline architecture (for example, service based architecture or service based interface) for combining Network Functions Virtualization (NFV) and Software-Defined Networking (SDN) technologies, and Mobile Edge Computing (MEC) for receiving services based on UE positions.

[0006] As 5G mobile communication systems are commercialized, connected devices that have been exponentially increasing will be connected to communication networks, and it is accordingly expected that enhanced functions and performances of 5G mobile communication systems and integrated operations of connected devices will be necessary. To this end, new research is scheduled in connection with eXtended Reality (XR) for efficiently supporting AR (Augmented Reality), VR (Virtual Reality), MR (Mixed Reality) and the like, 5G performance improvement and complexity reduction by utilizing Artificial Intelligence (AI) and Machine Learning (ML), AI service support, metaverse service support, and drone communication.

[0007] Furthermore, such development of 5G mobile communication systems will serve as a basis for developing not only new waveforms for providing coverage in terahertz bands of 6G mobile communication technologies, multi-antenna transmission technologies such as Full Dimensional MIMO (FD-MIMO), array antennas and large-scale antennas, metamaterial-based lenses and antennas for improving coverage of terahertz band signals, high-dimensional space multiplexing technology using OAM (Orbital Angular Momentum), and RIS (Reconfigurable Intelligent Surface), but also full-duplex technology for increasing frequency efficiency of 6G mobile communication technologies and improving system networks, AI-based communication technology for implementing system optimization by utilizing satellites and AI (Artificial Intelligence) from the design stage and internalizing end-to-end AI support functions, and next-generation distributed computing technology for implementing services at levels of complexity exceeding the limit of UE operation capability by utilizing ultra-high-performance communication and computing resources.

[0008] The embodiments of the present disclosure provide a communication method, a user equipment, a base station, a storage medium and a program product. The embodiments of the present disclosure provide the following technical schemes.

[0009] In a first aspect, an embodiment of the present disclosure provides a method executed by a user equipment (UE) in a wireless communication system, including steps of:

[0010] receiving a first message sent by a serving base station, the first message being used for instructing to perform cell handover, the first message including first configuration information, the first configuration information including first information for instructing handover to a first cell, information of a first radio frequency fingerprinting (RFF) feature corresponding to the first cell and a second information related to a reference signal;

[0011] performing RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell; and

[0012] performing cell handover based on whether the first RFF feature and the second RFF feature are matched.

[0013] In one feasible embodiment, the first information includes a handover list, and the first cell is a cell ranked first in the handover list.

[0014] In one feasible embodiment, the second information includes an RFF information format, and the RFF information format is used for indicating information of the reference signal configured for measurement and / or information of the first RFF feature corresponding to the reference signal.

[0015] In one feasible embodiment, the reference signal includes a high-peak to average power ratio (PAPR) reference signal and / or a constant-amplitude reference signal.

[0016] In one feasible embodiment, the high-PAPR reference signal includes at least one of the following:

[0017] a first high-PAPR reference signal, the first high-PAPR being configured with a same complex-valued signal in each resource element of frequency domain; and

[0018] a second high-PAPR reference signal, the second high-PAPR reference signal being configured with a first complex-valued signal in each resource element of frequency domain, the first complex-valued signal including a complex-valued signal obtained by modulation at a modulation order of 64 or more.

[0019] In one feasible embodiment, the constant-amplitude reference signal includes at least one of the following:

[0020] a first constant-amplitude reference signal, the first constant-amplitude reference signal being configured with a second complex-valued signal in a first resource element of frequency domain and configured with a complex-valued signal having a value of 0 in other resource elements of frequency domain, the second complex-valued signal including a complex-valued signal obtained by power boosting; and

[0021] a second constant-amplitude reference signal, the second constant-amplitude signal being configured with the second complex-valued signal in any reference element other than the first resource element of frequency domain and configured with a complex-valued signal having a value of 0 in other resource elements of frequency domain.

[0022] In one feasible embodiment, the performing RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell includes at least one of the following:

[0023] for the received high-PAPR reference signal, measuring at least one of an amplitude feature of the signal, a phase feature of the signal and a frequency feature of the signal to obtain the second RFF feature;

[0024] for the received constant-amplitude reference signal, measuring at least one of a box dimension of the signal and an information dimension of the signal to obtain the second RFF feature; and

[0025] for the received constant-amplitude reference signal, measuring a phase noise spectrum of the signal to obtain the second RFF feature.

[0026] In one feasible embodiment, the first RFF feature and / or the second RFF feature includes at least one of a power amplifier nonlinear feature, a fractal feature and a phase noise spectrum.

[0027] In one feasible embodiment, the performing cell handover based on whether the first RFF feature and the second RFF feature are matched includes:

[0028] verifying the first RFF feature and the second RFF feature;

[0029] in a case where the second RFF feature is matched with the first RFF feature, handing over to the first cell; and

[0030] in a case where the second RFF feature is not matched with the first RFF feature, reporting information related to the first cell to the serving base station, or performing RFF measurement and verification on a second cell in the first information and performing cell handover based on a result of verification corresponding to the second cell; and the second cell including a cell ranked after the first cell in the handover list of the first information.

[0031] In one feasible embodiment, after reporting the information related to the first cell to the serving base station, the method further includes:

[0032] receiving a second message sent by the serving base station, the second message being used for instructing to terminate cell handover.

[0033] In one feasible embodiment, after reporting the information related to the first cell to the serving base station, the method further includes:

[0034] receiving a third message sent by the serving base station, the third message being used for instructing to continue cell handover, the third message including second configuration information; and

[0035] performing cell handover based on the second configuration information.

[0036] In a second aspect, an embodiment of the present disclosure provides a method executed by a base station in a wireless communication system, including steps of:

[0037] acquiring first configuration information, the first configuration information including first information for instructing handover to a first cell, information of a first RFF feature corresponding to the first cell and second information related to a reference signal; and

[0038] sending a first message to a UE, the first message being used for instructing to perform cell handover, the first message including the first configuration information, so that the UE performs RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell and performs cell handover based on whether the first RFF feature and the second RFF feature are matched.

[0039] In one feasible embodiment, the method further includes:

[0040] receiving information related to the first cell reported by the UE.

[0041] In one feasible embodiment, the method further includes:

[0042] sending a second message to the UE, the second message being used for instructing to terminate cell handover.

[0043] In one feasible embodiment, the method further includes:

[0044] sending a third message to the UE, the third message being used for instructing to continue cell handover, the third message including second configuration information, so that the UE performs cell handover based on the second configuration information.

[0045] In a third aspect, an embodiment of the present disclosure provides a user equipment in a wireless communication system, wherein the user equipment includes at least one transceiver and at least one processor coupled to the at least one transceiver, and the at least one processor is configured to execute the steps of the method in the first aspect and any embodiment thereof.

[0046] In a fourth aspect, an embodiment of the present disclosure provides a base station in a wireless communication system, wherein the base station includes at least one transceiver and at least one processor coupled to the at least one transceiver, and the at least one processor is configured to execute the steps of the method in the second aspect and any embodiment thereof.

[0047] In a fifth aspect, an embodiment of the present disclosure provides a computer-readable storage medium, wherein the storage medium has computer programs stored thereon, and when the computer programs are run in a processor, the processor executes the steps of the method in the first aspect and any embodiment thereof or in the second aspect or any embodiment thereof.

[0048] In a sixth aspect, an embodiment of the present disclosure provides a computer program product, including computer programs that, when executed by a processor, implement the steps of the method in the first aspect and any embodiment thereof or in the second aspect or any embodiment thereof.

[0049] The beneficial effects achieved by the technical schemes provided in the embodiments of the present disclosure will be described below by specific embodiments.

[0050] FIG. 1 shows a schematic structure diagram of an example wireless network according to various embodiments of the present disclosure;

[0051] FIG. 2a shows an example wireless transmitting path according to the present disclosure;

[0052] FIG. 2b shows an example wireless receiving path according to the present disclosure;

[0053] FIG. 3a shows a schematic structure diagram of an exemplary UE according to the present disclosure;

[0054] FIG. 3b shows a schematic structure diagram of an exemplary gNB according to the present disclosure;

[0055] FIG. 4 shows a flowchart of a method executed by a UE in a wireless communication system according to an embodiment of the present disclosure;

[0056] FIG. 5 shows a flowchart of a method executed by a base station in a wireless communication system according to an embodiment of the present disclosure;

[0057] FIG. 6 shows a resource mapping diagram of a first method for a high-PAPR reference signal according to an embodiment of the present disclosure;

[0058] FIG. 7 shows a resource mapping diagram of a second method for a high-PAPR reference signal according to an embodiment of the present disclosure;

[0059] FIG. 8a is a resource mapping diagram of a constant-amplitude constant-phase reference signal according to an embodiment of the present disclosure;

[0060] FIG. 8b is a resource mapping diagram of a constant-amplitude non-constant-phase reference signal according to an embodiment of the present disclosure;

[0061] FIG. 9 shows an RFF verification process according to an embodiment of the present disclosure; and

[0062] FIG. 10 is a schematic structure diagram of an electronic device according to an embodiment of the present disclosure.

[0063] The following description with reference to the accompanying drawings is provided to assist in a comprehensive understanding of various embodiments of the present disclosure as defined by the claims and their equivalents. It includes various specific details to assist in that understanding but these are to be regarded as merely exemplary. Accordingly, those of ordinary skill in the art will recognize that various changes and modifications of the various embodiments described herein can be made without departing from the scope and spirit of the present disclosure. In addition, descriptions of well-known functions and constructions may be omitted for clarity and conciseness.

[0064] The terms and words used in the following description and claims are not limited to the bibliographical meanings, but, are merely used by the inventor to enable a clear and consistent understanding of the present disclosure. Accordingly, it should be apparent to those skilled in the art that the following description of various embodiments of the present disclosure is provided for illustration purpose only and not for the purpose of limiting the present disclosure as defined by the appended claims and their equivalents.

[0065] It is to be understood that the singular forms "a," "an," and "the" include plural referents unless the context clearly dictates otherwise. Thus, for example, reference to "a component surface" includes reference to one or more of such surfaces.

[0066] The term "include" or "may include" refers to the existence of a corresponding disclosed function, operation or component which can be used in various embodiments of the present disclosure and does not limit one or more additional functions, operations, or components. The terms such as "include" and / or "have" may be construed to denote a certain characteristic, number, step, operation, constituent element, component or a combination thereof, but may not be construed to exclude the existence of or a possibility of addition of one or more other characteristics, numbers, steps, operations, constituent elements, components or combinations thereof.

[0067] The term "or" used in various embodiments of the present disclosure includes any or all of combinations of listed words. For example, the expression "A or B" may include A, may include B, or may include both A and B.

[0068] Unless defined differently, all terms used herein, which include technical terminologies or scientific terminologies, have the same meaning as that understood by a person skilled in the art to which the present disclosure belongs. Such terms as those defined in a generally used dictionary are to be interpreted to have the meanings equal to the contextual meanings in the relevant field of art, and are not to be interpreted to have ideal or excessively formal meanings unless clearly defined in the present disclosure.

[0069] The various embodiments of the present disclosure can be applied to various communication systems, such as: global system for mobile communications (GSM) system, code division multiple access (CDMA) system, broadband code division multiple access (WCDMA) system, general packet radio service (GPRS), long term evolution (LTE) system, Frequency division duplex (FDD) systems, time division duplex (TDD) systems, universal mobile telecommunications systems (UMTS), global interoperability for microwave access (WiMAX) communication systems, fifth generation (5G) systems or new wireless (NR) systems, etc. In addition, the various embodiments of the present disclosure can be applied to future oriented communication technologies.

[0070] FIG. 1 illustrates an example wireless network 100 according to various embodiments of the present disclosure. The embodiment of the wireless network 100 shown in FIG. 1 is for illustration only. Other embodiments of the wireless network 100 can be used without departing from the scope of the present disclosure.

[0071] The wireless network 100 includes a gNodeB (gNB) 101, a gNB 102, and a gNB 103. The gNB 101 communicates with the gNB 102 and the gNB 103. The gNB 101 also communicates with at least one Internet Protocol (IP) network 130, such as the Internet, a private IP network, or other data networks.

[0072] Depending on a type of the network, other well-known terms such as "base station" or "access point" can be used instead of "gNodeB" or "gNB". For convenience, the terms "gNodeB" and "gNB" are used in this patent document to refer to network infrastructure components that provide wireless access for remote terminals. And, depending on the type of the network, other well-known terms such as "mobile station", "user station", "remote terminal", "wireless terminal" or "user apparatus" can be used instead of "user equipment" or "UE". For convenience, the terms "user equipment" and "UE" are used in this patent document to refer to remote wireless devices that wirelessly access the gNB, no matter whether the UE is a mobile device (such as a mobile phone or a smart phone) or a fixed device (such as a desktop computer or a vending machine).

[0073] The gNB 102 provides wireless broadband access to the network 130 for a first plurality of user equipments (UEs) within a coverage area 120 of gNB 102. The first plurality of UEs include a UE 111, which may be located in a small business (SB); a UE 112, which may be located in an enterprise (E); a UE 113, which may be located in a WiFi hotspot (HS); a UE 114, which may be located in a first residence (R); a UE 115, which may be located in a second residence (R); a UE 116, which may be a mobile device (M), such as a cellular phone, a wireless laptop computer, a wireless PDA, etc. The gNB 103 provides wireless broadband access to network 130 for a second plurality of UEs within a coverage area 125 of gNB 103. The second plurality of UEs include the UE 115 and the UE 116. In some embodiments, one or more of the gNBs 101-103 can communicate with each other and with UEs 111-116 using 5G, Long Term Evolution (LTE), LTE-A, WiMAX or other advanced wireless communication technologies.

[0074] The dashed lines show approximate ranges of the coverage areas 120 and 125, and the ranges are shown as approximate circles merely for illustration and explanation purposes. It should be clearly understood that the coverage areas associated with the gNBs, such as the coverage areas 120 and 125, may have other shapes, including irregular shapes, depending on configurations of the gNBs and variations in the radio environment associated with natural obstacles and man-made obstacles.

[0075] As will be described in more detail below, one or more of gNB 101, gNB 102, and gNB 103 include a 2D antenna array as described in embodiments of the present disclosure. In some embodiments, one or more of gNB 101, gNB 102, and gNB 103 support codebook designs and structures for systems with 2D antenna arrays.

[0076] Although FIG. 1 illustrates one example of the wireless network 100, various changes can be made to FIG. 1. For example, the wireless network 100 can include any number of gNBs and any number of UEs in any suitable arrangement. Furthermore, the gNB 101 can directly communicate with any number of UEs and provide wireless broadband access to the network 130 for those UEs. Similarly, each of gNBs 102-103 can directly communicate with the network 130 and provide direct wireless broadband access to the network 130 for the UEs. In addition, the gNBs 101, 102 and / or 103 can provide access to other or additional external networks, such as external telephone networks or other types of data networks.

[0077] FIGs. 2a and 2b illustrate example wireless transmission and reception paths according to the present disclosure. In the following description, the transmission path 200 can be described as being implemented in a gNB, such as the gNB 102, and the reception path 250 can be described as being implemented in a UE, such as the UE 116. However, it should be understood that the reception path 250 can be implemented in a gNB and the transmission path 200 can be implemented in a UE. In some embodiments, the reception path 250 is configured to support codebook designs and structures for systems with 2D antenna arrays as described in embodiments of the present disclosure.

[0078] The transmission path 200 includes a channel coding and a modulation block 204, a Serial-to-Parallel (S-to-P) block 210, a size N Inverse Fast Fourier Transform (IFFT) block 215, a Parallel-to-Serial (P-to-S) block 220, a cyclic prefix addition block 225, and an up-converter (UC) 230. The reception path 250 includes a down-converter (DC) 255, a cyclic prefix removal block 260, a Serial-to-Parallel (S-to-P) block 265, a size N Fast Fourier Transform (FFT) block 270, a Parallel-to-Serial (P-to-S) block 275, and a channel decoding and demodulation block 280.

[0079] In the transmission path 200, the channel coding and modulation block 204 receive a set of information bits, apply coding (such as Low Density Parity Check (LDPC) coding), and modulate the input bits (such as using Quadrature Phase Shift Keying (QPSK) or Quadrature Amplitude Modulation (QAM)) to generate a sequence of frequency-domain modulated symbols. The Serial-to-Parallel (S-to-P) block 210 converts (such as demultiplexes) serial modulated symbols into parallel data to generate N parallel symbol streams, where N is a size of the IFFT / FFT used in the gNB 102 and the UE 116. The size N IFFT block 215 performs IFFT operations on the N parallel symbol streams to generate a time-domain output signal. The Parallel-to-Serial block 220 converts (such as multiplexes) parallel time-domain output symbols from the Size N IFFT block 215 to generate a serial time-domain signal. The cyclic prefix addition block 225 inserts a cyclic prefix into the time-domain signal. The up-converter 230 modulates (such as up-converts) the output of the cyclic prefix addition block 225 to an RF frequency for transmission via a wireless channel. The signal can also be filtered at a baseband before switching to the RF frequency.

[0080] The RF signal transmitted from the gNB 102 arrives at the UE 116 after passing through the wireless channel, and operations in reverse to those at the gNB 102 are performed at the UE 116. The down-converter 255 down-converts the received signal to a baseband frequency, and the cyclic prefix removal block 260 removes the cyclic prefix to generate a serial time-domain baseband signal. The Serial-to-Parallel block 265 converts the time-domain baseband signal into a parallel time-domain signal. The Size N FFT block 270 performs an FFT algorithm to generate N parallel frequency-domain signals. The Parallel-to-Serial block 275 converts the parallel frequency-domain signal into a sequence of modulated data symbols. The channel decoding and demodulation block 280 demodulates and decodes the modulated symbols to recover the original input data stream.

[0081] Each of gNBs 101-103 may implement a transmission path 200 similar to that for transmitting to UEs 111-116 in the downlink, and may implement a reception path 250 similar to that for receiving from UEs 111-116 in the uplink. Similarly, each of UEs 111-116 may implement a transmission path 200 for transmitting to gNBs 101-103 in the uplink, and may implement a reception path 250 for receiving from gNBs 101-103 in the downlink.

[0082] Each of the components in FIGs. 2a and 2b can be implemented using only hardware, or using a combination of hardware and software / firmware. As a specific example, at least some of the components in FIGs. 2a and 2b may be implemented in software, while other components may be implemented in configurable hardware or a combination of software and configurable hardware. For example, the FFT block 270 and IFFT block 215 may be implemented as configurable software algorithms, in which the value of the size N may be modified according to the implementation.

[0083] Furthermore, although described as using FFT and IFFT, this is only illustrative and should not be interpreted as limiting the scope of the present disclosure. Other types of transforms can be used, such as Discrete Fourier transform (DFT) and Inverse Discrete Fourier Transform (IDFT) functions. It should be understood that for DFT and IDFT functions, the value of variable N may be any integer (such as 1, 2, 3, 4, etc.), while for FFT and IFFT functions, the value of variable N may be any integer which is a power of 2 (such as 1, 2, 4, 8, 16, etc.).

[0084] Although FIGs. 2a and 2b illustrate examples of wireless transmission and reception paths, various changes may be made to FIGs. 2a and 2b. For example, various components in FIGs. 2a and 2b can be combined, further subdivided or omitted, and additional components can be added according to specific requirements. Furthermore, FIGs. 2a and 2b are intended to illustrate examples of types of transmission and reception paths that can be used in a wireless network. Any other suitable architecture can be used to support wireless communication in a wireless network.

[0085] FIG. 3a illustrates an example UE 116 according to the present disclosure. The embodiment of the UE 116 shown in FIG. 3a is for illustration only, and UEs 111-115 of FIG. 1 can have the same or similar configuration. However, UEs have various configurations, and FIG. 3a does not limit the scope of the present disclosure to any specific implementation of the UE.

[0086] The UE 116 includes an antenna 305, a radio frequency (RF) transceiver 310, a transmission (TX) processing circuit 315, a microphone 320, and a reception (RX) processing circuit 325. The UE 116 also includes a speaker 330, a controller / processor 340, an input / output (I / O) interface 345, an input device(s) 350, a display 355, and a memory 360. The memory 360 includes an operating system (OS) 361 and one or more applications 362.

[0087] The RF transceiver 310 receives an incoming RF signal transmitted by a gNB of the wireless network 100 from the antenna 305. The RF transceiver 310 down-converts the incoming RF signal to generate an intermediate frequency (IF) or baseband signal. The IF or baseband signal is transmitted to the RX processing circuit 325, where the RX processing circuit 325 generates a processed baseband signal by filtering, decoding and / or digitizing the baseband or IF signal. The RX processing circuit 325 transmits the processed baseband signal to the speaker 330 (such as for voice data) or to the controller / processor 340 for further processing (such as for web browsing data).

[0088] The TX processing circuit 315 receives analog or digital voice data from the microphone 320 or other outgoing baseband data (such as network data, email or interactive video game data) from the controller / processor 340. The TX processing circuit 315 encodes, multiplexes, and / or digitizes the outgoing baseband data to generate a processed baseband or IF signal. The RF transceiver 310 receives the outgoing processed baseband or IF signal from the TX processing circuit 315 and up-converts the baseband or IF signal into an RF signal transmitted via the antenna 305.

[0089] The controller / processor 340 can include one or more processors or other processing devices and execute the OS 361 stored in the memory 360 in order to control the overall operation of the UE 116. For example, the controller / processor 340 can control the reception of forward channel signals and the transmission of backward channel signals through the RF transceiver 310, the RX processing circuit 325 and the TX processing circuit 315 according to well-known principles. In some embodiments, the controller / processor 340 includes at least one microprocessor or microcontroller.

[0090] The controller / processor 340 is also capable of executing other processes and programs residing in the memory 360, such as operations for channel quality measurement and reporting for systems with 2D antenna arrays as described in embodiments of the present disclosure. The controller / processor 340 can move data into or out of the memory 360 as required by an execution process. In some embodiments, the controller / processor 340 is configured to execute the application 362 based on the OS 361 or in response to signals received from gNBs or an operator. The controller / processor 340 is also coupled to the I / O interface 345, where the I / O interface 345 provides the UE 116 with the ability to connect to other devices, such as laptop computers and handheld computers. The I / O interface 345 is a communication path between these accessories and the controller / processor 340.

[0091] The controller / processor 340 is also coupled to the input device(s) 350 and the display 355. An operator of the UE 116 can input data into the UE 116 using the input device(s) 350. The display 355 may be a liquid crystal display or other display capable of presenting text and / or at least limited graphics (such as from a website). The memory 360 is coupled to the controller / processor 340. Part of the memory 360 can include a random access memory (RAM), while another part of the memory 360 can include a flash memory or other read-only memory (ROM).

[0092] Although FIG. 3a illustrates one example of the UE 116, various changes can be made to FIG. 3a. For example, various components in FIG. 3a can be combined, further subdivided or omitted, and additional components can be added according to specific requirements. As a specific example, the controller / processor 340 can be divided into a plurality of processors, such as one or more central processing units (CPUs) and one or more graphics processing units (GPUs). Furthermore, although FIG. 3a illustrates that the UE 116 is configured as a mobile phone or a smart phone, UEs can be configured to operate as other types of mobile or fixed devices.

[0093] FIG. 3b illustrates an example gNB 102 according to the present disclosure. The embodiment of gNB 102 shown in FIG. 3b is for illustration only, and other gNBs of FIG. 1 can have the same or similar configuration. However, gNBs have various configurations, and FIG. 3b does not limit the scope of the present disclosure to any specific implementation of a gNB. It should be noted that the gNB 101 and the gNB 103 can include the same or similar structures as the gNB 102.

[0094] As shown in FIG. 3b, the gNB 102 includes a plurality of antennas 370a-370n, a plurality of RF transceivers 372a-372n, a transmission (TX) processing circuit 374, and a reception (RX) processing circuit 376. In certain embodiments, one or more of the plurality of antennas 370a-370n include a 2D antenna array. The gNB 102 also includes a controller / processor 378, a memory 380, and a backhaul or a network interface 382.

[0095] RF transceivers 372a-372n receive an incoming RF signal from antennas 370a-370n, such as a signal transmitted by UEs or other gNBs. RF transceivers 372a-372n down-convert the incoming RF signal to generate an IF or baseband signal. The IF or baseband signal is transmitted to the RX processing circuit 376, where the RX processing circuit 376 generates a processed baseband signal by filtering, decoding and / or digitizing the baseband or IF signal. The RX processing circuit 376 transmits the processed baseband signal to the controller / processor 378 for further processing.

[0096] The TX processing circuit 374 receives analog or digital data (such as voice data, network data, email or interactive video game data) from the controller / processor 378. The TX processing circuit 374 encodes, multiplexes and / or digitizes outgoing baseband data to generate a processed baseband or IF signal. RF transceivers 372a-372n receive the outgoing processed baseband or IF signal from TX processing circuit 374 and up-convert the baseband or IF signal into an RF signal transmitted via antennas 370a-370n.

[0097] The controller / processor 378 can include one or more processors or other processing devices that control the overall operation of the gNB 102. For example, the controller / processor 378 can control the reception of forward channel signals and the transmission of backward channel signals through the RF transceivers 372a-372n, the RX processing circuit 376 and the TX processing circuit 374 according to well-known principles. The controller / processor 378 can also support additional functions, such as higher-level wireless communication functions. For example, the controller / processor 378 can perform a Blind Interference Sensing (BIS) process such as that performed through a BIS algorithm, and decode a received signal from which an interference signal is subtracted. A controller / processor 378 may support any of a variety of other functions in the gNB 102. In some embodiments, the controller / processor 378 includes at least one microprocessor or microcontroller.

[0098] The controller / processor 378 is also capable of executing programs and other processes residing in the memory 380, such as a basic OS. The controller / processor 378 can also support channel quality measurement and reporting for systems with 2D antenna arrays as described in embodiments of the present disclosure. In some embodiments, the controller / processor 378 supports communication between entities such as web RTCs. The controller / processor 378 can move data into or out of the memory 380 as required by an execution process.

[0099] The controller / processor 378 is also coupled to the backhaul or network interface 382. The backhaul or network interface 382 allows the gNB 102 to communicate with other devices or systems through a backhaul connection or through a network. The backhaul or network interface 382 can support communication over any suitable wired or wireless connection(s). For example, when the gNB 102 is implemented as a part of a cellular communication system, such as a cellular communication system supporting 5G or new radio access technology or NR, LTE or LTE-A, the backhaul or network interface 382 can allow the gNB 102 to communicate with other gNBs through wired or wireless backhaul connections. When the gNB 102 is implemented as an access point, the backhaul or network interface 382 can allow the gNB 102 to communicate with a larger network, such as the Internet, through a wired or wireless local area network or through a wired or wireless connection. The backhaul or network interface 382 includes any suitable structure that supports communication through a wired or wireless connection, such as an Ethernet or an RF transceiver.

[0100] The memory 380 is coupled to the controller / processor 378. A part of the memory 380 can include an RAM, while another part of the memory 380 can include a flash memory or other ROMs. In certain embodiments, a plurality of instructions, such as the BIS algorithm, are stored in the memory. The plurality of instructions are configured to cause the controller / processor 378 to execute the BIS process and decode the received signal after subtracting at least one interference signal determined by the BIS algorithm.

[0101] As will be described in more detail below, the transmission and reception paths of the gNB 102 (implemented using RF transceivers 372a-372n, TX processing circuit 374 and / or RX processing circuit 376) support aggregated communication with FDD cells and TDD cells.

[0102] Although FIG. 3b illustrates an example of the gNB 102, various changes may be made to FIG. 3b. For example, the gNB 102 can include any number of each component shown in FIG. 3a. As a specific example, the access point can include many backhaul or network interfaces 382, and the controller / processor 378 can support routing functions to route data between different network addresses. As another specific example, although shown as including a single instance of the TX processing circuit 374 and a single instance of the RX processing circuit 376, the gNB 102 can include multiple instances of each (such as one for each RF transceiver).

[0103] The time domain unit (also referred to as the time unit) in the present application may be one OFDM symbol, one OFDM symbol group (consisting of a plurality of OFDM symbols), one slot, one slot group (consisting of a plurality of slots), one subframe, one subframe group (consisting of a plurality of subframes), one system frame or one system frame group (consisting of a plurality of system frames), or may be an absolute time unit, e.g., 1 ms, 1 s, etc. The time unit may also be a combination of a plurality of granularities, e.g., N1 slots plus N2 OFDM symbols.

[0104] The frequency domain unit (also referred to as the frequency unit) in the present application may be one subcarrier, one subcarrier group (consisting of a plurality of subcarriers), one resource block (RB) (also referred to as physical resource block (PRB)), one resource block group (consisting of a plurality of RBs), one bandwidth part (BWP), one bandwidth part group (consisting of a plurality of BWPs), one band / carrier or one band group / carrier group; or may be an absolute frequency domain unit, e.g., 1 Hz, 1 kHz, etc. The frequency domain unit may also be a combination of multiple granularities, e.g., M1 PRBs plus M2 subcarriers.

[0105] The exemplary embodiments of the present disclosure are further described below in conjunction with the accompanying drawings.

[0106] The text and drawings are provided as examples only to help readers understand the present disclosure. They are not intended and should not be interpreted as limiting the scope of the present disclosure in any way. Although certain embodiments and examples have been provided, based on the content disclosed herein, it is obvious to those skilled in the art that modifications to the illustrated embodiments and examples can be made without departing from the scope of the present disclosure.

[0107] It should be understood by those skilled in the art that singular forms "a", "an", "the" and "this" as used herein may include plural forms as well, unless specifically stated. It should be further understood that the term "comprise" used in the specification of the present application specifies the presence of the stated features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof. It should be understood that, when an element is "connected" or "coupled" to another element, this element may be directly connected or coupled to the other element, or there may be intervening elements therebetween. In addition, "connection" or "coupling" as used herein may include wireless connection or wireless coupling. As used herein, the word "and / or" includes all or any of one or more associated listed items or combinations thereof.

[0108] It should be understood by those skilled in the art that, unless otherwise defined, all terms (including technical and scientific terms) as used herein have the same meaning as commonly understood by one person of ordinary skill in the art to which the present application belongs. It should be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having meanings that are consistent with their meanings in the context of the prior art and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.

[0109] It should be understood by those skilled in the art that the term "terminal" or "terminal device" as used herein compasses not only devices with a wireless signal receiver having no emission capability but also devices with receiving and emitting hardware capable of carrying out bidirectional communication over a bidirectional communication link. Such devices can include cellular or other communication devices with a single-line display or multi-line display or without a multi-line display; personal communication services (PCSs) with combined functionalities of speech, data processing, facsimile and / or data communication; personal digital assistants (PDAs), which may include RF receivers, pagers, internet networks / intranet accesses, web browsers, notepads, calendars and / or global positioning system (GPS) receivers; and / or conventional laptop and / or palmtop computers or other devices having and / or including a RF receiver. The "terminal" or "terminal device" used herein may be portable, transportable, mountable in transportations (air, sea and / or land transportations), or suitable and / or configured to run locally and / or distributed in other places in the earth and / or space for running. The "terminal" or "terminal device" as used herein may also be a communication terminal, an internet terminal, and a music / video player terminal. For example, it may be a PDA, a mobile internet device (MID) and / or a mobile phone with a music / video play function, or may be devices such as a smart TV and a set-top box.

[0110] The term "send" in the present invention may be used interchangeably with "transmit", "report", "notify" or the like without departing from the scope of the present invention.

[0111] The text and the drawings are merely provided as examples to help readers to understand the present disclosure. They are not intended to limit the scope of the present disclosure in any way. Although some embodiments and examples have been provided, based on the contents disclosed herein, it is obvious for those skilled in the art that alterations can be made to the illustrated embodiments and examples without departing from the scope of the present disclosure.

[0112] With the commercial application of 5th Generation wireless systems (5G), the massive machine-type communications (mMTC) have attracted extensive attention as one of the three major scenarios of 5G. The internet of vehicles, smart home, smart city, smart transportation and the like are accompanied by a large number of terminal accesses. In order to better obtain the information of each terminal and effectively control each communication user, it is crucial to ensure the secure communication of mass RF devices. Due to its openness, the wireless communication is more vulnerable to large-scale malicious attacks in comparison to traditional wired networks. In an application scenario with large capacity and multiple devices in the 5G network, there must be the security problem of multi-terminal access. At present, the security authentication exists in the upper layer of the network structure. These technologies usually use the media access control address / Internet protocol (MAC / IP) address as their identity, which is easy to be tampered or attacked. Moreover, they also depend on the complex mathematical operation, and are extremely sensitive to computation complexity. Once problems occur, it is difficult to recover. Therefore, a new secure access authentication method is urgently needed to reduce the potential threat of malicious users.

[0113] In order to fundamentally solve the problem of multi-device access authentication in the complex environment, it is urgent to find an access authentication method in which the identity cannot be copied and is difficult to be altered in a short time. Thus, the traditional methods based on MAC / IP address can be replaced, and the network security problems that have attracted much attention at present can also be alleviated.

[0114] In this context, the radio frequency fingerprinting (RFF) identification technology has emerged. Its concept is similar to that of the human fingerprint. Just as the human fingerprint is inherent and different from one another, the RFF is fixed as the hardware device leaves the factory, and is also unique and invariable in a short time. The concept of RFF has quickly become a research hotspot of network information security once it has been proposed. How to apply RFF verification technology to existing communication processes has gradually become the focus of the physical layer security technology.

[0115] In view of the above problem, the embodiments of the present disclosure provide a method for pseudo base station identification and cell handover based on RFF. In this method, a user equipment (also referred to as a user) monitors a serving base station and neighboring cell base stations (e.g., surrounding base stations) and reports the monitoring result to the serving base station. Upon receiving a handover instruction issued by the serving base station, the user equipment may perform RFF feature measurement and verification on the configured target base station; and, the user determines whether to hand over to the target base station based on the result of verification. In the implementations of the present disclosure, upon receiving the handover instruction, the user may perform RFF feature measurement and verification based on the configuration, so that the induced handover or hijacking of the user by a pseudo base station can be effectively avoided, and the information and property security of the user can be ensured.

[0116] The method executed by a user equipment (UE) in a wireless communication system provided in the embodiments of the present disclosure will be described below with reference to the drawings.

[0117] In one feasible embodiment, as shown in FIG. 4, the method executed by a user equipment (UE) in a wireless communication system includes steps S101 to S103.

[0118] In step S101, a first message sent by a serving base station is received, the first message being used for instructing to perform cell handover, the first message comprising first configuration information, the first configuration information including first information for instructing handover to a first cell, information of a first radio frequency fingerprinting (RFF) feature corresponding to the first cell and second information related to a reference signal.

[0119] In step S102, RFF measurement is performed based on the received reference signal to obtain a second RFF feature corresponding to the first cell.

[0120] In step S103, cell handover is performed based on whether the first RFF feature and the second RFF feature are matched.

[0121] Optionally, in the wireless communication system, the handover operation is generally performed between cells. Exemplarily, when a user equipment (e.g., a mobile phone) moves from one cell to another cell, in order to maintain the continuity and stability of communication, it is necessary to perform cell handover. It should be understood that this handover process is completed under the control of the base station. The base station may determine whether to perform handover according to the signal strength, signal quality and / or network load and other factors of the user equipment, and then select a proper cell to instruct the user equipment to perform handover. In the embodiments of the present disclosure, the cell handover may refer to the migration of the wireless link connection of the user equipment from the source cell to the target cell. When the user equipment hands over from a cell covered by one base station to a cell covered by another base station, it should be understood that a base station handover occurs.

[0122] Optionally, in the cell handover process, the user equipment may continuously measure a serving base station (e.g., a base station currently connected with the user equipment) and a neighboring cell base station (e.g., a base station around the user equipment), and report the measurement result. Exemplarily, the measured content may be the signal strength, the signal quality or the like. Reporting the measurement result may be carrying the identifier of the measurement object (e.g., the base station or the cell), the measured numerical value (e.g., the numerical value of the reference signal received power, the reference signal received quality or other measurement results) and other related information (e.g., the measurement time, the measurement condition, etc.) in the report information and sending the report information to the serving base station. The configuration information used by the user equipment to measure the base station may be issued by the currently connected serving base station through a radio resource control message, and the configuration information may include the information of the specific task to be executed by the user equipment and the related parameters. When it is determined that a specific handover condition is satisfied (for example, the signal strength is less than a certain threshold, the signal quality of another base station is better than that of the currently connected serving base station, etc.), the user equipment will receive a handover instruction from the serving base station.

[0123] Optionally, in the cell handover process, the serving base station may determine, according to the monitoring result reported by the user equipment, the network state and / or the requirement of the user equipment and the like, whether to allow the user equipment to perform cell handover. When the serving base station determines that the user equipment satisfies the handover condition, the serving base station may send a first message to the user equipment and instruct the user equipment to perform cell handover through the first message. Exemplarily, the first message may include an instruction for instructing the user equipment to perform cell handover, the first configuration information and the like. The first configuration information may be generated by the serving base station at least according to the monitoring result reported by the user equipment.

[0124] Optionally, the first configuration information may include first information for instructing handover to a first cell. In the cell handover process, when instructing the user equipment to perform cell handover, the serving base station will configure the selected proper cell for the user equipment. Exemplarily, if the serving base station finds that base stations 1, 2 and 3 around the user equipment can provide better quality of service, priorities may be ranked with regard to the quality of service that can be provided by the three base stations, for example, base station 2-base station 1-base station 3, so that the first information included in the first configuration information received by the user equipment will preferentially instruct the user equipment to hand over to the cell covered by the base station 2.

[0125] Optionally, in the cell handover process, upon receiving the first configuration information and before performing cell handover, the user equipment may measure the first base station of the first cell by using the radio frequency fingerprinting technology, and may hand over to the first cell to realize cell handover when it is determined that the first base station is not a pseudo base station.

[0126] Optionally, since each device (e.g., the base station) will produce unique features when sending the wireless signal, these features may be referred to as radio frequency fingerprints or radio frequency fingerprinting (RFF) features. One base station may include a number of cells, and different cells corresponding to the same base station have the same RFF feature. Therefore, during the identification of the base station, RFF may be performed on the reference signal sent by the cell. In the embodiments of the present disclosure, the first configuration information received by the user equipment may include second information for configuring the reference signal for measurement. Exemplarily, the user equipment may perform RFF based on the reference signal received from the first cell according to the configuration issued by the serving base station.

[0127] Optionally, the first RFF feature issued by the serving base station may include the RFF feature of a legal base station, and a pseudo base station may disguise as a legal base station in the cell handover process. Thus, when the serving base station issues the RFF feature to the user equipment with regard to the pseudo base station, the serving base station issues the first RFF feature of the legal base station disguised by the pseudo base station. Exemplarily, if there are base station 1, base station 2 and base station 3, wherein the base station 1 may disguise as the base station 2, then the first configuration information sent to the user equipment by the serving base station may include the cell identifier (e.g., cell ID) of the base station 1, the first RFF feature corresponding to the base station 1 (e.g., the RFF feature of the base station 2), the cell identifier of the base station 2, the first RFF feature corresponding to the base station 2 (e.g., the RFF feature of the base station 2 itself), the cell identifier of the base station 3, and the first RFF feature corresponding to the base station 3 (e.g., the RFF feature of the base station 3 itself).

[0128] In the embodiments of the present disclosure, the pseudo base station may refer to an illegal radio communication device that does not obtain the network access license of the telecommunication device and the model approval of the radio transmitting device. The legal base station (non-pseudo base station) is a base station that is legally approved and licensed for communication and data transmission with a mobile device (e.g., a mobile phone, a wireless network card, etc.) to realize wireless communication coverage.

[0129] Optionally, under the configuration based on the second information, the user equipment may perform RFF measurement based on the reference signal received from the first cell to obtain a second RFF feature corresponding to the first cell. For convenience of subsequent description and understanding, in the embodiments of the present disclosure, the RFF feature received by the user equipment is defined as the first RFF feature, and the RFF feature obtained by the user equipment during subsequent measurement is defined as the second RFF feature.

[0130] Optionally, in the cell handover process, the cell indicated for handover by the serving cell may correspond to a pseudo base station, and the first RFF feature and the second RFF feature received by the user equipment will be different due to the presence of the pseudo base station. Therefore, by verifying the first RFF feature and the second RFF feature, the pseudo base station can be effectively identified, and the user equipment can be prevented from handover from the source base station to the pseudo base station.

[0131] Optionally, the first information may include a handover list. Wherein, the handover list may be a manifestation of an ordered set. The ordered set may refer to a set that contains non-repetitive elements and has an order, and data structures such as lists, arrays and ordered maps may include the characteristics of the ordered set. That is, the data recorded handover list documented in the embodiments of the present disclosure may also be recorded by using other data structures. Exemplarily, the handover list may include non-repetitive cell information, and the cell information corresponding to different base stations are ranked in an order. The cell order recorded in the handover list is determined by the serving base station, and the determination method of the order may refer to the related technologies and will not be limited in the embodiments of the present disclosure. Optionally, the cell information included in the handover list may be the cell identifier or other information for identifying different cells configured for handover. It should be understood that the priority of the cell that is ranked top in the handover list and configured for handover is higher than that of the cell that is ranked bottom and configured for handover. Exemplarily, the quality of service provided by the cell ranked top under a certain index may be better than that provided by the cell ranked bottom under this index. For example, the signal strength is higher, and so on. Optionally, the first cell is a cell ranked first in the handover list.

[0132] Optionally, the second information may include an RFF information format, and the RFF information format may be used for indicating information of the reference signal configured for measurement and / or information (e.g., number and type) of the first RFF feature corresponding to the reference signal. There is a mapping relationship between the RFF information format and the reference signal and / or the first RFF feature. The UE may know the reference signal configured for measurement through the RFF information format and calculate the information of the RFF feature corresponding to this reference signal. There is a correspondence between different RFF features and different reference signals. Exemplarily, the constant-amplitude reference signal may correspond to a fractal feature and / or a phase noise spectrum. It should be understood that the RFF information format has the function of identification, for example, being represented by 1-1, 1-2, 2, etc. Exemplarily, when the RFF information format is 1-1, the first RFF feature indicated therein may be a power amplifier nonlinear feature, and the indicated reference signal may be a high-peak to average power ratio (PAPR) reference signal.

[0133] Optionally, the RFF information format may be used for indicating the number and type of the included RFF feature. If the first RFF information format may correspond to an RFF feature a, the indicated number of the RFF feature is 1, and the indicated type is type a; and, if the second RFF information format may correspond to an RFF feature a and an RFF feature b, the indicated number of RFF features is 2, and the indicated type is type a and type b (the type a and the type b may be the same type or different types).

[0134] Optionally, the first RFF feature and / or the second RFF feature may include at least one of a fractal feature, a phase noise spectrum and a power amplifier nonlinear feature.

[0135] Wherein, the fractal feature, also known as the somatotype feature, refers to the self-similarity or self-affinity manifested in signals, that is, signals manifest similar structures or patterns on different scales. In the radio frequency fingerprint, the fractal feature may be manifested as the similarity of frequency spectrums, waveforms or modulation modes of signals in different times or frequency scales.

[0136] Wherein, the phase noise spectrum refers to the random fluctuation or noise of the signal in phase. In the wireless communication system, the phase noise may be caused by the nonlinear feature and phase instability of internal components (e.g., the oscillator, the modulator, etc.) of the transmitter, and the phase noise spectrum may be used to describe the distribution characteristics of the random fluctuation in frequency domain.

[0137] Wherein, the power amplifier nonlinear feature refers to the nonlinear distortion produced by the power amplifier when amplifying signals. The nonlinear distortion will lead to the distortion or offset of the signal in amplitude, phase or frequency. Due to different manufacturing processes, materials and other factors, power amplifiers of different devices have different and relatively stable nonlinear features. Thus, the nonlinear feature can be used as a unique identifier of the device.

[0138] Optionally, different base stations may use different RFF features. In order to improve the flexibility and accuracy of RFF measurement for the configured base station (e.g., the configured cell), the corresponding reference signal required for measurement (also referred to as the verification reference signal) may be configured through the RFF information format.

[0139] Optionally, the reference signal configured for measurement may include a high-peak to average power ratio (PAPR) reference signal and / or a constant-amplitude reference signal. The PAPR is the peak to average power ratio, representing the ratio of the highest peak power to the average power. The high-PAPR reference signal may refer to a reference signal whose peak power is much higher than the average power in the wireless communication system. The constant-amplitude reference signal may refer to a signal whose amplitude remains constant or fluctuates very little during transmission.

[0140] In one example, the high-PAPR reference signal includes at least one of a first high-PAPR reference signal and a second high-PAPR reference signal. The first high-PAPR reference signal is configured with a same complex-valued signal in each resource element of frequency domain, and the second high-PAPR reference signal is configured with a first complex-valued signal in each resource element of frequency domain. The first complex-valued signal includes a complex-valued signal obtained by modulation at a modulation order of 64 or more. Wherein, high-order modulation is a modulation technology to improve the data transmission rate by increasing the bit information data carried by each code element. Compared with low-order modulation, in the high-order modulation, e.g., 64 quadrature amplitude modulation (64-QAM), each code element may carry more bit information. In the embodiments of the present disclosure, in the case where the high-PAPR reference signal is configured with a high-order modulated complex-valued signal, the transmission efficiency of the signal can be improved by increasing the bit information of each code element in resource elements of frequency domain.

[0141] Optionally, the resource element (RE) may also be referred to as the resource grid. The resource element may be composed of a subcarrier in frequency domain and a part of an orthogonal frequency division multiplexing (OFDM) symbol or slot in time domain.

[0142] In some examples, the user equipment may measure different verification reference signals based on configured different RFF information formats. For example, if the configured RFF information format is format 1, it indicates that the user will measure the high-PAPR reference signal sent by the target base station. Wherein the high-PAPR reference signal is generated by, but not limited to, the following methods: a) the same complex-valued signal is generated in each resource element of frequency domain; and, b) a high-order modulated complex-valued signal is generated in each resource element of frequency domain.

[0143] Specifically, the above method a may be represented by formula (1), and the symbols of the real part and imaginary part of the complex-valued signal may be a positive sign (+) or a negative sign (-):

[0144]

[0145] After the signal r is generated, as shown in FIG. 6, the user may map the signal r to the resource element (k,l) by the following formula, where the resource element (k,l) is located in the resource block configured high-PAPR of the user, k is the position of the frequency domain carrier, l is the position of the time domain symbol, as shown by formula (2):

[0146]

[0147] Specifically, the above method b is represented by, but not limited to, the following formula (3) to (5). Considering that low-order modulation cannot produce high PAPR, the modulation order starts at least from 64QAM. Several generation formulae for high-order modulation are given below.

[0148] In the case of 64QAM modulation, a six-tuple bit is mapped to a complex-valued modulation symbol according to the following formula (3):

[0149]

[0150] In the case of 256QAM modulation, an eight-tuple bit is mapped to a complex-valued modulation symbol according to the following formula (4):

[0151]

[0152] In the case of 1024QAM modulation, a ten-tuple bit is mapped to a complex-valued modulation symbol according to the following formula (5):

[0153]

[0154] After the signal r(m) is generated, as shown in FIG. 7, the user may map the signal r(m) to the resource element (k,l) by the following formula, where the resource element (k,l) is located in the configured high-PAPR resource block of the user, k is the position of the frequency domain carrier, l is the position of the time domain symbol, as shown by formula (6):

[0155]

[0156] Exemplarily, in the high-order modulation, one modulation period may correspond to different modulation orders, e.g., 64-QAM. With the increase of the modulation order, the amount of information that can be carried by each symbol is increased.

[0157] Specifically, the high-PAPR reference signal received by the user is configured by the method a or b through the RFF information format. For example, if the configured RFF information format is 1-1, the high-PAPR reference signal is generated by the method a; and, if the configured RFF information format is 1-2, the high-PAPR reference signal is generated by the method b. If the configured RFF information format is 1-1, the positive or negative sign of the imaginary or real part of the complex-valued signal is determined by the target base station itself. If the configured RFF information format is 1-2, the used modulation order is determined by the target base station itself.

[0158] In one example, the constant-amplitude reference signal includes at least one of a first constant-amplitude reference signal and a second constant-amplitude reference signal. The first constant-amplitude reference signal may be a constant-amplitude constant-phase reference signal, as shown in FIG. 8a, which is configured with a second complex-valued signal in a first resource element of frequency domain and configured with a complex-valued signal having a value of 0 in other resource elements of frequency domain. The second constant-amplitude reference signal may be a constant-amplitude non-constant-phase reference signal, as shown in FIG. 8b, which is configured with a second complex-valued signal in any reference element other than the first resource element of frequency domain and configured with a complex-valued signal having a value of 0 in other resource elements of frequency domain. The second complex-valued signal includes a complex-valued signal obtained by power boosting. Power boosting may be realized by adjusting the gain of the power amplifier, using the pre-distortion technology, or amplifying the signal in the digital domain by a digital signal processing (DSP) algorithm or the like. For the complex-valued signal having a value of 0, the real part and the imaginary part of the signal at the corresponding frequency point are 0, that is, the frequency component does not exist in the signal or its energy is 0.

[0159] Optionally, if the configured RFF information format is format 2, it indicates that the user will measure the constant-amplitude constant-phase reference signal sent by the target base station. The constant-amplitude constant-phase reference signal may be generated by the following method: in the frequency domain resource elements, the first resource element is selected according to the configuration to allocate a power-boosted complex-valued signal, and the values of other resource elements are 0. The above method may be represented by formula (7):

[0160]

[0161] where the resource element (k,l) is located in the configured constant-amplitude constant-phase reference signal resource block of the user, k is the position of the frequency domain carrier, l is the position of the time domain symbol, represents the power boosting factor, and k0is the position of the complex-valued signal configured by a higher layer in the resource unit, as shown in FIG. 8a.

[0162] Optionally, the constant-amplitude non-constant-phase reference signal may be generated by the following method: in the frequency domain resource elements, any resource element other than the first resource element is selected according to the configuration to allocate a power-boosted complex-valued signal, and the values of other resource elements are 0. This method may also be represented by the above formula (7), as shown in FIG. 8b.

[0163] In one feasible embodiment, the step S102 of performing RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell includes at least one of the following steps A1 to A3.

[0164] In step A1, for the received high-PAPR reference signal, at least one of an amplitude feature of the signal, a phase feature of the signal and a frequency feature of the signal is measured to obtain the second RFF feature.

[0165] In some examples, if the user is configured to measure a high-PAPR reference signal, the following RFF feature measurement method needs to be performed. Specifically, if the received signal is , the formula (8) for calculating the RFF feature of the high-PAPR reference signal is represented as follows:

[0166]

[0167] where a(i) is the amplitude feature of the signal, is the phase feature of the signal, and f(i) is the frequency feature of the signal. In order to eliminate the influence on the receiving device, the three features can be centralized, as shown by the following formula (9):

[0168]

[0169]

[0170] In step A2, for the received constant-amplitude reference signal, at least one of a box dimension of the signal and an information dimension of the signal is measured to obtain the second RF fingerprint feature.

[0171] In some examples, if the user is configured to measure a constant-amplitude reference signal, e.g., a constant-amplitude constant-phase reference signal or a constant-amplitude non-constant-phase reference signal, the following RFF feature measurement method needs to be performed. Specifically, the box dimension and information dimension of the received reference signal need to be calculated. The formula (10) for calculating the box dimension is as follows:

[0172]

[0173] The formula (11) for calculating the information dimension is as follows:

[0174]

[0175] In step A3, for the received constant-amplitude reference signal, a phase noise spectrum of the signal is measured to obtain the second RFF feature.

[0176] In some examples, if the user is configured to measure a constant-amplitude reference signal, e.g., a constant-amplitude constant-phase reference signal or a constant-amplitude non-constant-phase reference signal, the following RFF feature measurement method may also be performed. Specifically, the phase noise spectrum of the received reference signal needs to be calculated. The calculation formula (12) is given below:

[0177]

[0178] Exemplarily, the correspondence among the RFF information format, the number and type of the verification reference signal and the RFF feature in the above examples is shown by Table 1 below.

[0179] [Table 1 RFF information format table]

[0180]

[0181] In the above Table 1, the constant-amplitude reference signal may be the first constant-amplitude reference signal (e.g., the constant-amplitude constant-phase reference signal) or the second constant-amplitude reference signal (e.g., the constant-amplitude non-constant-phase reference signal).

[0182] In one example, the measurement based on the high-PAPR reference signal may also correspond to the fractal feature and / or the phase noise spectrum. The measurement based on the constant-amplitude reference signal may also correspond to the power amplifier nonlinear feature.

[0183] Optionally, the step S103 of performing cell handover based on whether the first RFF feature and the second RFF feature are matched includes steps B0 to B2.

[0184] In step B0, the first RFF feature and the second RFF feature are verified.

[0185] In one feasible embodiment, upon measuring the second RFF feature of the received signal, the user equipment may compare the second RFF feature with the first RFF feature. This comparison process may be regarded as the verification process of the measurement result. Exemplarily, the comparison algorithm may include, but not limited to, at least one of the following algorithms: a K-nearest neighbor (KNN) algorithm, a K-means clustering algorithm, a support vector machine (SVM) algorithm, and a comparison algorithm implemented based on a deep neural network.

[0186] Optionally, the result of comparison of the second RFF feature with the first RFF feature is related to multiple aspects such as the accuracy of feature extraction, the selection of the matching algorithm, the perfection of the data base and the environmental factor, and the influence on the matching result from various factors may be reduced by corresponding measures in the comparison process. Exemplarily, comparing the second RFF feature with the first RFF feature may include comparing the similarity among multiple involved signal parameters (e.g., the frequency, phase, amplitude, modulation mode or the like of the signal), and comparing whether various signal parameters are close or consistent. If the base station corresponding to the configured first cell is a pseudo base station, the second RFF feature obtained by measuring the reference signal from the first cell by the user equipment will be quite different from the first RFF feature received by the user equipment, for example, the similarity being very low. Therefore, it may be determined according to the result of comparison whether the base station corresponding to the configured first cell belongs to a pseudo base station.

[0187] In step B1, in a case where the second RFF feature is matched with the first RFF feature, it is handed over to the first cell.

[0188] Optionally, if the matching result of the second RFF feature with the first RFF feature is obtained by performing a comparison algorithm on the second RFF feature and the first RFF feature, the user equipment may be disconnected from the source base station and then establish a connection to the first base station corresponding to the first cell so as to complete the handover process, e.g., handover to a neighboring cell.

[0189] In step B2, in a case where the second RFF feature is not matched with the first RFF feature, information related to the first cell is reported to the serving base station, or RFF measurement and verification is performed on a second cell in the first information and cell handover is performed based on the result of verification corresponding to the second cell, the second cell including a cell ranked after the first cell in the handover list of the first information.

[0190] Optionally, when the user equipment determines that the second RFF feature is not matched with the first RFF feature, the user equipment may choose to report the information related to the first information to the serving base station, or may choose not to report the information and then continuously perform RFF measurement and verification on a cell (e.g., a second cell) ranked after the first cell in the handover list of the first configuration information so as to realize cell handover.

[0191] Optionally, the information related to the first cell may include the cell identifier, the result of comparison of the second RFF feature with the first RFF feature, the identifier of the base station corresponding to the first cell and the like.

[0192] Optionally, when it is determined in the step B2 that the base station corresponding to the configured first cell belongs to a pseudo base station, continuously performing RFF measurement and verification on the configured second cell may be a cyclic process, and the condition of ending the cycle is that the measured and verified second RFF feature of a certain cell is matched with the first RFF feature.

[0193] In one feasible embodiment, after the step B2 of reporting the information related to the first cell to the serving base station, the method further includes a step B21.

[0194] In step B21, a second message sent by the serving base station is received, the second message being used for instructing to terminate cell handover.

[0195] Optionally, the presence of the pseudo base station may induce the user equipment to hand over from the connection to the serving base station to the connection to the pseudo base station. At this time, it is possible that the signal strength, signal quality and the like of the pseudo base station are better than those of the serving base station. Therefore, when the user equipment determines that the base station corresponding to the configured first cell belongs to a pseudo base station, the serving base station may find that the user equipment does not satisfy the handover condition after the pseudo base station is excluded. At this time, the serving base station may send a second message to the user equipment and instruct the user equipment to terminate cell handover through the second message.

[0196] In one feasible embodiment, after the step B2 of reporting the information related to the first cell to the serving base station, the method further includes steps B22 to B24.

[0197] In step B22, a third message sent by the serving base station is received, the third message being used for instructing to continue cell handover, and the third message including second configuration information.

[0198] In step B23, cell handover is performed based on the second configuration information.

[0199] Optionally, after the serving base station deletes the information of the first base station from the handover list of the first configuration information based on the information related to the first cell reported by the user equipment, if it is found that the user equipment still satisfies the handover condition (there may be other pseudo base stations, or other legal base stations may have better quality of service than the source serving base station), a third message may be sent to the user equipment, and the user equipment is instructed to continue cell handover through the third message. The third message may include an instruction to continue cell handover, the second configuration information and other contents.

[0200] Optionally, the second configuration information may be obtained by deleting the information related to the first cell from the first configuration information, or may be regenerated by the serving base station.

[0201] Optionally, when cell handover processing is performed based on the second configuration information, the processing process may refer to the steps S101 to S103 and will not be repeated in the embodiments of the present disclosure. Exemplarily, the second configuration information may include information for instructing handover to a third cell, and the third cell configured in the second configuration information and the second cell configured in the first configuration information may correspond to the same base station or different base stations.

[0202] In the embodiments of the present disclosure, the measurement and verification of the base station is described from the perspective of cell handover. It should be understood that, in the above example, the measurement and verification of the cell is the measurement and verification of the base station corresponding to the cell. Exemplarily, the verification process of radio frequency fingerprinting is shown in FIG. 9.

[0203] In some examples, after the user equipment obtains the second RFF feature of a neighboring base station by measurement, the second RRF feature needs to be verified. The verification process is shown in FIG. 9.

[0204] 1) If it is obtained that the second RFF feature is matched with the first RFF feature by performing the comparison algorithm on the second RFF feature and the first RFF feature, the user hands over to the target base station.

[0205] 2) If it is obtained that the second RFF feature is not matched with the first RFF feature by performing the comparison algorithm on the second RFF feature and the first RFF feature, the user may select whether to report the information of the pseudo base station to the serving base station. If the user determines to report the information of the pseudo base station:

[0206] a) The serving base station will re-determine whether to perform handover according to the information reported by the user.

[0207] b) If the serving base station finds the user does not satisfy the handover principle after it deletes the pseudo base station from the handover list, the serving base station notifies the user to terminate handover and return to the normal process.

[0208] c) If the serving base station finds that the user also needs to perform handover after it deletes the pseudo base station from the handover list, the serving base station notifies the user to continue handover and issues the second configuration information.

[0209] d) The user performs RFF feature measurement based on the second configuration information to obtain a new second RFF feature.

[0210] e) The user verifies the second RFF feature and the first RFF feature according to the second configuration information. If the second RFF feature is matched with the first RFF feature, it is handed over to the target base station; and, if the second RFF feature is not matched with the first RFF feature, the process returns to the step 2).

[0211] 3) If the user determines not to report the information of the pseudo base station:

[0212] a) The information of the pseudo base station is deleted from the handover list of the configuration information, and the first ranked base station in the list is reselected for handover.

[0213] b) The user performs RFF feature measurement on the new first base station based on the first configuration information to obtain a new second RFF feature.

[0214] The user verifies the second RFF feature and the first RFF feature based on the first configuration information. If the second RFF feature is matched with the first RFF feature, it is handed over to the target base station; and if the second RFF feature is not matched with the first RFF feature, the process returns to the step 2).

[0215] The method executed by a base station in a wireless communication system provided in the embodiments of the present disclosure will be described below with reference to the drawings.

[0216] In the present disclosure, the base station may be a 5G base station (e.g., gNB, ng-eNB), or may be a 4G base station (e.g., eNB), or may be a 6G base station, or may be other types of access nodes.

[0217] In one feasible embodiment, as shown in FIG. 5, the method executed by a base station in a wireless communication system provided in the embodiments of the present disclosure may include steps S201 to S202.

[0218] In step S201, first configuration information is acquired, the first configuration information including first information for instructing handover to a first cell, information of a first RFF feature corresponding to the first cell and second information related to a reference signal.

[0219] In step S202, a first message is sent to a UE, the first message being used for instructing to perform cell handover, the first message including the first configuration information, so that the UE performs RFF measurement based on the reference signal received from the first cell to obtain a second RFF feature corresponding to the first cell and performs cell handover based on whether the first RFF feature and the second RFF feature are matched.

[0220] Optionally, the step S202 may be executed by a source base station (referred to as a serving base station) connected to the user equipment. The serving base station may receive the monitoring result reported by the user equipment. It should be understood that the serving base station sends a first message to the user equipment to instruct the user equipment to perform cell handover after determining that the user equipment satisfies a certain handover condition after receiving the monitoring result, but does not directly instruct the user equipment to perform cell handover after receiving the monitoring result.

[0221] Optionally, the first configuration information received by the user equipment may include first information (e.g., a handover list) and RFF information (which may include second information and / or a first RFF feature corresponding to the first cell), wherein the handover list includes the data generated by the serving base station at least based on the monitoring result reported by the user equipment. The user equipment performs RFF measurement on the configured first cell based on the first configuration information to obtain a second RFF feature. If the second RFF feature is not matched with the received first RFF feature, it indicates that the base station corresponding to the first cell is a pseudo base station; and, if the second RFF feature is matched with the received first RFF feature, it indicates that the base station corresponding to the first cell is a legal base station. The user equipment may determine, according to the result of verification, whether to hand over to the first cell.

[0222] In one feasible embodiment, the method further includes a step S203.

[0223] In step S203, information related to the first cell reported by the UE is received.

[0224] Optionally, upon receiving the information related to the first cell reported by the user equipment, the serving base station may delete the corresponding information from the first configuration information. The information related to the first cell may include the result of verification corresponding to the first cell, so that the serving base station knows that the base station corresponding to the first cell is a pseudo base station. The information related to the first cell may further include information for indicating that the base station corresponding to the first cell is a pseudo base station, for example, information represented in a particular format, so that the serving base station may determine according to the information that the base station corresponding to the first cell is a pseudo base station.

[0225] In one feasible embodiment, the method further includes a step S204.

[0226] In step S204, a second message is sent to the UE, the second message being used for instructing to terminate cell handover.

[0227] Optionally, the presence of the pseudo base station may induce the user equipment to hand over from the connection to the serving base station to the connection to the pseudo base station. At this time, it is possible that the signal strength, signal quality and the like of the pseudo base station are better than those of the serving base station. Therefore, when the user equipment determines that the base station corresponding to the configured first cell belongs to a pseudo base station, the serving base station may find that the user equipment does not satisfy the handover condition after the pseudo base station is excluded. At this time, the serving base station may send a second message to the user equipment and instruct the user equipment to terminate cell handover through the second message.

[0228] In one feasible embodiment, the method further includes a step S205.

[0229] In step S205, a third message is sent to the UE, the third message being used for instructing to continue cell handover, the third message including second configuration information, so that the UE performs cell handover based on the second configuration information.

[0230] Optionally, after the serving base station deletes the information of the first base station from the first configuration information based on the information related to the first cell reported by the user equipment, if it is found that the user equipment still satisfies the handover condition (there may be other pseudo base stations, or other legal base stations may have better quality of service than the source serving base station), a third message may be sent to the user equipment, and the user equipment is instructed to continue cell handover through the third message. The third message may include an instruction to continue cell handover, the second configuration information and other contents.

[0231] In the embodiments of the present disclosure, upon receiving the cell handover instruction, the user equipment may perform RFF information measurement based on the configuration, so that the induced handover or hijacking of the user equipment by a pseudo base station can be effectively avoided, and the information and property security of the user equipment can be ensured.

[0232] Based on the same principles as the method provided in the present disclosure, an embodiment of the present disclosure further provide an electronic device in a wireless communication system, including at least one transceiver, and at least one processor coupled to the at least one transceiver, the at least one processor being configured to carry out the steps of the method provided in any optional embodiment of the present disclosure. Optionally, the electronic device may be a user device, a base station, and the like.

[0233] FIG. 10 shows a schematic structure diagram of an electronic device to which the solution of the embodiment of the present disclosure is applied. As shown in FIG. 10, the electronic device 4000 shown in FIG. 10 may include a processor 4001 and a memory 4003. The processor 4001 is connected to the memory 4003, for example, through a bus 4002. Optionally, the electronic device 4000 may further include a transceiver 4004 that can be used for data interaction, for example, data transmission and / or data reception, between the electronic device and other electronic devices. It should be noted that, in practical applications, the number of transceiver 4004 is not limited to one, and the structure of the electronic device 4000 does not constitute any limitation to the embodiments of the present disclosure. Optionally, the electronic device may be a user device, a base station, etc.

[0234] The processor 4001 may be a central processing unit (CPU), a general-purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. It may implement or execute various exemplary logical blocks, modules and circuits described in connection with the present disclosure. The processor 4001 may also be a combination for realizing computing functions, for example, a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0235] The bus 4002 may include a path to transfer information between the components described above. The bus 4002 may be a peripheral component interconnect (PCI) bus, or an extended industry standard architecture (EISA) bus, etc. The bus 4002 may be divided into an address bus, a data bus, a control bus, etc. For ease of presentation, the bus is represented by only one thick line in FIG. 10, but it does not mean that there is only one bus or one type of bus.

[0236] The memory 4003 may be, but not limited to, read only memories (ROMs) or other types of static storage devices that can store static information and instructions, random access memories (RAMs) or other types of dynamic storage devices that can store information and instructions, may be electrically erasable programmable read only memories (EEPROMs), compact disc read only memories (CD-ROMs) or other optical disk storages, optical disc storages (including compact discs, laser discs, discs, digital versatile discs, blue-ray discs, etc.), magnetic disk storage media, other magnetic storage devices, or any other media that can carry or store computer programs and that can be accessed by computers, without limitation.

[0237] The memory 4003 is used to store computer programs for executing the solutions of the present disclosure, and the execution is controlled by the processor 4001. The processor 4001 is used to execute the computer programs stored in the memory 4003 to implement the steps shown in the foregoing method embodiments.

[0238] Embodiments of the present disclosure provide a computer-readable storage medium having a computer program stored on the computer-readable storage medium, the computer program, when executed by a processor, implements the steps and corresponding contents of the foregoing method embodiments.

[0239] Embodiments of the present disclosure also provide a computer program product including a computer program, the computer program when executed by a processor realizing the steps and corresponding contents of the preceding method embodiments.

[0240] The terms "first", "second", "third", "fourth", "1", "2", etc. (if present) in the specification and claims of this application and the accompanying drawings above are used to distinguish similar objects and need not be used to describe a particular order or sequence. It should be understood that the data so used is interchangeable where appropriate so that embodiments of the present disclosure described herein can be implemented in an order other than that illustrated or described in the text.

[0241] It should be understood that while the flow diagrams of embodiments of the present disclosure indicate the individual operational steps by arrows, the order in which these steps are performed is not limited to the order indicated by the arrows. Unless explicitly stated herein, in some implementation scenarios of embodiments of the present disclosure, the implementation steps in the respective flowcharts may be performed in other orders as desired. In addition, some, or all of the steps in each flowchart may include multiple sub-steps or multiple phases based on the actual implementation scenario. Some or all of these sub-steps or stages can be executed at the same moment, and each of these sub-steps or stages can also be executed at different moments separately. The order of execution of these sub-steps or stages can be flexibly configured according to requirements in different scenarios of execution time, and the embodiments of the present disclosure are not limited thereto.

[0242] The above-mentioned description and the drawings are provided merely as examples to help readers to understand the present disclosure, and they should not be interpreted or aim to limit the scope of the present disclosure in any way. Although some embodiments are provided, it is apparent for those skilled in the art that the illustrated embodiments and examples may be altered to employ other similar means of implementation based on the technical ideas of the present disclosure without departing from the scope of the present disclosure, which also fall within the scope of protection of embodiments of the present disclosure.

Claims

1.A method executed by a user equipment (UE) in a wireless communication system, the method comprising:receiving, from a serving base station, a first message being used for instructing to perform cell handover, the first message comprising first configuration information, the first configuration information comprising first information for instructing handover to a first cell, information of a first radio frequency fingerprinting (RFF) feature corresponding to the first cell and second information related to a reference signal;performing RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell; andperforming cell handover based on whether the first RFF feature and the second RFF feature are matched.2.The method according to claim 1, wherein the first information comprises a handover list, and the first cell is a cell ranked first in the handover list.3.The method according to claim 1, wherein the second information comprises an RFF information format, and the RFF information format is used for indicating information of the reference signal configured for measurement or information of the first RFF feature corresponding to the reference signal.4.The method according to claim 1, wherein the reference signal comprises a high-peak to average power ratio (PAPR) reference signal and / or a constant-amplitude reference signal.5.The method according to claim 4, wherein the high-PAPR reference signal comprises at least one of:a first high-PAPR reference signal, the first high-PAPR being configured with a same complex-valued signal in each resource element of frequency domain; ora second high-PAPR reference signal, the second high-PAPR reference signal being configured with a first complex-valued signal in each resource element of frequency domain, the first complex-valued signal comprising a complex-valued signal obtained by modulation at a modulation order of 64 or more.6.The method according to claim 4, wherein the constant-amplitude reference signal comprises at least one of:a first constant-amplitude reference signal, the first constant-amplitude reference signal being configured with a second complex-valued signal in a first resource element of frequency domain and configured with a complex-valued signal having a value of 0 in other resource elements of frequency domain, the second complex-valued signal comprising a complex-valued signal obtained by power boosting; ora second constant-amplitude reference signal, the second constant-amplitude signal being configured with the second complex-valued signal in any reference element other than the first resource element of frequency domain and configured with a complex-valued signal having a value of 0 in other resource elements of frequency domain.7.The method according to claim 1, wherein the performing RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell comprises at least one:for the received high-PAPR reference signal, measuring at least one of an amplitude feature of the signal, a phase feature of the signal and a frequency feature of the signal to obtain the second RFF feature;for the received constant-amplitude reference signal, measuring at least one of a box dimension of the signal and an information dimension of the signal to obtain the second RFF feature; orfor the received constant-amplitude reference signal, measuring a phase noise spectrum of the signal to obtain the second RFF feature.8.The method according to claim 7, wherein the first RFF feature or the second RFF feature comprises at least one of a power amplifier nonlinear feature, a fractal feature or a phase noise spectrum.9.The method according to claim 1, wherein the performing cell handover based on whether the first RFF feature and the second RFF feature are matched comprises:verifying the first RFF feature and the second RFF feature;in a case where the second RFF feature is matched with the first RFF feature, handing over to the first cell; andin a case where the second RFF feature is not matched with the first RFF feature, reporting information related to the first cell to the serving base station, or performing RFF measurement and verification on a second cell in the first information and performing cell handover based on the result of verification corresponding to the second cell, the second cell comprising a cell ranked after the first cell in the handover list of the first information.10.The method according to claim 9, after reporting the information related to the first cell to the serving base station, further comprising:receiving a second message sent by the serving base station, the second message being used for instructing to terminate cell handover.11.The method according to claim 9, after reporting the information related to the first cell to the serving base station, further comprising:receiving a third message sent by the serving base station, the third message being used for instructing to continue cell handover, the third message comprising second configuration information; andperforming cell handover based on the second configuration information.12.A method executed by a base station in a wireless communication system, the method comprising:acquiring first configuration information, the first configuration information comprising first information for instructing handover to a first cell, information of a first RFF feature corresponding to the first cell and second information related to a reference signal; andsending a first message to a UE, the first message being used for instructing to perform cell handover, the first message comprising the first configuration information, so that the UE performs RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell and performs cell handover based on whether the first RFF feature and the second RFF feature are matched.13.The method according to claim 12, further comprising:receiving information related to the first cell reported by the UE.14.A user equipment (UE) in a wireless communication system, the UE comprising:at least one transceiver;at least one processor communicatively coupled to the at least one transceiver; andat least one memory, communicatively coupled to the at least one processor, storing instructions executable by the at least one processor individually or in any combination to cause the UE to:receive, from a serving base station, a first message being used for instructing to perform cell handover, the first message comprising first configuration information, the first configuration information comprising first information for instructing handover to a first cell, information of a first radio frequency fingerprinting (RFF) feature corresponding to the first cell and second information related to a reference signal,perform RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell, andperform cell handover based on whether the first RFF feature and the second RFF feature are matched.15.A base station in a wireless communication system, the base station comprising:at least one transceiver;at least one processor communicatively coupled to the at least one transceiver; andat least one memory, communicatively coupled to the at least one processor, storing instructions executable by the at least one processor individually or in any combination to cause the base station to:acquire first configuration information, the first configuration information comprising first information for instructing handover to a first cell, information of a first RFF feature corresponding to the first cell and second information related to a reference signal, andsend a first message to a UE, the first message being used for instructing to perform cell handover, the first message comprising the first configuration information, so that the UE performs RFF measurement based on the received reference signal to obtain a second RFF feature corresponding to the first cell and performs cell handover based on whether the first RFF feature and the second RFF feature are matched.

Images