Method for wireless communication, and communication device

Abstract

Provided are a method for wireless communication, and a communication device. The method is applied to a first device. The method comprises: determining a first sequence on the basis of a first key; and encrypting and / or scrambling a first signal of a physical layer on the basis of the first sequence.

Description

Method and communication device for wireless communication TECHNICAL FIELD

[0001] The present application relates to the technical field of communication, and more particularly, to a method and a communication device for wireless communication. BACKGROUND

[0002] The security protection strategy of the current communication system is usually focused on the packet data convergence protocol (PDCP) and the upper layer of the PDCP, and the physical layer signal lacks security protection. Therefore, how to improve the security of the physical layer signal in the transmission process is a problem to be solved.

[0003] SUMMARY

[0004] The present application provides a communication method and a communication device. The various aspects involved in the present application are introduced as follows.

[0005] In a first aspect, a method for wireless communication is provided, the method is applied to a first device, and the method comprises: determining a first sequence according to a first key; and encrypting and / or scrambling a first signal of a physical layer according to the first sequence.

[0006] In a second aspect, a method for wireless communication is provided, the method is applied to a second device, and the method comprises: determining a first sequence according to a first key; and decrypting and / or descrambling a first signal of a physical layer according to the first sequence.

[0007] In a third aspect, a method for wireless communication is provided, which comprises: sending configuration information of a reference signal, the configuration information of the reference signal containing a first parameter, the first parameter being used to generate a first sequence, and the first sequence being used to encrypt and / or scramble the reference signal.

[0008] In a fourth aspect, a communication device is provided, which is a first device, and the first device comprises: a determining module configured to determine a first sequence according to a first key; and a processing module configured to encrypt and / or scramble a first signal of a physical layer according to the first sequence.

[0009] In a fifth aspect, a communication device is provided, which is a second device, and the second device comprises: a determining module configured to determine a first sequence according to a first key; and a processing module configured to decrypt and / or descramble a first signal of a physical layer according to the first sequence.

[0010] In a sixth aspect, a communication device is provided, comprising a communication module configured to send configuration information of a reference signal, the configuration information of the reference signal comprising a first parameter, the first parameter being used to generate a first sequence, the first sequence being used to encrypt and / or scramble the reference signal.

[0011] In a seventh aspect, a communication device is provided, comprising a transceiver, a memory and a processor, the memory being configured to store a program, the processor being configured to invoke the program in the memory and control the transceiver to receive or send a signal, so that the communication device performs the method according to any one of the first aspect to the third aspect.

[0012] In an eighth aspect, an apparatus is provided, comprising a processor configured to invoke a program from a memory, so that the apparatus performs the method according to any one of the first aspect to the third aspect.

[0013] In a ninth aspect, a chip is provided, comprising a processor configured to invoke a program from a memory, so that a device installed with the chip performs the method according to any one of the first aspect to the third aspect.

[0014] In a tenth aspect, a computer readable storage medium is provided, having a program stored thereon, the program causing a computer to perform the method according to any one of the first aspect to the third aspect.

[0015] In an eleventh aspect, a computer program product is provided, comprising a program, the program causing a computer to perform the method according to any one of the first aspect to the third aspect.

[0016] In a twelfth aspect, a computer program is provided, the computer program causing a computer to perform the method according to any one of the first aspect to the third aspect.

[0017] The embodiments of the present application encrypt and / or scramble the physical layer signal based on the first key, thereby improving the security of the physical layer signal in the transmission process. BRIEF DESCRIPTION OF DRAWINGS

[0018] FIG. 1 is an example of a system architecture of a wireless communication system to which the embodiments of the present application can be applied.

[0019] FIG. 2 is an example of a scrambling process.

[0020] FIG. 3 is an example of a data processing process of a physical layer.

[0021] FIG. 4 is an example of an encryption method based on a key stream.

[0022] FIG. 5 is a flowchart of a method for wireless communication provided by an embodiment of the present application.

[0023] FIG. 6 is a schematic diagram of a key stream based encryption method according to an embodiment of the present application.

[0024] FIG. 7 is a flow diagram of a method for wireless communication according to another embodiment of the present application.

[0025] FIG. 8 is a flow diagram of a method for wireless communication according to yet another embodiment of the present application.

[0026] FIG. 9 is a flow diagram of a method for wireless communication according to yet another embodiment of the present application.

[0027] FIG. 10 is a flow diagram of a method for wireless communication according to yet another embodiment of the present application.

[0028] FIG. 11 is a flow diagram of a method for wireless communication according to yet another embodiment of the present application.

[0029] FIG. 12 is a flow diagram of a method for wireless communication according to yet another embodiment of the present application.

[0030] FIG. 13 is a schematic diagram of a structure of a communication device according to an embodiment of the present application.

[0031] FIG. 14 is a schematic diagram of a structure of a communication device according to another embodiment of the present application.

[0032] FIG. 15 is a schematic diagram of a structure of a communication device according to yet another embodiment of the present application.

[0033] FIG. 16 is a schematic diagram of an apparatus to which embodiments of the present application can be applied. DETAILED DESCRIPTION

[0034] The technical solutions in the present application will be described below with reference to the accompanying drawings.

[0035] Communication system

[0036] FIG. 1 is an example of a system architecture of a wireless communication system 100 to which embodiments of the present application can be applied. The wireless communication system 100 can include a network device 110 and a terminal device 120. The network device 110 can be a device that communicates with the terminal device 120. The network device 110 can provide network coverage for a specific geographic area and can communicate with the terminal device 120 located within the coverage area. The terminal device 120 can access a network (such as a wireless network) through the network device 110. Optionally, the wireless communication system 100 can also include a network controller, a mobile management entity, and other network entities, which are not limited by embodiments of the present application.

[0037] It should be understood that the technical solutions of the embodiments of the present application can be applied to various communication systems, for example: 5G system or new radio (NR), long term evolution (LTE) system, LTE frequency division duplex (FDD) system, LTE time division duplex (TDD), etc. The technical solutions provided in the present application can also be applied to future communication systems, such as the sixth generation mobile communication system, and satellite communication systems, etc.

[0038] The terminal device in the embodiments of the present application can also be referred to as user equipment (UE), access terminal, user unit, user station, mobile station, mobile station (MS), mobile terminal (MT), remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user apparatus. The terminal device in the embodiments of the present application can refer to a device that provides voice and / or data connectivity for a user, and can be used to connect people, things and machines, such as handheld devices with wireless connection function, vehicle-mounted devices, etc. The terminal device in the embodiments of the present application can be a mobile phone, a tablet computer (Pad), a notebook computer, a palm computer, a mobile internet device (MID), a wearable device, a virtual reality (VR) device, an augmented reality (AR) device, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical surgery, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, etc. Optionally, the terminal device can be used to act as a base station. For example, the terminal device can act as a scheduling entity, which provides sidelink signals between terminal devices in vehicle to everything (V2X) or device to device (D2D), etc. For example, a cellular phone and a car communicate with each other using sidelink signals. The cellular phone and the smart home device communicate with each other without relaying the communication signals through the base station.

[0039] The network device in the embodiments of the present application can be a device for communicating with a terminal device. The network device can be, for example, an access network device or a radio access network device. For example, the network device can be a base station. The base station can broadly cover various names in the following or replace the names in the following: Node B (Node B), evolved Node B (eNB), next generation Node B (gNB), relay station, access point, transmitting and receiving point (TRP), transmitting point (TP), home base station, network controller, access node, wireless node, access point (AP), transmission node, transceiver node, baseband unit (BBU), remote radio unit (RRU), active antenna unit (AAU), remote radio head (RRH), central unit (CU), distributed unit (DU), positioning node, etc. The base station can be a macro base station, a micro base station, a relay node, a donor node or the like, or a combination thereof.

[0040] Scrambling and descrambling of physical layer

[0041] In some communication systems, such as 5G communication systems, channel encoded data and signaling bits can be scrambled by a pseudo-random sequence, and correspondingly, the same scrambling sequence can be used for descrambling at the receiving end. Generally, the pseudo-random sequence used for scrambling is different and unique for each channel and each cell. Different radio network temporary identities (RNTIs) can be used by the terminal device to decode the channel information. The RNTI mentioned here can be a fixed-length identifier, and in the 5G communication system, different wireless channels and different terminal devices can be distinguished using RNTI.

[0042] One purpose of scrambling data and signaling is to reduce interference between adjacent cells. In implementation, a cell-specific scrambling sequence is used for scrambling at the transmitting end, and the scrambling sequence is used for descrambling at the receiving end. Therefore, only the terminal device in the cell can form the cell-specific scrambling sequence according to the cell identity (cell ID) of the cell, so as to descramble the information received in the cell. The cell identity mentioned here can be a 12-bit identifier, which can be used to identify the signal coverage area in the 5G communication system. Another purpose of scrambling data and signaling is to randomize the interference signal. Specifically, when designing a digital communication system, it is usually assumed that the source sequence is a random sequence. However, the actual sequence sent by the source may not meet this condition. When the sequence sent by the source has a long 0 string (including a plurality of consecutive 0s), the receiving end will have difficulty in extracting the signal. This is because the receiving end needs to receive the signal based on the synchronization signal, and the synchronization signal is extracted from the alternating time of "0" and "1" in the received digital signal. If a plurality of consecutive 0s or a plurality of consecutive 1s often appear in the sequence, the alternating time of "0" and "1" will not appear for a long time, thereby affecting the extraction and maintenance of the synchronization signal. Therefore, the source sequence needs to be scrambled to randomize it. The scrambling code used for scrambling can reduce the number of consecutive "0"s or consecutive "1"s to ensure that the receiver can extract the synchronization signal.

[0043] In the scrambling process, the following formula can be used for scrambling:

[0044] where b is the transmitted signal, c is the scrambling sequence, and c is a pseudo-random sequence generated by c init The specific scrambling process can be seen in FIG. 2.

[0045] Different types of channels can have different initial value determination methods, which can be seen in the following table:

[0046] The descrambling method is, for example, to change the sign of the soft bits after demodulation to obtain the descrambling result.

[0047] The following formula can be used for demodulation: y = LLR (1-2c)

[0048] where y represents the descrambling result. c represents the scrambling sequence (which is the same as the scrambling sequence used at the transmitting end), and LLR is the soft bit information after demodulation. The purpose of 1-2c is to change the sign of LLR.

[0049] For the convenience of understanding, the position of the scrambling operation in the physical layer processing process is illustrated in more detail below by taking the processing process of the uplink shared channel (UL-SCH) as an example in combination with FIG. 3.

[0050] As shown in FIG. 3, the data needs to go through some processing before being "loaded" to the PUSCH for transmission. According to the description in 3rd generation partnership project technical specification (3GPP TS) 38.211 and TS 38.212, the UL-SCH processing process at the terminal device can include 14 steps: 1, adding cyclic redundancy check (CRC) to the transport block; 2, LDPC base graph selection; 3, code block segmentation and adding CRC to the code block; 4, channel coding; 5, rate matching; 6, code block concatenation; 7, data and control multiplexing; 8, scrambling; 9, modulation; 10, layer mapping; 11, transform precoding; 12, precoding; 13, mapping to virtual resource block (VRB); and 14, VRB mapping to physical resource block (PRB). Among the above steps, steps 1-7 can be referred to the chapter 6.2 of 3GPP TS 38.212; and steps 8-14 can be referred to the chapter 6.3.1 of 3GPP TS 38.211.

[0051] Physical layer security threat

[0052] Although the communication system provided by the related art has a relatively complete security protection mechanism, such as encryption and integrity protection mechanism, etc., the security protection strategy is usually deployed at the PDCP layer (above the media access control (MAC) layer and the physical (PHY) layer). Therefore, the security protection capability of the underlying layer (including the MAC layer and the PHY layer) needs to be enhanced, especially for many messages or signaling of layer 1 (L1) / layer 2 (L2) transmission, which are currently in an unprotected state. Taking L1 as an example, PDCCH, PUCCH, physical random access channel (PRACH), sounding reference signal (SRS), SSB / channel state information reference signal (CSI-RS), etc. are currently in an unprotected state. Therefore, for L1 messages, there may be many possible security attack scenarios.

[0053] Key stream generation and stream encryption algorithm

[0054] The related art provides a key stream generation and stream encryption algorithm, which can be referred to 3GPP TS 33501D.2.1. The input parameters of the algorithm are a 128-bit key, a 32-bit counter (COUNT), a 5-bit bearer identifier, a 1-bit direction parameter (DIRECTION, indicating the transmission direction), and the length of the required key stream (LENGTH). For the uplink direction, the value of DIRECTION is 0; for the downlink direction, the value of DIRECTION is 1.

[0055] Referring to FIG. 4, the same parameters can be used by the transceiver to obtain the same key stream block (KEYSTREAM BLOCK). In the communication process, COUNT needs to be transmitted to the opposite end, and DIRECTION and LENGTH are configured by the transceiver without the need for transmission.

[0056] At the sending end, a key stream is generated based on the aforementioned input parameters using an encryption algorithm, non-access stratum (NAS) encryption algorithm (NEA), and then the plaintext and the key stream are used for bit-by-bit binary addition to encrypt the plaintext using the key stream. At the receiving end, the same key stream can be generated using the same input parameters and encryption algorithm; then, bit-by-bit binary addition can be applied to the received ciphertext to recover the plaintext. The NEA algorithm can be a 128-bit advanced encryption standard (AES) algorithm, a 128-bit SNOW 3G algorithm, or a 128-bit ZUC algorithm.

[0057] According to the foregoing description, it can be known that the security protection strategy of the current communication system is usually located at the PDCP and the upper layer of the PDCP, and the PHY / MAC air interface control signaling lacks security protection, and there are various possible security attack scenarios. The related art uses a key at a high layer for encryption and integrity protection, but the key at the high layer cannot be directly used for encryption and integrity protection at the physical layer. Although physical layer scrambling can play a certain security role (some reference signals are not scrambled), the scrambling generation mode and the initial value are public information in the 3GPP protocol, and once the information such as RNTI or cell identifier is obtained by a malicious listener, there is a threat that the physical layer signal is monitored and cracked.

[0058] Since the perception data is usually from the physical layer, the above-mentioned physical layer security problem is particularly prominent in the perception scenario. For example, an eavesdropper can easily obtain channel state information (CSI) and other information to infer the perception data, thereby causing a security hazard. In addition, in the related art, scrambling is mostly performed on the physical channel, and some reference signals (such as positioning reference signals (PRS)) are not even scrambled.

[0059] To solve the above-mentioned problem, the embodiment of the present application encrypts and / or scrambles a first signal of the physical layer according to a first key at the sending end. Correspondingly, the first signal is decrypted and / or descrambled according to the first key at the receiving end. Encrypting and / or scrambling the signal of the physical layer using the first key can improve the security of the physical layer.

[0060] The embodiments of the present application are described in detail below.

[0061] FIG. 5 is a flow diagram of a method for wireless communication, according to an embodiment of the present application. The method of FIG. 5 can be performed by a first device and a second device. The first device is a transmitting device of a first signal. Correspondingly, the second device is a receiving device of the first signal. In other words, the first signal is transmitted and / or received at a physical layer of the first device and the second device. In some implementations, the first device is a terminal device, and the second device is a network device (e.g., an access network device). In some other implementations, the first device is a network device (e.g., an access network device), and the second device is a terminal device.

[0062] The first signal mentioned above can be a physical layer signal, i.e., a signal transmitted at a physical layer of the first device and the second device. The first signal can be a sequence-form signal, and correspondingly, the first signal can also be referred to as a physical layer sequence.

[0063] In some implementations, the first signal is a signal for sensing. For example, the first signal can be a reference signal for sensing. Alternatively, the first signal can also be another type of signal for sensing.

[0064] In some implementations, the first signal can include a data signal and / or a channel (a physical layer channel, which can be a physical layer data channel or a physical layer control channel). For example, the first signal can include one or more of the following: a PDSCH, a PUSCH, a PDCCH, or a PUCCH.

[0065] In some implementations, the first signal can be a reference signal. The reference signal mentioned here can be a common reference signal or a reference signal for sensing. For example, the first signal can include a PRS and / or a CSI-RS. Of course, the first signal can also be another type of reference signal, such as a new reference signal defined in a future standard.

[0066] At step S510a, the first device determines (or generates) a first sequence according to a first key. Similarly, at step S510b, the second device determines (or generates) a first sequence according to the first key. It should be understood that step S510a and step S510b do not have a fixed time sequence relationship, and step S510a and step S510b can be executed in sequence (step S510a can be executed first, or step S510b can be executed first), or can be executed simultaneously.

[0067] The first key mentioned in step S510a (or step S510b) can be a shared key between the first device and the second device. The first key can be a shared key at a physical layer of the first device and the second device (K PHY can be used).

[0068] The determination manner of the first key is not limited in the embodiments of the present application. In some implementations, the first key can be determined based on a key in an authentication and key agreement (AKA) key architecture. For example, the first key can be determined based on an access stratum (AS) key in the AKA key architecture. Exemplarily, the first key can be a certain AS key in the AKA key architecture; or the first key can be a derived key of a certain AS key in the AKA key architecture. The AS key mentioned herein can include one or more of the following keys: K gNB , K NG-RAN , K Upint , K UPenc , K RRCint , K RRCenc .

[0069] In some other implementations, the first key can be determined based on a physical layer key (a physical layer key between the terminal device and the access network device). The physical layer key can vary with time and / or space of a wireless channel. The physical layer key can be generated based on a characteristic (such as reciprocity and / or pseudo-randomness) of the wireless channel. Exemplarily, the physical layer key can be generated or determined in a random access (RA) procedure.

[0070] It is mentioned above that the first key can be used to determine (or generate) a first sequence. The first sequence can be referred to as a scrambling sequence and / or an encryption sequence. That is, the first sequence can implement a scrambling function, can implement an encryption function, or can implement both the encryption and scrambling functions. The first sequence can be a common sequence (such as a pseudo-random sequence, a gold sequence), or can be a key stream used for encryption.

[0071] The determination manner of the first sequence is described in detail below.

[0072] In some implementations, the first sequence can be determined (or generated) based on one or more of the following: an RNTI, a scrambling identifier, a time domain parameter, a frequency domain parameter, a first counter, or a second sequence.

[0073] For example, the first sequence can be determined based on an RNTI. The RNTI can be a Cell-RNTI (C-RNTI), or can be another type of RNTI. In some implementations, the first sequence can be determined based on a parameter 1, and the parameter 1 can be determined based on the RNTI. The parameter 1 can be, for example, n RNTI .

[0074] For example, the first sequence can be determined based on a scrambling identity (n ID ). The scrambling identity can be determined based on a Data-scrambling-Identity and / or a cell identity. The Data-scrambling-Identity can be a high layer configured parameter. The cell identity can be denoted as . For example, if a high layer configures a parameter Data-scrambling-Identity, the scrambling identity can be the Data-scrambling-Identity; if a high layer does not configure a parameter Data-scrambling-Identity, the scrambling identity can be

[0075] For example, the first sequence can be determined based on a cell identity. The cell identity can be denoted as . For example, the first sequence can be determined directly based on the cell identity, or the first sequence can be determined based on another parameter (e.g., the scrambling identity mentioned above) which is determined based on the cell identity.

[0076] For example, the first sequence can be determined based on a time domain parameter. The time domain parameter mentioned herein can include one or more of the following: a frame related parameter, a subframe related parameter, a slot related parameter. The frame related parameter can be a frame number or a frame offset value, e.g., SFN0_Offset. The slot related parameter can include one or more of the following: a slot number, a slot offset value (slot_Offset), a resource set slot offset (ResourceSetSlotOffset), and a resource slot offset (ResourceSlotOffset).

[0077] For example, the first sequence can be determined based on a frequency domain parameter. The frequency domain parameter can be a resource block (RB) related parameter. For example, the resource block related parameter can be a parameter indicating a starting RB in the frequency domain (e.g., an index of the starting RB, denoted as StartRB).

[0078] For example, the first sequence can be determined based on a first counter (COUNT). For example, if the first sequence is a first keystream, the first sequence can be determined based on the first counter. For how to determine the first sequence based on the first counter, please refer to the description below (see the second way below).

[0079] For example, the first sequence can be determined based on a second sequence. The second sequence can be determined based on the first key. The second sequence can be referred to as a seed sequence or an initial sequence, for example. In some implementations, the second sequence can take the form of c init Further, in some implementations, the second sequence can be determined based on one or more of the following parameters in addition to the first key: RNTI, scrambling identity, time domain parameter, frequency domain parameter.

[0080] For the purpose of understanding, three possible ways of determining the first sequence are given below.

[0081] Way one:

[0082] The first sequence is determined based on the first key and a first algorithm. The first algorithm can be a hash algorithm, such as a secure hash algorithm (SHA). The SHA can be SHA-1 or SHA-256, for example. For example, the first key can be input into the first algorithm to generate or determine the first sequence.

[0083] Further, in some implementations, one or more of the following parameters can be input into the first algorithm to generate or determine the first sequence: RNTI, scrambling identity, time domain parameter, frequency domain parameter, etc. As an example, the first sequence can be calculated using the following formula: seq_scrambling = H KPHY (SFN0_Offset, sf, startRB, n RNTI , n ID ), where seq_scrambling represents the first key, sf represents a subframe related parameter, and the rest of the parameters are described throughout. Alternatively, the above formula can also be expressed in the following form: seq_scrambling = Hash (KPHY, SFN0_Offset, slot_Offset, startRB, nRNTI, nID). H or Hash in the above two formulas represents a hash function.

[0084] Way two:

[0085] The first sequence is a first key stream, and the first key stream is determined based on the first key and a second algorithm. The second algorithm mentioned here can be NEA. Exemplarily, the second algorithm is an AES algorithm (such as a 128-bit AES algorithm), a SNOW 3G algorithm (such as a 128-bit SNOW 3G algorithm), or a ZUC algorithm (such as a 128-bit ZUC algorithm). For example, the first key can be input into the second algorithm to generate or determine the first key stream.

[0086] In addition to the first key, in some implementations, one or more of the following parameters can be input into the second algorithm to determine or generate the first keystream: the first key, the first counter, the length (the length of the first keystream), the direction. The direction parameter mentioned herein can indicate an uplink direction or a downlink direction, if the direction parameter indicates the uplink direction, the value of the direction parameter is a first value (such as 0); if the direction parameter indicates the downlink direction, the value of the direction parameter is a second value (such as 1).

[0087] In addition to one or more of the first key, the first counter, the length, the direction, etc., in some implementations, one or more of the aforementioned RNTI, scrambling code identifier, time domain parameter, frequency domain parameter, etc. can also be input into the second algorithm to determine or generate the first keystream.

[0088] Alternatively, in some implementations, a second key can be derived based on the first key first. Then, the first keystream can be determined or generated based on the second key and the second algorithm. For example, the second key can be input into the second algorithm to determine or generate the first keystream. In addition to the second key, in some implementations, the first keystream can also be determined or generated based on one or more of the following parameters: the first counter, the length (the length of the first keystream), the direction (the meaning of the direction parameter is described above). For example, the second key, and one or more of the first counter, the length, the direction, etc. can be input into the second algorithm to determine or generate the first keystream.

[0089] It should be noted that the present application does not make specific limitations on the manner of deriving the second key based on the first key. For example, a third algorithm can be used for derivation. The third algorithm can be a certain type of key derivation function (KDF). Illustratively, one or more of the first key and the aforementioned time domain parameter, frequency domain parameter, RNTI, scrambling code identifier, etc. can be input into the third algorithm to determine or generate the second key.

[0090] As mentioned above, the first keystream can be determined based on the first counter. That is, in the process of determining the first keystream, the length of the first keystream can be changed by changing the value of the first counter. For example, when the length of the generated keystream does not reach the expected length (the expected length can be determined based on the length of the first signal), the count value of the first counter can be incremented by 1, so that a set of keystreams is output again. When the first counter reaches a first value (such as the maximum value of the first counter), the first key can be updated.

[0091] There can be various ways to update the first key. In some implementations, the first key can be updated by a certain message. For example, the updated first key can be transmitted by the message. The message can be an RRC message (e.g., an RRC reconfiguration message). Or, the message can be a media access control control element (MAC CE).

[0092] Or, in some other implementations, if the first key is generated based on one or more parameters, the first key can be updated by adjusting the value of the parameter(s). For example, assume that the first key is generated based on a time domain parameter (e.g., a parameter related to a frame, a subframe, or a time slot). The first key can be updated by updating the time domain parameter.

[0093] Option 3:

[0094] The first sequence can be generated based on a second sequence. The second sequence can be represented as c init . The second sequence can be generated based on the aforementioned first key. As an example, n RNTI can be encrypted (e.g., inputting the first key and n RNTI to a hash function or other type of encryption function) to obtain n RNTI '. Then, the second sequence c init can be calculated as follows: c init = n RNTI '·2 15 + n ID . Next, the first sequence can be calculated based on the second sequence in a manner provided by the related art, which can be found in the description related to FIG. 2.

[0095] As another example, n ID can be encrypted (e.g., inputting the first key and n ID to a hash function or other type of encryption function) to obtain n ID '. Then, the second sequence c init can be calculated as follows: c init = n RNTI ·2 15 + n ID '. Next, the first sequence can be calculated based on the second sequence in a manner provided by the related art, which can be found in the description related to FIG. 2.

[0096] For ease of understanding, the determination or generation of the first key stream is explained in more detail below in connection with FIG. 6.

[0097] In the example of FIG. 6, the first key, the counter (which can be a 32-bit counter), and the NEA algorithm can be used to generate the keystream at both the transmitting end and the receiving end. The NEA can be a 128-bit AES algorithm, a 128-bit SNOW 3G algorithm, or a 128-bit ZUC algorithm.

[0098] First, when the counter value is 0, the first key and the counter (with a value of 0) are input into the NEA algorithm, and a set of encrypted bitstreams is output.

[0099] Note that the first key input into the NEA can also be replaced by a derived key of the first key, for example, a derived key is generated using the first key, the system frame number, the subframe and the start RB index, n RNTI , n ID , and other parameters as inputs of the KDF function, which ensures that different parameters (such as SFN, sf, RB, n RNTI , n ID ) generate different encryption sequences.

[0100] In another embodiment, in addition to the aforementioned shared key, counter value, and length, the following parameters can be further added as inputs of the NEA: KPHY, SFN0_Offset, slot_Offset, startRB, nRNTI, nID, and the like, to ensure that the different parameters described above can generate different encryption sequences.

[0101] Second, if the length of the generated bitstream is not enough, the counter is incremented by 1. Then, the first key and the counter are input into the NEA module, and a set of encrypted bitstreams is output again. The number of sets of encrypted bitstreams output by the NEA can be determined according to the length of the first signal to be encrypted.

[0102] Then, when the counter reaches the maximum value, the first key can be updated and the counter can be reset to 0, to ensure that the encrypted bitstream output each time is different. The first key can be updated in multiple ways. For example, in one embodiment, if the first key is generated based on the AKA key architecture from the AS key, the updated first key can be transmitted through RRC reconfiguration or MAC CE. In another embodiment, if the first key is generated based on time domain parameters, the first key can be updated by updating the time domain parameters.

[0103] Referring back to FIG. 5, at step S520a, the first device encrypts and / or scrambles the first signal according to the first sequence.

[0104] In some implementations, the sum of the first signal and the first sequence modulo 2 can be the encrypted and / or scrambled first signal. For example, the encrypted and / or scrambled first signal can be determined using the following equation: wherein, represents the encrypted and / or scrambled first signal, b represents the unencrypted and / or unscrambled first signal, and c represents the first sequence.

[0105] In the above-mentioned implementation of determining the second sequence based on the first sequence, the sum of the first signal and the second sequence modulo 2 can be the encrypted and / or scrambled first signal. For example, the encrypted and / or scrambled first signal can be determined using the following equation: wherein, represents the encrypted and / or scrambled first signal, b represents the unencrypted and / or unscrambled first signal, and c represents the second sequence.

[0106] In the above-mentioned implementation based on the first key stream, the first signal can be subjected to bitwise binary addition based on the first key stream, thereby generating the encrypted first signal.

[0107] After obtaining the encrypted and / or scrambled first signal, the first device can transmit the encrypted and / or scrambled first signal to the second device. For example, the first device can perform modulation and / or mapping, etc. on the encrypted and / or scrambled first signal, and transmit the first signal to the second device through an antenna port.

[0108] Correspondingly, referring to step S520b, after receiving the first signal (the second device can receive the first signal by performing demapping and / or demodulation, etc.), the second device can decrypt and / or descramble the first signal according to the first sequence to recover the original bits.

[0109] Embodiments of the present application extend encryption to the physical layer, which can solve the deception and eavesdropping of attackers on underlying information. For example, in a sensing scenario, embodiments of the present application can encrypt the signal (such as a reference signal) used for sensing, thereby avoiding eavesdropping of the sensing data by attackers.

[0110] It should be understood that in some implementations, the first sequence can be used to encrypt and scramble the first signal. That is, the first sequence can be understood not only as an encryption sequence, but also as a scrambling sequence. Alternatively, embodiments of the present application can change the generation method of the scrambling sequence, so that the scrambling sequence has an encryption function. For example, when generating the first sequence, in addition to taking the first key as an input parameter, the above-mentioned n RNTI , n IDThe first sequence is generated by using the first key, n, SFN0_Offset, slot_Offset, startRB, and the like as input parameters. By scrambling the first sequence, the interference signal can be randomized, thereby preventing inter-cell interference. In addition, by simultaneously encrypting and scrambling using the first sequence (or, in other words, by replacing the original scrambling sequence with the first sequence), the change to the standard can be reduced. For example, the first sequence can be generated by adjusting the scrambling module, without the need to add an additional encryption processing module, thereby well accommodating the existing protocol.

[0111] For ease of understanding, the processing of the first signal is described in more detail below in conjunction with FIGS. 7 and 8.

[0112] FIG. 7 is described from the perspective of the first device (the transmitting end).

[0113] Referring to FIG. 7, in step S710, the first sequence is generated by using the first key, n, SFN0_Offset, slot_Offset, startRB, and the like as input parameters. RNTI ID RNTI ID

[0118] In step S720, the first signal is encrypted by replacing the scrambling sequence with the first sequence at the original scrambling position.

[0119] In step S730, the encrypted first signal is modulated, mapped, and the like, and is transmitted through the antenna port.

[0120] FIG. 8 is described from the perspective of the second device (the receiving end).

[0121] Referring to FIG. 8, in step S810, the first sequence is generated by using the first key, n, SFN0_Offset, slot_Offset, startRB, and the like as input parameters. RNTI ID

[0122] In step S820, the received signal is demapped, demodulated, and the like, and the first signal is obtained.

[0123] In step S830, the first signal is decrypted using the first sequence to restore the original bits.

[0124] ​​The first signal can be a reference signal. That is, the first device can generate a first sequence based on the first key, and encrypt and / or scramble the reference signal based on the first sequence. Accordingly, the second device can generate the first sequence based on the first key, and decrypt and / or descramble the reference signal based on the first sequence. The reference signal can be a sensing-related reference signal, and the encryption and decryption of the sensing-related reference signal by the first sequence can improve the transmission security of the sensing data. In addition, since the first sequence can be generated in advance based on the shared key, the introduction of the encryption process will not have a large impact on the sensing performance (such as the latency performance).

[0121] To support the encryption and decryption and / or scrambling and descrambling of the reference signal, a first parameter can be added to the configuration information of the reference signal. The first parameter can be used to encrypt and decrypt the first signal, or the first parameter can be used to generate the first sequence mentioned above. For example, the first parameter can include one or more of the first key, the RNTI, the scrambling code identifier, the time domain parameter, or the frequency domain parameter mentioned above. The configuration information of the reference signal mentioned in the embodiments of the present application can also be referred to as the configuration data or the configuration parameter of the reference signal. Taking the sensing-related reference signal as an example, the configuration information of the reference signal can be included in the sensing assistance data to assist the receiving device to send or receive the sensing-related reference signal.

[0122] The configuration information of the reference signal is described below by taking the reference signal as PRS and CSI-RS, respectively.

[0123] Embodiment one: the reference signal is PRS

[0124] In some implementations, the reference signal is PRS (such as sensing-related PRS). In the related art, PRS does not use scrambling codes for scrambling operations. To support the encryption and decryption and / or scrambling and descrambling of PRS, the first parameter mentioned above can be added to the configuration information of PRS. For example, one or more of the first key, the RNTI, or the scrambling code identifier can be added to the configuration information of PRS.

[0125] The parameter structure of PRS includes a three-layer structure of a positioning frequency layer → a PRS resource set → a PRS resource. One positioning frequency layer can include one or more PRS resource sets. One PRS resource set can include one or more PRS resources. If a certain parameter is a parameter at the positioning frequency layer level (or the parameter corresponds to the positioning frequency layer), the action range of the parameter is all PRS resources included in the positioning frequency layer. If a certain parameter is a parameter at the PRS resource set level (or the parameter corresponds to the PRS resource set), the action range of the parameter is all PRS resources included in the PRS resource set. If a certain parameter is a parameter at the PRS resource level (or the parameter corresponds to the PRS resource), the action range of the parameter is the PRS resource. The parameter at the PRS resource level can indicate one or more of the following: the identification of the PRS resource, the parameters required for sequence generation and resource mapping, and the QCL information of the PRS resource. For detailed description of the parameter structure of PRS, refer to 3GPP TS 38.214.

[0126] The embodiments of the present application do not specifically limit the position of the first parameter in the parameter structure of PRS mentioned above. For example, the first parameter can correspond to the positioning frequency layer, that is, the first parameter can be a parameter at the positioning frequency layer level. For another example, the first parameter can correspond to the PRS resource set, that is, the first parameter can be a parameter at the PRS resource set level. For another example, the first parameter can correspond to the PRS resource, that is, the first parameter can be a parameter at the PRS resource level.

[0127] The sending device of the configuration information of PRS can be a third device, and the receiving device can be the first device. The third device mentioned here can be the first device mentioned above, or a network element in the core network. For example, the third device is a network element with sensing function (SF) in the core network. The configuration information of PRS can be sent by the sending device actively, or based on the request of the receiving device. For example, in the sensing scenario, the receiving device can request the sending device to send the configuration information of the reference signal for sensing, and after receiving the request, the sending device sends the configuration information of PRS to the receiving device, which can contain the first parameter mentioned above. Based on the first parameter, the PRS can be encrypted and / or scrambled, thereby ensuring the security of the sensing data.

[0128] Hereinafter, the transmission mode of PRS configuration information is exemplified by taking the PRS configuration information carried in the sensing assistance data, the sending device of the PRS configuration information being the SF in the core network, and the receiving device of the PRS configuration information being the UE or the gNB as examples.

[0129] FIG. 9 is an example diagram of a transmission manner of PRS configuration information according to an embodiment of the present application.

[0130] Referring to FIG. 9, in step S910, the UE sends a request to the SF. The request is used to request perception assistance data. The perception assistance data is used to assist the UE to receive a downlink PRS.

[0131] In step S920, the SF returns PRS perception assistance data to the UE. The perception assistance data contains configuration information of the PRS. The configuration information of the PRS contains a first parameter used to generate a first sequence. The first parameter can include one or more of the following parameters: n RNTI , n ID , K PHY , SFN0_Offset, Slot_Offset, startRB. The first three parameters are newly added parameters in the embodiments of the present application.

[0132] FIG. 10 is another example diagram of a transmission manner of PRS configuration information according to an embodiment of the present application.

[0133] Referring to FIG. 10, in step S1010, the gNB sends a request to the SF. The request is used to request perception assistance data.

[0134] In step S1020, the SF returns PRS perception assistance data to the gNB. The perception assistance data contains configuration information of the PRS. The configuration information of the PRS contains a first parameter used to generate a first sequence. The first parameter can include one or more of the following parameters: n RNTI , n ID , K PHY , SFN0_Offset, Slot_Offset, startRB. The first three parameters are newly added parameters in the embodiments of the present application.

[0135] Embodiment Two: Reference Signal is CSI-RS

[0136] In some implementations, the reference signal is a CSI-RS. In order to support encryption and / or decryption and / or descrambling of the CSI-RS, the first parameter mentioned above can be added to the configuration information of the CSI-RS. For example, a first key can be added to the configuration information of the CSI-RS.

[0137] The configuration information of the CSI-RS mentioned above may, for example, refer to a CSI resource configuration information element (CSI-ResourceConfig IE). The CSI-ResourceConfig IE can be transmitted through an RRC message. It should be noted that each CSI-ResourceConfig IE can contain or be associated with one or more CSI resource sets (CSI Resource Set). The one or more CSI Resource Set can be an NZP CSI-RS Resource Set, an SS / PBCH Block Set, a CSI-IM Resource Set. The above-mentioned resource sets include one or more resources, and each CSI resource set is located in a downlink bandwidth part (DL BWP) indicated by a high-layer parameter bwp-Id in the CSI-ResourceConfig IE.

[0138] It should be noted that the effect of the CSI-RS in the embodiments of the present application is not specifically limited. For example, the CSI-RS can be used for one or more of the following: time tracking, frequency tracking, CSI calculation, layer 1 reference signal received power (L1-RSRP) calculation, layer 1 signal to interference plus noise ratio (L1-SINR) calculation, location tracking of the terminal device in the mobility management process, tracking during fast secondary cell (Scell) activation. In some implementations, the CSI-RS can be used for sensing.

[0139] It should also be noted that the type of the CSI-RS in the embodiments of the present application is not specifically limited. For example, the CSI-RS can include a zero-power CSI-RS (ZP-CSI-RS) and / or a non-zero-power (NZP-CSI-RS).

[0140] The sending device of the configuration information of the CSI-RS can be a network device (such as an access network device), and the receiving device of the configuration information of the CSI-RS can be a terminal device. For example, the terminal device can request the network device for the configuration information of the CSI-RS, or the network device can also actively send the configuration information of the CSI-RS to the terminal device.

[0141] The transmission mode of the configuration information of the CSI-RS will be illustrated in more detail below in conjunction with FIGS. 11 and 12.

[0142] FIG. 11 is an example diagram of a transmission manner of CSI-RS configuration information according to an embodiment of the present application.

[0143] Referring to FIG. 11, in step S1110, the UE sends a request to the gNB. The request is used to request a CSI-ResourceConfig IE. The CSI-ResourceConfig IE can be used for the UE to receive a CSI-RS in the downlink.

[0144] In step S1120, the gNB returns the CSI-ResourceConfig IE to the UE through RRC signaling. The CSI-ResourceConfig IE contains configuration information of the CSI-RS, and the configuration information of the CSI-RS includes a first parameter. The first parameter is used to generate the aforementioned first sequence. The first parameter may, for example, include one or more of the following: n RNTI , n ID , K PHY . The parameter K PHY is a newly added parameter in the CSI-ResourceConfig IE.

[0145] FIG. 12 is an example diagram of a transmission manner of CSI-RS configuration information according to an embodiment of the present application.

[0146] Referring to FIG. 12, in step S1210, the gNB sends a CSI-ResourceConfig IE to the UE through RRC signaling. The CSI-ResourceConfig IE contains configuration information of the CSI-RS, and the configuration information of the CSI-RS includes a first parameter. The first parameter is used to generate the aforementioned first sequence. The first parameter may, for example, include one or more of the following: n RNTI , n ID , K PHY . The parameter K PHY is a newly added parameter in the CSI-ResourceConfig IE.

[0147] In step S1220, the UE sends a CSI-ResourceConfig IE response to the gNB. This step is an optional step. The response is used to indicate that the UE has received the CSI-ResourceConfig IE.

[0148] The method embodiments of the present application are described in detail above in combination with FIGS. 1 to 12, and the device embodiments of the present application are described in detail below in combination with FIGS. 13 to 15. It should be understood that the description of the method embodiments corresponds to the description of the device embodiments, and therefore, the parts not described in detail can be referred to the foregoing method embodiments.

[0149] FIG. 13 is a structure diagram of a communication device according to an embodiment of the present application. The communication device 1300 shown in FIG. 13 can be the first device mentioned above. The communication device 1300 can include a determining module 1310 and a processing module 1320. The determining module 1310 is configured to determine a first sequence according to a first key. The processing module 1320 is configured to encrypt and / or scramble a first signal of a physical layer according to the first sequence.

[0150] In some embodiments, the first key is a shared key between the first device and a second device, and the second device is a receiving device of the first signal.

[0151] In some embodiments, the first key is a shared key between the first device and the second device at a physical layer.

[0152] In some embodiments, the first key is determined based on an access layer key in an AKA key hierarchy, or the first key is determined based on a physical layer key.

[0153] In some embodiments, the physical layer key is determined in a random access procedure.

[0154] In some embodiments, the first sequence is further determined based on one or more of the following: an RNTI, a scrambling code identity, a cell identity, a time domain parameter, a frequency domain parameter, a first counter.

[0155] In some embodiments, the first sequence is determined based on a hash algorithm.

[0156] In some embodiments, the first sequence is a first keystream.

[0157] In some embodiments, the first keystream is determined based on an AES algorithm, a SNOW 3G algorithm, or a ZUC algorithm.

[0158] In some embodiments, the first keystream is determined based on a second key, and the second key is determined based on the first key.

[0159] In some embodiments, the second key is further determined based on one or more of the following: an RNTI, a scrambling code identity, a cell identity, a time domain parameter, a frequency domain parameter, a first counter, a key derivation function.

[0160] In some embodiments, the first keystream is determined based on a first counter, and the first key is updated when the first counter reaches a first value.

[0161] In some embodiments, the first key is updated based on one or more of the following: an RRC message, a MAC CE, a time domain parameter, when the first counter reaches a first value.

[0162] In some embodiments, the first sequence is determined based on a second sequence, and the second sequence is determined based on the first key.

[0163] In some embodiments, the second sequence is further determined based on one or more of the following: RNTI, scrambling identity, cell identity.

[0164] In some embodiments, the first signal comprises one or more of the following: data signal, channel, reference signal.

[0165] In some embodiments, the reference signal comprises PRS and / or CSI-RS.

[0166] In some embodiments, the configuration information of the reference signal comprises a first parameter, and the first parameter is used to generate the first sequence.

[0167] In some embodiments, the first parameter comprises one or more of the following: the first key, RNTI, scrambling identity, time domain parameter, frequency domain parameter.

[0168] In some embodiments, the reference signal is PRS, and the first parameter comprises one or more of the following: the first key, RNTI, scrambling identity.

[0169] In some embodiments, the reference signal is CSI-RS, and the first parameter comprises the first key.

[0170] In some embodiments, the reference signal is PRS, and the first parameter is a parameter at one of the following levels: positioning frequency layer, resource set, or resource.

[0171] In some embodiments, the first device further comprises a communication module configured to receive the configuration information sent by a third device, and the third device is a receiving device of the first signal or a network element with sensing function.

[0172] In some embodiments, the first signal is a signal for sensing.

[0173] In some embodiments, the first device is a terminal device, and the second device is a network device; or the first device is a network device, and the second device is a terminal device.

[0174] FIG. 14 is a schematic diagram of a structure of a communication device according to an embodiment of the present application. The communication device 1400 shown in FIG. 14 can be the second device mentioned above. The communication device 1400 can include a determining module 1410 and a processing module 1420. The determining module 1410 is configured to determine a first sequence according to a first key. The processing module 1420 is configured to decrypt and / or descramble a first signal of a physical layer according to the first sequence.

[0175] In some embodiments, the first key is a shared key between the first device and the second device, and the first device is a transmitting device of the first signal.

[0176] In some embodiments, the first key is a shared key between the first device and the second device at the physical layer.

[0177] In some embodiments, the first key is determined based on an access stratum key in an AKA key hierarchy, or the first key is determined based on a physical layer key.

[0178] In some embodiments, the physical layer key is determined in a random access procedure.

[0179] In some embodiments, the first sequence is further determined based on one or more of the following: an RNTI, a cell identity, a scrambling code identity, a time domain parameter, a frequency domain parameter, a first counter.

[0180] In some embodiments, the first sequence is determined based on a hash algorithm.

[0181] In some embodiments, the first sequence is a first keystream.

[0182] In some embodiments, the first keystream is determined based on an AES algorithm, a SNOW 3G algorithm, or a ZUC algorithm.

[0183] In some embodiments, the first keystream is determined based on a second key, and the second key is determined based on the first key.

[0184] In some embodiments, the second key is further determined based on one or more of the following: an RNTI, a cell identity, a scrambling code identity, a time domain parameter, a frequency domain parameter, a first counter, a key derivation function.

[0185] In some embodiments, the first keystream is determined based on a first counter, and the first key is updated when the first counter reaches a first value.

[0186] In some embodiments, the first key is updated based on one or more of the following: an RRC message, a MAC CE, a time domain parameter, when the first counter reaches a first value.

[0187] In some embodiments, the first sequence is determined based on a second sequence, and the second sequence is determined based on the first key.

[0188] In some embodiments, the second sequence is further determined based on one or more of the following: RNTI, scrambling identity, cell identity.

[0189] In some embodiments, the first signal comprises one or more of the following: data signal, channel, reference signal.

[0190] In some embodiments, the reference signal comprises PRS and / or CSI-RS.

[0191] In some embodiments, the configuration information of the reference signal comprises a first parameter, and the first parameter is used to generate the first sequence.

[0192] In some embodiments, the first parameter comprises one or more of the following: the first key, RNTI, scrambling identity, time domain parameter, frequency domain parameter.

[0193] In some embodiments, the reference signal is PRS, and the first parameter comprises one or more of the following: the first key, RNTI, scrambling identity.

[0194] In some embodiments, the reference signal is CSI-RS, and the first parameter comprises the first key.

[0195] In some embodiments, the reference signal is PRS, and the first parameter is a parameter at one of the following levels: positioning frequency layer, resource set, or resource.

[0196] In some embodiments, the communication device further comprises a communication module configured to receive the configuration information sent by a third device; wherein the third device is a sending device of the first signal or a network element with sensing function.

[0197] In some embodiments, the first signal is a signal for sensing.

[0198] In some embodiments, the first device is a terminal device, and the second device is a network device; or the first device is a network device, and the second device is a terminal device.

[0199] FIG. 15 is a schematic diagram of a communication device according to an embodiment of the present application. The communication device 1500 shown in FIG. 15 can be the third device mentioned above. The communication device 1500 includes a communication module 1510. The communication module 1510 is configured to transmit configuration information of a reference signal, the configuration information of the reference signal including a first parameter, the first parameter being used to generate a first sequence, the first sequence being used to encrypt and / or scramble the reference signal.

[0200] In some embodiments, the first parameter includes one or more of the following: a first key, an RNTI, a scrambling code identifier, a time domain parameter, and a frequency domain parameter.

[0201] In some embodiments, the reference signal is a PRS, and the first parameter includes one or more of the following: the first key, an RNTI, and a scrambling code identifier.

[0202] In some embodiments, the reference signal is a CSI-RS, and the first parameter includes the first key.

[0203] In some embodiments, the first key is a shared key between a first device and a second device, the first device and the second device being a transmitting device and a receiving device of the reference signal, respectively.

[0204] In some embodiments, the first key is a shared key between the first device and the second device at a physical layer.

[0205] In some embodiments, the reference signal is a PRS, and the first parameter is a parameter at one of the following levels: a positioning frequency layer, a resource set, and a resource.

[0206] In some embodiments, the reference signal is a reference signal for sensing.

[0207] In some embodiments, the method is applied to a network element with a sensing function.

[0208] FIG. 16 is a schematic diagram of a communication apparatus to which embodiments of the present application can be applied. Dotted lines in FIG. 16 represent that the units or modules are optional. The apparatus 1600 can be used to implement the method described in the above-mentioned method embodiments. The apparatus 1600 can be a chip, a terminal device, or a network device.

[0209] The apparatus 1600 can include one or more processors 1610. The processor 1610 can support the apparatus 1600 to implement the methods described in the foregoing method embodiments. The processor 1610 can be a general purpose processor or a dedicated processor. For example, the processor can be a central processing unit (CPU). Alternatively, the processor can also be other general purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic, discrete hardware components, etc. The general purpose processor can be a microprocessor or the processor can also be any conventional processor.

[0210] The apparatus 1600 can also include one or more memories 1620. The memory 1620 stores programs, which can be executed by the processor 1610, so that the processor 1610 performs the methods described in the foregoing method embodiments. The memory 1620 can be independent of the processor 1610 or integrated in the processor 1610.

[0211] The apparatus 1600 can also include a transceiver 1630. The processor 1610 can communicate with other devices or chips through the transceiver 1630. For example, the processor 1610 can perform data transceiving with other devices or chips through the transceiver 1630.

[0212] The embodiments of the present application also provide a computer readable storage medium for storing programs. The computer readable storage medium can be applied to the terminal device or the network device provided by the embodiments of the present application, and the programs make the computer execute the methods performed by the communication device in the embodiments of the present application.

[0213] The embodiments of the present application also provide a computer program product. The computer program product includes programs. The computer program product can be applied to the terminal device or the network device provided by the embodiments of the present application, and the programs make the computer execute the methods performed by the communication device in the embodiments of the present application.

[0214] The embodiments of the present application also provide a computer program. The computer program can be applied to the terminal device or the network device provided by the embodiments of the present application, and the computer program makes the computer execute the methods performed by the communication device in the embodiments of the present application.

[0215] It should be understood that the terms "system" and "network" can be used interchangeably in this application. In addition, the terms used in this application are only used to explain the specific embodiments of the application, and are not intended to limit the application. The terms "first", "second", "third", and "fourth" and the like in the specification and claims of the application and the drawings are used to distinguish different objects, and are not used to describe a particular order. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion.

[0216] In embodiments of the present application, the term "indicate" can be direct indication or indirect indication, or can represent an associated relationship. For example, A indicates B, which can mean that B can be obtained directly through A; or A indirectly indicates B, for example, A indicates C, and B can be obtained through C; or A and B have an associated relationship.

[0217] In embodiments of the present application, "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that determining B according to A does not mean that B is determined only according to A, but B can also be determined according to A and / or other information.

[0218] In embodiments of the present application, the term "corresponding" can represent a direct or indirect corresponding relationship between the two, or can represent an associated relationship between the two, or can represent an indication and being indicated, configuration and being configured, and the like.

[0219] In embodiments of the present application, "predefined" or "preconfigured" can be achieved by pre-saving corresponding codes, tables or other information that can be used to indicate related information in devices (such as terminal devices and network devices), and the specific implementation of the present application is not limited. For example, predefinition can refer to definition in a protocol.

[0220] In embodiments of the present application, the "protocol" can refer to a standard protocol in the communication field, which can include LTE protocol, NR protocol and related protocols applied to future communication systems, and the present application is not limited thereto.

[0221] In embodiments of the present application, the term "and / or" is only used to describe the association relationship between the associated objects, which means that there can be three relationships, for example, A and / or B, which can mean that A exists alone, A and B exist together, and B exists alone. In addition, the character " / " in this paper generally represents an "or" relationship between the front and rear associated objects.

[0222] In various embodiments of the present application, the size of the serial number of the above processes does not mean the order of execution, and the execution order of the processes should be determined by its function and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0223] In several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other manners. For example, the division of the above-described device embodiments is only a logical function division, and there can be another division manner for actual implementation, for example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections between different units, or between the different components, can be indirect couplings or communication connections through some interfaces, devices or units, and can be in electrical, mechanical or other forms.

[0224] The units described as separate components can or can not be physically separate, and the components shown as units can or can not be physical units, i.e., can be located in one place, or can be distributed on multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the embodiments.

[0225] In addition, each functional unit in the various embodiments of the present application can be integrated into a processing unit, or each unit can exist physically, or two or more units can be integrated into one unit.

[0226] In the above embodiments, all or part of the embodiments can be implemented by software, hardware, firmware or any combination thereof. When implemented by software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present application are generated. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions can be stored in a computer readable storage medium or transmitted from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center through wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.) mode. The computer readable storage medium can be any available medium that can be read by a computer or a data storage device such as a server, data center and the like integrated with one or more available media sets. The available media can be magnetic media (for example, floppy disk, hard disk, magnetic tape), optical media (for example, digital video disc (DVD)) or semiconductor media (for example, solid state disk (SSD)) and the like.

[0227] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical range disclosed in the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A method for wireless communication, comprising: The method is applied to a first device, and the method comprises: determining a first sequence according to a first key; encrypting and / or scrambling a first signal of a physical layer according to the first sequence.

2. The method of claim 1, wherein, The first key is a shared key between the first device and a second device, and the second device is a receiving device of the first signal.

3. The method of claim 1 or 2, wherein: The first key is determined based on an access layer key in an authentication and key agreement (AKA) key hierarchy; or The first key is determined based on a physical layer key.

4. The method of claim 3, wherein, The physical layer key is determined in a random access procedure.

5. The method according to any one of claims 1 to 4, characterized in that, The first sequence is further determined based on one or more of the following: a radio network temporary identifier (RNTI), a scrambling code identifier, a cell identifier, a time domain parameter, a frequency domain parameter, and a first counter.

6. The method according to claims 1 to 5, characterized in that, The first sequence is determined based on a hash algorithm.

7. The method according to any one of claims 1 to 5, characterized in that, The first sequence is a first keystream.

8. The method of claim 7, wherein, The first keystream is determined based on an advanced encryption standard (AES) algorithm, a SNOW 3G algorithm, or a ZUC algorithm.

9. The method according to claim 7 or 8, characterized in that, The first keystream is determined based on a second key, and the second key is determined based on the first key.

10. The method of claim 9, wherein, The second key is further determined based on one or more of the following: an RNTI, a scrambling code identifier, a cell identifier, a time domain parameter, a frequency domain parameter, and a first counter.

11. The method according to any one of claims 7 to 10, characterized in that, The first keystream is determined based on a first counter, and the first key is updated when the first counter reaches a first value.

12. The method of claim 11, wherein, The first key is updated based on one or more of the following when the first counter reaches the first value: a radio resource control (RRC) message, a medium access control (MAC) control element (CE), and a time domain parameter.

13. The method according to any one of claims 1 to 12, characterized in that, The first sequence is determined based on a second sequence, and the second sequence is determined based on the first key.

14. The method of claim 13, wherein, The second sequence is further determined based on one or more of the following: an RNTI, a scrambling code identifier, and a cell identifier.

15. The method according to any one of claims 1 to 14, characterized in that, The first signal comprises one or more of the following: a data signal, a channel, and a reference signal.

16. The method of claim 15, wherein, The reference signal comprises a positioning reference signal (PRS) and / or a channel state information reference signal (CSI-RS).

17. The method according to claim 15 or 16, characterized in that, Configuration information of the reference signal comprises a first parameter, and the first parameter is used to generate the first sequence.

18. The method of claim 17, wherein, The first parameter comprises one or more of the following: the first key, an RNTI, a scrambling code identifier, a time domain parameter, and a frequency domain parameter.

19. The method of claim 18, wherein, The reference signal is a PRS, and the first parameter comprises one or more of the following: the first key, an RNTI, and a scrambling code identifier.

20. The method of claim 18, wherein, The reference signal is a CSI-RS, and the first parameter comprises the first key.

21. The method of any one of claims 17-19, wherein, The reference signal is a PRS, and the first parameter is a parameter at one of the following levels: a positioning frequency layer, a resource set, or a resource.

22. The method of any one of claims 17-21, wherein, The method further comprises: receiving the configuration information sent by a third device; The third device is a device receiving the first signal or a network element with sensing capability.

23. The method of any one of claims 1 to 22, wherein, The first signal is a signal for sensing.

24. The method of any of claims 1 to 23, wherein: The first device is a terminal device, and the second device is a network device; or The first device is a network device, and the second device is a terminal device. The first device is a network device, and the second device is a terminal device.

25. A method for wireless communication, comprising: The method is applied to a second device, and the method comprises: determining a first sequence according to a first key; decrypting and / or descrambling a first signal of a physical layer according to the first sequence.

26. The method of claim 25, wherein, The first key is a shared key between a first device and the second device, and the first device is a sending device of the first signal.

27. The method of claim 25 or 26, wherein: The first key is determined based on an access stratum key in an authentication and key agreement (AKA) key hierarchy; or The first key is determined based on a physical layer key.

28. The method of claim 27, wherein, The physical layer key is determined in a random access procedure.

29. The method of any one of claims 25-28, wherein, The first sequence is further determined based on one or more of the following: a radio network temporary identifier (RNTI), a cell identity, a scrambling code identity, a time domain parameter, a frequency domain parameter, and a first counter.

30. The method of claims 25-29, wherein, The first sequence is determined based on a hash algorithm.

31. The method of any one of claims 25-29, wherein, The first sequence is a first keystream.

32. The method of claim 31, wherein, The first keystream is determined based on an advanced encryption standard (AES) algorithm, a SNOW 3G algorithm, or a ZUC algorithm.

33. The method of claim 21 or 32, wherein, The first keystream is determined based on a second key, which is determined based on the first key.

34. The method of claim 33, wherein, The second key is further determined based on one or more of the following: an RNTI, a cell identity, a scrambling code identity, a time domain parameter, a frequency domain parameter, a first counter, and a key derivation function.

35. The method of any one of claims 31-34, wherein, The first keystream is determined based on a first counter, and the first key is updated when the first counter reaches a first value.

36. The method of claim 35, wherein, The first key is updated based on one or more of the following when the first counter reaches the first value: a radio resource control (RRC) message, a medium access control (MAC) control element (CE), and a time domain parameter.

37. The method of any one of claims 25-36, wherein, The first sequence is determined based on a second sequence, which is determined based on the first key.

38. The method of claim 37, wherein, The second sequence is further determined based on one or more of the following: an RNTI, a scrambling code identity, and a cell identity.

39. The method of any one of claims 25-38, wherein, The first signal comprises one or more of the following: a data signal, a channel, and a reference signal.

40. The method of claim 39, wherein, The reference signal comprises a positioning reference signal (PRS) and / or a channel state information reference signal (CSI-RS).

41. The method of claim 39 or 40, wherein, Configuration information of the reference signal comprises a first parameter, which is used to generate the first sequence.

42. The method of claim 41, wherein, The first parameter comprises one or more of the following: the first key, an RNTI, a scrambling code identity, a time domain parameter, and a frequency domain parameter.

43. The method of claim 42, wherein, The reference signal is a PRS, and the first parameter comprises one or more of the following: the first key, an RNTI, and a scrambling code identity.

44. The method of claim 42, wherein, The reference signal is a CSI-RS, and the first parameter comprises the first key.

45. The method of any one of claims 41-43, wherein, The reference signal is a PRS, and the first parameter is a parameter at one of the following levels: a positioning frequency layer, a resource set, or a resource.

46. The method of any one of claims 41-45, wherein, The method further comprises: receiving the configuration information sent by a third device; The third device is a sending device of the first signal or a network element with sensing capability.

47. The method of any one of claims 25-46, wherein, The first signal is a signal for sensing.

48. The method of any of claims 25-47, wherein: The first device is a terminal device, and the second device is a network device; or The first device is a network device, and the second device is a terminal device.

49. A method for wireless communication, comprising: Comprising: Configuration information of a reference signal, the configuration information of the reference signal containing a first parameter, the first parameter being used to generate a first sequence, the first sequence being used to encrypt and / or scramble the reference signal.

50. The method of claim 49, wherein, The first parameter comprises one or more of the following: a first key, a radio network temporary identifier (RNTI), a scrambling code identifier, a time domain parameter, and a frequency domain parameter.

51. The method of claim 50, wherein, The reference signal is a positioning reference signal (PRS), and the first parameter comprises one or more of the following: the first key, the RNTI, and the scrambling code identifier.

52. The method of claim 50, wherein, The reference signal is a channel state information reference signal (CSI-RS), and the first parameter comprises the first key.

53. The method of any one of claims 50-52, wherein, The first key is a shared key between a first device and a second device, and the first device and the second device are a transmitting device and a receiving device of the reference signal, respectively.

54. The method of any one of claims 49-53, wherein, The reference signal is a PRS, and the first parameter is a parameter at a level of a positioning frequency layer, a resource set, or a resource.

55. The method of any one of claims 49-54, wherein, The reference signal is a reference signal for sensing.

56. The method of any one of claims 49-55, wherein, The method is applied to a network element with a sensing function.

57. A communications device, characterized by The communication device is a first device, and the first device comprises: A determining module configured to determine a first sequence according to a first key; A processing module configured to encrypt and / or scramble a first signal at a physical layer according to the first sequence.

58. A communications device, characterized by The communication device is a second device, and the second device comprises: A determining module configured to determine a first sequence according to a first key; A processing module configured to decrypt and / or descramble a first signal at a physical layer according to the first sequence.

59. A communications device, characterized by Comprising: A communication module configured to send configuration information of a reference signal, the configuration information of the reference signal containing a first parameter, the first parameter being used to generate a first sequence, the first sequence being used to encrypt and / or scramble the reference signal.

60. A communications device, characterized by Comprising a transceiver, a memory, and a processor, the memory being used to store a program, the processor being used to invoke the program in the memory and control the transceiver to receive or send a signal, so that the communication device executes the method in any one of claims 1 to 56.

61. An apparatus comprising: Comprising a processor used to invoke a program from a memory, so that the apparatus executes the method in any one of claims 1 to 56.

62. A chip, comprising: Comprising a processor used to invoke a program from a memory, so that the apparatus executes the method in any one of claims 1 to 56.

63. A computer-readable storage medium, characterized in that, Comprising a program used to make a computer execute the method in any one of claims 1 to 56.

64. A computer program product, characterized in that, Comprising a program used to make a computer execute the method in any one of claims 1 to 56.

65. A computer program characterised in that, The computer program is used to make a computer execute the method in any one of claims 1 to 56.

Images