Communication method, communication device, and communication apparatus

Abstract

Provided in the embodiments of the present application are a communication method, a communication device, and a communication apparatus. The present application supports IEEE protocols such as the IEEE 802.11be / Wi-Fi 7 / EHT protocol, the IEEE 802.11bn / UHR / Wi-Fi 8 protocol, the IMMW protocol, the IEEE 802.15 / UWB protocol and the IEEE 802.11bf / sensing protocol, or the SparkLink standard protocol. In the method, by means of negotiating a decoy key between a first node and a second node, an attacker can be misled in acquiring key negotiation information, thereby improving communication security, reducing the probability of compromising an actual key used for encrypted communication, and being conducive to addressing security threats in a quantum computing environment.

Description

A communication method, communication device, and communication apparatus Technical Field

[0001] This application relates to the field of communications, and more specifically, to a communication method, communication equipment, and communication apparatus. Background Technology

[0002] StarSpeed ​​wireless communication technology is a short-range wireless communication technology used for data exchange in applications such as smart cars, smart homes, smart terminals, and smart manufacturing. In current StarSpeed ​​wireless communication technology, the key negotiation process is typically used by the communicating parties to negotiate the key for subsequent communication.

[0003] However, with the rapid development of quantum computing, traditional encryption algorithms are no longer secure in the face of quantum computers, and communication security is gradually being challenged. Summary of the Invention

[0004] This application provides a communication method, communication device, and communication apparatus that can optimize the key negotiation process and improve communication security.

[0005] Firstly, a communication method is provided, which is applied to a first node. This method can be executed by the first node itself, or by components of the first node (such as chips, circuits, or chip systems). For ease of understanding, the following description assumes execution by the first node.

[0006] The method includes: sending a key negotiation message to a second node, the key negotiation message being used to determine a first key and a second key, the first key being used to encrypt communication between the first node and the second node, the second key being a decoy key; and communicating with the second node based on the first key.

[0007] Specifically, the first node and the second node can negotiate a first key for encrypting their communication and a decoy key for inducing the monitoring device through a key negotiation message. The decoy key is not used to encrypt the communication between the first node and the second node. The decoy key can be used to induce an attacker.

[0008] Since attackers typically monitor key negotiation messages during the key negotiation phase, and may even obtain key negotiation messages through quantum computers and deduce the real key used for encrypted communication, the messages of the first and second nodes negotiating the inducement key can mislead attackers into believing that they have obtained messages used to negotiate the real key.

[0009] Based on the solution provided in the embodiments of this application, by sending a key negotiation message to the second node to determine the first key and the second key, the security of communication can be improved, the probability of the real key used for encrypted communication being cracked can be reduced, and security threats in a quantum computing environment can be addressed.

[0010] In conjunction with the first aspect, in some possible implementations of the first aspect, the communication with the second node based on the first key includes: receiving a plurality of first signals from the second node, and / or sending a plurality of second signals to the second node, wherein the first signal or the second signal is encrypted based on the first key, the frequency point of the subcarrier carrying the first signal is the first frequency point, and / or the frequency point of the subcarrier carrying the second signal is the second frequency point.

[0011] Specifically, the first frequency point or the second frequency point can also be called a single frequency point. After the first node and the second node determine the first key, they can conduct communication based on encryption of the first key on the single frequency point.

[0012] For example, multiple first signals or multiple second signals can be signals carrying data transmitted between the first node and the second node during communication based on the first key.

[0013] The first frequency and the second frequency can be the same or different. Different first and second frequency frequencies can further improve communication security.

[0014] Based on the solution provided in the embodiments of this application, by communicating after key negotiation on a single frequency point, the utilization of communication resources can be optimized, the implementation complexity of the communication system can be reduced, the communication efficiency in the non-key negotiation stage can be improved, and the complex frequency switching and synchronization mechanism brought about by frequency hopping communication in the non-key negotiation stage can be optimized.

[0015] Secondly, a communication method is provided, which is applied to a second node. This method can be executed by the second node itself, or by its constituent components (e.g., chips, circuits, or chip systems). For ease of understanding, the following description uses execution by the second node as an example.

[0016] The method includes: receiving a key negotiation message from a first node, the key negotiation message being used to determine a first key and a second key, the first key being used to encrypt communication between the first node and the second node, the second key being a decoy key; and communicating with the first node based on the first key.

[0017] In conjunction with the second aspect, in some possible implementations of the second aspect, the communication with the first node based on the first key includes: sending a plurality of first signals to the first node, and / or receiving a plurality of second signals from the first node, wherein the first signal or the second signal is encrypted based on the first key, the frequency point of the subcarrier carrying the first signal is the first frequency point, and / or the frequency point of the subcarrier carrying the second signal is the second frequency point.

[0018] The specific implementation of the second aspect or its beneficial effects can be found in the relevant description in the first aspect above. For the sake of brevity, it will not be elaborated here.

[0019] Thirdly, a communication method is provided, which is applied to a first node. This method can be executed by the first node itself, or by its constituent components (e.g., chips, circuits, or chip systems). For ease of understanding, the following description uses execution by the first node as an example.

[0020] The method includes: sending a key negotiation message to a second node, the key negotiation message being used to determine a first key, the first key being used to encrypt communication between the first node and the second node; receiving a plurality of first signals from the second node, and / or sending a plurality of second signals to the second node, the first signals or the second signals being encrypted based on the first key, the frequency point of the subcarrier carrying the first signal being a first frequency point, and / or the frequency point of the subcarrier carrying the second signal being a second frequency point.

[0021] Based on the solution provided in the embodiments of this application, communication after key negotiation on a single frequency point can improve the flexibility of frequency hopping communication, optimize the utilization of communication resources, reduce the implementation complexity of the communication system, improve the communication efficiency in the non-key negotiation stage, and optimize the complex frequency switching and synchronization mechanism brought about by frequency hopping communication in the non-key negotiation stage.

[0022] In conjunction with the third aspect, in some possible implementations of the third aspect, the key negotiation message is also used to determine a second key, which is a inducement key.

[0023] Based on the solution provided in the embodiments of this application, the second key is determined by sending a key negotiation message to the second node, which can improve the security of communication, reduce the probability of the real key used for encrypted communication being cracked, and help to deal with security threats in the quantum computing environment.

[0024] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the key negotiation message includes a first message and a second message, the first message being used to determine the first key, the second message being used to determine the second key, and the subcarrier carrying the first message being orthogonal to the subcarrier carrying the second message.

[0025] Based on the solution provided in the embodiments of this application, by making the subcarrier carrying the first message orthogonal to the subcarrier carrying the second message, it is possible to effectively avoid the first message and the second message from being affected by mutual interference, thereby ensuring that the first key used for communication and the inducement key used for inducement can be negotiated.

[0026] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the frequency at which the second message is sent is the frequency at which the first node communicates with the second node before sending the key negotiation message to the second node; or, the frequency at which the second message is sent is randomly determined.

[0027] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, sending a key negotiation message to the second node includes: sending M key negotiation information to the second node via frequency hopping, the key negotiation message including a first message, the first message including the M key negotiation information, the first message being used to determine the first key, where M is a positive integer.

[0028] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the frequency hopping transmission satisfies a frequency hopping sequence comprising multiple frequency points, wherein the frequency domain spacing between at least two frequency points in the frequency hopping sequence is greater than or equal to 20 MHz.

[0029] For example, the frequency domain spacing between at least two frequency points in the frequency hopping sequence is 20MHz, 40MHz, 60MHz, or 80MHz...

[0030] Based on the solution provided in the embodiments of this application, by using a frequency domain interval of at least two frequency points in the frequency hopping sequence that is greater than or equal to 20MHz, the probability of an attacker eavesdropping on key negotiation information using a device with an operating frequency range within 20MHz can be effectively reduced, thereby further improving the security of communication.

[0031] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the method further includes: determining a third frequency point based on the m'-th key negotiation information among the M key negotiation information, wherein the third frequency point is the frequency point where the subcarrier carrying the m-th key negotiation information among the M key negotiation information is located, m' is less than m, m′∈[1,M-1], and m∈[2,M].

[0032] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the method further includes: determining a third frequency point based on the n'th key negotiation information among N key negotiation information, the third frequency point being the frequency point where the subcarrier carrying the m'th key negotiation information among the M key negotiation information is located, the n'th key negotiation information being received before sending the m'th key negotiation information, the N key negotiation information being used to determine the first key, where N is a positive integer, m∈[1,M], n′∈[1,N].

[0033] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, before sending the key negotiation message to the second node, the method further includes: receiving a third message from the second node, or sending a third message to the second node, wherein at least one frequency point in the frequency hopping sequence is determined according to the third message.

[0034] For example, at least one frequency point in the frequency hopping sequence is determined by the first node or the second node based on the third message.

[0035] Since attackers typically monitor a specific signaling signal or frequency, it is difficult for them to obtain the previous signaling signal. Therefore, by deduce the frequency of the next signaling signal based on the data of the received or sent signaling, attackers can find it difficult to infer the frequency hopping mode through signal capture and analysis, thus enhancing the randomness of the frequency points in frequency hopping communication and the confidentiality of data transmission.

[0036] Based on the scheme provided in the embodiments of this application, the frequency point for upcoming communication is determined by the received or sent messages (e.g., the third message) or information (e.g., the m'th key negotiation information or the n'th key negotiation information). The generated frequency hopping sequence has high randomness and unpredictability, which can enhance the security of frequency hopping communication.

[0037] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, before sending the key negotiation message to the second node, the method further includes: receiving a fourth message from the second node, or sending a fourth message to the second node, the fourth message indicating the frequency domain interval; and / or receiving a fifth message from the second node, or sending a fifth message to the second node, the fifth message indicating the frequency domain range satisfied by the plurality of frequency points.

[0038] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, before sending the key negotiation message to the second node, the method further includes: receiving a sixth message from the second node, or sending a sixth message to the second node, the sixth message indicating whether to send a second message, the key negotiation message including the second message, the second message being used to determine the second key; and / or receiving a seventh message from the second node, or sending a seventh message to the second node, the seventh message indicating frequency point information of the second message, the frequency point information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

[0039] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the method further includes: determining a first signaling for indicating frequency hopping communication.

[0040] Based on the solution provided in the embodiments of this application, by determining the first signaling, compared with the two communicating parties performing frequency hopping communication after initialization, the explicit indication of the first signaling can improve the synchronization and coordination of frequency hopping communication, and can improve the overall performance of the communication system.

[0041] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the frequency point of the frequency hopping communication belongs to a frequency hopping sequence; the first signaling is also used to indicate the frequency hopping sequence, and / or, the first signaling is also used to indicate a first parameter, which is used to determine the frequency hopping sequence.

[0042] In conjunction with the first or third aspect, in some possible implementations of the first or third aspect, the first signaling is also used to indicate whether to send or receive a second message, and / or, the first signaling is also used to indicate frequency point information of the second message, the frequency point information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

[0043] In conjunction with the first or third aspect, and in some possible implementations of the first or third aspect, this method is applied to the field of Starflash basic access technology.

[0044] Fourthly, a communication method is provided, which is applied to a second node. This method can be executed by the second node itself, or by components of the second node (such as chips, circuits, or chip systems). For ease of understanding, the following description uses execution by the second node as an example.

[0045] The method includes: receiving a key negotiation message from a first node, the key negotiation message being used to determine a first key, the first key being used to encrypt communication between the first node and the second node; sending a plurality of first signals to the first node; and / or receiving a plurality of second signals from the first node, the first signals or the second signals being encrypted based on the first key, the frequency point of the subcarrier carrying the first signal being a first frequency point; and / or the frequency point of the subcarrier carrying the second signal being a second frequency point.

[0046] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, receiving a key negotiation message from the first node includes: frequency hopping to receive M key negotiation information from the first node, the key negotiation message including a first message, the first message including the M key negotiation information, the first message being used to determine the first key.

[0047] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, the frequency point for receiving the second message is the frequency point on which the first node communicates with the second node before receiving the key negotiation message from the first node; or, the frequency point for receiving the second message is randomly determined.

[0048] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, the method further includes: determining a third frequency point based on the m'-th key negotiation information among the M key negotiation information, wherein the third frequency point is the frequency point where the subcarrier carrying the m-th key negotiation information among the M key negotiation information is located, m' is less than m, m′∈[1,M-1], and m∈[2,M].

[0049] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, a third frequency point is determined based on the n'th key negotiation information among the N key negotiation information. This third frequency point is the frequency point where the subcarrier carrying the m'th key negotiation information among the M key negotiation information is located. The n'th key negotiation information is sent before receiving the m'th key negotiation information. The N key negotiation information is used to determine the first key, where N is a positive integer, m∈[1,M], and n′∈[1,N].

[0050] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, before receiving the key negotiation message from the first node, the method further includes: sending a third message to the first node, or receiving a third message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence, at least one frequency point in the frequency hopping sequence being determined according to the third message.

[0051] For example, at least one frequency point in the frequency hopping sequence is determined by the first node or the second node based on the third message.

[0052] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, before receiving the key negotiation message from the first node, the method further includes: sending a fourth message to the first node, or receiving a fourth message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence comprising multiple frequency points, the fourth message indicating a frequency domain interval between at least two frequency points in the frequency hopping sequence; and / or sending a fifth message to the first node, or receiving a fifth message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence comprising multiple frequency points, the fifth message indicating a frequency domain range satisfied by the multiple frequency points.

[0053] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, before receiving the key negotiation message from the first node, the method further includes: sending a sixth message to the first node, or receiving a sixth message from the first node, the sixth message indicating whether to receive a second message, the key negotiation message including the second message, the second message being used to determine the second key; and / or, sending a seventh message to the first node, or receiving a seventh message from the first node, the seventh message indicating frequency point information of the second message, the frequency point information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

[0054] In conjunction with the second or fourth aspect, in some possible implementations of the second or fourth aspect, the method further includes: determining a first signaling signal for indicating frequency hopping communication.

[0055] The specific implementation of the fourth aspect or its beneficial effects can be found in the relevant description in the third aspect above. For the sake of brevity, it will not be elaborated here.

[0056] Fifthly, a communication method is provided, which is applied to a second device. This method can be executed by the second device or by components of the second device (e.g., a chip, circuit, or chip system). For ease of understanding, the following description assumes execution by the second device.

[0057] The method includes: determining a first signaling signal for indicating frequency hopping communication; and sending the first signaling signal to a first device, wherein the first device and the second device belong to the same node.

[0058] For example, both the first device and the second device belong to the first node; or both the first device and the second device belong to the second node.

[0059] Based on the solution provided in the embodiments of this application, by determining and sending the first signaling, compared with the frequency hopping communication between the two parties after initialization, the explicit indication of the first signaling can improve the synchronization and coordination of frequency hopping communication, and improve the overall performance of the communication system.

[0060] In conjunction with the fifth aspect, in some possible implementations of the fifth aspect, the frequency point of the frequency hopping communication belongs to a frequency hopping sequence; the first signaling is also used to indicate the frequency hopping sequence, and / or, the first signaling is also used to indicate a first parameter, which is used to determine the frequency hopping sequence.

[0061] In conjunction with the fifth aspect, in some possible implementations of the fifth aspect, the first signaling is also used to indicate whether to send or receive a second message, and / or, the first signaling is also used to indicate the frequency information of the second message, the frequency information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

[0062] In conjunction with the fifth aspect, in some possible implementations of the fifth aspect, at least one frequency point in the frequency hopping sequence is determined according to a third message, which is from the first device or sent by the first device.

[0063] In conjunction with the fifth aspect, this method is applied to the field of Starflash basic access technology in some possible implementations of the fifth aspect.

[0064] Sixthly, a communication method is provided, which is applied to a first device. This method can be executed by the first device or by components of the first device (e.g., a chip, circuit, or chip system). For ease of understanding, the following description assumes execution by the first device.

[0065] The method includes: receiving a first signaling from a second device, the first signaling being used to indicate frequency hopping communication, the first device and the second device belonging to the same node; and performing frequency hopping communication.

[0066] For example, both the first device and the second device belong to the first node; or both the first device and the second device belong to the second node.

[0067] The specific implementation of the sixth aspect or its beneficial effects can be found in the relevant description in the fifth aspect above. For the sake of brevity, it will not be elaborated here.

[0068] In a seventh aspect, a communication device is provided, which is applied to a first node, the communication device including means for implementing any one of the first aspects or its implementations, or any one of the third aspects or its implementations.

[0069] The communication device includes: a first device for sending a key negotiation message to a second node, the key negotiation message for determining a first key and a second key, the first key for encrypting communication between the first node and the second node, the second key being a decoy key; the first device is also used for communicating with the second node based on the first key.

[0070] Alternatively, the communication device includes: a first device for sending a key negotiation message to a second node, the key negotiation message for determining a first key, the first key for encrypting communication between the first node and the second node; the first device is further configured to receive a plurality of first signals from the second node, and / or send a plurality of second signals to the second node, the first signals or the second signals being encrypted based on the first key, the frequency point of the subcarrier carrying the first signal being a first frequency point, and / or the frequency point of the subcarrier carrying the second signal being a second frequency point.

[0071] In conjunction with the seventh aspect, in some possible implementations of the seventh aspect, the communication device further includes a second device for: determining a third frequency point based on the m'-th key negotiation information among the M key negotiation information, the third frequency point being the frequency point where the subcarrier carrying the m-th key negotiation information among the M key negotiation information is located, m' being less than m, m′∈[1,M-1], and m∈[2,M].

[0072] Alternatively, in conjunction with the seventh aspect, in some possible implementations of the seventh aspect, the first device is further configured to: determine a third frequency point based on the m'-th key negotiation information among the M key negotiation information, the third frequency point being the frequency point where the subcarrier carrying the m-th key negotiation information among the M key negotiation information is located, m' being less than m, m′∈[1,M-1], m∈[2,M].

[0073] In conjunction with the seventh aspect, in some possible implementations of the seventh aspect, the communication device further includes a second device for: determining a third frequency point based on the n'th key negotiation information among N key negotiation information, the third frequency point being the frequency point of the subcarrier carrying the m'th key negotiation information among the M key negotiation information, the n'th key negotiation information being received before sending the m'th key negotiation information, the N key negotiation information being used to determine the first key, where N is a positive integer, m∈[1,M], and n′∈[1,N].

[0074] Alternatively, in conjunction with the seventh aspect, in some possible implementations of the seventh aspect, the first device is further configured to: determine a third frequency point based on the n'th key negotiation information among N key negotiation information, the third frequency point being the frequency point where the subcarrier carrying the m'th key negotiation information among the M key negotiation information is located, the n'th key negotiation information being received before the m'th key negotiation information is sent, the N key negotiation information being used to determine the first key, where N is a positive integer, m∈[1,M], and n'∈[1,N].

[0075] In conjunction with the seventh aspect, in some possible implementations of the seventh aspect, before sending the key negotiation message to the second node, the first device is further configured to: receive a third message from the second node, or send a third message to the second node, wherein at least one frequency point in the frequency hopping sequence is determined by the first device or the second device based on the third message.

[0076] In conjunction with the seventh aspect, in some possible implementations of the seventh aspect, before sending the key negotiation message to the second node, the first device is further configured to: receive a fourth message from the second node, or send a fourth message to the second node, the fourth message indicating the frequency domain interval; and / or receive a fifth message from the second node, or send a fifth message to the second node, the fifth message indicating the frequency domain range satisfied by the plurality of frequency points.

[0077] In conjunction with the seventh aspect, in some possible implementations of the seventh aspect, before sending the key negotiation message to the second node, the first device is further configured to: receive a sixth message from the second node, or send a sixth message to the second node, the sixth message indicating whether to send a second message, the key negotiation message including the second message, the second message being used to determine the second key; and / or, receive a seventh message from the second node, or send a seventh message to the second node, the seventh message indicating frequency point information of the second message, the frequency point information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

[0078] In conjunction with the seventh aspect, in some possible implementations of the seventh aspect, the communication device further includes a second means for: determining a first signaling signal for instructing frequency hopping communication.

[0079] The specific implementation of the seventh aspect or its beneficial effects can be found in the relevant descriptions in the first or third aspects above. For the sake of brevity, it will not be elaborated here.

[0080] Eighthly, a communication device is provided, which is applied to a second node, the communication device including means for implementing any one of the second aspects or its implementations, or any one of the fourth aspects or its implementations.

[0081] The communication device includes: a first device for receiving a key negotiation message from a first node, the key negotiation message for determining a first key and a second key, the first key for encrypting communication between the first node and the second node, the second key being a decoy key; the first device is also used for communicating with the first node based on the first key.

[0082] Alternatively, the communication device includes: a first device for receiving a key negotiation message from a first node, the key negotiation message being used to determine a first key, the first key being used to encrypt communication between the first node and the second node; the first device is further configured to send a plurality of first signals to the first node, and / or receive a plurality of second signals from the first node, the first signals or the second signals being encrypted based on the first key, the frequency point of the subcarrier carrying the first signal being a first frequency point, and / or the frequency point of the subcarrier carrying the second signal being a second frequency point.

[0083] In conjunction with the eighth aspect, in some possible implementations of the eighth aspect, the communication device further includes a second device for: determining a third frequency point based on the m'-th key negotiation information among the M key negotiation information, the third frequency point being the frequency point where the subcarrier carrying the m-th key negotiation information among the M key negotiation information is located, m' being less than m, m′∈[1,M-1], and m∈[2,M].

[0084] Alternatively, in conjunction with the eighth aspect, in some possible implementations of the eighth aspect, the first device is further configured to: determine a third frequency point based on the m'-th key negotiation information among the M key negotiation information, the third frequency point being the frequency point where the subcarrier carrying the m-th key negotiation information among the M key negotiation information is located, m' being less than m, m′∈[1,M-1], m∈[2,M].

[0085] In conjunction with the eighth aspect, in some possible implementations of the eighth aspect, the communication device further includes a second device for: determining a third frequency point based on the n'th key negotiation information among N key negotiation information, the third frequency point being the frequency point of the subcarrier carrying the m'th key negotiation information among the M key negotiation information, the n'th key negotiation information being sent before receiving the m'th key negotiation information, the N key negotiation information being used to determine the first key, where N is a positive integer, m∈[1,M], and n′∈[1,N].

[0086] Alternatively, in conjunction with the eighth aspect, in some possible implementations of the eighth aspect, the first device is further configured to: determine a third frequency point based on the n'th key negotiation information among N key negotiation information, the third frequency point being the frequency point of the subcarrier carrying the m'th key negotiation information among the M key negotiation information, the n'th key negotiation information being sent before receiving the m'th key negotiation information, the N key negotiation information being used to determine the first key, where N is a positive integer, m∈[1,M], and n'∈[1,N].

[0087] In conjunction with the eighth aspect, in some possible implementations of the eighth aspect, before receiving the key negotiation message from the first node, the first device is further configured to: send a third message to the first node, or receive a third message from the first node, wherein at least one frequency point in the frequency hopping sequence is determined by the first device or the second device based on the third message.

[0088] In conjunction with the eighth aspect, in some possible implementations of the eighth aspect, before receiving the key negotiation message from the first node, the first device is further configured to: send a fourth message to the first node, or receive a fourth message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence comprising multiple frequency points, and the fourth message is used to indicate the frequency domain spacing of at least two frequency points in the frequency hopping sequence; and / or, send a fifth message to the first node, or receive a fifth message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence comprising multiple frequency points, and the fifth message is used to indicate the frequency domain range satisfied by the multiple frequency points.

[0089] In conjunction with the eighth aspect, in some possible implementations of the eighth aspect, before receiving the key negotiation message from the first node, the first device is further configured to: send a sixth message to the first node, or receive a sixth message from the first node, the sixth message indicating whether to receive a second message, the key negotiation message including the second message, the second message being used to determine the second key; and / or, send a seventh message to the first node, or receive a seventh message from the first node, the seventh message indicating frequency point information of the second message, the frequency point information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

[0090] In conjunction with the eighth aspect, in some possible implementations of the eighth aspect, the communication device further includes a second means for: determining a first signaling signal for instructing frequency hopping communication.

[0091] The specific implementation of the eighth aspect or its beneficial effects can be found in the relevant description in the seventh aspect above. For the sake of brevity, it will not be elaborated here.

[0092] Ninth aspect, a communication device is provided, which is applied to a first node, the communication device including means for implementing the method of any one of the fifth aspects or its implementations.

[0093] The communication device includes a first device and a second device. The second device is used to determine a first signaling, which is used to indicate frequency hopping communication. The second device is also used to send the first signaling to the first device.

[0094] For example, the first device and the second device belong to the same node.

[0095] The specific implementation of the ninth aspect or its beneficial effects can be found in the relevant description in the fifth aspect above. For the sake of brevity, it will not be elaborated here.

[0096] In a tenth aspect, a communication device is provided, which is applied to a second node, the communication device including means for implementing the method of any one of the sixth aspects or its implementations.

[0097] The communication device includes: a first device and a second device, the first device being used to receive a first signaling from the second device, the first signaling being used to indicate frequency hopping communication; the first device is also used to perform frequency hopping communication.

[0098] For example, the first device and the second device belong to the same node.

[0099] The specific implementation of the tenth aspect or its beneficial effects can be found in the relevant description in the sixth aspect above. For the sake of brevity, it will not be elaborated here.

[0100] Eleventhly, a communication device is provided, the device comprising units or modules for implementing the methods of any one of the first to sixth aspects or their implementations.

[0101] The device includes a transceiver unit, which is used to perform a transmission operation or a reception operation of any of the methods in the first to sixth aspects or their implementations described above.

[0102] And / or, the device includes a processing unit for performing operations other than the sending and receiving operations of the methods in any of the first to sixth aspects or their implementations described above.

[0103] In a twelfth aspect, a communication device is provided, comprising: a memory for storing a program; and at least one processor for executing the computer program or instructions stored in the memory to perform the method provided in any of the foregoing aspects or their implementations.

[0104] In one implementation, the device is either a first node or a second node.

[0105] In another implementation, the device is a chip, chip system, or circuit for use in a first or second node.

[0106] In a thirteenth aspect, a communication apparatus is provided, comprising: at least one processor and a communication interface, the at least one processor being configured to obtain a computer program or instructions stored in a memory via the communication interface to execute the method provided in any of the foregoing aspects or their implementations. The communication interface may be implemented in hardware or software.

[0107] In one implementation, the device also includes a memory.

[0108] In a fourteenth aspect, a processor is provided for performing the methods provided in the foregoing aspects.

[0109] Unless otherwise specified, or if it does not contradict its actual function or internal logic in the relevant description, the transmission and acquisition / reception operations involved in the processor can be understood as processor output and reception, input and other operations, or as transmission and reception operations performed by radio frequency circuits and antennas. This application does not limit them in this regard.

[0110] In a fifteenth aspect, a computer-readable storage medium is provided that stores program code for execution by a device, the program code including methods for performing any of the foregoing aspects or their implementations.

[0111] In a sixteenth aspect, a computer program product containing instructions is provided, which, when run on a computer / processor / communication device, causes the computer to perform the method provided in any of the above aspects or their implementations.

[0112] In a seventeenth aspect, a chip is provided, comprising a processor and a communication interface. The processor reads instructions stored in a memory through the communication interface and executes the method provided in any of the above aspects or their implementations. The communication interface can be implemented in hardware or software.

[0113] In one implementation, the chip also includes a memory that stores computer programs or instructions. The processor is used to execute the computer programs or instructions stored in the memory. When the computer programs or instructions are executed, the processor is used to perform the methods provided by any of the above aspects or their implementations.

[0114] When the method provided in this application is executed by a chip, this application does not limit the specific number of chips implementing the method. For example, it can be executed by one chip, or by two or more chips. Furthermore, when the number of chips implementing the method is two or more, the chip manufacturers are not limited; they can be from the same manufacturer or different manufacturers.

[0115] In an eighteenth aspect, a computer program is provided that, when run on a computer / processor / communication device, causes the method provided by any of the foregoing aspects or their implementations to be executed.

[0116] In a nineteenth aspect, a communication system is provided, including the first node or the second node described above. Attached Figure Description

[0117] Figure 1 is a schematic diagram of a starlight wireless communication system applicable to an embodiment of this application.

[0118] Figure 2 is a schematic architecture diagram of a wireless short-range communication system to which the method provided in this application is applicable.

[0119] Figure 3 is a schematic flowchart of a communication method provided in an embodiment of this application.

[0120] Figure 4 is a schematic flowchart of a communication method provided in an embodiment of this application.

[0121] Figure 5 is a schematic diagram of a communication method provided in an embodiment of this application.

[0122] Figure 6 is a schematic diagram of the associated process of authentication and security context negotiation in a scenario without a security context.

[0123] Figure 7 is a schematic diagram of the associated process in a security context scenario.

[0124] Figure 8 is a schematic diagram of a frequency hopping sequence satisfying the frequency hopping interval.

[0125] Figure 9 is a schematic diagram of a communication device provided in an embodiment of this application.

[0126] Figure 10 is a schematic diagram of another communication device provided in an embodiment of this application.

[0127] Figure 11 is a schematic diagram of a chip system provided in an embodiment of this application. Detailed Implementation

[0128] The technical solutions in this application will now be described with reference to the accompanying drawings.

[0129] First, in this application, "for indicating" can include both direct and indirect indication. When describing an indication message for indicating A, it can include whether the indication message directly indicates A or indirectly indicates A, but does not necessarily mean that the indication message carries A.

[0130] The information indicated by the instruction is called the information to be instructed. In the specific implementation process, there are many ways to indicate the information to be instructed, such as, but not limited to, directly indicating the information to be instructed, such as the information to be instructed itself or its index. It can also be indirectly indicated by indicating other information, where there is a relationship between the other information and the information to be instructed. It can also indicate only a part of the information to be indicated, while the other parts are known or pre-agreed upon. For example, the instruction of specific information can be achieved by using a pre-agreed (e.g., protocol-defined) arrangement of various pieces of information, thereby reducing instruction overhead to some extent. At the same time, common parts of various pieces of information can be identified and indicated uniformly to reduce the instruction overhead caused by individually indicating the same information.

[0131] Second, in this application, "at least one" refers to one or more, "at least one item" refers to one or more items, and "more than one" refers to two or more items. Furthermore, in the embodiments of this application, "first," "second," and various numerical designations (e.g., "#1," "#2," etc.) are merely for descriptive convenience and are not intended to limit the scope of the embodiments of this application. The sequence numbers of the processes below do not imply an order of execution; the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. It should be understood that the objects described in this way can be interchanged where appropriate to describe solutions other than those in the embodiments of this application. Moreover, in the embodiments of this application, terms such as "S310" are merely identifiers for descriptive convenience and do not limit the order of execution steps.

[0132] Third, in the embodiments of this application, the words "exemplarily," "as," "for example," or "for instance" are used to indicate examples, illustrations, or explanations. Any embodiment or design described as "exemplarily," "as," "for example," or "for instance" in this application should not be construed as being more preferred or advantageous than other embodiments or designs. Specifically, the use of words such as "exemplarily," "as," "for example," or "for instance" is intended to present the relevant concepts in a specific manner.

[0133] Fourth, the term "storage" in the embodiments of this application can refer to storage in one or more memories. These memories can be separate installations or integrated into an encoder, decoder, processor, or communication device. Alternatively, some memories can be separately installed, while others can be integrated into the decoder, processor, or communication device. The type of memory can be any form of storage medium, and this application does not limit this.

[0134] Fifth, in the implementation of this application, "protocol" may refer to standard protocols in the field of communications, such as New Radio (NR) protocols, Institute of Electrical and Electronics Engineers (IEEE) protocols in the field of communications, and related protocols applied to future communication systems. This application does not limit this term.

[0135] Sixth, in the embodiments of this application, the terms "of", "corresponding (relevant)", "corresponding", and "associate" can sometimes be used interchangeably. It should be noted that when their differences are not emphasized, their intended meanings are consistent.

[0136] Seventh, in the embodiments of this application, descriptions such as "under certain circumstances," "when," "if," and "if..." all refer to the device taking corresponding actions under certain objective circumstances, and are not limited to a specific time. They do not require the device to perform a judgment action during implementation, nor do they imply any other limitations. In this application, "under certain circumstances," "when," "if," and "if..." can sometimes be used interchangeably. It should be noted that when their differences are not emphasized, their intended meanings are consistent.

[0137] Eighth, the term "and / or" in this article is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. Additionally, the character " / " in this article generally indicates that the preceding and following related objects have an "or" relationship.

[0138] Ninth, in the embodiments of this application, the names of messages, information, and devices are merely examples. This application does not impose any limitations on message names, information names, device names, etc., as long as they can achieve the corresponding functions.

[0139] Tenth, in this application, "send" and "receive" indicate the direction of signal transmission. For example, "send information to XX" can be understood as the destination of the information being XX, and "send information" can include direct transmission or indirect transmission through other units or modules. "Receive information from YY" can be understood as the source of the information being YY, and "receive information" can include direct reception from YY or indirect reception from YY through other units or modules. Besides air interface transmission or reception signals implemented at the system level, such as network devices or terminal devices, "send" can also be understood as the "output" of a chip interface, and "receive" can also be understood as the "input" of a chip interface. For example, a modem or system-on-a-chip (such as a SoC chip or a SIP chip) transmits or receives signals. "Send" or "receive" can also be performed through device components, for example, using buses, traces, or interfaces to transmit or receive signals through several parts, modules, or chips of a device.

[0140] The technical solutions provided in this application can be applied to wireless local area network (WLAN) scenarios. For example, this application can support IEEE 802.11 related standards, such as 802.11be (Wi-Fi 7), also known as Extremely High Throughput (EHT), 802.11bn (Wi-Fi 8) or the next-generation Wi-Fi 8 standard, and Ultra High Reliability (UHR). It also includes 802.11ad, 802.11ay standards, or Integrated mmWave (IMMW) protocols or Spark Link / Near Link protocols. It can also be applied to wireless personal area network systems based on ultra-wideband (UWB), such as the 802.15 series standards, and to sensing systems, such as the 802.11bf series standards. The 802.11ax standard is known as the high-efficiency (HE) standard, and the 802.11be standard is known as the extremely high throughput (EHT) standard. 802.11bf includes two main categories: low-frequency (e.g., sub7GHz) and high-frequency (e.g., 60GHz) standards. Sub7GHz implementations primarily rely on 802.11ac, 802.11ax, 802.11be, and next-generation standards, while 60GHz implementations primarily rely on 802.11ad, 802.11ay, and next-generation standards. 802.11ad can also be called the directional multi-gigabit (DMG) standard, and 802.11ay can also be called the enhanced directional multi-gigabit (EDMG) standard.

[0141] Although the embodiments of this application are primarily illustrated using the deployment of WLAN networks, particularly those employing the IEEE 802.11 system standard, those skilled in the art will readily understand that the various aspects involved in the embodiments of this application can be extended to other networks employing various standards or protocols, such as high-performance radio local area networks (HIPERLANs), wireless wide area networks (WWANs), wireless personal area networks (WPANs), or other networks now known or developed in the future. Therefore, regardless of the coverage area and wireless access protocol used, the various aspects provided in the embodiments of this application can be applied to any suitable wireless network.

[0142] The technical solutions of this application embodiment can also be applied to various communication systems, such as: WLAN communication systems, Wireless Fidelity (Wi-Fi) systems, Long Term Evolution (LTE) systems, LTE Frequency Division Duplex (FDD) systems, LTE Time Division Duplex (TDD) systems, Universal Mobile Telecommunication System (UMTS), Worldwide Interoperability for Microwave Access (WiMAX) communication systems, and 5G (5G) communication systems. th This application is not specifically limited to 5G systems, new radio (NR), future communication systems, Internet of Things (IoT) networks, or vehicle-to-everything (V2X) networks, and can also be applied to other networks. For example, the application scenarios of this application can be IoT networks based on the IEEE 802.11 family of standards, or V2X networks based on the IEEE 802.11 family of standards, or other networks based on the IEEE 802.11 family of standards. The IEEE 802.11 family of standards can be IEEE 802.11ax, IEEE 802.11be, the next-generation IEEE 802.11 standard of IEEE 802.11be, etc.

[0143] In addition, the technical solution provided in this application supports short-range communication.

[0144] StarSpeed ​​wireless communication technology is a short-range wireless communication technology used for data interaction in applications such as smart cars, smart homes, smart terminals, and smart manufacturing. This application can support StarSpeed ​​standard protocols, such as the "Low Power Consumption Technical Requirements and Test Methods for StarSpeed ​​Wireless Communication Systems" T_XS10002-2022 (V1.0.0), T_XS10002-2023 (V1.1.0), or the "Technical Requirements and Test Methods for Vehicle-Mounted Short-Range Wireless Communication" YD / T 4007-2022, and other related standards.

[0145] For example, short-range communication enables communication between electronic devices that are relatively close to each other. Currently, mainstream access technologies for short-range communication include Wireless Fidelity (Wi-Fi), Bluetooth, and ZigBee. With the development of the Internet of Things (IoT), new application scenarios such as smart cars, smart homes, smart terminals, and smart manufacturing have emerged, giving rise to a new generation of short-range access technologies. SparkLink wireless communication technology is a type of short-range wireless communication technology used to carry data interaction in application scenarios such as smart cars, smart homes, smart terminals, and smart manufacturing. Taking SparkLink Alliance access technology as an example, it includes, but is not limited to, SparkLink Basic (SLB) access technology and SparkLink Low Energy (SLE) access technology. SLB access technology can support the transmission of high-bandwidth services such as screen projection, virtual reality (VR), and in-vehicle communication, while SLE access technology can support the transmission of low-bandwidth, low-data-rate, and low-power services such as audio playback, keyboard, mouse, and electronic pen input. For ease of description, in the following embodiments, SLB access technology may be abbreviated as SLB, and SLE access technology as SLE. Furthermore, unless otherwise specified, the access technology mentioned in the following description refers to short-range access technology. The communication systems applicable to this application described above are merely illustrative examples, and the communication systems applicable to this application are not limited thereto; however, they will be uniformly described here and will not be repeated below.

[0146] Figure 1 is a schematic diagram of a StarSignal wireless communication system applicable to an embodiment of this application. As shown in Figure 1, the StarSignal wireless communication system can consist of three parts: a StarSignal access layer, a basic service layer, and a basic application layer. The StarSignal access layer can also be referred to as the StarSignal bottom layer, while the basic service layer and the basic application layer can constitute the StarSignal upper layer.

[0147] The StarSpark access layer can be divided into management (grant, G) nodes (referred to as G nodes) and terminal (T) nodes (referred to as T nodes) based on their different functions. The G nodes provide access layer services such as connection management, resource allocation, and information security to the T nodes within their coverage area. The StarSpark access layer enables the transmission and interaction of upper-layer business data between G nodes and T nodes over the air interface. Considering the differentiated transmission requirements of business scenarios for short-range wireless communication, the StarSpark access layer currently provides two communication interfaces for the StarSpark upper layer: SLB access technology and SLE access technology. SLB access technology employs multiple technologies such as ultra-short frames, multi-point synchronization, two-way authentication, fast interference coordination, two-way authentication encryption, and cross-layer scheduling optimization to support business scenarios with transmission requirements such as low latency, high reliability, precise synchronization, high concurrency, and high security. SLE access technology uses polar channel coding to improve transmission reliability, thereby reducing retransmissions and saving power. SLE access technology also supports a maximum transmission bandwidth of 4 MHz, a maximum of 8-phase shift keying (PSK) modulation, one-to-many reliable multicast, and 4 kHz low-latency interaction. While maximizing transmission efficiency, it also fully considers energy-saving factors, making it suitable for service scenarios with low power consumption requirements. SLB and SLE access technologies provide different transmission services to meet different service needs, complementing each other and continuously and smoothly evolving according to service requirements.

[0148] The protocol architecture applicable to G-nodes or T-nodes can include hosts and devices. The host is the upper-layer protocol of the device, and the host includes the basic application layer and the basic service layer, while the device includes the StarScan access layer.

[0149] Figure 2 is a schematic architecture diagram of a short-range wireless communication system to which the method provided in this application is applicable. As shown in Figure 2, the system includes a G node and a T node. Both the G node and the T node have built-in or external modules that support communication via SLB access technology, or the modules that communicate via SLB access technology operate on the G node or the T node. In one possible implementation, the G node or the T node also has built-in or external modules that support communication via SLE access technology.

[0150] For example, as shown in Figure 2, a G node or T node includes an access layer, which may include a data link layer and a physical layer. The data link layer can be used to implement functions such as resource management, access control, data segmentation, concatenation, and reordering to ensure reliable data transmission. The physical layer can utilize the transmission medium to provide a physical connection to the data link layer to achieve transparent transmission of bit streams. In some embodiments, the data link layer may also include a link control layer and a media access layer. The link control layer mainly interacts with the link control protocol (LCP) on the control link based on the links established between nodes, performing functions such as physical / logical link management and device behavior control. The media access layer is responsible for allocating radio resources and providing data transmission services to the link control layer. In one possible implementation, the G node or T node may also include an application layer and / or a network and transport layer; the application layer may be called the basic application layer, and the network and transport layer may be called the basic service layer.

[0151] Among them, G nodes and / or T nodes can be any kind of device with transceiver capabilities, including but not limited to base stations, access points (APs), routers, stations (STAs), user equipment (UEs), low-power devices, cellular phones, cordless phones, session initiation protocol (SIP) phones, smartphones, wireless local loop (WLL) stations, personal digital assistants (PDAs), handheld devices with wireless communication capabilities, computing devices, in-vehicle devices, wearable devices, drone devices, communication devices in the Internet of Things or the Internet of Vehicles, and other devices connected to wireless modems.

[0152] G nodes and / or T nodes can also be communication devices in VR, augmented reality (AR), industrial control (e.g., smart manufacturing), self-driving, remote medical care, smart grids, smart cities, smart homes, etc.

[0153] G nodes and / or T nodes can also be personal portable communication devices, computer peripherals, and various household or industrial electrical equipment, including but not limited to smartphones, mobile phones, set-top boxes, smart screens, smart TVs, smart speakers (such as artificial intelligence (AI) speakers and high fidelity (HiFi) speakers), smart sensors, wireless TV headphones, VR headsets, tablet computers, monitors, cameras, laptop computers, in-vehicle computers, in-vehicle terminals (such as microphones and speakers), projectors, printers, smart wristbands, smart watches, smart glasses, smart cars, smart lathes, smart monitoring equipment, smart wearable devices, smart cameras, smart remote controls, smart water and electricity meters, and sensors in smart cities, etc.

[0154] G nodes and / or T nodes can be devices that support WLAN standards. For example, G nodes and / or T nodes can support one or more standards in the IEEE 802.11 series, such as 802.11be and 802.11be next generation.

[0155] The aforementioned G node and / or T node may include a transmitter, a receiver, a memory, a processor, etc., wherein the transmitter and receiver are used for transmitting and receiving packet structures, respectively, the memory is used for storing signaling information and storing pre-agreed preset values, etc., and the processor is used for parsing signaling information and processing related data, etc.

[0156] Communication and / or key negotiation can occur between nodes T and G. In current wireless communication technologies, key negotiation is typically used by the communicating parties (e.g., nodes T and G) to negotiate the key for subsequent communication. Key negotiation typically uses cryptographic algorithms such as elliptic curve key exchange (ECDH). These algorithms provide high security in traditional computing environments, but their security is increasingly challenged with the rapid development of quantum computing. Widely used encryption algorithms in the computer and internet fields are based on three computational problems: integer factorization, discrete logarithm problem, or elliptic curve discrete logarithm problem. However, these problems can all be solved using quantum computers and Shor's algorithm, or other algorithms that are faster and require fewer qubits. Shor's algorithm can solve large integer factorization and discrete logarithm problems in polynomial time, making traditional encryption algorithms insecure in the face of quantum computers.

[0157] During the key negotiation phase of wireless transmission, attackers can use software-defined radio (SDR) devices to intercept signals. Once they obtain the ciphertext, attackers could potentially use quantum computers to quickly crack these traditional algorithms in the future, causing encryption to fail. This not only threatens the security of communication but could also seriously impact user privacy and data security.

[0158] In current wireless communication technologies, T-nodes and G-nodes can communicate and negotiate keys using frequency hopping communication technology. Specifically, the communicating parties rapidly switch between multiple frequency channels using a predefined frequency hopping sequence to achieve spectrum expansion and communication security. Frequency hopping communication technology mainly includes an initialization phase and frequency hopping communication itself.

[0159] Initialization phase: The two communicating parties agree on an initial frequency channel and frequency hopping sequence. The frequency hopping sequence is usually a pseudo-random sequence, which can be generated by a seed value and an algorithm. The frequency hopping sequence is used to indicate multiple frequency channels for frequency hopping communication, or in other words, the frequency hopping sequence includes multiple frequency points used for frequency hopping communication.

[0160] Frequency hopping communication: After initialization, the two communicating parties rapidly switch between multiple frequency channels according to the initial frequency channel and frequency hopping sequence to transmit data via frequency hopping. Within each frequency hopping cycle, the two communicating parties send and / or receive data on the current frequency channel.

[0161] Frequency-hopping communication (or communication and key negotiation using frequency-hopping communication technology) requires the use of multiple frequency channels, leading to a waste of bandwidth resources. This is particularly problematic in environments with limited spectrum resources, where such wasted bandwidth can negatively impact the performance of other communication services. Furthermore, frequency-hopping communication is complex to implement, requiring intricate frequency switching and synchronization mechanisms. During each frequency-hopping cycle, both parties must frequently switch between multiple frequency channels, increasing communication latency and reducing efficiency. Therefore, using frequency-hopping communication (or communication and key negotiation using frequency-hopping communication technology) not only increases the difficulty of system design and implementation but may also lead to a decrease in system reliability and stability.

[0162] Furthermore, existing wireless frequency hopping communication typically operates within a 20MHz bandwidth, which significantly limits its flexibility and security. Since most SDR devices also typically operate within a bandwidth of around 20MHz, frequency hopping communication is difficult to effectively evade attacker monitoring. For example, attackers can capture signals from multiple frequency channels, collect frequency hopping sequences and key negotiation messages, and thus deduce the keys of both communicating parties.

[0163] The above problems limit the widespread adoption and use of frequency hopping communication in practical applications, especially in scenarios requiring efficient and secure communication, where existing frequency hopping communication solutions are difficult to meet the needs.

[0164] In view of this, this application provides a communication method, communication device, and communication apparatus that can optimize the key negotiation process and improve communication security.

[0165] It should be understood that the embodiments shown below illustrate the method by using a terminal node and a management node as the execution entities for interaction. However, this application does not limit the execution entity; any program capable of running the code of the method provided in the embodiments of this application can communicate according to the method provided in the embodiments of this application. The execution entity of the method provided in the embodiments of this application can be a terminal node and a management node, or a functional module within the terminal node and management node capable of calling and executing a program.

[0166] For example, the first node can also be a chip, chip system, or processor that supports the methods that the first node can implement, or it can be a logic module or software that can implement all or part of the functions of the first node. The second node can also be a chip, chip system, or processor that supports the methods that the second node can implement, or it can be a logic module or software that can implement all or part of the functions of the second node.

[0167] For example, when the first node is a terminal node, the second node is a management node that communicates with the terminal node; or, when the second node is a terminal node, the first node is a management node that communicates with the terminal node.

[0168] In one possible design (Design #1), the communication method provided in this application embodiment (not shown in the figure) includes: a first node sending a key negotiation message to a second node, correspondingly, the second node receiving the key negotiation message from the first node, the key negotiation message being used to determine a first key, the first key being used to encrypt the communication between the first node and the second node; the first node receiving a plurality of first signals from the second node (correspondingly, the second node sending a plurality of first signals to the first node), and / or, the first node sending a plurality of second signals to the second node (correspondingly, the second node receiving a plurality of second signals from the first node), the first signal or the second signal being encrypted based on the first key, the frequency point of the subcarrier carrying the first signal being the first frequency point, and / or, the frequency point of the subcarrier carrying the second signal being the second frequency point.

[0169] The first and second nodes can communicate via frequency hopping only during the key negotiation process. After the key negotiation is completed, the first and second nodes communicate on a single frequency, which can save communication resources and reduce the implementation complexity of the communication system.

[0170] In some possible implementations, the key negotiation message is also used to determine a second key, which is a lead key.

[0171] Specifically, the first node and the second node can negotiate a decoy key for the monitoring device via a key negotiation message. This decoy key is not used to encrypt communication between the first node and the second node. If an attacker uses the monitoring device to capture the signal and obtains the portion of the key negotiation message used to determine the decoy key, that portion can mislead the attacker into believing that the decoy key is the real key used for encrypting communication.

[0172] In another possible design (design #2), the communication method provided in this application embodiment is shown in Figure 3.

[0173] Figure 3 is a schematic flowchart of a communication method 300 provided in an embodiment of this application. As shown in Figure 3, the method 300 includes the following steps.

[0174] S310, the first node sends a key negotiation message to the second node, and the second node receives the key negotiation message from the first node. The key negotiation message is used to determine a first key and a second key. The first key is used to encrypt the communication between the first node and the second node, and the second key is a decoy key.

[0175] S320, the first node communicates with the second node based on the first key, and correspondingly, the second node communicates with the first node based on the first key.

[0176] For example, the first node and the second node negotiate a first key and a inducement key, but the first node and the second node do not use the inducement key determined through negotiation to encrypt communication. If an attacker uses a monitoring device to capture the portion of the key negotiation message used to determine the inducement key, that portion can mislead the attacker into believing that the inducement key is the real key used for encrypted communication.

[0177] In some possible implementations, S320 includes: a first node receiving a plurality of first signals from the second node (correspondingly, the second node sending a plurality of first signals to the first node), and / or, the first node sending a plurality of second signals to the second node (correspondingly, the second node receiving a plurality of second signals from the first node), wherein the first signal or the second signal is encrypted based on the first key, the frequency point of the subcarrier carrying the first signal is the first frequency point, and / or, the frequency point of the subcarrier carrying the second signal is the second frequency point.

[0178] Specifically, the first frequency point or the second frequency point can also be called a single frequency point. After the first node and the second node determine the first key, they can conduct communication based on encryption of the first key on the single frequency point.

[0179] For example, multiple first signals or multiple second signals can be signals carrying data transmitted between the first node and the second node during communication based on the first key.

[0180] The first frequency and the second frequency can be the same or different. Different first and second frequency frequencies can further improve communication security.

[0181] It should be understood that the following description of the specific implementation of method 300 applies to design #2 and can also apply to design #1. To avoid redundancy, the embodiments of this application only describe method 300 (applicable to design #2) as an example.

[0182] In some possible implementations, the key negotiation message includes a first message and a second message, the first message being used to determine the first key and the second message being used to determine the second key, wherein the subcarrier carrying the first message is orthogonal to the subcarrier carrying the second message.

[0183] For example, the first node and the second node negotiate the first key through the first message, and simultaneously negotiate the induction key through the second message. For instance, at the same time, the first node sends both the first message and the second message. To avoid interference between the first and second messages and to prevent their transmission from being affected, the subcarrier carrying the first message and the subcarrier carrying the second message need to be orthogonal.

[0184] When the first message is carried on multiple subcarriers and / or the second message is carried on multiple subcarriers, at the same time, the first node sends both the first message and the second message. This can be understood as the first node sending both part #1 of the first message and part #2 of the second message at the same time, and the subcarriers carrying part #1 and part #2 of the second message are orthogonal.

[0185] In some possible implementations, the frequency at which the second message is sent is the frequency at which the first node communicates with the second node before the first node sends the key negotiation message to the second node; or, the frequency at which the second message is sent is randomly determined by the first node.

[0186] Specifically, the frequency at which the second message is sent can be different from the frequency at which the first message is sent. For example, the frequency at which the second message is sent may be the frequency at which the first node communicates with the second node before S310, and the frequency at which the second message is sent is not the frequency at which the first message is sent; or, the frequency at which the second message is sent may be randomly determined by the first node (the frequency at which the first node randomly determines the second message can be different from the frequency at which the first message is sent or may be significantly different; a significant difference between the frequency at which the second message is sent and the frequency at which the first message is sent can minimize the impact of the transmission of the second message on the transmission of the first message. For example, the frequency at which the second message is sent may be significantly different from the frequency at which the first message is sent (greater than or equal to 80 MHz)).

[0187] In some possible implementations, S310 includes: the first node sending M key negotiation information to the second node via frequency hopping; correspondingly, the second node receiving the M key negotiation information from the first node via frequency hopping; the key negotiation message includes a first message, which includes the M key negotiation information, and the first message is used to determine the first key, where M is a positive integer.

[0188] Specifically, the key negotiation message includes a first message, which includes the M key negotiation information. The first node and the second node exchange key negotiation information through frequency hopping communication to achieve the negotiation of the first key.

[0189] In some possible implementations, the frequency points of frequency hopping communication satisfy a frequency hopping sequence, which includes multiple frequency points, and the frequency domain spacing between at least two frequency points in the frequency hopping sequence is greater than or equal to 20 MHz.

[0190] For example, frequency hopping transmission satisfies the frequency hopping sequence, or in other words, the frequency points of frequency hopping transmission satisfy the frequency hopping sequence.

[0191] For example, frequency hopping reception satisfies the frequency hopping sequence, or in other words, the frequency point of frequency hopping reception satisfies the frequency hopping sequence.

[0192] The frequency hopping sequence may have been determined before S310. That is, before S310, the first node and / or the second node have determined all the frequency points in the frequency hopping sequence.

[0193] For example, the first node and the second node determine the frequency hopping sequence using the same parameters and methods, and the frequency hopping sequences determined by the first node and the second node are the same.

[0194] For example, after the first node determines the frequency hopping sequence, it indicates the frequency hopping sequence to the second node; and / or, after the second node determines the frequency hopping sequence, it indicates the frequency hopping sequence to the first node.

[0195] In some possible implementations, method 300 may also include S330.

[0196] One possible implementation of S330 is S330a.

[0197] S330a: The first node determines the third frequency point based on the m'th key negotiation information among the M key negotiation information. The third frequency point is the frequency point where the subcarrier carrying the m'th key negotiation information among the M key negotiation information is located, where m' is less than m, m′∈[1,M-1], and m∈[2,M].

[0198] For example, the frequency point of the subcarrier carrying one of the M key negotiation messages can be determined by the first node based on another key negotiation message that has been sent before sending that key negotiation message.

[0199] For example, the M key negotiation messages are sent by the first node at different times.

[0200] The second node can also determine the third frequency point using the same method as the first node described above (e.g., the method for determining the third frequency point in S330a). For example, the second node determines the third frequency point carrying the key negotiation information to be received based on the other key negotiation information that has already been received. This will not be elaborated further in the embodiments of this application.

[0201] Alternatively, method 300 may further include the first node receiving N key negotiation information from the second node (correspondingly, the second node sends N key negotiation information to the first node), where the N key negotiation information is used to determine the first key, and N is a positive integer. In this case, another possible implementation of S330 is S330b.

[0202] S330b: The first node determines the third frequency point based on the n'th key negotiation information among the N key negotiation information. The third frequency point is the frequency point where the subcarrier carrying the m'th key negotiation information among the M key negotiation information is located. The n'th key negotiation information is received before the m'th key negotiation information is sent. m∈[1,M], n′∈[1,N].

[0203] Specifically, the negotiation of the key between the first node and the second node may include the first node receiving N key negotiation messages and sending M key negotiation messages, and correspondingly, the second node sending N key negotiation messages and receiving M key negotiation messages. The first node and the second node determine the first key using these N and M key negotiation messages. The frequency point of the subcarrier carrying one of the M key negotiation messages can be determined based on the key negotiation messages already received before sending that particular message.

[0204] For example, N key negotiation messages are sent by the second node at different times.

[0205] The second node can also determine the third frequency point using the same method as the first node described above (e.g., the method for determining the third frequency point in S330b). For example, the second node determines the third frequency point carrying the key negotiation information to be received based on the key negotiation information that has already been sent. This will not be elaborated further in the embodiments of this application.

[0206] In some possible implementations, prior to S310, the method 300 may also include:

[0207] S340, the first node receives a third message from the second node (correspondingly, the second node sends a third message to the first node), or the first node sends a third message to the second node (correspondingly, the second node receives a third message from the first node), and at least one frequency point in the frequency hopping sequence is determined according to the third message.

[0208] For example, at least one frequency point in the frequency hopping sequence is determined by the first node or the second node based on the third message.

[0209] For example, the frequency point of the subcarrier carrying one of the M key negotiation messages can be determined by the first node based on a third message received or sent before sending the M key negotiation messages.

[0210] The second node can also determine the frequency point using the same method as the first node described above (e.g., the method for determining the frequency point in S340). For example, the second node determines the frequency point of one of the M key negotiation messages carrying the key negotiation information to be received based on the third message that has already been sent or received. This will not be elaborated further in the embodiments of this application.

[0211] The third frequency point can be determined by the host or device in the first or second node.

[0212] In some possible implementations, prior to S310, the method 300 may also include:

[0213] S350, the first node receives a fourth message from the second node (correspondingly, the second node sends a fourth message to the first node), or the first node sends a fourth message to the second node (correspondingly, the second node receives a fourth message from the first node), the fourth message being used to indicate the frequency domain spacing.

[0214] Specifically, before the first node negotiates the key with the second node, the first node may receive or send a fourth message, which indicates the frequency domain interval satisfied by the frequency points in the frequency hopping sequence.

[0215] For example, the fourth message indicates that the frequency interval between the frequency points in the frequency hopping sequence is greater than or equal to 20MHz. When the first or second node determines the frequency hopping sequence, it needs to ensure that the frequency interval between the frequency points in the frequency hopping sequence is greater than or equal to 20MHz.

[0216] In some possible implementations, prior to S310, the method 300 may also include:

[0217] S360, the first node receives a fifth message from the second node (correspondingly, the second node sends a fifth message to the first node), or the first node sends a fifth message to the second node (correspondingly, the second node receives a fifth message from the first node), the fifth message being used to indicate the frequency domain range satisfied by the plurality of frequency points.

[0218] Specifically, before the first node negotiates the key with the second node, the first node may receive or send a fifth message, which indicates the frequency domain range satisfied by the frequency points in the frequency hopping sequence.

[0219] For example, the fifth message indicates that the frequency range satisfied by the frequency points in the frequency hopping sequence is 200MHz. When the first or second node determines the frequency hopping sequence, it needs to ensure that the frequency domain interval between any two frequency points in the frequency hopping sequence is less than or equal to 200MHz, that is, the frequency domain range satisfied by the frequency points in the frequency hopping sequence is less than or equal to 200MHz.

[0220] In some possible implementations, prior to S310, the method 300 may also include:

[0221] S370, the first node receives a sixth message from the second node (correspondingly, the second node sends a sixth message to the first node), or the first node sends a sixth message to the second node (correspondingly, the second node receives a sixth message from the first node), the sixth message being used to indicate whether to send / receive or use the second message.

[0222] Specifically, before the first node negotiates the key with the second node, the first node can receive or send a sixth message indicating whether to negotiate a lead key. If the sixth message indicates that a lead key should be negotiated, then the first node can also negotiate the lead key while negotiating the first key with the second node.

[0223] In some possible implementations, prior to S310, the method 300 may also include:

[0224] S380, the first node receives a seventh message from the second node (correspondingly, the second node sends a seventh message to the first node), or the first node sends a seventh message to the second node (correspondingly, the second node receives a seventh message from the first node), the seventh message is used to indicate the frequency information of the second message, and the frequency information of the second message is used to send or receive the second message.

[0225] Specifically, before the first node negotiates the key with the second node, the first node may receive or send a seventh message, which indicates the frequency point carrying the second message.

[0226] For example, the seventh message indicates that the frequency point carrying the second message is either the frequency point used for communication between the first node and the second node before negotiating the key, or a randomly determined frequency point.

[0227] It should be understood that one or more of the fourth, fifth, sixth, or seventh messages can be carried in the same signaling or in different signaling. The signaling carrying one or more of the fourth, fifth, sixth, or seventh messages can be a rewrite of a field of existing signaling; or, a new field can be added to existing signaling, and this new field can carry one or more of the fourth, fifth, sixth, or seventh messages; or, a new signaling can be added carrying one or more of the fourth, fifth, sixth, or seventh messages. This application's embodiments do not impose such limitations.

[0228] For example, the fourth, fifth, sixth, and seventh messages can be carried in the same signaling.

[0229] For example, the fourth, fifth, sixth, and seventh messages are carried in signaling #1, where information #1 indicates that the frequency domain range of frequency hopping communication is 60MHz (or other value greater than or equal to 20MHz); information #2 indicates that the frequency domain spacing of frequency hopping communication is 30MHz (or other value greater than or equal to 20MHz); information #3 indicates whether the second information is used; and information #4 indicates the frequency point information of the second information.

[0230] As a possible example, in the signaling carrying the sixth and seventh messages, the sixth message occupies 1 bit and the seventh message occupies 1 bit. The 1 bit occupied by the sixth message indicates whether the second information is used; the 1 bit occupied by the seventh message indicates whether the frequency carrying the second information is fixed or random.

[0231] It should be understood that one or more of the fourth, fifth, sixth, or seventh messages can be exchanged between the first and second nodes in the first half of the access process (before key negotiation). The first and second nodes only need to exchange the fourth, fifth, sixth, and seventh messages before key negotiation.

[0232] As a possible example, one or more of the fourth, fifth, sixth, or seventh messages may be carried in the signaling of the access request; or, one or more of the fourth, fifth, sixth, or seventh messages may be carried in the signaling of the interaction between the first and second nodes during the security negotiation and association phase.

[0233] In some possible implementations, prior to S310, the method 300 may also include:

[0234] S390, the first node determines the first signaling, which is used to indicate frequency hopping communication.

[0235] Specifically, the host of the first node determines the first signaling and instructs the device of the first node; the device of the first node performs frequency hopping communication.

[0236] The second node can also determine the first signaling based on the same method as the first node described above (e.g., the method for determining the first signaling in S390). This embodiment of the application will not elaborate further on this.

[0237] The first signaling message can be determined by the host in the first or second node; the host can send the first signaling message to the device.

[0238] In some possible implementations, the first signaling is also used to indicate a frequency hopping sequence, and / or the first signaling is also used to indicate a first parameter for determining the frequency hopping sequence.

[0239] Specifically, after determining the frequency hopping sequence, the host can instruct the device to use the frequency hopping sequence, and / or the device can determine the frequency hopping sequence. When the device determines the frequency hopping sequence, the parameters used to determine the frequency hopping sequence can be existing in the device or require instruction from the host. When the parameters used to determine the frequency hopping sequence require instruction from the host, the host can instruct the device to use the first signaling to specify the parameters that require host instruction.

[0240] In some possible implementations, the first signaling is also used to indicate whether to use / send a second message, and / or the first signaling is also used to indicate the frequency at which the second message is sent.

[0241] For example, the host uses / sends the second message through the first signaling instruction device; or, the host uses the frequency point of the second message to carry the second message through the first signaling instruction device.

[0242] In the G node or T node, the device is used to implement communication. Therefore, before frequency hopping communication, the device needs to determine the frequency hopping sequence; before communicating via a single frequency point or a randomly determined frequency point, the device needs to determine the frequency point used for communication.

[0243] In some possible implementations, method 300 is applied to the Starlight Alliance access technology field. For example, method 300 is applied to the SLB field.

[0244] The following section, using Figure 4 as an example, details a possible implementation of the communication method 400 for the association process of G nodes or T nodes. Communication method 400 can be used in conjunction with communication method 300.

[0245] Figure 4 is a schematic flowchart of a communication method 400 provided in an embodiment of this application. As shown in Figure 4, the method 400 includes the following steps.

[0246] S410, G node and / or T node derive frequency hopping sequence.

[0247] Method 400 can be applied to G nodes and / or T nodes.

[0248] For example, after deriving the frequency hopping sequence, node G can instruct node T to align the derived frequency hopping sequence, thereby aligning the frequency hopping sequences of nodes G and T; or, for example, after deriving the frequency hopping sequence, node T can instruct node G to align the derived frequency hopping sequence, thereby aligning the frequency hopping sequences of nodes G and T; or, for example, nodes G and T determine the frequency hopping sequence using the same method and parameters, and the frequency hopping sequences determined by nodes G and T are the same, thereby aligning the frequency hopping sequences of nodes G and T.

[0249] The G node instructs the T node on the frequency hopping sequence derived therefrom, or the T node instructs the G node on the frequency hopping sequence derived therefrom, which can be achieved through out-of-band indication. For example, the G node or T node can align the frequency hopping sequence by instructing the frequency hopping sequence through SLE.

[0250] Aligning the frequency hopping sequence between G nodes and T nodes enables G nodes and T nodes to determine the same frequency points used for frequency hopping communication, ensuring the reception and / or transmission of information in frequency hopping communication.

[0251] Before the frequency hopping sequence is derived / generated, the G node and T node can exchange a fourth message and / or a fifth message.

[0252] The derivation / generation methods for frequency hopping sequences can include the following two:

[0253] One approach is for the G node and / or T node to directly generate a frequency hopping sequence (which contains all the frequency points for frequency hopping communication), and the frequency points for sending and / or receiving key negotiation-related content can be selected from this frequency hopping sequence.

[0254] For example, a possible method for deriving / generating frequency hopping sequences includes: deriving all frequency points for frequency hopping communication used for key negotiation based on a preset key (PSK) or passphrase pre-stored by the node.

[0255] For example, List(f) = FSG(PSK) or List(f) = FSG(passphrase), where FSG can be a method for generating a frequency hopping sequence jointly negotiated and determined by the G node and the T node. The derivation / generation of the frequency hopping sequence can be completed by the host and then sent to the device; alternatively, the host can send PSK or passphrase to the device, which will then complete the derivation / generation of the frequency hopping sequence. PSK, passphrase, and FSG are merely convenient and feasible parameters or methods; other parameters or methods agreed upon by the G node and the T node can also be applied to the embodiments of this application.

[0256] Another approach: After the G node and T node exchange one, multiple, or all signaling messages, they generate the frequency points to be used for sending and / or receiving the next signaling message. The node can deduce the frequency points for sending and / or receiving the next signaling message based on the data of the received or sent signaling message, as well as the PSK or passphrase.

[0257] For example, a possible method for deriving / generating a frequency hopping sequence includes: deriving the next frequency point for frequency hopping communication used for key negotiation based on the PSK or passphrase pre-stored by the node and the signaling that has been exchanged. This next frequency point is a possible implementation of a third frequency point; the signaling that has been exchanged is a possible implementation of a third message, the m'th key negotiation information, or the n'th key negotiation information.

[0258] For example, F = FSG_n(PSK, message) or F = FSG_n(PassPhrase, message). Here, FSG and FSG_n are frequency hopping sequence derivation algorithms. The message can be a value from the signaling data of the previous interaction, or a random number, etc.

[0259] Because attackers typically monitor a specific signaling signal or frequency, it is difficult for them to obtain the previous signaling signal. Therefore, nodes can deduce the frequency of the next signaling signal based on the data of the received or sent signaling signals. This makes it difficult for attackers to infer the frequency hopping mode through signal capture and analysis, thus enhancing the randomness of the frequency points in frequency hopping communication and the confidentiality of data transmission.

[0260] The frequency hopping sequence derivation / generation method provided in this application generates frequency hopping sequences with high randomness and unpredictability, which can enhance the security of frequency hopping communication.

[0261] S420, G node and / or T node generate parameters / information for determining the induction signal and key.

[0262] For example, the method for determining the induction signal can be the same as the method for determining the key (but the result of the determination will be different).

[0263] For example, both the induction signal and the key are determined through interaction between nodes T and G, using parameters / information used to determine the induction signal and the key; or, both the induction signal and the key are determined by node T and then instructed to node G (or determined by node G and then instructed to node T). However, the induction signal and the key determined through interaction between nodes T and G using parameters / information used to determine the induction signal and the key are different.

[0264] When node G instructs node T after determining the inducement signal or key, the implementation methods for node G determining the inducement signal or key, and / or node G instructing node T, can refer to relevant technologies; and / or, when node T instructs node G after determining the inducement signal or key, the implementation methods for node T determining the inducement signal or key, and / or node T instructing node G, can refer to relevant technologies. This application's embodiments will not elaborate on these details.

[0265] It is understood that the G node and / or T node may first generate parameters / information for determining the induction signal, and then generate parameters / information for determining the key; or, the G node and / or T node may first generate parameters / information for determining the key, and then generate parameters / information for determining the induction signal. This application does not limit the order in which the parameters / information for determining the key and the parameters / information for determining the induction signal are generated.

[0266] In one possible implementation, a portion of the parameters / information used to determine the inducement signal and the key is used to negotiate the key, and another portion of the parameters / information used to determine the inducement signal and the key is used to negotiate the inducement signal.

[0267] For example, the inducement signal is one possible implementation of the inducement key; the key is one possible implementation of the first key; the G node or T node is one possible implementation of the first node (correspondingly, the T node or G node is one possible implementation of the second node); the part of the parameters / information generated by the first node for determining the inducement signal and the key used for negotiating the key is one possible implementation of the first message; the part of the parameters / information generated by the first node for determining the inducement signal and the key used for negotiating the inducement signal is one possible implementation of the second message. Determining the inducement signal can be understood as performing an inducement signal negotiation process on a frequency point that does not satisfy the frequency hopping sequence (the inducement signal negotiation process can be understood as a sham key negotiation process; the inducement signal negotiation process can include the interaction of multiple parameters / information used to determine the inducement signal), determining the inducement signal as erroneous key information, thereby inducing an attacker to obtain this erroneous key information.

[0268] The derivation of the frequency hopping sequence and the generation of parameters / information used to generate the induced signal can be performed on the host side of the G node or T node, or on the device side of the G node or T node.

[0269] If the frequency hopping sequence is derived on the device side, the host in the node where the device is located may need to pass the parameters required for deriving the frequency hopping sequence to the device.

[0270] In the following text, host and device are on the same node.

[0271] For example, if the frequency hopping sequence is derived on the host side, the host does not need to pass the parameters required for deriving the frequency hopping sequence to the device.

[0272] For example, if the frequency hopping sequence is derived on the device side, and the host determines that it needs to pass the parameters required for deriving the frequency hopping sequence to the device, the host can pass the parameters required for deriving the frequency hopping sequence to the device; if the frequency hopping sequence is derived on the device side, and the host determines that it does not need to pass the parameters required for deriving the frequency hopping sequence to the device, the host can choose not to pass the parameters required for deriving the frequency hopping sequence to the device.

[0273] The host can determine whether it needs to pass the parameters required for deriving the frequency hopping sequence to the device based on the type of the derived parameters; the parameters required for deriving the frequency hopping sequence passed by the host to the device are one possible implementation of the first parameter.

[0274] For example, if the host determines that the device stores the derived parameter (or the device can obtain the derived parameter) based on the type of the derived parameter, the host can determine that it does not need to pass the parameters required for deriving the frequency hopping sequence to the device; or, if the host determines that the device does not store the derived parameter (or the device cannot obtain the derived parameter) based on the type of the derived parameter, the host can determine that it needs to pass the parameters required for deriving the frequency hopping sequence to the device.

[0275] S430, G nodes and / or T nodes negotiate the inducement signal and key.

[0276] After generating the parameters / information used to determine the induction signal and key, the G node and T node can negotiate the induction signal and key through the interactive exchange of these parameters / information. The process of negotiating the key can be called the key negotiation procedure. The process of negotiating the induction signal can be called the induction signal negotiation procedure. Negotiation may include the receipt and / or transmission of parameters / information used to determine the induction signal and key.

[0277] The frequency of the negotiation inducement signal is different from the frequency of the negotiation key. The receiving end of the inducement signal and the key can determine which of the received signals is used to determine the key and which is used to determine the inducement signal based on the frequency of the parameters / information used to determine the inducement signal and the frequency of the parameters / information used to determine the key. If the frequency of sending parameter / information #1 for determining the key is the same as the frequency of receiving parameter / information #1 for determining the key, both the sending and receiving frequencies belong to the negotiation key's frequency, and the negotiation key's frequency satisfies the frequency hopping sequence determined in S410; if the frequency of sending parameter / information #1 for determining the inducement signal is the same as the frequency of receiving parameter / information #1 for determining the inducement signal, both the sending and receiving frequencies belong to the negotiation inducement signal's frequency, and the negotiation inducement signal's frequency does not satisfy the frequency hopping sequence determined in S410. The parameter / information used to determine the key #1 is an example of the parameter / information used to determine the key; the parameter / information used to determine the induction signal #1 is an example of the parameter / information used to determine the induction signal.

[0278] For example, the transmitting end, used to determine the parameters / information for the induction signal and the key, transmits signals according to a frequency hopping sequence (wherein, the transmitting end transmits the parameters / information for determining the key at frequency points in the frequency hopping sequence, and transmits the parameters / information for determining the induction signal at frequency points that do not satisfy the frequency hopping sequence); the receiving end, used to determine the parameters / information for determining the induction signal and the key, determines the signals in the received signals that satisfy the frequency hopping sequence as the parameters / information for determining the key, and determines the signals in the received signals that do not satisfy the frequency hopping sequence as the parameters / information for determining the induction signal.

[0279] Negotiated inducement signals can be understood as: inducement signals determined by one of the communicating parties through interaction, or one or more parameters / information exchanged by the communicating parties to determine the inducement signals.

[0280] For example, after determining the induced signal, node G indicates the determined induced signal to node T. Node G sends the determined induced signal to node T, and / or node T receives the determined induced signal, which is a negotiated induced signal.

[0281] For example, determining the induction signal requires the exchange of three pieces of information between the communicating parties. After the exchange of these three pieces of information, the induction signal can be determined. Therefore, either party generating any one of these three pieces of information constitutes generating the parameters / information used to determine the induction signal; either party receiving or sending any one of these three pieces of information constitutes negotiating the induction signal; and the exchange of these three pieces of information constitutes the induction signal negotiation process. Negotiating the induction signal can be understood as one party sending or receiving one or more parameters / information used to determine the induction signal.

[0282] The negotiated key can be understood as: the key exchanged between the two communicating parties, or one or more parameters / information exchanged between the two communicating parties to determine the key.

[0283] For example, after determining the key, node G indicates the determined key to node T. Node G sends the determined key to node T, and / or node T receives the determined key, which is a negotiated key.

[0284] For example, determining the key requires the exchange of six pieces of information between the communicating parties. After the exchange of these six pieces of information, the key can be determined. Generating any one of these six pieces of information by either party constitutes generating the parameters / information used to determine the key; receiving or sending any one of these six pieces of information by either party constitutes negotiating the key; and exchanging these six pieces of information constitutes the key negotiation process. Negotiating the key can be understood as one party sending or receiving one or more parameters / information used to determine the key.

[0285] For example, the subcarriers for transmitting and / or receiving the induced signal are orthogonal to the subcarriers for transmitting and / or receiving the key, which can effectively avoid mutual interference between the induced signal and the key and ensure the reliability of communication.

[0286] For example, the subcarriers for transmitting and / or receiving one or more parameters / information used to determine the induction signal are orthogonal to the subcarriers for transmitting and / or receiving one or more parameters / information used to determine the key, which can effectively avoid mutual interference between the information used to determine the induction signal or the key and ensure the reliability of communication.

[0287] It is understandable that S420 and S430 can be executed alternately. For example, first, node G generates parameters / information #1 for determining the inducement signal and key; second, node G sends this parameter / information #1 to node T (i.e., node G and node T negotiate the inducement signal and key based on this parameter / information #1); third, node T generates parameters / information #2 for determining the inducement signal and key; then, node T sends this parameter / information #2 to node G (i.e., node G and node T negotiate the inducement signal and key based on this parameter / information #2)...

[0288] Before negotiating the induction signal, the G node and T node can exchange the sixth and / or seventh messages.

[0289] In some possible implementations, prior to S430, method 400 may also include:

[0290] S440, the G node and / or T node determine the frequency of the negotiation-induced signal.

[0291] The frequency points of the negotiated inducement signal include one or more frequencies for transmitting and / or receiving the inducement signal.

[0292] For example, the frequency points for sending and / or receiving the induction signal can be one or more random frequency points; or, the frequency points for sending and / or receiving the induction signal can also be the frequency points used for communication between the G node and the T node before key negotiation.

[0293] It is understood that S440 can be executed before or after S410 or S420, and this application embodiment does not limit this.

[0294] Figure 5 is a schematic diagram of a communication method 500 provided in an embodiment of this application. As shown in Figure 5, before the key sending end transmits a signal at a frequency point in the frequency hopping sequence, the sending end's host can send indication information to the sending end's device. The indication information can be used to notify the device to perform frequency hopping communication. This indication information is one possible implementation of the first signaling.

[0295] This instruction information can satisfy the following: type = command, operation = hop for key agreement (KA), parameter: hop sequence or hop sequence derivation parameter; whether an induction signal is used; frequency points for sending and / or receiving the induction signal. Specifically, type indicates the type of instruction information or the type of signaling in which this instruction information is located; operation = hop for KA indicates frequency hopping communication; parameter indicates the hop sequence or hop sequence derivation parameter.

[0296] For example, if the frequency hopping sequence is derived on the host side, the host sends the derived frequency hopping sequence to the device, and the host may not send the derived parameters to the device; if the frequency hopping sequence is derived on the device side, the host can determine whether to send the derived parameters to the device based on the type of the derived parameters, and thus determine whether to send the derived parameters.

[0297] For example, the indication information may also indicate whether an induction signal is used, and the frequency information of the induction signal (e.g., the frequency information of the induction signal includes: the value of the frequency point for sending and / or receiving the induction signal, whether the frequency point for sending and / or receiving the induction signal is random or fixed, the value of the frequency point for sending and / or receiving the parameters / information of the induction signal, or whether the frequency point for sending and / or receiving the parameters / information of the induction signal is random or fixed, etc.).

[0298] The exchange of instruction information can improve the synchronization and coordination of frequency hopping communication, and improve the overall performance of the communication system.

[0299] Taking SLB as an example, the key negotiation method / key negotiation process / key generation method can be as shown in Figure 6 or Figure 7; and / or, the method shown in Figure 6 or Figure 7 can be applied to the method / induction signal negotiation process / induction signal generation method. The method shown in Figure 6 or Figure 7 can be used in conjunction with communication method 300, communication method 400 or communication method 500, which will not be elaborated further.

[0300] It should be understood that the method shown in Figure 6 or Figure 7 is a possible example applicable to the embodiments of this application and does not constitute a limitation on the embodiments of this application. Other key negotiation processes / key negotiation procedures / key generation methods other than those in Figure 6 or Figure 7 can also be applied to the communication method provided in this application. The embodiments of this application do not limit the key negotiation method / key negotiation procedure / key generation method.

[0301] The specific implementation of the method shown in Figure 6 or Figure 7 can be found in relevant technologies, and will not be elaborated here.

[0302] Figure 6 is a schematic diagram of the associated process 600 for authentication and security context negotiation in a scenario without a security context. The associated process 600 includes the following steps:

[0303] S610, node G sends a broadcast message to node T, and correspondingly, node T receives the broadcast message from node G.

[0304] Node G carries its identity (domainID) and supported key negotiation algorithms in its broadcast messages. The key negotiation algorithms are listed in order of priority, with higher priority algorithms listed first.

[0305] If node T is configured with a whitelist, node T should only connect to nodes G in the whitelist.

[0306] Node T selects a key negotiation algorithm based on Node G's key negotiation algorithm capabilities. This algorithm should be one supported by Node T and have the highest priority among those supported by Node G. Node T generates a private key and, based on the selected key negotiation algorithm, generates a corresponding public key, where the public key serves as the key negotiation parameter KEt. Node T also generates a random number NONCEt.

[0307] S620, node T sends an association request message to node G, and correspondingly, node G receives the association request message from node T.

[0308] The association request message carries the fixed identity of the T node (e.g., identity, ID) (the fixed identity of the T node is the media access layer identifier), the key negotiation algorithm (KE alg) selected by the T node, the key negotiation parameter KEt, the security capabilities of the T node, and the random number NONCEt. Security capabilities may include the key derivation functions, encryption algorithms, integrity protection algorithms, and authentication encryption algorithms supported by the T node.

[0309] S630, node G sends a security context request message to node T, and correspondingly, node T receives the security context request message from node G.

[0310] The Security Context Request message carries the key negotiation parameters KEg of the G node, the random number NONCEg, the identifier of Kgt (KgtID), the selected algorithm, the message integrity code (MIClength), and AUTHg. The selected algorithm includes the key derivation function, the signaling plane encryption algorithm and integrity protection algorithm, as well as the user plane encryption algorithm and integrity protection algorithm, or the user plane authentication encryption algorithm.

[0311] S640, node T sends a security context response message to node G, and correspondingly, node G receives the security context response message from node T.

[0312] The security context response message carries AUTHt.

[0313] If the security context response message is encrypted, the G node decrypts it. The G node checks the integrity of the security context response message and verifies that the AUTHt is correct. If the integrity or AUTHt verification fails, the G node sends an association establishment failure message to the T node. If the integrity and AUTHt verifications pass, the G node generates a temporary identity (ID) for the T node (T-ID, where the temporary ID is the physical layer identifier).

[0314] If node T receives a message indicating that the association establishment failed, node T should re-initiate the association request message.

[0315] S650, node G sends an association establishment message to node T, and correspondingly, node T receives the association establishment message from node G.

[0316] The association establishment message carries a temporary ID (T-ID), the Kgt expiration, [GKc / GK], [GK ID], [Galgorithm], and [GK expiration]. GKc / GK indicates that GKc is carried when unicast signaling plane encryption protection is not enabled, and GK is carried when unicast signaling plane encryption protection is enabled.

[0317] S660, node T sends a connection establishment completion message to node G, and correspondingly, node G receives the connection establishment completion message from node T.

[0318] Node T uses the signaling plane integrity protection algorithm and integrity protection key Ks.int to protect the integrity of the association establishment completion message. When signaling plane encryption protection is enabled, node T uses the signaling plane encryption algorithm and encryption key Ks.enc to encrypt the association establishment completion message.

[0319] In this context, if the method shown in Figure 6 is used to determine the key, steps S620, S630, S640, S650, and S660 can also be referred to as key negotiation; the information sent and / or received in steps S620, S630, S640, S650, and S660 can also be referred to as parameters / information used to determine the key. Alternatively, if the method shown in Figure 6 is used to determine the induction signal, steps S620, S630, S640, S650, and S660 can also be referred to as induction signal negotiation; the information sent and / or received in steps S620, S630, S640, S650, and S660 can also be referred to as parameters / information used to determine the induction signal.

[0320] Figure 7 is a schematic diagram of the associated process 700 in a security context scenario.

[0321] As shown in Figure 7, when node T has a security context, authentication and security context negotiation are unnecessary; the existing security context can be used directly to establish an association. If node T fails to establish an association with node G multiple times using the saved security context, node T can attempt to delete the saved security context and use the association process without a security context. The association process without a security context is shown in Figure 6.

[0322] The associated process 700 includes the following steps:

[0323] S710, node T sends an association request message to node G, and correspondingly, node G receives the association request message from node T.

[0324] The association request message carries the temporary ID of node T, Kgt ID.

[0325] S720, node G sends an association establishment message to node T, and correspondingly, node T receives the association establishment message from node G.

[0326] If node G successfully verifies the integrity of the association request message, it generates a new temporary ID (T-ID) for node T. Node G then sends an association establishment message to node T. Node G uses the signaling plane integrity protection algorithm and integrity protection key Ks.int to protect the association establishment message. When signaling plane encryption protection is enabled, node G uses the signaling plane encryption algorithm and encryption key Ks.enc to encrypt the association establishment message.

[0327] S730, node T sends a connection establishment completion message to node G, and correspondingly, node G receives the connection establishment completion message from node T.

[0328] If the association establishment message is encrypted, node T decrypts it. Node T checks the integrity of the association establishment message; if integrity verification fails, the message is discarded. If integrity verification succeeds, node T sends an association completion message to node G.

[0329] Node T uses the signaling plane integrity protection algorithm and integrity protection key Ks.int to protect the integrity of the association establishment completion message. When signaling plane encryption protection is enabled, node T uses the signaling plane encryption algorithm and encryption key Ks.enc to encrypt the association establishment completion message.

[0330] In one possible implementation, prior to S720, method 700 may also include:

[0331] S740, node G sends a failure message to node T, and correspondingly, node T receives the failure message from node G.

[0332] Node G obtains the corresponding security context based on Node T's temporary ID and checks the integrity of the associated request message based on the security context. If Node G does not have Node T's temporary ID, or does not have the corresponding security context, or Node G fails to verify the MIC, then Node G sends a failure message to Node T, carrying a reason value. After receiving the failure message, Node T initiates the authentication and security context negotiation process without a security context (refer to the method shown in Figure 6).

[0333] In this context, if the method shown in Figure 7 is used to determine the key, S710, S720, S730, and S740 can also be referred to as key negotiation; the information sent and / or received in S710, S720, S730, and S740 can also be referred to as parameters / information used to determine the key. Alternatively, if the method shown in Figure 7 is used to determine the induction signal, S710, S720, S730, and S740 can also be referred to as induction signal negotiation; the information sent and / or received in S710, S720, S730, and S740 can also be referred to as parameters / information used to determine the induction signal.

[0334] It should be understood that the key negotiation method / key negotiation process / key generation method is only based on the SLB applicable to Figure 6 or Figure 7 as an example, and can also be the key negotiation method / key negotiation process / key generation method of other wireless communication systems.

[0335] Figure 8 is a schematic diagram of a frequency hopping sequence satisfying the frequency hopping interval.

[0336] The frequency points of a frequency hopping sequence can satisfy a certain frequency hopping interval. For example, the intervals can be divided according to a preset frequency hopping granularity. In the generation of the frequency hopping sequence, multiple optional intervals are first determined, and then the frequency points within the optional intervals are determined as the frequency points in the frequency hopping sequence.

[0337] For example, as shown in Figure 8, the total available spectrum range is 500MHz. If the frequency hopping range for each frequency point is required to be more than 20MHz, the 500MHz spectrum can be divided into 25 small frequency bands of 20MHz each. Non-adjacent 20MHz bands are selected as optional intervals, and a frequency point is selected within the optional intervals as the frequency point in the frequency hopping sequence.

[0338] It should be understood that the method for determining the frequency point in the frequency hopping sequence shown in Figure 8 is only an example of achieving the frequency hopping sequence to meet the frequency hopping interval, and does not constitute a limitation on the embodiments of this application.

[0339] In this application, frequency hopping communication with a frequency hopping range greater than 20MHz can also be referred to as frequency hopping communication in a wide bandwidth or wideband frequency hopping technology.

[0340] Frequency hopping range can be configured by the user or system configuration file. For example, it can be configured to 40MHz, 60MHz, 80MHz, ..., 200MHz, etc., and the specific frequency hopping range can be set according to the support capabilities of the device and chip. Frequency hopping within a wide bandwidth, such as 60MHz, 80MHz, etc., for key negotiation signaling interaction not only improves the flexibility and coverage of frequency hopping communication, but also makes it more difficult for attackers to capture and / or crack signals through conventional methods such as SDR device monitoring.

[0341] In the methods shown in Figures 3, 4, 6, or 7, frequency hopping communication can be used only during the key negotiation / induction signal negotiation phase, and not during other communication phases. This communication strategy can reduce bandwidth waste and implementation complexity while ensuring key negotiation security, avoid using frequency hopping communication throughout the entire communication process, and improve communication efficiency.

[0342] For example, S310 is used for frequency hopping communication, S320 is used for non-frequency hopping communication; S430 is used for frequency hopping communication; S610 is used for non-frequency hopping communication, and S620, S630, S640, S650, or S660 are used for frequency hopping communication; or, S710, S720, S730, or S740 are used for frequency hopping communication.

[0343] The methods shown in Figures 3, 4, or 5 can also be applied to communication systems other than short-range wireless communication systems. For example:

[0344] 1) Fixed-line communication

[0345] The method provided in this application can be applied not only to wireless communication but also to fixed-line communication. In fixed-line communication, frequency hopping communication over a wide bandwidth can improve data transmission security and anti-interference capabilities. For example, in fiber optic networks, broadband frequency hopping technology can be used to quickly switch between multiple wavelength channels, achieving more secure data transmission.

[0346] 2) Vehicle-mounted communication

[0347] In vehicular communication systems, such as in vehicle-to-everything (V2X) applications, the method provided in this application can significantly improve communication security. By performing frequency hopping over a wide bandwidth, attackers can effectively prevent signal capture and interference using SDR devices, thus enhancing secure communication between vehicles. Furthermore, vehicular communication devices can further improve the security of vehicular communication by negotiating induced signals at fixed frequency points to mislead attackers.

[0348] 3) Internet of Things (IoT)

[0349] In IoT applications, a large number of devices require secure key negotiation. The method provided in this application can effectively prevent attackers from capturing signals through SDR devices, ensuring the communication security of IoT devices. For example, in smart home and industrial IoT scenarios, the use of broadband frequency hopping and decoy signals can improve the security and reliability of communication between devices.

[0350] 4) Satellite communication

[0351] In satellite communication systems, traditional key negotiation methods are vulnerable to attacks due to long communication distances and complex environments. The method provided in this application improves the security and reliability of satellite communication. Satellite communication equipment can mislead attackers by negotiating inducement signals at fixed frequency points, further enhancing the security of satellite communication.

[0352] The method provided in this application is an efficient and secure key negotiation method adapted to quantum computing environments, which is of great significance for improving the overall security and anti-attack capabilities of wireless communication systems. Especially in broadband frequency-hopping communication, the method provided in this application facilitates fast and secure key negotiation in complex communication environments.

[0353] It is understood that some optional features in the various embodiments of this application may not depend on other features in some scenarios, or may be combined with other features in some scenarios, without limitation.

[0354] It is also understood that the solutions in the various embodiments of this application can be used in reasonable combinations, and the explanations or descriptions of the various terms appearing in the embodiments can be referenced or explained to each other in the various embodiments, without limitation.

[0355] It is also understood that the methods and operations implemented by devices (such as terminal nodes or management nodes) in the above-described method embodiments can also be implemented by components of the devices (such as chips or circuits), without limitation.

[0356] The method provided by the embodiments of this application has been described in detail above with reference to Figures 3 to 8.

[0357] This application embodiment also provides a communication device, which includes a first device for sending key negotiation information to other communication devices communicating with the communication device (or receiving key negotiation information from other communication devices); the first device is also used to communicate with the other communication devices based on a first key.

[0358] For example, the communication device can perform the methods shown in Design #1, Figure 3, Figure 4, Figure 5, Figure 6, or Figure 7.

[0359] In one possible implementation, the communication device is either a first node or a second node; the first device is a device.

[0360] In some possible implementations, the communication device also includes a second means for determining the first signaling.

[0361] In one possible implementation, the second device is the host.

[0362] The apparatus provided in the embodiments of this application will now be described in detail with reference to Figures 9 to 11. It should be understood that the description of the apparatus embodiments corresponds to the description of the method embodiments. Therefore, any content not described in detail can be referred to the method embodiments above, and for the sake of brevity, will not be repeated here.

[0363] Referring to Figure 9, which is a schematic diagram of a communication device 900 provided in an embodiment of this application, the device 900 includes a transceiver unit 910. The transceiver unit 910 can be used to implement corresponding communication functions. The transceiver unit 910 can also be referred to as a communication interface or a communication unit.

[0364] In one possible implementation, the device 900 further includes a processing unit 920. The processing unit 920 can be used to perform processing, such as determining a frequency hopping sequence, determining an induction key, determining a first key, determining a third frequency point, determining a first signaling, processing messages or information received by the transceiver unit, and determining messages or information sent by the transceiver unit.

[0365] In one possible implementation, the device 900 may further include a storage unit for storing instructions and / or data, and the processing unit 920 may read the instructions and / or data from the storage unit to enable the device to implement the aforementioned method embodiments (the methods of design #1 or design #2).

[0366] In one possible implementation, the transceiver unit 910 may include a receiving unit and a sending unit. The receiving unit can be used to perform receiving-related operations (such as receiving data or messages), and the sending unit can be used to perform sending-related operations (such as sending data or messages).

[0367] In one possible design, the device 900 can be the first node in the aforementioned embodiments, and the device 900 can implement the steps or processes corresponding to the first node executed in the above method embodiments. The transceiver unit 910 can be used to perform transceiver-related operations of the first node in the above method embodiments (such as sending and / or receiving data or messages), for example, the transceiver unit 910 can be used to execute S310 and S320 in the embodiment shown in FIG3. The processing unit 920 can be used to perform processing-related operations of the first node in the above method embodiments, or operations other than transceiver (such as operations other than sending and / or receiving data or messages).

[0368] In one possible implementation, the transceiver unit 910 is used to send a key negotiation message to the second node. The key negotiation message is used to determine a first key and a second key. The first key is used to encrypt the communication between the first node and the second node. The second key is a decoy key. The transceiver unit 910 is also used to communicate with the second node based on the first key.

[0369] In one possible implementation, the transceiver unit 910 is also used to receive or send one or more of the following: a third message, a fourth message, a fifth message, a sixth message, or a seventh message.

[0370] One possible implementation is a processing unit 920 used to determine a third frequency point.

[0371] In one possible implementation, the processing unit 920 is also used to determine the first signaling.

[0372] In another possible design, the device 900 can be the second node in the aforementioned embodiments, which can implement the steps or processes corresponding to the second node executed in the above method embodiments. The transceiver unit 910 can be used to perform transceiver-related operations of the second node in the above method embodiments (such as sending and / or receiving data or messages), for example, the transceiver unit 910 can be used to execute S310 and S320 in the embodiment shown in FIG3. The processing unit 920 can be used to perform processing-related operations of the second node in the above method embodiments, or operations other than transceiver (such as operations other than sending and / or receiving data or messages).

[0373] In one possible implementation, the transceiver unit 910 is configured to receive a key negotiation message from a first node, the key negotiation message being used to determine a first key and a second key, the first key being used to encrypt communication between the first node and the second node, the second key being a decoy key; the transceiver unit 910 is also configured to communicate with the first node based on the first key.

[0374] In one possible implementation, the transceiver unit 910 is also used to send or receive one or more of the following: a third message, a fourth message, a fifth message, a sixth message, or a seventh message.

[0375] One possible implementation is a processing unit 920 used to determine a third frequency point.

[0376] In one possible implementation, the processing unit 920 is also used to determine the first signaling.

[0377] It should be understood that the specific process of each unit performing the above-mentioned corresponding steps has been described in detail in the above method embodiments, and will not be repeated here for the sake of brevity.

[0378] It should also be understood that the device 900 here is embodied in the form of a functional unit. The term "unit" here can refer to an application-specific integrated circuit (ASIC), electronic circuitry, a processor (e.g., a shared processor, a proprietary processor, or a group processor, etc.) and memory for executing one or more software or firmware programs, integrated logic circuitry, and / or other suitable components supporting the described functions. In an alternative example, those skilled in the art will understand that the device 900 can specifically be the communication device in the above embodiments, and can be used to execute the various processes and / or steps corresponding to the communication device in the above method embodiments; to avoid repetition, these will not be described again here.

[0379] The apparatus 900 of each of the above-described schemes has the function of implementing the corresponding steps performed by the communication device in the above-described methods. The function can be implemented in hardware or by hardware executing corresponding software. The hardware or software includes one or more modules corresponding to the above functions; for example, the transceiver unit can be replaced by a transceiver (e.g., the transmitting unit in the transceiver unit can be replaced by a transmitter, and the receiving unit in the transceiver unit can be replaced by a receiver), and other units, such as processing units, can be replaced by processors, each executing the transceiver operations and related processing operations in the respective method embodiments.

[0380] In addition, the transceiver unit 910 can also be a transceiver circuit (for example, it may include a receiving circuit and a transmitting circuit), and the processing unit 920 can be a processing circuit.

[0381] It should be noted that the device in Figure 9 can be the communication device in the foregoing embodiments, or it can be a chip or a chip system, such as a system on a chip (SoC). The transceiver unit can be an input / output circuit or a communication interface; the processing unit is a processor, microprocessor, or integrated circuit integrated on the chip. No limitations are imposed here.

[0382] Referring to Figure 10, which is a schematic diagram of another communication device 1000 provided in an embodiment of this application, the device 1000 includes a transceiver 1030 for receiving and / or transmitting signals to perform the methods in the above method embodiments.

[0383] As shown in Figure 10, one possible implementation of the device 1000 includes a processor 1010 coupled to a memory 1020. The memory 1020 stores computer programs or instructions and / or data. The processor 1010 executes the computer programs or instructions stored in the memory 1020 or reads the data stored in the memory 1020. For example, the processor 1010 controls the transceiver 1030 to receive and / or transmit signals.

[0384] As an example, processor 1010 may have the functions of processing unit 920 shown in FIG9, memory 1020 may have the functions of storage unit, and transceiver 1030 may have the functions of transceiver unit 910 shown in FIG9.

[0385] One possible implementation is that the processor 1010 can be one or more.

[0386] One possible implementation is that the memory 1020 can be one or more.

[0387] One possible implementation is that the memory 1020 is integrated with the processor 1010, or it is set up separately.

[0388] As one option, the device 1000 is used to implement the operations performed by the communication device or communication equipment in the various method embodiments described above.

[0389] For example, processor 1010 is used to execute computer programs or instructions stored in memory 1020 to implement the relevant operations of the first node or the second node in the various method embodiments described above.

[0390] It should be understood that the processor mentioned in the embodiments of this application can be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor can be a microprocessor or any conventional processor.

[0391] It should also be understood that the memory mentioned in the embodiments of this application can be volatile memory and / or non-volatile memory. Non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory can be random access memory (RAM). For example, RAM can be used as an external cache. By way of example and not limitation, RAM includes the following forms: static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous linked dynamic random access memory (SLDRAM), and direct rambus RAM (DR RAM).

[0392] It should be noted that when the processor is a general-purpose processor, DSP, ASIC, FPGA, or other programmable logic device, discrete gate or transistor logic device, or discrete hardware component, the memory (storage module) can be integrated into the processor.

[0393] It should also be noted that the memory described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0394] Referring to Figure 11, Figure 11 is a schematic diagram of a chip system 1100 provided in an embodiment of this application. The chip system 1100 (or may also be referred to as a processing system) includes logic circuitry 1110 and an input / output interface 1120.

[0395] The logic circuit 1110 can be a processing circuit in the chip system 1100. The logic circuit 1110 can be coupled to a memory unit, calling instructions from the memory unit, enabling the chip system 1100 to implement the methods and functions of the embodiments of this application. The input / output interface 1120 can be an input / output circuit in the chip system 1100, outputting processed information from the chip system 1100, or inputting data or signaling information to be processed into the chip system 1100 for processing.

[0396] In one possible implementation, the logic circuit 1110 may be implemented by one or more processors, including the one or more processors or the processing portion of the one or more processors.

[0397] One possible implementation is that the input / output interface 1120 may include transceiver circuitry, a transceiver, input / output circuitry, or a communication interface.

[0398] As one approach, the chip system 1100 is used to implement operations performed by a communication device or communication equipment (such as a first node or a second node) in the various method embodiments described above.

[0399] For example, logic circuit 1110 is used to implement processing-related operations performed by a communication device or communication equipment (such as a first node or a second node) in the above method embodiments; input / output interface 1120 is used to implement sending and / or receiving-related operations performed by a communication device or communication equipment (such as a first node or a second node) in the above method embodiments.

[0400] This application also provides a computer-readable storage medium storing computer instructions for implementing the methods executed by a communication device or communication equipment (such as a first node or a second node) in the above-described method embodiments.

[0401] For example, when the computer program is executed by a computer / processor / communication device, it enables the computer / processor / communication device to implement the methods executed by the communication device or communication equipment (such as the first node or the second node) in the various embodiments of the above methods.

[0402] This application also provides a computer program product comprising instructions which, when executed by a computer / processor / communication device, implement the methods executed by the communication device or communication equipment (such as a first node or a second node) in the above-described method embodiments.

[0403] This application also provides a communication system that includes the terminal nodes and / or management nodes described in the preceding embodiments. For example, the system includes the first node and the second node shown in FIG3.

[0404] The explanations and beneficial effects of the relevant contents in any of the devices provided above can be found in the corresponding method embodiments provided above, and will not be repeated here.

[0405] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of apparatus or units may be electrical, mechanical, or other forms.

[0406] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. For example, the computer can be a personal computer, a server, or a network device, etc. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available media can be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., DVDs), or semiconductor media (e.g., solid-state disks, SSDs). For example, the aforementioned available media include, but are not limited to, USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks, and other media capable of storing program code.

Claims

1. A communication method, characterized in that, Applied to the first node, including: A key negotiation message is sent to the second node. The key negotiation message is used to determine a first key and a second key. The first key is used to encrypt the communication between the first node and the second node, and the second key is a decoy key. Communicate with the second node based on the first key.

2. The method according to claim 1, characterized in that, The key negotiation message includes a first message and a second message. The first message is used to determine the first key, and the second message is used to determine the second key. The subcarrier carrying the first message is orthogonal to the subcarrier carrying the second message.

3. The method according to claim 2, characterized in that, The frequency at which the second message is sent is the frequency at which the first node communicates with the second node before sending the key negotiation message to the second node; or, The frequency at which the second message is sent is randomly determined.

4. The method according to any one of claims 1 to 3, characterized in that, The communication with the second node based on the first key includes: Receive multiple first signals from the second node, and / or send multiple second signals to the second node. The first signal or the second signal is obtained by encryption based on the first key. The frequency point where the subcarrier carrying the first signal is located is the first frequency point, and / or the frequency point where the subcarrier carrying the second signal is located is the second frequency point.

5. The method according to any one of claims 1 to 4, characterized in that, Sending the key negotiation message to the second node includes: M key negotiation messages are sent to the second node via frequency hopping. The key negotiation message includes a first message, which includes the M key negotiation messages. The first message is used to determine the first key, where M is a positive integer.

6. The method according to claim 5, characterized in that, The frequency hopping transmission satisfies a frequency hopping sequence, which includes multiple frequency points, and the frequency domain interval between at least two frequency points in the frequency hopping sequence is greater than 20MHz.

7. The method according to claim 5 or 6, characterized in that, The method further includes: The third frequency point is determined based on the m'-th key negotiation information among the M key negotiation information, where the third frequency point is the frequency point of the subcarrier carrying the m-th key negotiation information among the M key negotiation information, m' is less than m, m′∈[1,M-1], m∈[2,M]; or... The third frequency point is determined based on the n'th key negotiation information among the N key negotiation information. The third frequency point is the frequency point where the subcarrier carrying the m'th key negotiation information among the M key negotiation information is located. The n'th key negotiation information is received before the m'th key negotiation information is sent. The N key negotiation information is used to determine the first key, where N is a positive integer, m∈[1,M], and n′∈[1,N].

8. The method according to claim 6, characterized in that, Before sending the key negotiation message to the second node, the method further includes: Receive a third message from the second node, or send a third message to the second node, wherein at least one frequency point in the frequency hopping sequence is determined based on the third message.

9. The method according to claim 6 or 8, characterized in that, Before sending the key negotiation message to the second node, the method further includes: Receive a fourth message from the second node, or send a fourth message to the second node, the fourth message indicating the frequency domain spacing; and / or, Receive a fifth message from the second node, or send a fifth message to the second node, the fifth message being used to indicate the frequency domain range satisfied by the plurality of frequency points.

10. The method according to any one of claims 1 to 9, characterized in that, Before sending the key negotiation message to the second node, the method further includes: Receive a sixth message from the second node, or send a sixth message to the second node, the sixth message indicating whether to send a second message, the key negotiation message including the second message, the second message used to determine the second key; and / or, Receive a seventh message from the second node, or send a seventh message to the second node, the seventh message being used to indicate the frequency point information of the second message, the frequency point information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

11. The method according to any one of claims 1 to 10, characterized in that, The method further includes: Determine the first signaling, which is used to indicate frequency hopping communication.

12. The method according to claim 11, characterized in that, The frequency points of the frequency hopping communication belong to the frequency hopping sequence; The first signaling is also used to indicate the frequency hopping sequence, and / or the first signaling is also used to indicate a first parameter, which is used to determine the frequency hopping sequence.

13. The method according to claim 11 or 12, characterized in that, The first signaling is also used to indicate whether to send or receive a second message, and / or the first signaling is also used to indicate the frequency information of the second message, the frequency information of the second message being used to send or receive the second message, the key negotiation message including the second message, the second message being used to determine the second key.

14. The method according to any one of claims 1 to 13, characterized in that, The method is applied to the field of StarSpark basic access technology.

15. A communication method, characterized in that, Applied to the second node, including: Receive a key negotiation message from a first node, the key negotiation message being used to determine a first key and a second key, the first key being used to encrypt communication between the first node and the second node, and the second key being a decoy key; Communicate with the first node based on the first key.

16. The method according to claim 15, characterized in that, The communication with the second node based on the first key includes: Sending multiple first signals to the first node, and / or receiving multiple second signals from the first node. The first signal or the second signal is obtained by encryption based on the first key. The frequency point where the subcarrier carrying the first signal is located is the first frequency point, and / or the frequency point where the subcarrier carrying the second signal is located is the second frequency point.

17. The method according to claim 15 or 16, characterized in that, The receiving of the key negotiation message from the first node includes: Frequency hopping receives M key negotiation messages from a first node. The key negotiation messages include a first message, which includes the M key negotiation messages and is used to determine the first key.

18. The method according to claim 17, characterized in that, The method further includes: The third frequency point is determined based on the m'-th key negotiation information among the M key negotiation information, where the third frequency point is the frequency point of the subcarrier carrying the m-th key negotiation information among the M key negotiation information, m' is less than m, m′∈[1,M-1], m∈[2,M]; or... The third frequency point is determined based on the n'th key negotiation information among the N key negotiation information. The third frequency point is the frequency point where the subcarrier carrying the m'th key negotiation information among the M key negotiation information is located. The n'th key negotiation information is sent before receiving the m'th key negotiation information. The N key negotiation information is used to determine the first key, where N is a positive integer, m∈[1,M], and n′∈[1,N].

19. The method according to claim 17 or 18, characterized in that, Before receiving the key negotiation message from the first node, the method further includes: Sending a third message to the first node, or receiving a third message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence, and at least one frequency point in the frequency hopping sequence is determined according to the third message.

20. The method according to any one of claims 17 to 19, characterized in that, Before receiving the key negotiation message from the first node, the method further includes: Sending a fourth message to the first node, or receiving a fourth message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence, the frequency hopping sequence including multiple frequency points, and the fourth message is used to indicate the frequency domain spacing of at least two frequency points in the frequency hopping sequence; and / or, Sending a fifth message to the first node, or receiving a fifth message from the first node, wherein the frequency hopping reception satisfies a frequency hopping sequence, the frequency hopping sequence includes multiple frequency points, and the fifth message is used to indicate the frequency domain range satisfied by the multiple frequency points.

21. The method according to any one of claims 15 to 20, characterized in that, Before receiving the key negotiation message from the first node, the method further includes: Send a sixth message to the first node, or receive a sixth message from the first node, the sixth message indicating whether to receive the second message, the key negotiation message including the second message, the second message used to determine the second key; and / or, Send a seventh message to the first node, or receive a seventh message from the first node, wherein the seventh message is used to indicate the frequency point information of the second message, the frequency point information of the second message is used to send or receive the second message, the key negotiation message includes the second message, and the second message is used to determine the second key.

22. The method according to any one of claims 15 to 21, characterized in that, The method further includes: Determine the first signaling, which is used to indicate frequency hopping communication.

23. A communication device, characterized in that, Applied to the first node, including: a first device, The first device is used to send a key negotiation message to the second node. The key negotiation message is used to determine a first key and a second key. The first key is used to encrypt the communication between the first node and the second node, and the second key is a decoy key. The first device is also used to communicate with the second node based on the first key.

24. The communication device according to claim 23, characterized in that, The communication device further includes a second device for determining a first signaling, which in turn indicates frequency hopping communication.

25. A communication device, characterized in that, Applied to the second node, including: a first device, The first device is used to receive a key negotiation message from a first node, the key negotiation message being used to determine a first key and a second key, the first key being used to encrypt communication between the first node and the second node, and the second key being a decoy key; The first device is also used to communicate with the first node based on the first key.

26. The communication device according to claim 25, characterized in that, The communication device further includes a second device for determining a first signaling, which in turn indicates frequency hopping communication.

27. A communication device, characterized in that, It includes units or modules for performing the method as described in any one of claims 1 to 14, or includes units or modules for performing the method as described in any one of claims 15 to 22.

28. A communication device, characterized in that, The device includes a processor coupled to a memory for storing computer programs or instructions, the processor for executing the computer programs or instructions stored in the memory to cause the communication device to perform the method as claimed in any one of claims 1 to 14, or to cause the communication device to perform the method as claimed in any one of claims 15 to 22.

29. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program or instructions that, when executed on a communication device, cause the communication device to perform the method as described in any one of claims 1 to 14, or cause the communication device to perform the method as described in any one of claims 15 to 22.

30. A computer program product, characterized in that, The computer program product includes a computer program or instructions for performing the method as described in any one of claims 1 to 14, or the computer program product includes a computer program or instructions for performing the method as described in any one of claims 15 to 22.

Images