Information transmission method and apparatus, device, chip, storage medium, product, and program

Abstract

Embodiments of the present application provide an information transmission method and apparatus, a device, a chip, a storage medium, a product, and a program. The method comprises: a terminal device receives first information, wherein the first information is used for indicating a security type for data transmission.

Description

Information transmission methods, devices, equipment, chips, storage media, products and programs Technical Field

[0001] This application relates to the field of communication technology, specifically to a communication method, apparatus, device, chip, storage medium, product, and program. Background Technology

[0002] The development of communication technology will place higher demands on the price and power consumption of terminal devices. In particular, low-complexity, low-cost, and low-power terminal devices will become the mainstream devices in future communication networks. These low-complexity, low-cost, and low-power terminal devices have different requirements for secure data transmission. Summary of the Invention

[0003] This application provides a communication method, apparatus, device, chip, storage medium, product, and program.

[0004] Firstly, an information transmission method is provided, the method comprising:

[0005] The terminal device receives first information, which is used to indicate the security type of data transmission.

[0006] Secondly, an information transmission method is provided, the method comprising:

[0007] The network device sends a first message, which indicates the security type of data transmission.

[0008] Thirdly, an information transmission device is provided for use in a first terminal device, the device comprising:

[0009] The first communication unit is configured to receive first information, which is used to indicate the security type of data transmission.

[0010] Fourthly, an information transmission device is provided, applied to network equipment, the device comprising:

[0011] The second communication unit is configured to send first information, which is used to indicate the security type of data transmission.

[0012] Fifthly, the terminal device provided in the embodiments of this application includes a processor and a memory. The memory is used to store computer programs, and the processor is used to call and run the computer programs stored in the memory to execute the information transmission method described above.

[0013] Sixthly, the network device provided in the embodiments of this application includes a processor and a memory. The memory is used to store computer programs, and the processor is used to call and run the computer programs stored in the memory to perform the information transmission method described above.

[0014] Seventhly, the chip provided in the embodiments of this application is used to implement the above-described information transmission method.

[0015] Specifically, the chip includes a processor for retrieving and running a computer program from memory, causing a device equipped with the chip to perform the aforementioned information transmission method.

[0016] Eighthly, the computer-readable storage medium provided in the embodiments of this application is used to store a computer program that causes a computer to perform the above-described information transmission method.

[0017] Ninthly, the computer program product provided in the embodiments of this application includes computer program instructions that cause a computer to perform the above-described information transmission method.

[0018] In a tenth aspect, the computer program provided in the embodiments of this application, when run on a computer, causes the computer to perform the above-described information transmission method.

[0019] This application provides an information transmission method in which a network device can instruct a terminal device on the security type of data transmission. This allows the terminal device to send or receive data using the appropriate security type, satisfying the diverse needs of terminal devices for secure data transmission. Attached Figure Description

[0020] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0021] Figure 1 is a schematic diagram of an application scenario of an embodiment of this application;

[0022] Figure 2 is a schematic diagram of an active scanning access process provided in an embodiment of this application;

[0023] Figure 3 is a schematic diagram of a passive scanning access process provided in an embodiment of this application;

[0024] Figure 4 is a flowchart illustrating a four-way handshake process provided in an embodiment of this application;

[0025] Figure 5 is a schematic flowchart of an information transmission method provided in an embodiment of this application;

[0026] Figure 6 is a schematic diagram of a triggering process provided in an embodiment of this application;

[0027] Figure 7 is a schematic diagram of a PPDU frame format provided in an embodiment of this application;

[0028] Figure 8 is a schematic diagram of a MAC frame format provided in an embodiment of this application;

[0029] Figure 9 is a schematic diagram of a PPDU frame format carrying a trigger frame provided in an embodiment of this application;

[0030] Figure 10 is a structural schematic diagram of an information transmission device 1000 provided in an embodiment of this application;

[0031] Figure 11 is a structural schematic diagram of an information transmission device 1100 provided in an embodiment of this application;

[0032] Figure 12 is a schematic structural diagram of a communication device provided in an embodiment of this application;

[0033] Figure 13 is a schematic structural diagram of a chip according to an embodiment of this application;

[0034] Figure 14 is a schematic block diagram of a communication system provided in an embodiment of this application. Detailed Implementation

[0035] The technical solutions of the embodiments of this application will now be described with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0036] The technical solutions of this application embodiment can be applied to various communication systems, such as: Wireless Local Area Networks (WLAN), Wireless Fidelity (WiFi), New Radio (NR) communication systems, Long Term Evolution (LTE) systems, LTE Time Division Duplex (TDD), Universal Mobile Telecommunication System (UMTS), Internet of Things (IoT) systems, Narrow Band Internet of Things (NB-IoT) systems, enhanced Machine-Type Communications (eMTC) systems, or future communication systems, etc.

[0037] It should be noted that the frequency bands supported by WLAN may include, but are not limited to: low frequency bands (2.4GHz, 5GHz, 6GHz) and high frequency bands (60GHz).

[0038] Figure 1 is an example of a WiFi communication system architecture applied in an embodiment of this application.

[0039] As shown in Figure 1, the communication system 100 may include a wireless access point (AP) 110 and stations (STAs) 120 that access the network through the AP 110. Communication in the communication system 100 may include communication between the AP 110 and the STA 120, or communication between STAs 120 and each other, or communication between STA 120 and a peer STA. A peer STA can refer to a device communicating with the other end of the STA 120; for example, a peer STA may be an AP or a non-AP STA.

[0040] The AP 110 serves as a bridge connecting wired and wireless networks, primarily linking various wireless network clients together and then connecting the wireless network to the Ethernet. The AP 110 can be a terminal device with a WiFi chip (such as a mobile phone) or a network device (such as a router).

[0041] It's important to note that the role of the STA 120 in a communication system is not absolute; that is, the STA 120 can switch between the roles of AP and STA. For example, in some scenarios, when a mobile phone is connected to a router, it acts as a STA; when the phone serves as a hotspot for other mobile phones, it acts as an AP.

[0042] In some embodiments, AP 110 and STA 120 may be devices used in the Internet of Vehicles, or IoT nodes, sensors, etc. in the Internet of Things (IoT), smart cameras, smart remote controls, smart water meters, electricity meters, etc. in smart homes, and sensors in smart cities, etc.

[0043] In some embodiments, AP 110 may be a device supporting the 802.11be standard. The AP may also be a device supporting various current and future 802.11 family WLAN standards, such as 802.11ax, 802.11ac, 802.11n, 802.11g, 802.11b, and 802.11a. In some embodiments, STA 120 may support the 802.11be standard. The STA may also support various current and future 802.11 family WLAN standards, such as 802.11ax, 802.11ac, 802.11n, 802.11g, 802.11b, and 802.11a.

[0044] In some embodiments, AP 110 and / or STA 120 can be deployed on land, including indoors or outdoors, handheld, wearable, or vehicle-mounted; they can also be deployed on water (such as on ships); and they can also be deployed in the air (e.g., on airplanes, balloons, and satellites).

[0045] In some embodiments, STA 120 may be a mobile phone, tablet, computer with wireless transceiver capabilities, virtual reality (VR) device, augmented reality (AR) device, wireless device in industrial control, set-top box, wireless device in self-driving, vehicle communication device, wireless device in remote medical, wireless device in smart grid, wireless device in transportation safety, wireless device in smart city or smart home, vehicle communication device, wireless communication chip / application specific integrated circuit (ASIC) / system on chip (SoC), etc.

[0046] For example, STA 120 can also be a wearable device. Wearable devices, also known as wearable smart devices, are a general term for devices that utilize wearable technology to intelligently design and develop everyday wearables, such as glasses, gloves, watches, clothing, and shoes. Wearable devices are portable devices that are worn directly on the body or integrated into the user's clothing or accessories. Wearable devices are not just hardware devices, but also achieve powerful functions through software support, data interaction, and cloud interaction. Broadly speaking, wearable smart devices include those that are feature-rich, large in size, and can achieve complete or partial functions without relying on a smartphone, such as smartwatches or smart glasses, as well as those that focus on a specific type of application function and require the use of other devices such as smartphones, such as various smart bracelets and smart jewelry for vital sign monitoring.

[0047] It should be understood that Figure 1 is merely an example of this application and should not be construed as a limitation of this application. For example, Figure 1 only exemplarily shows one AP and two STAs. In some embodiments, the communication system 100 may include multiple APs and other numbers of STAs, and this application does not limit this.

[0048] It should be noted that Figure 1 is merely an example illustrating the system to which this application applies. Of course, the method shown in the embodiments of this application can also be applied to other systems. Furthermore, the terms "system" and "network" are often used interchangeably in this document.

[0049] It should be understood that the term "and / or" in this article is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. Additionally, the character " / " in this article generally indicates that the preceding and following related objects have an "or" relationship.

[0050] It should also be understood that the term "instruction" mentioned in the embodiments of this application can be a direct instruction, an indirect instruction, or an indication of a relationship. For example, A instructing B can mean that A directly instructs B, such as B being able to obtain information through A; it can also mean that A indirectly instructs B, such as A instructing C, so B can obtain information through C; or it can mean that there is a relationship between A and B.

[0051] It should also be understood that the term "correspondence" mentioned in the embodiments of this application may indicate a direct or indirect correspondence between the two, or an association between the two, or a relationship of instruction and being instructed, configuration and being configured, etc.

[0052] It should also be understood that the "predefined" or "predefined rules" mentioned in the embodiments of this application can be implemented by pre-storing corresponding codes, tables, or other means that can be used to indicate relevant information in the device (e.g., including terminal devices and network devices), and this application does not limit the specific implementation method. For example, predefined can refer to those defined in the protocol.

[0053] To facilitate understanding of the technical solutions of the embodiments of this application, the relevant technologies of the embodiments of this application are described below. The following relevant technologies are optional solutions and can be combined with the technical solutions of the embodiments of this application in any way, and they all fall within the protection scope of the embodiments of this application.

[0054] The development of communication technology will place higher demands on the price and power consumption of terminal devices. In particular, low-complexity, low-cost, and low-power zero-power devices will become the mainstream devices in future communication networks.

[0055] Based on the energy source and usage method of zero-power devices, zero-power devices can be classified into the following types:

[0056] 1. Passive zero-power devices

[0057] Passive zero-power devices do not require an internal battery. When they approach network equipment (such as readers in RFID systems), they are within the near-field range of the network equipment's antenna radiation. At this point, the passive zero-power device's antenna generates an induced current through electromagnetic induction. This induced current drives the device's low-power chip circuitry to perform demodulation of forward link signals and modulation of backward link signals. For backscatter links, the zero-power device uses backscattering to transmit signals.

[0058] As can be seen, passive zero-power devices do not require built-in batteries to drive either the forward or reverse link, making them truly zero-power devices.

[0059] Passive zero-power devices do not require batteries, and their radio frequency and baseband circuits are very simple. For example, they do not require low-noise amplifiers (LNAs), power amplifiers (PAs), crystal oscillators, analog-to-digital converters (ADCs), etc. Therefore, they have many advantages such as small size, light weight, very low price, and long service life.

[0060] 2. Semi-passive zero-power devices

[0061] Semi-passive zero-power devices do not have conventional batteries installed, but they can use a radio frequency (RF) energy harvesting module to harvest radio wave energy and store the harvested energy in an energy storage unit (such as a capacitor). After obtaining energy, the energy storage unit can drive the low-power chip circuitry of the zero-power device, enabling demodulation of forward link signals and modulation of backward link signals. For backscatter links, the zero-power device uses backscattering to transmit signals.

[0062] As can be seen, semi-passive zero-power devices do not require built-in batteries to drive either the forward or reverse link. Although they use energy stored in capacitors during operation, the energy comes from the radio energy collected by the energy harvesting module, making them a true zero-power device.

[0063] Semi-passive zero-power devices inherit many advantages of passive zero-power devices, and therefore have many advantages such as small size, light weight, very low price, and long service life.

[0064] 3. Active zero-power devices

[0065] Active zero-power devices can be powered by an internal battery, which drives the device's low-power chip circuitry to demodulate forward link signals and modulate backward link signals. However, for backscatter links, zero-power devices use backscattering for signal transmission. Therefore, the zero power consumption of these terminals is mainly reflected in the fact that the signal transmission in the reverse link does not require the terminal's own power; instead, it uses backscattering.

[0066] Active zero-power devices can increase the communication distance of zero-power devices and improve communication reliability. Therefore, they are used in scenarios with relatively high requirements for communication distance and read latency.

[0067] Currently, the 3rd Generation Partnership Project (3GPP) is researching how to support ambient powered (AMP) devices in NR and WiFi systems. AMP devices are a typical type of zero-power device, requiring energy harvested from the environment. This energy source can be wireless radio frequency signals, solar energy, thermal energy, mechanical energy, etc. These devices are similar to passive or semi-passive devices in zero-power communication. AMP IoT devices harvest ambient energy and store it in an energy storage unit. Once the energy storage unit has sufficient energy, it can drive low-power circuitry for forward link signal demodulation and reverse link signal modulation and transmission.

[0068] It should be noted that devices based on ambient energy can be referred to as Ambient IoT, AMP IoT devices, AMP terminals, AMP devices, AMP STA, etc., and the embodiments of this application do not limit this.

[0069] AMP devices are broadly classified into three types: Device A, Device B, and Device C. Each type possesses corresponding complexity and communication capabilities. Device A lacks energy storage and cannot transmit independent signals; it employs backscatter transmission. Device B has energy storage and also cannot transmit independent signals, but it uses stored energy to amplify the backscattered signal. Device C has energy storage and can transmit independent signals, possessing active transmission capabilities.

[0070] It should be noted that Device A has the lowest complexity and power consumption, as low as 1μW, but its communication distance is limited, typically only a few meters. Device A requires a carrier signal from a network device for backscattering transmission. Device C generally has a large-capacity capacitor to store energy from the environment, supports power consumption of several hundred μW, can support active signal transmission, and has a longer communication distance. Because Device C can transmit actively, it does not require a carrier signal from a network device. Device B's complexity and power consumption fall between those of Device A and Device C.

[0071] In addition, zero-power devices can support various types of environmental energy harvesting, such as radio frequency (RF), solar, thermal, and mechanical energy. Among these, zero-power devices based on RF energy harvesting may require a network to provide RF power signals.

[0072] Based on the discussion of AMP equipment application scenarios in 3GPP SA1, AMP equipment can be used in at least the following four scenarios:

[0073] Object recognition, such as in logistics, warehousing, production line product management, and supply chain management;

[0074] Environmental monitoring, such as monitoring of temperature, humidity, and harmful gases in the work environment and natural environment;

[0075] Location services, such as indoor positioning, smart item finding, and production line item positioning;

[0076] Intelligent control, such as the intelligent control of various electrical appliances in smart homes (turning on and off air conditioners, adjusting temperature), and the intelligent control of various facilities in agricultural greenhouses (automatic irrigation, fertilization).

[0077] Depending on the application scenarios of AMP devices, such as logistics and warehousing, a large number of goods need to be transferred, stored, loaded, unloaded, and inventoried at logistics stations or warehouses. With the occurrence of warehouse ordering, goods receiving, goods management, and goods issuing, AMP devices need to communicate centrally with the network, such as reporting goods information and location information stored in the AMP device.

[0078] The 802.11 access process is described below.

[0079] Typically, when a STA connects to a basic service set (BSS), it goes through three stages: scanning, authentication, and association.

[0080] When a STA connects to a BSS, it first needs to perform a scan. WiFi systems involve two types of scanning processes: active scanning and passive scanning.

[0081] Referring to Figure 2, which illustrates an active scanning access process, during active scanning, the STA sends a probe request frame on its supported channels to detect the surrounding wireless networks. After receiving the probe request frame, the AP sends a probe response.

[0082] Referring to Figure 3, which illustrates a passive scanning access process, during passive scanning, the STA listens to the beacon frames periodically sent by the AP on different channels to discover the wireless network. The beacon frames contain basic information and capabilities of the BSS to which the AP belongs.

[0083] In some embodiments, a Beacon frame may include one or more of the following: BSSID, SSID, AP-supported rate, authentication method, encryption algorithm, Beacon frame transmission interval, and the channel used.

[0084] Referring to the access process shown in Figures 2 and 3, after the STA discovers the BSS and obtains its information through the scanning process, the STA can initiate an authentication process to determine its identity. Only stations whose identities are successfully authenticated can access the wireless network. The authentication process includes two steps: an authentication request and an authentication response. The STA sends an authentication request frame, and the AP responds with an authentication response frame.

[0085] Next, referring to the access process shown in Figures 2 and 3, the authenticated STA initiates the association process. The association process is the negotiation of radio link services between the STA and the AP. The association process includes two steps: association request and association response, corresponding to the STA sending an association request frame and the AP responding with an association response frame.

[0086] After completing the above access process, the STA and AP need to securely verify and exchange keys through a four-way handshake process, so as to use the keys for subsequent communication, verify the legitimacy of the other end, and prevent man-in-the-middle attacks.

[0087] Referring to Figure 4, which shows a flowchart of a 4-Way Handshake process, the 4-Way Handshake process mainly includes the following steps:

[0088] A) AP generates a random number Anose, and STA generates a random number Snonce.

[0089] B) The AP sends a random number ANonce to the STA. The Anonce can be carried in the Extensible Authentication Protocol over LAN Key (EAPOL-Key) frame.

[0090] C) STA uses ANonce and SNonce to calculate and obtain the unicast secret key (Pairwise Transit Key, PTK).

[0091] D) The STA sends the SNonce and Message Integrity Check (MIC) to the AP. The Snonce and MIC are carried in the EAPOL-Key frame.

[0092] E) AP uses SNonce to calculate the unicast key PTK.

[0093] It should be noted that the AP can also generate a MIC and verify whether it matches the received MIC.

[0094] F) The AP sends an encrypted multicast key (Group Temporal Key, GTK) to the STA, along with an instruction on whether to install the temporary key.

[0095] G) The STA sends an EAPOL-Key frame to the AP to confirm whether a temporary key has been installed.

[0096] The AP and STA complete the handshake, set a temporary key and a MIC key, and both sides have PTK and GTK encryption to encrypt subsequent data. Unicast data frames will be protected by PTK, while all multicast and broadcast data will be protected by GTK.

[0097] It should be noted that in the above 4-Way Handshake process, AP can be understood as the Authenticator, and STA can be understood as the Supplement.

[0098] It should be understood that in the aforementioned 802.11 access process, the STA and AP need to undergo scanning, authentication, association, and a four-way handshake to complete key exchange before secure communication can occur. For low-complexity, low-cost, and low-power terminal devices, their capabilities may not be able to complete the full scanning, authentication, association, and four-way handshake processes. Therefore, low-complexity, low-cost, and low-power terminal devices have different requirements for secure data transmission compared to traditional terminal devices. However, how to support the diverse needs of terminal devices for secure data transmission is an urgent problem to be solved.

[0099] In view of this, this application provides an information transmission method, apparatus, device, chip, storage medium, product, and program. In this method, a terminal device can transmit data encrypted or unencrypted according to instructions from a network device. It is applicable to terminal devices of different device types and / or data types, employing appropriate encryption methods for data transmission, thus meeting the diverse needs of terminal devices for secure data transmission.

[0100] To facilitate understanding of the technical solutions of the embodiments of this application, the technical solutions of this application are described in detail below through specific embodiments. The above-mentioned related technologies are optional solutions and can be arbitrarily combined with the technical solutions of the embodiments of this application, all of which fall within the protection scope of the embodiments of this application. The embodiments of this application include at least some of the following contents.

[0101] It should be noted that the term "security type" in this application embodiment can be understood or replaced with "security protection measures", "security protection mechanism", "encryption strategy", etc., and this application embodiment does not impose any restrictions on it.

[0102] It should also be noted that the trigger frame in the embodiments of this application may also be called a trigger channel, scheduling frame, polling frame, polling channel, grant frame, grant channel, query frame, query channel, paging frame, paging channel, etc., and the embodiments of this application do not limit it in this way.

[0103] It should also be noted that the "low complexity, low cost, low power consumption terminal device" mentioned in the embodiments of this application means that the terminal device supports one or more of the following: low complexity, low cost, and low power consumption.

[0104] Figure 5 illustrates an information transmission method provided by an embodiment of this application, which may include the following steps.

[0105] S510, the network device sends the first information, and the corresponding terminal device receives the first information, which is used to indicate the security type of data transmission.

[0106] It should be noted that the terminal device mentioned in the embodiments of this application can be a low-capability terminal device. A low-capability terminal device refers to a terminal device with low capabilities, which can be one or more of the following: low complexity, low cost, and low power consumption. In other words, the terminal device can be one or more of the following: a low-complexity terminal device, a low-cost terminal device, and a low-power terminal device.

[0107] For example, the terminal device may be a zero-power device, an Internet of Things (IoT) device, an AMP device, a STA, an AMP STA, a tag, etc. as described in the above embodiments, and this application embodiment does not limit this.

[0108] It should also be noted that the network device in the embodiments of this application can be one or more of a base station, an access point (AP), and a reader, and the embodiments of this application do not limit this.

[0109] In this embodiment, the network device can send first information to the terminal device, indicating the security type of data transmission. The security type may include whether the transmitted data is encrypted, and the encryption method / type used when encrypting the data.

[0110] It should be noted that the aforementioned data may include first data sent by the terminal device to the network device, and / or second data sent by the network device to the terminal device.

[0111] In other words, security types can include one or more of the following:

[0112] Is the first piece of data encrypted? The first piece of data is the data sent from the terminal device to the network device.

[0113] Is the second data encrypted? The second data is the data sent from the network device to the terminal device.

[0114] The method of encrypting the first data and / or the second data.

[0115] It should be noted that the first data can be called uplink data or device to reader (D2R) data, and the second data can be called downlink data or reader to device (R2D) data.

[0116] It should be understood that the relevant data (including the first data and / or the second data) transmitted between network devices and terminal devices can be transmitted in an encrypted or unencrypted manner, or in other words, the relevant data transmitted between network devices and terminal devices can be transmitted in plaintext or ciphertext.

[0117] In some embodiments, data between network devices and terminal devices can be transmitted unencrypted (i.e., in plaintext). For example, in a logistics scenario, a network device (e.g., an access point, AP) needs to read data stored on a terminal device (e.g., an AMP STA). If the data on the AMP STA is already encrypted, it does not need to be encrypted again with a key when the AMP STA sends data. Another example is an AMP STA installed on goods managed by a logistics company. The cargo information carried by the AMP STA can be encrypted using a preset key and encryption algorithm and then stored on the AMP STA. In this way, during cargo transportation, only the logistics company's AP can correctly decrypt the data reported by these AMP STAs. Yet another example is when the terminal device's limited capabilities prevent it from supporting data encryption.

[0118] In some embodiments, data between network devices and terminal devices can be transmitted in an encrypted manner (i.e., ciphertext). For example, in object-finding or sensor scenarios, network devices (e.g., access points) need to read data stored on terminal devices (AMP STAs). Since this data may not be encrypted and stored in the AMP STA in advance, it needs to be encrypted using a key when the AMP STA transmits the data.

[0119] Based on this, network devices can instruct terminal devices on the security type of data transmission. In other words, network devices can instruct terminal devices whether relevant data is encrypted, and if so, what encryption method / type is used. This allows terminal devices to send or receive data using the appropriate security type.

[0120] In some embodiments, "security type" in this application can be understood or replaced with "security protection measures", "security protection mechanism", "encryption strategy", etc., and this application does not limit this.

[0121] In some embodiments, the number of terminal devices in step S510 may include multiple devices, meaning that the network device can send the first information to multiple terminal devices simultaneously. Exemplarily, the network device sends the first information via broadcast or multicast; this embodiment does not impose any limitations on this.

[0122] In some embodiments, low-capacity terminal devices may not be able to support the complete scanning, authentication, association, and four-way handshake processes shown in Figures 2-4. Low-capacity terminal devices can use a simplified access process to access the network device. For example, the terminal device can access the network device and send data to it upon being triggered by the network device. The following description uses a WiFi system where the terminal device is an AMP STA and the network device is an AP as an example to illustrate this process.

[0123] AMP STAs have low complexity, and their receivers only support simple modulation and demodulation methods such as Amplitude-Shift Keying (ASK), Frequency-Shift Keying (FSK), and Phase-Shift Keying (PSK), but not Orthogonal Frequency Division Multiplexing (OFDM) technology. AMP STAs do not support traditional channel access mechanisms, thus they cannot coexist with existing equipment. Therefore, AMP STA data transmission requires triggering by the AP to indicate available channel resources for data transmission. These channel resources are a portion of the channel occupancy obtained by the AP through Clear Channel Assessment (CCA). For the AP-triggered AMP STA transmission process, since the number of AMP STAs may be large, a more efficient method is for the AP to allocate a certain amount of resources through a trigger frame, allowing multiple AMP STAs to use the allocated resources in a multi-user multiplexing manner. Among them, the methods of multi-user multiplexing include time division multiplexing (TDM), frequency division multiplexing (FDM), or code division multiplexing (CDM).

[0124] Taking TDM (Time Division Multiplexing) as an example, the AP allocates a certain number of time units, such as time slots, through a trigger frame. AMP STAs receiving this trigger frame can determine the target time unit within the time unit for transmission according to certain rules. It should be noted that the rules should be designed to distribute AMP STAs across different time units as much as possible to reduce collisions. Refer to Figure 6 for a typical triggering process. The AP sends a trigger frame, indicating four time slots. When AMP STAs 1-4 select slots, different AMP STAs may choose the same slot, resulting in a collision, as shown in the Collision slot in Figure 6. Alternatively, a certain time unit may not be selected for data transmission by any AMP STA, as shown in the Empty slot in Figure 6.

[0125] In simple terms, a network device can send a trigger frame to trigger a receiving end to send first data on one or more first resources. Alternatively, a trigger frame can be used to trigger a terminal device receiving the trigger frame to send first data on one or more first resources.

[0126] In some embodiments, the first information can be sent separately via dedicated signaling.

[0127] In some embodiments, the first information can be carried through a trigger frame. In other words, the trigger frame can contain the first information.

[0128] In other words, when a trigger frame triggers a terminal device to send first data, the network device can send first information to the terminal device, indicating the security type of data transmission through the first information, or in other words, indicating whether the relevant data transmitted between the network device and the terminal device is encrypted, and the encryption method.

[0129] It should be understood that after receiving a trigger frame, the terminal device can select a first resource from one or more first resources indicated by the trigger frame according to certain rules, and send first data on the selected first resource using the security type indicated by the first information. In addition, the terminal device can also receive second data sent by the network device using the security type indicated by the first information.

[0130] It should be noted that when the first information is carried in the trigger frame and the first information indicates whether the second data (data sent by the network device to the terminal device) is encrypted, the second data may include the data portion of the current trigger frame. That is, the network device can use the trigger frame to indicate whether the data portion of the current trigger frame is encrypted. In addition, the second data may also include other data subsequently sent by the network device to the terminal device; this application embodiment does not limit the types of second data.

[0131] It should be noted that in a WiFi system, information transmission between terminal devices and network devices is based on physical layer protocol data unit (PPDU) frames.

[0132] It should be understood that a PPDU frame may include a physical layer header and a data portion. The physical layer header may be used to carry physical layer control information (such as data transmission rate, packet length information, etc.) in the data portion, while the data portion is used to carry the data.

[0133] In some embodiments, the first information in step S510 may be carried in the physical layer header of the PPDU frame and / or in the data portion. That is, the network device may send a first PPDU frame to the terminal device, and the network device may carry the first information in the physical layer header and / or data portion of the first PPDU frame.

[0134] Referring to Figure 7, which illustrates a PPDU frame format, a PPDU frame may include a physical layer header and a data portion. In the WiFi-related 802.11a / g protocol, the physical layer header of the PPDU may include three parts: a Short Training Field (STF), a Long Training Field (LTF), and a Signaling Field (SIGNAL).

[0135] The STF primarily implements frame synchronization and coarse frequency synchronization, while the LTF implements fine frequency synchronization and channel estimation. The SIGNAL portion carries information related to the data portion, including data transmission rate, packet length, reserved bits, and tail bits.

[0136] It should be understood that the initial information can be carried through the SIGNAL and / or data portions.

[0137] In one possible implementation, the network device can carry all the first information in the SIGNAL of the first PPDU. Alternatively, the first information can be entirely carried by the SIGNAL of the first PPDU.

[0138] In another possible implementation, the network device can carry all the first information in the data portion of the first PPDU, or in other words, the first information is entirely carried by the data portion of the first PDDU.

[0139] In another possible implementation, the network device may place part of the first information in the SIGNAL portion of the first PPDU and place the other parts of the first information in the data portion of the first PDDU.

[0140] It should be noted that the data portion of a PPDU frame can carry a trigger frame. The trigger frame can include a first part and a second part; the first part carries the trigger frame's data, and the second part carries the trigger frame's control information.

[0141] It should also be noted that the first part can be called the frame body, and the second part can be called the frame header.

[0142] In some embodiments, in a scenario where the first information is carried by a trigger frame, the first information may be carried in a first part and / or a second part of the trigger frame.

[0143] For example, the trigger frame is a Media Access Control (MAC) frame. Referring to Figure 8, which shows a schematic diagram of a MAC frame structure, a MAC frame may include a MAC header, a frame body, and a Frame Check Sequence (FCS). The MAC header is the second part of the trigger frame in the above embodiment.

[0144] The MAC header can carry the physical address and frame control information (such as frame type, VLAN tag, etc.) for data link layer addressing and frame filtering. The frame body carries the actual transmitted data content. FCS can use Cyclic Redundancy Check (CRC) to detect whether bit errors occur during frame transmission, ensuring data integrity.

[0145] In some embodiments, referring to FIG9, a schematic diagram of a PPDU frame format carrying a trigger frame, the first information may be carried in one or more of the SIGNAL field, MAC header field, and frame body field.

[0146] It should be understood that the entire content of the first information can be carried through the SIGNAL, MAC header, or frame body. The first information can also be divided into two or three parts, carried through the SIGNAL, MAC header, and two or three parts of the frame body, respectively. This application does not limit the method of dividing the first information.

[0147] The method provided in this application embodiment allows the first information to be flexibly carried in various parts of the PPDU frame, thus enabling the network device to flexibly indicate security information for data transmission.

[0148] The following is an introduction to the content of the first piece of information.

[0149] In some embodiments, the first information may include one or more of the following a) to c).

[0150] a) Second information; the second information can be used to determine whether the first data is encrypted.

[0151] It is understandable that, in one possible implementation, the first information may include second information, which can be used to determine whether the first data is encrypted. That is, the terminal device can use the second information to determine whether subsequently sent first data is encrypted, or in other words, the terminal device can use the second information to determine whether to encrypt the first data sent to the network device.

[0152] In some embodiments (referred to as implementation a1), the second information may include first indication information, which is used to indicate whether the first data is encrypted.

[0153] Understandably, network devices can explicitly indicate whether the initial data should be encrypted.

[0154] For example, the first instruction information may be a specific information field (or information field) in the first information.

[0155] In one example, when the specific information field is mapped to a first value, it indicates that the first data should be encrypted; when the specific information field is mapped to a second value, it indicates that the first data should not be encrypted.

[0156] In another example, when the first information includes this specific information field, it indicates that the first data should be encrypted; when the specific information field is omitted, it indicates that the first data should not be encrypted.

[0157] It should be noted that the embodiments of this application do not limit the specific indication method of the first indication information.

[0158] In some embodiments (referred to as implementation a2), the second information may include second indication information, which is used to indicate the device type and / or data type; whether the device type and / or data type is encrypted and associated with the first data.

[0159] It is understandable that network devices can implicitly indicate whether to encrypt the first data. Specifically, the network device can implicitly indicate whether to encrypt the first data based on the device type and / or data type sent in the first information.

[0160] It should be noted that, in this embodiment, the first information is carried through a trigger frame. The network device sends second indication information in the trigger frame, indicating the device type and / or data type, which can trigger a terminal device of that device type and / or data type to send the first data. Accordingly, the terminal device that receives the trigger frame carrying the second indication information can determine whether its own device type and / or data type matches the device type and / or data type indicated by the second indication information. If they match, the terminal device sends the first data to the network device.

[0161] In the embodiments of this application, the device type and / or data type can be associated with whether the first data is encrypted. For example, the first device type is associated with the first data not being encrypted, and the second device type is associated with the first data being encrypted; or, the first device type corresponds to the first data not being encrypted, and the second device type corresponds to the first data being encrypted. As another example, the first data type is associated with the first data not being encrypted, and the second data type is associated with the first data not being encrypted, or, the first data type corresponds to the first data not being encrypted, and the second data type corresponds to the first data being encrypted.

[0162] In this way, after receiving the second instruction information, the terminal device can determine whether to be triggered to transmit the first data based on its own device type and / or data type. If it is triggered to transmit the first data, it can further determine whether to encrypt the first data to be sent based on its own device type and / or data type.

[0163] It should be noted that the association between device type and / or data type and whether the first data is encrypted can be predefined or network configured, and this application embodiment does not impose any restrictions on this.

[0164] It should be understood that device type can be used to distinguish different types of devices, and different types of devices have different requirements for whether the first data is encrypted or not.

[0165] In some embodiments, the device type may include one or more of the following:

[0166] The device's transmission type;

[0167] Application scenarios for the equipment;

[0168] The type of capability of the equipment.

[0169] The transmission type (or transmission method) of the device can include backscatter and active transmitter. For example, the first data of a terminal device with a backscatter transmission method is not encrypted, while the first data of a terminal device with an active transmitter transmission method is encrypted.

[0170] The application scenarios of the device may include logistics / cargo management scenarios, or item finding / sensor scenarios, etc. This application embodiment does not limit the application scenario type.

[0171] It should be understood that different application scenarios have different encryption requirements for the initial data. For example, in a logistics scenario, the AP needs to read data stored on the AMP STA. If the data on the AMP STA has already been encrypted, it does not need to be encrypted again with a key when the AMP STA sends the data. As another example, in item tracking or sensor scenarios, the AP needs to read data stored on the AMP STA. Since this data may not be encrypted beforehand and stored on the AMP STA, it needs to be encrypted with a key when the AMP STA sends the data.

[0172] In this embodiment of the application, when the second indication information indicates the application scenario type of the device, the terminal device can determine whether the first data should be encrypted based on the application scenario type.

[0173] It should be noted that the "application scenario type" mentioned in the embodiments of this application can also be understood as "business type", and the two are equivalent or interchangeable.

[0174] Furthermore, terminal devices with different capability types have varying abilities to implement data encryption or support security mechanisms. For example, capability types can include capability 1, which has a lower capability, and capability 2, which has a higher capability. Capability 1 does not support data encryption or related security mechanisms, while capability 2 supports data encryption or related security mechanisms.

[0175] It should be understood that when the second indication information indicates the capability type of the device, terminal devices of the same capability type can determine whether to send the first data and whether to encrypt the first data based on their own capability type.

[0176] In some embodiments, the second information may include only one instance. This second information may indicate whether the first data transmitted on all first resources indicated in the trigger frame is encrypted.

[0177] In some embodiments, the number of second pieces of information may include multiple pieces. These multiple pieces of second information are associated with multiple first resources. It should be noted that the first resource may be a resource used to send the first data. For example, the first resource may be a resource indicated in a trigger frame.

[0178] Each piece of second information can be used to indicate whether the first data transmitted on the associated first resource is encrypted. That is, for different resources, the terminal device sending the first data using each resource can be instructed separately whether the first data is encrypted.

[0179] In the above implementation a1, any one of the multiple second pieces of information includes first indication information, which is used to indicate whether the first data transmitted on the associated first resource is encrypted.

[0180] In other words, each second piece of information can explicitly indicate whether the first data transmitted on the associated first resource is encrypted.

[0181] In some embodiments, any of the plurality of second information includes second indication information, which is used to indicate the device type and / or data type used by the associated first resource; wherein the device type and / or data type used by the first resource is related to whether the first data transmitted on the first resource is encrypted.

[0182] In other words, each piece of second information in the first information can implicitly indicate whether the first data transmitted on the associated first resource is encrypted.

[0183] Specifically, each piece of second information in the first information can indicate the purpose of the associated first resource, that is, the device type and / or data type for which each first resource is used. In this way, the purpose of the first resource implicitly indicates the device type and / or data type of the terminal device that can use the first resource, thereby indirectly determining whether the first data sent by the terminal device on the first resource is encrypted.

[0184] It should be noted that the device type and data type can be referred to the description in the above embodiments, and will not be repeated here for the sake of brevity.

[0185] In one example, multiple pieces of second information in the first information can respectively indicate whether the first resource associated with the second information in the trigger frame is used by a terminal device with a backscatter transmission mode or by a terminal device with an active transmitter transmission mode. Here, backscatter is not encrypted and associated with the first data, while active transmitter is encrypted and associated with the first data. Thus, a terminal device with a backscatter transmission mode can send the first data on the first resource used for backscatter without encrypting it. A terminal device with an active transmitter transmission mode can send the first data on the first resource used for active transmitter and encrypt it.

[0186] In another example, multiple pieces of second information in the first information can respectively indicate whether the first resource associated with the second information in the trigger frame is used for a first application scenario type or a second application scenario type. Different application scenario types have different encryption requirements. For example, the first application scenario type requires the first data sent by the terminal device to be unencrypted, while the second application scenario type requires the first data sent by the terminal device to be encrypted. Thus, a terminal device using the first application scenario type can send the first data on the first resource used for the first application scenario type without encrypting the first data. A terminal device using the second application scenario type can send the first data on the first resource used for the second application scenario type and encrypt the first data.

[0187] In another example, multiple pieces of second information in the first information can respectively indicate whether the first resource associated with the second information in the trigger frame is used for a terminal device of capability 1 or a terminal device of capability 2. For terminal devices with different capabilities, their ability to implement data encryption or support security mechanisms differs. Specifically, a terminal device of capability 1 does not support data encryption or related security mechanisms, while a terminal device of capability 2 supports data encryption or related security mechanisms. Thus, a terminal device of capability 1 can send first data on the first resource used for capability 1 without encrypting the first data. A terminal device of capability 2 can send first data on the first resource used for capability 2 and encrypt the first data.

[0188] Understandably, a terminal device can determine whether to encrypt the first data based on its own device type and / or data type. It only needs to determine the purpose of each first resource indicated by the trigger frame. In this way, the purpose of the first resource in the trigger frame implicitly indicates the device type and / or data type of the terminal device that can use the first resource, and indirectly determines whether the first data sent by the terminal device on the first resource is encrypted.

[0189] b) Third information; the third information is used to determine whether the second data is encrypted.

[0190] It is understandable that, in another possible implementation, the first information may include the third information. The terminal device can determine whether the second data should be encrypted based on the third information.

[0191] In some embodiments, when the first information is carried by a trigger frame, the second data may include a first portion of the trigger frame, which carries the data of the trigger frame. Referring to Figures 8 and 9, the first portion may be the frame body of the trigger frame, i.e., the data portion of the trigger frame.

[0192] In other words, network devices can indicate in the trigger frame whether the data portion of the trigger frame is encrypted. After receiving the trigger frame, the terminal device determines whether the data portion of the trigger frame is encrypted using the third information carried in the trigger frame.

[0193] It should be noted that the information field containing the third information is not encrypted. For example, referring to Figure 9, the third information can be carried in the SIGNAL and / or MAC header.

[0194] It should also be noted that if the terminal device does not support receiving encrypted trigger frames, then the trigger frame will be ignored.

[0195] c) Fourth information; the fourth information is used to indicate the method of encryption for the first data and / or the second data.

[0196] In another possible implementation, the first information may include a fourth information. The fourth information is used to indicate the method of encryption for the first data and / or the second data.

[0197] It should be understood that, in order to support secure data transmission, different types of terminal devices and / or service types may employ different encryption methods. For example, high-capacity terminal devices may use more secure encryption methods, or service types with higher security requirements may use more secure encryption methods.

[0198] In this embodiment of the application, the network device can indicate not only whether the first data and / or the second data are encrypted, but also the encryption method of the first data and / or the second data.

[0199] The encryption method may include one or more of the following:

[0200] Encryption algorithm;

[0201] Encryption protocol;

[0202] Encryption parameters.

[0203] In some embodiments, the encryption algorithm may include one or more of the following: AES-CCMP-128, AES-128-CMAC, AES-128-GMAC, AES-256-CMAC, AES-256-GMAC, HMAC-SHA-256, HMAC-SHA-384, and the embodiments of this application do not limit this.

[0204] In some embodiments, the encryption protocol may include Wired Equivalent Privacy (WEP), Wi-Fi Protected Access (WPA / WPA2 / WPA3), etc., and this application embodiment does not limit this.

[0205] In some embodiments, the encryption parameters may be key information or integrity check codes, etc., and this application does not limit this.

[0206] In some embodiments, the fourth information may include a plurality of fifth information, wherein the plurality of fifth information is associated with a plurality of first resources, and each fifth information is used to indicate the encryption method of the first data sent on the associated first resource.

[0207] It should be understood that the encryption method can also be associated with a first resource indicated by the trigger frame. A terminal device that uses a certain first resource to send data can use the encryption method associated with that first resource to send data.

[0208] The method provided in this application allows a terminal device to transmit data encrypted or unencrypted according to instructions from a network device. It is applicable to terminal devices of different device types and / or data types, employing appropriate encryption methods for data transmission, thus meeting the diverse needs of terminal devices for secure data transmission.

[0209] The information transmission method provided in this application embodiment will be described in detail below with reference to specific application scenarios.

[0210] Exemplary, the method provided in this application embodiment can be applied to WiFi systems or cellular systems. The following description uses a WiFi system as an example. In a WiFi system, network devices can be called APs, and terminal devices can be called AMP devices or AMP STAs.

[0211] It should be understood that logistics and warehousing are typical application scenarios for AMP communication, where large quantities of goods need to be frequently transferred, stored, loaded, unloaded, and inventoried at logistics stations or warehouses. Along with warehouse ordering, goods receiving, goods management, and goods issuing, a large amount of warehousing information is generated. This information is generally characterized by frequent data reading operations and high latency requirements. AMP devices themselves are characterized by extremely low cost, small size, maintenance-free operation, durability, and long lifespan, making them particularly suitable for recording, storing, and updating goods information in logistics and warehousing. Building a logistics and warehousing system based on zero-power IoT can further reduce operating costs, significantly improve the efficiency of logistics and warehousing management, and contribute to the realization of smart logistics and smart warehousing. Location scenarios based on AMP devices also require reading the information stored in the AMP devices, such as the location information stored in the AMP devices, and then using the location information reported by the AMP STA for positioning.

[0212] In logistics and warehousing scenarios, AMP communication is characterized by frequent, low-volume data transmission, requiring rapid reading and identification of cargo information during the logistics process. If AMP communication is supported in 802.11 technology, existing access procedures cannot meet these communication needs. For some AMP communication scenarios similar to logistics, large-scale data transmission is not required; the main communication requirement is to identify the information carried by the AMP device bound to the cargo, such as the AMP device's ID. This is similar to the function of existing RFID, but AMP communication offers significantly improved communication distance and compatibility with existing 802.11 systems. Therefore, how to support this type of AMP communication in existing 802.11 systems is a problem that needs to be solved.

[0213] This application provides a method for achieving secure data transmission of AMP devices during trigger-based AMP device access.

[0214] The core idea of ​​this application's embodiments is that AP indicates the security type, including whether encryption is used and the encryption method.

[0215] In Example 1, the network device instructs the AMP device whether the data sent is encrypted.

[0216] In AMP communication, depending on the application scenario, the data of the AMP device can be sent in encrypted or unencrypted manner.

[0217] In some cases, data from AMP devices can be transmitted unencrypted. For example, in logistics scenarios, network devices need to read data stored on AMP devices. If the data on the AMP device is already encrypted, it doesn't need to be encrypted again with a key when the AMP device transmits the data. For instance, for goods managed by a logistics company, the data from the AMP devices used can be encrypted using a preset key and encryption algorithm before being stored on the AMP devices. During the transportation of goods, only the network devices of this logistics company can correctly decrypt the data reported by these AMP devices.

[0218] In some cases, data from AMP devices can be transmitted in an encrypted manner. For example, in object-finding or sensor-based scenarios, network devices need to read data stored on the AMP device. Since this data may not be encrypted beforehand and stored on the AMP device, it needs to be encrypted using a key when the AMP device transmits the data.

[0219] Therefore, when a network device triggers an AMP device to transmit uplink data, it can instruct the AMP whether to encrypt the data.

[0220] In one implementation, an explicit indication is made as to whether encryption is required.

[0221] Optionally, the network device can explicitly indicate whether encryption is required in the trigger frame. In the trigger frame, the appropriate information field explicitly indicates whether the AMP encrypts the data.

[0222] Optionally, the information field carries a 1-bit indication that indicates whether the data sent by the AMP device is encrypted.

[0223] In one example, information from the WiFi system is transmitted based on PPDU frames. The PPDU frame format can be referenced in Figures 7 and 9, as well as the description in the above embodiments; for brevity, it will not be repeated here.

[0224] In this example, referring to Figure 9, in the PPDU frame carrying the trigger frame, the above information field can be carried in the SIGNAL signal field, the MAC header field, or the frame body field.

[0225] Furthermore, when a network device instructs multiple resources to be used for multiple access of multiple AMP devices via a trigger frame, the network device can instruct the data of the AMP device using each resource to be encrypted separately for different resources.

[0226] In another implementation, an implicit indication is given as to whether encryption is required.

[0227] It should be understood that network devices can implicitly indicate whether encryption is required in the trigger frame. When a network device triggers an AMP device to report data, it can indicate the corresponding AMP device type, data type, etc. through indication information. The AMP device type can include AMP devices with backscatter and active transmitter transmission methods, AMP devices used for logistics or sensors, or AMP devices with different capabilities.

[0228] Optionally, for AMP devices with transmission methods including backscatter and active transmitter, encryption can be determined based on the transmission method. For example, data from AMP devices with a backscatter transmission method is not encrypted, while data from AMP devices with an active transmitter transmission method is encrypted.

[0229] Optionally, for AMP devices used in different application scenarios, such as AMP devices for logistics or sensors, due to different encryption requirements, when a trigger frame indicates a resource, the AMP device can determine whether to perform encryption based on the type of AMP device using the resource. The type of AMP device can be the service type for which the AMP device sends data.

[0230] It should be noted that AMP devices can also determine whether to encrypt based on their own type. They only need to determine the purpose of the resource indicated by the trigger frame. In this way, the purpose of the resource in the trigger frame implicitly indicates the type of AMP device that can use the resource, and indirectly determines whether the data sent by the AMP on that resource is encrypted.

[0231] Optionally, AMP devices with different capabilities may have different abilities to implement data encryption or support security mechanisms. For example, an AMP device may have a lower capability (Capability 1) and a higher capability (Capability 2). Capability 1 does not support data encryption or related security mechanisms, while Capability 2 supports data encryption or related security mechanisms. When a trigger frame indicates a resource, the AMP device can determine whether to perform encryption based on the capability type of the AMP device using that resource. Similarly, an AMP device can also determine whether to encrypt based on its own capability type by simply determining the purpose of the resource indicated by the trigger frame. Thus, the purpose of the resource in the trigger frame implicitly indicates the capability type of the AMP device that can use that resource, indirectly determining whether the data sent by the AMP on that resource is encrypted.

[0232] Example 2: The network device indicates whether the data sent by the network device is encrypted.

[0233] Network devices can also indicate in the trigger frame whether the data portion of the trigger frame is encrypted. The information field containing this indication is not encrypted. After receiving the trigger frame, the AMP device uses this indication to determine whether the data portion of the trigger frame is encrypted. If the AMP device does not support receiving encrypted trigger frames, it ignores the trigger frame.

[0234] Optionally, this indication information can be carried in the SIGNAL field or in the MAC header field.

[0235] Example 3: The network device indicates the encryption method for the data sent by the network device or AMP device.

[0236] In addition to indicating whether the data transmitted by the network device or AMP device is encrypted, network devices can also indicate the encryption method. To support secure data transmission, AMP devices with different transmission methods, service types, or capabilities can employ different encryption methods. For example, high-capacity AMP devices can use more secure encryption methods, or more secure encryption methods can be used for service types with higher security requirements.

[0237] Similarly, the encryption method can also be associated with the resource indicated by the trigger frame. An AMP device that uses a certain resource to send data uses the encryption method associated with that resource to send the data.

[0238] Specifically, encryption methods can be encryption algorithms, such as AES-CCMP-128, AES-128-CMAC, AES-128-GMAC, AES-256-CMAC, AES-256-GMAC, HMAC-SHA-256, HMAC-SHA-384, etc.

[0239] Specifically, the encryption method can also be a supported encryption protocol, such as Wired Equivalent Privacy (WEP) or Wi-Fi Protected Access (WPA / WPA2 / WPA3).

[0240] The information transmission method provided in this application embodiment can realize an encryption mode indication process. The AMP device can select the corresponding resources for encrypted or unencrypted data transmission according to the indication of the network device. It is applicable to AMP devices of different device types and service types to use the corresponding encryption mode for data transmission.

[0241] The preferred embodiments of this application have been described in detail above with reference to the accompanying drawings. However, this application is not limited to the specific details of the above embodiments. Within the scope of the technical concept of this application, various simple modifications can be made to the technical solutions of this application, and these simple modifications all fall within the protection scope of this application. For example, the various specific technical features described in the above specific embodiments can be combined in any suitable manner without contradiction. To avoid unnecessary repetition, this application will not describe the various possible combinations separately. Furthermore, various different embodiments of this application can also be arbitrarily combined, as long as they do not violate the spirit of this application, they should also be considered as the content disclosed in this application. Moreover, without conflict, the various embodiments and / or the technical features in the various embodiments described in this application can be arbitrarily combined with the prior art, and the resulting technical solutions should also fall within the protection scope of this application.

[0242] It should also be understood that in the various method embodiments of this application, the sequence number of each process does not imply the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. Furthermore, in the embodiments of this application, the terms "downlink," "uplink," and "sidelink" are used to indicate the transmission direction of signals or data. "Downlink" indicates that the transmission direction of signals or data is a first direction from the site to the user equipment in the cell; "uplink" indicates that the transmission direction of signals or data is a second direction from the user equipment in the cell to the site; and "sidelink" indicates that the transmission direction of signals or data is a third direction from user equipment 1 to user equipment 2. For example, "downlink signal" indicates that the transmission direction of the signal is the first direction. Additionally, in the embodiments of this application, the term "and / or" is merely a description of the association relationship between related objects, indicating that three relationships can exist. Specifically, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. Furthermore, the character " / " in this document generally indicates that the preceding and following related objects have an "or" relationship.

[0243] Based on the foregoing embodiments, this application provides a corresponding information transmission device.

[0244] Figure 10 is a schematic diagram of the structure of the information transmission device 100 provided in this application embodiment, and an application terminal device. As shown in Figure 10, the information transmission device 100 includes:

[0245] The first communication unit 1010 is configured to receive first information, which is used to indicate the security type of data transmission.

[0246] In some embodiments, the security type includes one or more of the following:

[0247] Is the first data encrypted? The first data is data sent from the terminal device to the network device.

[0248] Is the second data encrypted? The second data is data sent from the network device to the terminal device.

[0249] The method of encrypting the first data and / or the second data.

[0250] In some embodiments, the first information includes the second information.

[0251] The second information is used to determine whether the first data is encrypted; the first data is data sent by the terminal device to the network device.

[0252] In some embodiments, the second information includes first indication information, which is used to indicate whether the first data is encrypted.

[0253] In some embodiments, the second information includes second indication information, which is used to indicate the device type and / or data type; the device type and / or the data type is associated with whether the first data is encrypted.

[0254] In some embodiments, the number of the second information includes multiple second information items, and the multiple second information items are associated with multiple first resources; the first resources are used to send first data; each second information item is used to determine whether the first data transmitted on the associated first resource is encrypted.

[0255] In some embodiments, any one of the plurality of second pieces of information includes first indication information.

[0256] The first indication information is used to indicate whether the first data transmitted on the associated first resource is encrypted.

[0257] In some embodiments, any one of the plurality of second pieces of information includes second indication information.

[0258] The second indication information is used to indicate the device type and / or data type for which the associated first resource is used;

[0259] The device type and / or data type used for the first resource are related to whether the first data transmitted on the first resource is encrypted.

[0260] In some embodiments, the device type includes one or more of the following:

[0261] The device's transmission type;

[0262] Application scenarios for the equipment;

[0263] The type of capability of the equipment.

[0264] In some embodiments, the first information includes third information, which is used to determine whether the second data is encrypted; the second data is data sent by the network device to the terminal device.

[0265] In some embodiments, the first information is carried by a trigger frame, and the second data includes a first portion of the trigger frame, the first portion being used to carry the data of the trigger frame.

[0266] In some embodiments, the first information includes fourth information.

[0267] The fourth piece of information is used to indicate the method of encryption for the first data and / or the second data; wherein...

[0268] The first data is data sent from the terminal device to the network device;

[0269] The second data is the data sent from the network device to the terminal device.

[0270] In some embodiments, the fourth information includes a plurality of fifth information.

[0271] The plurality of fifth pieces of information are associated with a plurality of first resources, the first resources being used to send first data;

[0272] Each of the plurality of fifth pieces of information is used to indicate the encryption method of the first data sent on the associated first resource.

[0273] In some embodiments, the encryption method includes one or more of the following:

[0274] Encryption algorithm;

[0275] Encryption protocol;

[0276] Encryption parameters.

[0277] In some embodiments, the first information is carried by a trigger frame, which is used to trigger the receiving end of the trigger frame to send first data on one or more first resources.

[0278] In some embodiments, the first communication unit 1010 is further configured to receive PPDU frames.

[0279] The PPDU frame includes a physical layer portion and a data portion; wherein, the physical layer portion is used to carry physical layer control information of the data portion, and the data portion is used to carry data;

[0280] The first information is carried through the physical layer portion, and / or the data portion.

[0281] In some embodiments, the data portion is used to carry a trigger frame, which is used to trigger one or more terminal devices to send first data on one or more first resources;

[0282] The trigger frame includes a first part and a second part, wherein the first part is used to carry the data of the trigger frame and the second part is used to carry the control information of the trigger frame.

[0283] The first information is carried by the first part, and / or by the second part.

[0284] In some embodiments, the terminal device is one or more of the following:

[0285] Low-complexity terminal devices, low-cost terminal devices, and low-power terminal devices.

[0286] In some embodiments, the terminal device is a zero-power device, an IoT device, an environmental IoT device, a terminal site (STA), or an environmental IoT terminal site (AMP STA).

[0287] Figure 11 is a schematic diagram of the structure of the information transmission device provided in the embodiment of the application, which is applied to a network device. As shown in Figure 11, the information transmission device 11 includes:

[0288] The second communication unit 1110 is configured to send first information, which is used to indicate the security type of data transmission.

[0289] In some embodiments, the security type includes one or more of the following:

[0290] Is the first data encrypted? The first data is data sent from the terminal device to the network device.

[0291] Is the second data encrypted? The second data is data sent from the network device to the terminal device.

[0292] The method of encrypting the first data and / or the second data.

[0293] In some embodiments, the first information includes the second information.

[0294] The second information is used to determine whether the first data is encrypted; the first data is data sent by the terminal device to the network device.

[0295] In some embodiments, the second information includes first indication information.

[0296] The first indication information is used to indicate whether the first data is encrypted.

[0297] In some embodiments, the second information includes second indication information.

[0298] The second indication information is used to indicate the device type and / or data type;

[0299] Whether the device type and / or the data type are associated with the encryption of the first data.

[0300] In some embodiments, the number of the second information includes multiple types.

[0301] Multiple pieces of second information are associated with multiple first resources; the first resources are used to send first data;

[0302] Each piece of the second information is used to determine whether the first data transmitted on the associated first resource is encrypted.

[0303] In some embodiments, any one of the plurality of second pieces of information includes first indication information.

[0304] The first indication information is used to indicate whether the first data transmitted on the associated first resource is encrypted.

[0305] In some embodiments, any one of the plurality of second pieces of information includes second indication information.

[0306] The second indication information is used to indicate the device type and / or data type for which the associated first resource is used;

[0307] The device type and / or data type used for the first resource are related to whether the first data transmitted on the first resource is encrypted.

[0308] In some embodiments, the device type includes one or more of the following:

[0309] The device's transmission type;

[0310] Application scenarios for the equipment;

[0311] The type of capability of the equipment.

[0312] In some embodiments, the first information includes third information.

[0313] The third piece of information is used to determine whether the second data is encrypted; the second data is data sent from the network device to the terminal device.

[0314] In some embodiments, the first information is carried by a trigger frame, and the second data includes a first portion of the trigger frame, the first portion being used to carry the data of the trigger frame.

[0315] In some embodiments, the first information includes fourth information.

[0316] The fourth piece of information is used to indicate the method of encryption for the first data and / or the second data; wherein...

[0317] The first data is data sent from the terminal device to the network device;

[0318] The second data is the data sent from the network device to the terminal device.

[0319] In some embodiments, the fourth information includes a plurality of fifth information.

[0320] The plurality of fifth pieces of information are associated with a plurality of first resources, the first resources being used to send first data;

[0321] Each of the plurality of fifth pieces of information is used to indicate the encryption method of the first data sent on the associated first resource.

[0322] In some embodiments, the encryption method includes one or more of the following:

[0323] Encryption algorithm;

[0324] Encryption protocol;

[0325] Encryption parameters.

[0326] In some embodiments, the first information is carried by a trigger frame, which is used to trigger the receiving end of the trigger frame to send first data on one or more first resources.

[0327] In some embodiments, the second communication unit 1110 is configured to receive PPDU frames.

[0328] The PPDU frame includes a physical layer portion and a data portion; wherein, the physical layer portion is used to carry physical layer control information of the data portion, and the data portion is used to carry data;

[0329] The first information is carried through the physical layer portion, and / or the data portion.

[0330] In some embodiments, the data portion is used to carry a trigger frame, which is used to trigger one or more terminal devices to send first data on one or more first resources;

[0331] The trigger frame includes a first part and a second part, wherein the first part is used to carry the data of the trigger frame and the second part is used to carry the control information of the trigger frame.

[0332] The first information is carried by the first part, and / or by the second part.

[0333] In some embodiments, the network device is a base station, a wireless access point (AP), or a reader.

[0334] Those skilled in the art should understand that the description of the information transmission device in the embodiments of this application can be understood with reference to the description of the information transmission method in the embodiments of this application.

[0335] Figure 12 is a schematic structural diagram of a communication device provided in an embodiment of this application. This communication device can be a network device or a terminal device. The communication device 1200 shown in Figure 12 includes a processor 1210, which can call and run computer programs from memory to implement the methods in the embodiments of this application.

[0336] Optionally, as shown in FIG12, the communication device 1200 may further include a memory 1220. The processor 1210 may retrieve and run computer programs from the memory 1220 to implement the methods in the embodiments of this application.

[0337] The memory 1220 can be a separate device independent of the processor 1210, or it can be integrated into the processor 1210.

[0338] Optionally, as shown in FIG12, the communication device 1200 may further include a transceiver 1230, and the processor 1210 may control the transceiver 1230 to communicate with other devices. Specifically, it may send information or data to other devices or receive information or data sent by other devices.

[0339] The transceiver 1230 may include a transmitter and a receiver. The transceiver 1230 may further include an antenna, and the number of antennas may be one or more.

[0340] Optionally, the communication device 1200 may specifically be a network device in the embodiments of this application, and the communication device 1200 may implement the corresponding processes implemented by the network device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0341] Optionally, the communication device 1200 may specifically be a terminal device in the embodiments of this application, and the communication device 1200 may implement the corresponding processes implemented by the terminal device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0342] Figure 13 is a schematic structural diagram of a chip according to an embodiment of this application. The chip 1300 shown in Figure 13 includes a processor 1310, which can call and run computer programs from memory to implement the methods in the embodiments of this application.

[0343] Optionally, as shown in FIG13, chip 1300 may further include memory 1320. Processor 1310 may retrieve and run computer programs from memory 1320 to implement the methods in the embodiments of this application.

[0344] The memory 1320 can be a separate device independent of the processor 1310, or it can be integrated into the processor 1310.

[0345] Optionally, the chip 1300 may also include an input interface 1330. The processor 1310 can control the input interface 1330 to communicate with other devices or chips; specifically, it can acquire information or data sent by other devices or chips.

[0346] Optionally, the chip 1300 may also include an output interface 1340. The processor 1310 can control the output interface 1340 to communicate with other devices or chips, specifically, to output information or data to other devices or chips.

[0347] Optionally, the chip can be applied to the network device in the embodiments of this application, and the chip can implement the corresponding processes implemented by the network device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0348] Optionally, the chip can be applied to the terminal device in the embodiments of this application, and the chip can implement the corresponding processes implemented by the first terminal device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0349] It should be understood that the chip mentioned in the embodiments of this application may also be referred to as a system-on-a-chip, system chip, chip system, or system-on-a-chip, etc.

[0350] This application also provides a computer storage medium storing one or more programs, which can be executed by one or more processors to implement the methods in this application.

[0351] Figure 14 is a schematic block diagram of a communication system provided in an embodiment of this application. As shown in Figure 14, the communication system 1400 includes a network device 1410 and a terminal device 1420.

[0352] The network device 1410 can be used to implement the corresponding functions implemented by the network device in the above method, and the terminal device 1420 can be used to implement the corresponding functions implemented by the terminal device in the above method. For the sake of brevity, these will not be described in detail here.

[0353] It should be understood that the processor in the embodiments of this application may be an integrated circuit chip with signal processing capabilities. In implementation, the steps of the above method embodiments can be completed by integrated logic circuits in the processor's hardware or by instructions in software form. The processor described above can be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of this application can be directly embodied in the execution of a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software modules can be located in random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, or other mature storage media in the art. The storage medium is located in memory, and the processor reads information from the memory and, in conjunction with its hardware, completes the steps of the above method.

[0354] It is understood that the memory in the embodiments of this application can be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. The non-volatile memory can be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. The volatile memory can be random access memory (RAM), which is used as an external cache. By way of example, but not limitation, many forms of RAM are available, such as Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), Synchronous DRAM (SDRAM), Double Data Rate SDRAM (DDR SDRAM), Enhanced Synchronous DRAM (ESDRAM), Synchlink DRAM (SLDRAM), and Direct Rambus RAM (DR RAM). It should be noted that the memory used in the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0355] It should be understood that the above-described memory is exemplary and not a limiting description. For example, the memory in the embodiments of this application may also be static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct memory bus RAM (DR RAM), etc. That is to say, the memory in the embodiments of this application is intended to include, but is not limited to, these and any other suitable types of memory.

[0356] This application also provides a computer-readable storage medium for storing computer programs.

[0357] Optionally, the computer-readable storage medium can be applied to the network device in the embodiments of this application, and the computer program causes the computer to execute the corresponding processes implemented by the network device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0358] Optionally, the computer-readable storage medium can be applied to the terminal device in the embodiments of this application, and the computer program causes the computer to execute the corresponding processes implemented by the terminal device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0359] This application also provides a computer program product, including computer program instructions.

[0360] Optionally, the computer program product can be applied to the network device in the embodiments of this application, and the computer program instructions cause the computer to execute the corresponding processes implemented by the network device in the various methods of the embodiments of this application. For the sake of brevity, they will not be described in detail here.

[0361] Optionally, the computer program product can be applied to the terminal device in the embodiments of this application, and the computer program instructions cause the computer to execute the corresponding processes implemented by the terminal device in the various methods of the embodiments of this application. For the sake of brevity, they will not be described in detail here.

[0362] This application also provides a computer program.

[0363] Optionally, the computer program can be applied to the network device in the embodiments of this application. When the computer program is run on the computer, it causes the computer to execute the corresponding processes implemented by the network device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0364] Optionally, the computer program can be applied to the terminal device in the embodiments of this application. When the computer program is run on the computer, it causes the computer to execute the corresponding processes implemented by the terminal device in the various methods of the embodiments of this application. For the sake of brevity, it will not be described in detail here.

[0365] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0366] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0367] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0368] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0369] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0370] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0371] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. An information transmission method, the method comprising: The terminal device receives first information, which is used to indicate the security type of data transmission.

2. The method according to claim 1, wherein, The security type includes one or more of the following: Is the first data encrypted? The first data is data sent from the terminal device to the network device. Is the second data encrypted? The second data is data sent from the network device to the terminal device. The method of encrypting the first data and / or the second data.

3. The method according to claim 1 or 2, wherein, The first information includes the second information. The second information is used to determine whether the first data is encrypted; the first data is data sent by the terminal device to the network device.

4. The method according to claim 3, wherein, The second information includes the first instruction information. The first indication information is used to indicate whether the first data is encrypted.

5. The method according to claim 3, wherein, The second information includes second instruction information. The second indication information is used to indicate the device type and / or data type; Whether the device type and / or the data type are associated with the encryption of the first data.

6. The method according to any one of claims 3-5, wherein, The second information includes multiple items. Multiple pieces of second information are associated with multiple first resources; the first resources are used to send first data; Each piece of the second information is used to determine whether the first data transmitted on the associated first resource is encrypted.

7. The method according to claim 6, wherein, Any of the multiple pieces of the second information includes the first indication information. The first indication information is used to indicate whether the first data transmitted on the associated first resource is encrypted.

8. The method according to claim 6, wherein, Any one of the plurality of second information includes second indication information. The second indication information is used to indicate the device type and / or data type for which the associated first resource is used; The device type and / or data type used for the first resource are related to whether the first data transmitted on the first resource is encrypted.

9. The method according to claim 5 or 8, wherein, The device type includes one or more of the following: The device's transmission type; Application scenarios for the equipment; The type of capability of the equipment.

10. The method according to any one of claims 1-9, wherein, The first information includes the third information. The third piece of information is used to determine whether the second data is encrypted; the second data is data sent from the network device to the terminal device.

11. The method according to claim 10, The first information is carried by a trigger frame, and the second data includes a first part of the trigger frame, which is used to carry the data of the trigger frame.

12. The method according to any one of claims 1-11, wherein, The first information includes the fourth information. The fourth piece of information is used to indicate the method of encryption for the first data and / or the second data; wherein... The first data is data sent from the terminal device to the network device; The second data is the data sent from the network device to the terminal device.

13. The method according to claim 12, wherein, The fourth piece of information includes multiple fifth pieces of information. The plurality of fifth pieces of information are associated with a plurality of first resources, the first resources being used to send first data; Each of the plurality of fifth pieces of information is used to indicate the encryption method of the first data sent on the associated first resource.

14. The method according to claim 12 or 13, wherein, The encryption method includes one or more of the following: Encryption algorithm; Encryption protocol; Encryption parameters.

15. The method according to any one of claims 1-14, wherein, The first information is carried by a trigger frame, which is used to trigger the receiving end of the trigger frame to send first data on one or more first resources.

16. The method according to any one of claims 1-15, wherein, The terminal device receives first information, including: The terminal device receives PPDU frames. The PPDU frame includes a physical layer portion and a data portion; wherein, the physical layer portion is used to carry physical layer control information of the data portion, and the data portion is used to carry data; The first information is carried through the physical layer portion, and / or the data portion.

17. The method according to claim 16, wherein, The data portion is used to carry a trigger frame, which is used to trigger the receiving end of the trigger frame to send first data on one or more first resources; The trigger frame includes a first part and a second part, wherein the first part is used to carry the data of the trigger frame and the second part is used to carry the control information of the trigger frame. The first information is carried by the first part, and / or by the second part.

18. The method according to any one of claims 1-17, wherein, The terminal device is one or more of the following: Low-complexity terminal devices, low-cost terminal devices, and low-power terminal devices.

19. The method according to any one of claims 1-18, wherein, The terminal device is a zero-power device, an IoT device, an environmental IoT device, a terminal site (STA), or an environmental IoT terminal site (AMP STA).

20. An information transmission method, the method comprising: The network device sends a first message, which indicates the security type of data transmission.

21. The method according to claim 20, wherein, The security type includes one or more of the following: Is the first data encrypted? The first data is data sent from the terminal device to the network device. Is the second data encrypted? The second data is data sent from the network device to the terminal device. The method of encrypting the first data and / or the second data.

22. The method according to claim 20 or 21, wherein, The first information includes the second information. The second information is used to determine whether the first data is encrypted; the first data is data sent by the terminal device to the network device.

23. The method according to claim 22, wherein, The second information includes the first instruction information. The first indication information is used to indicate whether the first data is encrypted.

24. The method according to claim 22, wherein, The second information includes second instruction information. The second indication information is used to indicate the device type and / or data type; Whether the device type and / or the data type are associated with the encryption of the first data.

25. The method according to any one of claims 22-24, wherein, The second information includes multiple items. Multiple pieces of second information are associated with multiple first resources; the first resources are used to send first data; Each piece of the second information is used to determine whether the first data transmitted on the associated first resource is encrypted.

26. The method according to claim 25, wherein, Any of the multiple pieces of the second information includes the first indication information. The first indication information is used to indicate whether the first data transmitted on the associated first resource is encrypted.

27. The method according to claim 25, wherein, Any one of the plurality of second information includes second indication information. The second indication information is used to indicate the device type and / or data type for which the associated first resource is used; The device type and / or data type used for the first resource are related to whether the first data transmitted on the first resource is encrypted.

28. The method according to claim 24 or 27, wherein, The device type includes one or more of the following: The device's transmission type; Application scenarios for the equipment; The type of capability of the equipment.

29. The method according to any one of claims 20-28, wherein, The first information includes the third information. The third piece of information is used to determine whether the second data is encrypted; the second data is data sent from the network device to the terminal device.

30. The method according to claim 29, The first information is carried by a trigger frame, and the second data includes a first part of the trigger frame, which is used to carry the data of the trigger frame.

31. The method according to any one of claims 20-30, wherein, The first information includes the fourth information. The fourth piece of information is used to indicate the method of encryption for the first data and / or the second data; wherein... The first data is data sent from the terminal device to the network device; The second data is the data sent from the network device to the terminal device.

32. The method according to claim 31, wherein, The fourth piece of information includes multiple fifth pieces of information. The plurality of fifth pieces of information are associated with a plurality of first resources, the first resources being used to send first data; Each of the plurality of fifth pieces of information is used to indicate the encryption method of the first data sent on the associated first resource.

33. The method according to claim 31 or 32, wherein, The encryption method includes one or more of the following: Encryption algorithm; Encryption protocol; Encryption parameters.

34. The method according to any one of claims 20-33, wherein, The first information is carried by a trigger frame, which is used to trigger the receiving end of the trigger frame to send first data on one or more first resources.

35. The method according to any one of claims 20-34, wherein, The network device sends first information, including: The network device sends PPDU frames. The PPDU frame includes a physical layer portion and a data portion; wherein, the physical layer portion is used to carry physical layer control information of the data portion, and the data portion is used to carry data; The first information is carried through the physical layer portion, and / or the data portion.

36. The method according to claim 35, wherein, The data portion is used to carry a trigger frame, which is used to trigger one or more terminal devices to send first data on one or more first resources; The trigger frame includes a first part and a second part, wherein the first part is used to carry the data of the trigger frame and the second part is used to carry the control information of the trigger frame. The first information is carried by the first part, and / or by the second part.

37. The method according to any one of claims 20-36, wherein, The network devices include a base station, a wireless access point (AP), and a reader.

38. An information transmission device applied to a terminal device, the device comprising: The first communication unit is configured to receive first information, which is used to indicate the security type of data transmission.

39. An information transmission device applied to a network device, the device comprising: The second communication unit is configured to send first information, which is used to indicate the security type of data transmission.

40. A communication device, comprising: Memory is used to store executable instructions for a computer; A processor, connected to the memory, is configured to implement the method of any one of claims 1 to 19 by executing the computer-executable instructions; or to implement the method of any one of claims 20 to 37.

41. A chip, the chip comprising: A processor for retrieving and running a computer program from memory, causing a device having the chip mounted to perform the method as described in any one of claims 1 to 19, or to perform the method as described in any one of claims 20 to 37.

42. A computer-readable storage medium storing a computer program that, when executed by at least one processor, implements the method as claimed in any one of claims 1 to 19, or the method as claimed in any one of claims 20 to 37.

43. A computer program product comprising a computer storage medium storing a computer program, the computer program comprising instructions executable by at least one processor, wherein the instructions, when executed by the at least one processor, implement the method of any one of claims 1 to 19, or the method of any one of claims 20 to 37.

44. A computer program that causes a computer to perform the method as claimed in any one of claims 1 to 19, or to perform the method as claimed in any one of claims 20 to 37.

Images