CN102711105B - The method, the Apparatus and system that communicate is carried out by mobile communications network - Google Patents

Abstract

The present invention is applicable to the communication field, and provides a method for communicating through a mobile communication network. The method includes the following steps: MME sends communication data to devices of both parties in communication; eNB instructs devices of both parties in communication to establish a communication data bearer, generates RNTI and sends The RNTI is distributed to the devices of both parties in communication; the devices of both parties in communication use the existing mobile communication network to communicate according to the received communication data. In the embodiment of the present invention, the MME obtains information about whether the UE can perform D2D communication, judges whether the two parties in communication can use the same security algorithm, and downloads the security algorithm used by the mobile communication to the two parties in communication, so that the two parties in communication can use the existing mobile communication technology The mature and safe security algorithm for communication not only enables the application of mobile communication technology in D2D communication, but also uses the existing mobile communication technology for communication, which not only has a simple verification process, but also has high security.

Description

Method, device and system for communicating via mobile communication network

technical field

The invention belongs to the field of communication, in particular to a method, device and system for communicating through a mobile communication network.

Background technique

eNB: enhancedNodeB, evolved NodeB, which is equivalent to a base station in the existing mobile communication technology.

MME: MobilityManagementEntity, mobile management entity, the key control node in the existing mobile communication system.

UE: UserEquipment, user equipment.

RNTI: Radio Network Temporary Identifier, which is used as the identification of the UE inside the signal.

RRC: RadioResourceControl, radio resource control protocol.

The Internet of Things refers to the deployment of various devices with certain perception, calculation, execution and communication capabilities to obtain information in the physical world, and to realize information transmission, collaboration and processing through the network, thereby realizing the interconnection between people and things, and things and things. The internet. Device to device communication (device to device D2D) communication, as a kind of Internet of Things application, mainly realizes direct communication between two devices. Possible technologies may include short-distance wireless communication technologies such as wireless personal area network (WPAN: Wireless Personal Area Network), ultra-wideband (UWB: Ultra Wideband), Bluetooth (Bluetooth), and Wifi.

The vigorous development of the Internet of Things has further demonstrated the huge market potential and value of short-range wireless applications. However, mobile operators are rarely involved in this area, or lack the necessary control. At present, relevant companies have carried out research on supporting D2D applications in the authorized frequency bands of operators, and are actively promoting the establishment of projects in the well-known standards organization 3GPP. Its purpose is to support and implement D2D applications by using the operator's authorized frequency band, so that the operator can have a greater initiative in the short-distance wireless application market.

One of the conveniences brought by the realization of D2D in the operator's mobile communication network is that the security operation is convenient, no human participation is required, and key negotiation and data encryption can be realized based on the existing security mechanism of the mobile communication network. However, according to the existing mobile communication network, the security processes of the calling side and the called side, including authentication, key agreement and encryption (integrity check) algorithm negotiation, etc., are independent of each other. Devices with different capabilities may have different support capabilities for encryption (integrity check) algorithms, and thus their selected encryption (integrity check) algorithms may also be different. Therefore, if the judgment of whether D2D communication is possible is only performed on the communication device side, it is possible that two devices with different encryption (integrity check) algorithm support capabilities are judged to be capable of D2D communication, but the two devices choose different Encryption (integrity check) algorithm, so that actual D2D communication cannot be performed. This cannot make good use of the existing security mechanism of the mobile communication network to serve the D2D communication.

Contents of the invention

The purpose of the embodiments of the present invention is to provide a method and system for performing D2D communication through a mobile communication network, aiming at solving the problem in the prior art that D2D communication cannot be successfully performed using the existing mobile communication technology due to security verification problems.

The embodiment of the present invention is implemented in this way, a method for performing D2D communication through a mobile communication network, the method includes the following steps:

The MME sends communication data to the devices of both communication parties, and the communication data includes: information about whether the devices of both communication parties can perform D2D communication, security algorithms of existing mobile communication technologies supported by both devices of both communication parties, and D2D communication key materials;

The eNB instructs both communication devices to establish a communication data bearer, generates an RNTI and distributes the RNTI to the communication devices, and the RNTI is used for D2D communication;

The devices on both sides of the communication use the selected security algorithm and the key obtained according to the key material to communicate according to the received communication data.

Another object of the embodiments of the present invention is to provide a method for communicating through a mobile communication network, the method comprising the following steps:

Obtain information about whether the devices of both communicating parties can perform D2D communication;

Determine whether the devices on both sides of the communication have the same security algorithm;

The communication data is sent to the devices of both communication parties, and the communication data includes: information about whether the devices of both communication parties can perform D2D communication, security algorithms of existing mobile communication technologies supported by both devices of communication parties, and key materials for D2D communication.

Another object of the embodiments of the present invention is to provide a method for communicating through a mobile communication network, the method comprising the following steps:

Receive and store the communication data sent by the MME, the communication data includes: information about whether the devices of both parties in communication can perform D2D communication, the security algorithm of the existing mobile communication technology supported by the devices of both parties in communication, and the key material of D2D communication;

Send the communication data to the devices of both parties in communication;

Instruct the devices of both communication parties to establish a communication data bearer;

Generate an RNTI and distribute the RNTI to the devices of both communicating parties.

Another object of the embodiments of the present invention is to provide a method for communicating via a mobile communication network, the method comprising the following steps:

Send a communication request to the MME, where the communication request includes information about whether D2D communication is supported;

Receive communication data, the communication data including: information about whether the devices of both parties in communication can perform D2D communication, security algorithms of existing mobile communication technologies supported by devices of both parties in communication, and key material for D2D communication;

Establishing a communication data bearer according to the instructions of the eNB;

Receive the RNTI distributed by the eNB;

Initiate communication to the called party UE by using the selected security algorithm and the key obtained according to the key material.

Another object of the embodiments of the present invention is to provide a method for communicating through a mobile communication network, the method comprising the following steps:

receiving a communication call from the MME, where the communication call includes information asking whether D2D communication is supported;

Send information about whether D2D communication is supported to the MME;

Receive communication data, the communication data including: information about whether the devices of both parties in communication can perform D2D communication, security algorithms of existing mobile communication technologies supported by devices of both parties in communication, and key material for D2D communication;

Establishing a communication data bearer according to the instructions of the eNB;

Receive the RNTI distributed by the eNB;

Using the selected security algorithm and the key obtained from the key material to respond to the communication initiated by the calling party UE.

Another object of the embodiments of the present invention is to provide a device for communicating through a mobile communication network, the device comprising:

a D2D communication information acquisition unit, configured to acquire information about whether the devices of both parties to the communication can perform D2D communication;

The same security algorithm judging unit is used to judge whether the devices of both communication parties have the same security algorithm;

The communication data sending unit is used to send the communication data to the equipments of both communication parties.

Another object of the embodiments of the present invention is to provide a device for communicating through a mobile communication network, the device comprising:

a communication data receiving unit, configured to receive the communication data sent by the MME;

a communication data forwarding unit, configured to forward the communication data received by the communication data receiving unit to the devices of both communication parties;

The communication data bearing instruction unit is used to instruct the devices of both parties in communication to establish a communication data bearer;

The RNTI distributing unit is configured to generate the RNTI and distribute the RNTI to the devices of both communication parties.

Another object of the embodiments of the present invention is to provide a device for communicating through a mobile communication network, the device comprising:

D2D communication self-inspection unit, used for self-inspection whether D2D communication is supported;

a communication request sending unit, configured to initiate a communication request to the MME, where the communication request carries information about whether D2D communication is supported by the D2D communication self-test unit;

a communication data receiving unit, configured to receive communication data sent by the MME or eNB;

A communication data bearer establishing unit, configured to establish a communication data bearer according to an instruction of the eNB;

The RNTI receiving unit is configured to receive the RNTI distributed by the eNB;

The communication unit is configured to use the selected security algorithm and the key obtained according to the key material to initiate communication to the called party UE according to the communication data received by the communication data receiving unit.

Another object of the embodiments of the present invention is to provide a device for communicating through a mobile communication network, the device comprising:

The D2D detection information receiving unit is configured to receive the information sent by the MME for D2D communication function detection;

The D2D detection unit is configured to self-check whether the D2D communication function is supported according to the information received by the D2D detection information receiving unit;

A D2D communication information sending unit, configured to send information about whether the D2D traffic function is supported to the MME according to the detection result of the D2D detection unit;

a communication data receiving unit, configured to receive communication data sent by the MME or eNB;

A communication data bearer establishing unit, configured to establish a communication data bearer according to an instruction of the eNB;

The RNTI receiving unit is configured to receive the RNTI distributed by the eNB;

The communication unit is configured to respond to the communication initiated by the calling party UE by using the selected security algorithm and the key obtained according to the key material according to the communication data received by the communication data receiving unit.

Another object of the embodiments of the present invention is to provide a system for communicating through a mobile communication network, the system comprising:

MME is used to obtain information about whether the devices of both parties in communication can perform D2D communication, determine whether the devices of both parties in communication support the same security algorithm, and send the communication data to the devices of both parties in communication. The communication data includes: whether the devices of both parties in communication can perform D2D communication information, security algorithms of existing mobile communication technologies supported by devices of both communication parties, and key materials;

The eNB is configured to receive and store the communication data sent by the MME, send the communication data to the devices of both parties in communication, instruct the devices of both parties in communication to establish a communication data bearer, generate an RNTI, and distribute the RNTI to the devices of both parties in communication;

The calling party UE is used to send a communication request to the MME, the communication request includes information about whether D2D communication is supported, receives communication data, establishes a communication data bearer according to the instruction of the eNB, receives the RNTI distributed by the eNB, and uses the selected security algorithm Initiate communication with the called party UE with the key obtained according to the key material;

The called party UE is used to receive the communication call from the MME, send information to the MME whether it supports D2D communication, receive communication data, establish a communication data bearer according to the instruction of the eNB, receive the RNTI distributed by the eNB, and respond to the calling party UE using the selected Security algorithms and communications initiated from keys obtained from keying material.

In the embodiment of the present invention, the MME obtains the information of whether the UE supports D2D communication, judges whether the two parties in communication have the same security algorithm, and downloads the security algorithm used by the mobile communication to the two parties in communication, so that the two parties in communication use the existing mobile communication technology to be mature and safe. Communication with advanced security algorithms not only enables the application of mobile communication technology in D2D communication, but also uses the existing mobile communication technology for communication, which not only has a simple verification process, but also has high security.

Description of drawings

FIG. 1 is a flowchart of a communication method through a mobile communication network provided by an embodiment of the present invention;

FIG. 2 is a specific implementation flowchart of step S101 shown in FIG. 1 provided by an embodiment of the present invention;

Fig. 3 is a flowchart of a communication method through a mobile communication network provided by another embodiment of the present invention;

Fig. 4 is a flowchart of a communication method through a mobile communication network provided by another embodiment of the present invention;

Fig. 5 is a flowchart of a communication method through a mobile communication network provided by another embodiment of the present invention;

Fig. 6 is a flowchart of a communication method through a mobile communication network provided by another embodiment of the present invention;

FIG. 7 is a structural diagram of a communication system through a mobile communication network provided by an embodiment of the present invention;

FIG. 8 is a specific structural diagram of the MME shown in FIG. 7 provided by an embodiment of the present invention;

FIG. 9 is a specific structural diagram of the eNB shown in FIG. 7 provided by an embodiment of the present invention;

FIG. 10 is a specific structural diagram of the calling party UE described in FIG. 7 provided by an embodiment of the present invention;

FIG. 11 is a specific structural diagram of the called party UE described in FIG. 7 provided by an embodiment of the present invention.

detailed description

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

In the embodiment of the present invention, the MME obtains the information of whether the UE supports D2D communication, judges whether the two parties in communication have the same security algorithm, and downloads the security algorithm used by the mobile communication to the two parties in communication, so that the two parties in communication use the existing mobile communication technology to be mature and safe. Communication with advanced security algorithms not only enables the application of mobile communication technology in D2D communication, but also uses the existing mobile communication technology for communication, which not only has a simple verification process, but also has high security.

Embodiment one

As shown in Figure 1, it is a flow chart of a method for communicating through a mobile communication network provided by an embodiment of the present invention, which is described in detail as follows:

In step S101 , the MME acquires information about whether the devices of both communicating parties support D2D communication.

In the embodiment of the present invention, before the two communication devices communicate, the MME needs to obtain information about whether the two communication devices support D2D communication, and if yes, enter step S102, and if not, select the existing mobile communication system for communication. Refer to FIG. 2 and the description of FIG. 2 for details about the specific process for the MME to acquire whether the devices of both communication parties support D2D communication.

In step S102, the MME judges whether the two communication devices have the same security algorithm.

In the embodiment of the present invention, each piece of equipment may have different security algorithms, if they have the same security algorithm, go to step S103, otherwise, notify eNB or UE to end this communication, or choose an existing mobile communication system for communication. With regard to the issue of MME judging whether the two communication devices have the same security algorithm, this application uses the existing technology for detection, which will not be repeated here.

In step S103, the MME sends communication data to the devices of both parties in communication, the communication data includes: information about whether the devices of both parties in communication can perform D2D communication, the security algorithm of the existing mobile communication technology supported by the devices of both parties in communication, and the D2D communication encryption key. key material.

In the embodiment of the present invention, the MME sends communication data to the communication UE, and the communication data is used for verification when the communication parties send and receive data. The communication data includes: information about whether the devices of the two communication parties can perform D2D communication, and whether the devices of the two communication parties can perform D2D communication. Supported security algorithms and key materials of existing mobile communication technologies, the security algorithms include: encryption and decryption algorithms and integrity check algorithms. There are two methods for MME to send communication data to UE:

A. The MME sends the communication data to the eNB, which is forwarded by the eNB to the devices of both communication parties. The steps for the MME to send the communication data to the eNB are as follows:

The communication data is carried and sent to the eNB by defining the following message:

InitialContextSetupRequest

–MessageType

–MMEUES1APID

–eNBUES1APID

–UEAggregateMaximumBitRate

–E-RABtoBeSetupList

·E-RABtoBeSetupItemIEs

–UE Security Capabilities

EncryptionAlgorithms: BITSTRING(16,...)

Integrity Protection Algorithms: BITSTRING(16,...)

–SecurityKey

–D2Dcapability

–D2DUESecurityCapabilities

· D2DEncryptionAlgorithms: BITSTRING(16,...)

D2DIntegrityProtectionAlgorithms: BITSTRING(16,...)

D2DSecuritystuff

as well as

UECONTEXTMODIFICATIONREQUEST

–MessageType

–MMEUES1APID

–eNBUES1APID

–UE Security Capabilities

–SecurityKey

–SubscriberProfileIDforRAT/Frequencypriority

–UEAggregateMaximumBitRate

–CSFallbackIndicator

–UE Security Capabilities

–CSGMembershipStaus

–D2Dcapability

–D2DUESecurityCapabilities

D2DEncryptionAlgorithms: BITSTRING(16,...)

D2DIntegrityProtectionAlgorithms: BITSTRING(16,...)

D2DSecuritystuff

B. The MME directly sends the communication data to the devices of both communicating parties, and the specific steps are: transfer the communication data through the NAS information communicated between the MME and the UE. In this method, the devices of both communication parties or the MME need to send information about whether the devices of both communication parties can perform D2D communication to the eNB.

In step S104, the eNB instructs both communicating devices to establish a communication data bearer, generates an RNTI and distributes the RNTI to the communicating communicating devices, and the RNTI is used for D2D communication.

In the embodiment of the present invention, the eNB instructs the devices of both parties in communication to establish a communication data bearer, generates an RNTI, and distributes the RNTI to the devices of both parties in communication. The eNB instructs the devices on both sides of the communication to establish a communication data bearer by modifying the RRC, specifically:

The ConnectionReconfiguration message contains the element radioResourceConfigDedicated->drb-ToAddModList->DRB-ToAddMod:

–DRB-ToAddMod::=SEQUENCE{

–eps-BearerIdentityINTEGER(0..15)OPTIONAL,--

CondDRB-Setup

–drb-IdentityDRB-Identity,

--pdcp-ConfigPDCP-ConfigOPTIONAL, --CondPDCP

--rlc-ConfigRLC-ConfigOPTIONAL, --CondSetup

--logicalChannelIdentityINTEGER(3..10)OPTIONAL,--

CondDRB-Setup

–logicalChannelConfigLogicalChannelConfigOPTIONAL,

--CondSetup

–D2DsecurityAlgorithmConfig

–D2DSecuritystuff

–D2D-RNTI

–}

In step S105, the devices on both sides of the communication communicate using the selected security algorithm and the key obtained according to the key material according to the received communication data.

In the embodiment of the present invention, the communication devices receive the communication data, and according to the communication data, determine that the other party can perform D2D communication and support the same security algorithm. Communication is performed according to the security algorithm of the existing mobile communication technology in the communication data and the key obtained from the key material in the communication data.

It should be pointed out that the communication between the calling party device and the called party device with the MME and eNB is divided into the following four situations:

the calling party device and the called party device communicate with the same MME and communicate with the same eNB; or,

The calling and called devices communicate with the same MME but with different eNBs; or,

The calling party device and the called party device communicate with different MMEs and communicate with different eNBs; or,

The calling party device and the called party device communicate with different MMEs, but with the same eNB.

In the embodiment of the present invention, the MME obtains the information of whether the UE supports D2D communication, judges whether the two parties in communication have the same security algorithm, and downloads the security algorithm used by the mobile communication to the two parties in communication, so that the two parties in communication use the existing mobile communication technology to be mature and safe. Communication with advanced security algorithms not only enables the application of mobile communication technology in D2D communication, but also uses the existing mobile communication technology for communication, which not only has a simple verification process, but also has high security.

Embodiment two

As shown in Figure 2, it is a specific implementation flowchart of step S101 shown in Figure 1 of the embodiment of the present invention, and is described in detail as follows:

In step S201, the calling party UE self-tests whether it supports D2D communication, and if it supports D2D communication, the calling party UE initiates a D2D communication request to the MME.

In step S202, the MME receives the communication request and the information supporting D2D communication sent by the calling UE, and carries an instruction to detect whether D2D communication is supported when calling the called UE.

In step S203, the called UE receives the communication call from the MME, self-tests whether it supports D2D communication according to the detection instruction, and sends the detection result to the MME.

In the embodiment of the present invention, the MME in the mobile communication technology detects both calling and called UEs. When the MME calls the called party UE, it carries an instruction to detect whether D2D communication is supported, and the called party UE sends the result back after self-inspection. MME provides a reasonable method for detecting whether a device can perform D2D communication.

Embodiment three

As shown in FIG. 3, it is a flowchart of a communication method through a mobile communication network provided by another embodiment of the present invention, and the method includes the following steps:

In step S301, information on whether the calling party UE and the called party UE support D2D communication is obtained.

In the embodiment of the present invention, before the two communication devices communicate, the MME needs to obtain information about whether the two communication devices support D2D communication. If yes, enter step S302; if not, select the existing mobile communication system for communication. The specific steps are:

S1. The calling party UE self-tests whether it supports D2D communication, and if D2D communication is supported, the calling party UE initiates a D2D communication request to the MME;

S2. Receive the communication request sent by the calling party UE and the information supporting D2D communication, and carry an instruction to detect whether D2D communication is supported when calling the called party UE;

S3. The called party UE receives the communication call from the MME, checks whether it supports D2D communication according to the detection instruction, and sends the detection result to the MME.

In step S302, it is determined whether the calling party UE and the called party UE have the same security algorithm.

In the embodiment of the present invention, each piece of equipment may have different security algorithms, if they have the same security algorithm, go to step S303, otherwise, notify eNB or UE to end this communication, or choose an existing mobile communication system for communication . With regard to the problem of the MME judging whether the calling party UE and the called party UE have the same security algorithm, this application uses the existing technology for detection, and details are not repeated here.

In step S303, the communication data is sent to the communication dual-transmission device, and the communication data includes: information about whether the calling party UE and the called party UE can perform D2D communication, and the information supported by both the calling party UE and the called party UE. The security algorithm of the existing mobile communication technology, and the key material of the D2D communication.

In the embodiment of the present invention, the communication data is sent to the UE, and the communication data is used for the communication parties to verify when sending and receiving data, and the communication data includes: information about whether the calling party UE and the called party UE can perform D2D communication, The security algorithm and key material of the existing mobile communication technology supported by both the calling party UE and the called party UE, the security algorithm includes: an encryption and decryption algorithm and an integrity verification algorithm. The method for sending the communication data to the communication dual-transmission device includes:

A. The MME sends the communication data to the eNB, and the eNB forwards it to the calling party UE and the called party UE. The steps for the MME to send the communication data to the eNB are as follows:

The communication data is carried and sent to the eNB by defining the following message:

InitialContextSetupRequest

-MessageType

–MMEUES1APID

–eNBUES1APID

–UEAggregateMaximumBitRate

–E-RABtoBeSetupList

·E-RABtoBeSetupItemIEs

–UE Security Capabilities

Encryption Algorithms: BITSTRING(16,...)

Integrity Protection Algorithms: BITSTRING(16,...)

–SecurityKey

–D2Dcapability

–D2DUESecurityCapabilities

· D2DEncryptionAlgorithms: BITSTRING(16,...)

D2DIntegrityProtectionAlgorithms: BITSTRING(16,...)

D2DSecuritystuff

as well as

UECONTEXTMODIFICATIONREQUEST

–MessageType

–MMEUES1APID

–eNBUES1APID

–UE Security Capabilities

–SecurityKey

–SubscriberProfileIDforRAT/Frequencypriority

–UEAggregateMaximumBitRate

–CSFallbackIndicator

–UE Security Capabilities

-CSGMembershipStatus

–D2Dcapability

–D2DUESecurityCapabilities

· D2DEncryptionAlgorithms: BITSTRING(16,...)

D2DIntegrityProtectionAlgorithms: BITSTRING(16,...)

D2DSecuritystuff

B. The MME directly sends the communication data to the calling party UE and the called party UE, and the specific steps are: transfer the communication data through the NAS information communicated between the MME and the UE. In this method, the calling party UE and the called party UE or the MME need to send information about whether the calling party UE and the called party UE can perform D2D communication to the eNB.

Embodiment four

As shown in FIG. 4, it is a flow chart of a communication method through a mobile communication network provided by another embodiment of the present invention, and the method includes the following steps:

In step S401, receive and store the communication data sent by the MME;

In the embodiment of the present invention, the eNB accepts and stores the communication data sent by the MME, and the communication data includes: information about whether the devices of both parties in communication can perform D2D communication, the security algorithms of existing mobile communication technologies supported by the devices of both parties in communication, and Key material for D2D communication.

In step S402, the communication data is sent to the devices of both communicating parties.

In step S403, instruct the devices of both communicating parties to establish a communication data bearer.

In the embodiment of the present invention, the eNB instructs the devices of both communicating parties to establish a communication data bearer.

In step S404, an RNTI is generated, and the RNTI is distributed to the devices of both communicating parties.

In the embodiment of the present invention, the eNB also generates an RNTI and distributes the RNTI to the devices of both communicating parties, and the RNTI is used for D2D communication.

Embodiment five

As shown in FIG. 5, it is a flowchart of a communication method through a mobile communication network provided by another embodiment of the present invention, and the method includes the following steps:

In step S501, self-check whether D2D communication is supported.

In step S502, a communication request is sent to the MME, where the communication request includes information about whether D2D communication is supported.

In the embodiment of the present invention, the calling party UE sends a communication request to the MME, and the communication request carries information about whether D2D communication is supported.

In step S503, the communication data is received, and the communication data includes: information about whether the devices of both communication parties can perform D2D communication, the security algorithm of the existing mobile communication technology supported by the devices of both communication parties, and the key material of D2D communication.

In the embodiment of the present invention, the communication data sent directly by the MME or the communication data forwarded by the eNB are received.

In step S504, a communication data bearer is established according to an instruction of the eNB.

In step S505, the RNTI distributed by the eNB is received.

In the embodiment of the present invention, the calling party UE receives the RNTI for D2D communication distributed by the eNB.

In step S506, a communication is initiated to the called party UE by using the selected security algorithm and the key obtained according to the key material.

In the embodiment of the present invention, the calling party UE uses the selected security algorithm and the key obtained according to the key material to initiate communication to the called party UE.

Embodiment six

As shown in FIG. 6, it is a flowchart of a communication method through a mobile communication network provided by another embodiment of the present invention, and the method includes the following steps:

In step S601, a communication call from the MME is received, and the communication call includes information asking whether D2D communication is supported

In the embodiment of the present invention, the called party UE receives a communication call sent by the MME, and the communication call includes information asking whether the called party UE supports D2D communication.

In step S602, self-check whether D2D communication is supported, and send information about whether D2D communication is supported to the MME.

In step S603, the communication data is received, and the communication data includes: information about whether the devices of both communication parties can perform D2D communication, the security algorithm of the existing mobile communication technology supported by the devices of both communication parties, and the key material of D2D communication.

In the embodiment of the present invention, the communication data sent directly by the MME or the communication data forwarded by the eNB are received.

In step S604, a communication data bearer is established according to an instruction of the eNB.

In step S605, the RNTI distributed by the eNB is received.

In the embodiment of the present invention, the called party UE receives the RNTI for D2D communication distributed by the eNB.

In step S606, use the selected security algorithm and the key obtained according to the key material to respond to the communication initiated by the calling party UE.

Embodiment seven

As shown in FIG. 7, it is a structural diagram of a communication system through a mobile communication network provided by an embodiment of the present invention. For the convenience of description, only the parts related to the embodiment of the present invention are shown, including:

MME71 is used to obtain information about whether the devices of both parties in communication support D2D communication, determine whether the devices of both parties in communication support the same security algorithm, and send communication data to the devices of both parties in communication, the communication data includes: whether the devices of both parties in communication can perform D2D communication The security algorithm and key material of the existing mobile communication technology supported by the equipment of both information and communication parties.

eNB72 is configured to receive and store the communication data sent by the MME71, send the communication data to the devices of both parties in communication, instruct the devices of both parties in communication to establish a communication data bearer, generate RNTI and distribute the RNTI to the devices of both parties in communication.

The calling party UE73 is used to send a communication request to the MME, the communication request includes information about whether D2D communication is supported, receives the communication data, establishes a communication data bearer according to the instruction of the eNB72, receives the RNTI distributed by the eNB72, and uses the selected security algorithm Initiate communication with the called party UE with the key obtained according to the key material.

The called party UE74 is used to receive the communication call from the MME, send information about whether D2D communication is supported to the MME, receive communication data, establish a communication data bearer according to the instruction of the eNB72, receive the RNTI distributed by the eNB72, and respond to the calling party UE using the selected Security algorithms and communications initiated from keys obtained from keying material.

Among them, as shown in Figure 8, MME71 specifically includes:

The D2D communication information acquiring unit 711 is configured to acquire information about whether the devices of both communicating parties support D2D communication.

The same security algorithm judging unit 712 is configured to judge whether the devices of both communication parties have the same security algorithm.

The communication data sending unit 713 is configured to send the communication data to the communication devices, including: sending the communication data to the eNB, and the eNB forwards the communication data to the communication devices, or directly sends the communication data to the communication devices.

As shown in Figure 8, the eNB72 specifically includes:

The communication data receiving unit 721 is configured to receive the communication data sent by the MME71.

The communication data forwarding unit 722 is configured to forward the communication data received by the communication data receiving unit 721 to the devices of both communicating parties.

The communication data bearer instructing unit 723 is configured to instruct devices of both communicating parties to establish a communication data bearer.

The RNTI distributing unit 724 is configured to generate an RNTI and distribute the RNTI to devices of both communicating parties.

Wherein as shown in Figure 6, the calling party UE33 specifically includes:

The D2D communication self-inspection unit 731 is configured to perform self-inspection whether D2D communication is supported.

The communication request sending unit 732 is configured to send a communication request to the MME, and the communication request carries the information of whether the D2D communication self-checking unit 731 supports D2D communication.

The communication data receiving unit 733 is configured to receive communication data sent by the MME or the eNB.

The communication data bearer establishing unit 734 is configured to establish a communication data bearer according to the instruction of the eNB.

The RNTI receiving unit 735 is configured to receive the RNTI distributed by the eNB.

The communication unit 736 is configured to use the selected security algorithm and the key obtained according to the key material to communicate with the called party UE according to the communication data received by the communication data receiving unit 733 .

Wherein, as shown in FIG. 9, the called party UE74 specifically includes:

The D2D detection information receiving unit 741 is configured to receive information for performing D2D communication function detection sent by the MME.

The D2D detection unit 742 is configured to self-check whether the D2D communication function is supported according to the information received by the D2D detection information receiving unit 741 .

The D2D communication information sending unit 743 is configured to send information about whether D2D communication is supported to the MME according to the detection result of the D2D detection unit 742 .

The communication data receiving unit 744 is configured to receive communication data sent by the MME or the eNB.

The communication data bearer establishing unit 745 is configured to establish a communication data bearer according to the instruction of the eNB.

The RNTI receiving unit 746 is configured to receive the RNTI distributed by the eNB.

The communication unit 747 is configured to use the selected security algorithm and the key obtained according to the key material according to the communication data received by the communication data receiving unit 333 to respond to the communication initiated by the calling party UE.

It should be pointed out that the communication between the calling party device and the called party device with the MME and eNB is divided into the following four situations:

the calling party device and the called party device communicate with the same MME and communicate with the same eNB; or,

The calling and called devices communicate with the same MME but with different eNBs; or,

The calling party device and the called party device communicate with different MMEs and communicate with different eNBs; or,

The calling party device and the called party device communicate with different MMEs, but with the same eNB.

In the embodiment of the present invention, the MME obtains the information of whether the UE supports D2D communication, judges whether the communication parties can use the same security algorithm, and downloads the security algorithm used by the mobile communication to the communication parties, so that the communication parties use the existing mobile communication technology to be mature. Communication with a safe security algorithm not only enables mobile communication technology to be applied in D2D communication, but also uses the existing mobile communication technology for communication not only simple verification process, but also high security.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention should be included in the protection of the present invention. within range.

Claims (18)

1. A method of communicating over a mobile communications network, the method comprising the steps of:

the MME judges whether the two communication side devices have the same security algorithm, if so, the MME sends communication materials to the two communication side devices, and the communication materials comprise: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and D2D communication key material;

the eNB indicates equipment of two communication parties to establish communication data bearer, generates RNTI and distributes the RNTI to the equipment of the two communication parties, wherein the RNTI is used for D2D communication;

the equipment of the two communication parties communicates by using the selected security algorithm and the key obtained according to the key material according to the received communication data;

and if the owned security algorithms are different, the MME informs the eNB to finish the communication or selects the existing mobile communication system to communicate.

2. The method of claim 1, wherein prior to the step of the MME sending the communication material to both devices, the method further comprises the steps of:

the MME acquires information whether the devices of the two communication parties support D2D communication.

3. The method according to claim 2, wherein the step of the MME acquiring the information whether the two communicating devices can perform D2D communication specifically comprises:

the calling party UE performs self-checking whether the D2D communication is supported, and initiates a communication request to the MME under the condition that the D2D communication is supported;

the MME receives the communication request sent by the calling party UE and the information supporting D2D communication, and carries an instruction for detecting whether the D2D communication is supported when the called party UE is called;

and the called party UE receives the communication call of the MME, performs self-checking whether the D2D communication is supported or not according to the detection instruction, and sends the detection result to the MME.

4. The method of claim 1, wherein the step of the MME sending the communication data to the devices of both parties comprises:

the MME sends communication data to the eNB, and the eNB forwards the communication data to the equipment of the two communication parties; or,

the MME directly sends the communication data to the equipment of the two communication parties.

5. The method of claim 1, wherein the eNB instructs the devices of the two parties to communicate to establish the communication data bearer by modifying RRC.

6. The method of any of claims 1-5, wherein the calling party device and the called party device communicate with the MME and the eNB in four cases:

the calling party equipment and the called party equipment communicate with the same MME and communicate with the same eNB; or,

the calling party equipment and the called party equipment communicate with the same MME but communicate with different eNBs; or,

the calling party equipment and the called party equipment communicate with different MMEs and communicate with different eNBs; or,

the calling party device and the called party device communicate with different MMEs but with the same eNB.

7. A method of communicating over a mobile communications network, the method comprising the steps of:

acquiring information whether the communication of D2D is supported by the equipment of both communication parties;

judging whether the communication two-party equipment has the same security algorithm;

if the same security algorithm is possessed, communication materials are sent to the equipment of the two parties of communication, and the communication materials comprise: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

and if the owned security algorithms are different, informing the eNB to finish the communication or selecting the existing mobile communication system to communicate.

8. The method according to claim 7, wherein the step of obtaining the information whether the devices of the two communicating parties support D2D communication specifically comprises:

the calling party UE performs self-checking whether the D2D communication is supported, and initiates a communication request to the MME under the condition that the D2D communication is supported;

receiving a communication request sent by the calling party UE and information of supporting D2D communication, and carrying an instruction for detecting whether D2D communication is supported when a called party UE is called;

and the called party UE receives the communication call of the MME, performs self-checking whether the D2D communication is supported or not according to the detection instruction, and sends the detection result to the MME.

9. The method of claim 8, wherein the step of sending the communication data to the devices of the two parties comprises:

the MME sends communication data to the eNB, and the eNB forwards the communication data to the equipment of the two communication parties; or,

the MME directly sends the communication data to the equipment of the two communication parties.

10. A method of communicating over a mobile communications network, the method comprising the steps of:

receiving and storing communication data sent by an MME when judging that two communication side devices have the same security algorithm, wherein the communication data comprises: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

sending the communication data to the equipment of both communication parties;

indicating the equipment of the two communication parties to establish communication data bearing;

generating an RNTI and distributing the RNTI to equipment of both communication sides;

and receiving the end of the communication which is informed by the MME when judging that the security algorithms owned by the devices of the two communication parties are different, or selecting the existing mobile communication system for communication.

11. A method of communicating over a mobile communications network, the method comprising the steps of:

sending a communication request to an MME, wherein the communication request comprises information whether D2D communication is supported;

receiving communication data sent by the MME when judging that the two communication devices have the same security algorithm, wherein the communication data comprises: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

establishing communication data bearer according to the instruction of the eNB;

receiving an RNTI (radio network temporary identifier) distributed by the eNB;

initiating communication to the called party UE by using the selected security algorithm and a key obtained according to the key material;

and receiving the end of the communication which is informed by the MME when judging that the security algorithms owned by the devices of the two communication parties are different, or selecting the existing mobile communication system for communication.

12. A method of communicating over a mobile communications network, the method comprising the steps of:

receiving a communication call of an MME, wherein the communication call comprises information for inquiring whether D2D communication is supported;

sending information to the MME whether D2D communication is supported;

receiving communication data sent by the MME when judging that the two communication devices have the same security algorithm, wherein the communication data comprises: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

establishing communication data bearer according to the instruction of the eNB;

receiving an RNTI (radio network temporary identifier) distributed by the eNB;

responding to the communication initiated by the calling party UE by using the selected security algorithm and a key obtained according to the key material;

and receiving the end of the communication which is informed by the MME when judging that the security algorithms owned by the devices of the two communication parties are different, or selecting the existing mobile communication system for communication.

13. An apparatus for communicating over a mobile communications network, the apparatus comprising:

a D2D communication information obtaining unit, configured to obtain information whether the devices of the two communication parties support D2D communication;

the same security algorithm judging unit is used for judging whether the two communication parts have the same security algorithm;

and a communication material sending unit, configured to send the communication material to the devices of both parties if the devices of both parties have the same security algorithm, and notify the eNB to end the communication or select an existing mobile communication system to communicate if the devices of both parties have different security algorithms.

14. An apparatus for communicating over a mobile communications network, the apparatus comprising;

a communication data receiving unit, configured to receive communication data sent by the MME when it is determined that the two communication devices have the same security algorithm;

a communication data forwarding unit, configured to forward the communication data received by the communication data receiving unit to both communication party devices;

the communication data bearing indicating unit is used for indicating the equipment of the two communication parties to establish communication data bearing;

an RNTI distribution unit for generating RNTI and distributing the RNTI to both communication party equipment;

and the communication data receiving unit is also used for receiving the end of the communication notified by the MME when judging that the security algorithms owned by the two communication devices are different, or selecting the existing mobile communication system for communication.

15. An apparatus for communicating over a mobile communications network, the apparatus comprising:

the D2D communication self-checking unit is used for carrying out self-checking whether the D2D communication is supported or not;

a communication request sending unit, configured to initiate a communication request to an MME, where the communication request carries information about whether the D2D communication self-check unit self-check supports D2D communication;

a communication data receiving unit, configured to receive, when the MME determines that the two communication devices have the same security algorithm, communication data sent by the MME or the eNB, or receive, when the MME determines that the security algorithms that the two communication devices have are different, an end of the current communication notified by the MME when the MME determines that the security algorithms that the two communication devices have are different, or select an existing mobile communication system for communication;

a communication data bearer establishing unit, configured to establish a communication data bearer according to the instruction of the eNB;

an RNTI receiving unit configured to receive an RNTI distributed by an eNB;

and the communication unit is used for initiating communication to the called party UE according to the communication material received by the communication material receiving unit by using the selected security algorithm and the key acquired according to the key material.

16. An apparatus for communicating over a mobile communications network, the apparatus comprising:

a D2D detection information receiving unit, configured to receive information sent by the MME to perform D2D communication function detection;

a D2D detecting unit, for detecting whether the self-checking supports the D2D communication function according to the information received by the D2D detecting information receiving unit;

a D2D communication information transmitting unit for transmitting information whether D2D communication is supported to MME according to the detection result of the D2D detecting unit;

a communication data receiving unit, configured to receive communication data sent by an MME or an eNB when the MME determines that two communication devices have the same security algorithm;

a communication data bearer establishing unit, configured to establish a communication data bearer according to the instruction of the eNB;

an RNTI receiving unit configured to receive an RNTI distributed by an eNB;

a communication unit, configured to respond to communication initiated by the calling party UE with the selected security algorithm according to the communication material received by the communication material receiving unit and a key obtained according to the key material;

and the communication data receiving unit is also used for receiving the end of the communication notified by the MME when judging that the security algorithms owned by the two communication devices are different, or selecting the existing mobile communication system for communication.

17. A system for communicating over a mobile communications network, the system comprising:

the MME is configured to obtain information whether the two communication devices support D2D communication, determine whether the two communication devices support the same security algorithm, and send communication data to the two communication devices if the two communication devices possess the same security algorithm, where the communication data includes: information on whether the devices of the two parties can perform D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties, and key material;

the eNB is used for receiving and storing communication data sent by the MME when the two communication party devices are judged to have the same security algorithm, sending the communication data to the two communication party devices, indicating the two communication party devices to establish communication data bearer, generating RNTI and distributing the RNTI to the two communication party devices, wherein the RNTI is used for D2D communication;

the calling party UE is used for sending a communication request to the MME, wherein the communication request contains information about whether D2D communication is supported or not, receiving communication data sent by the MME when the MME judges that the two communication party devices have the same security algorithm, establishing communication data bearer according to the instruction of the eNB, receiving the RNTI distributed by the eNB, and initiating communication to the called party UE by using the selected security algorithm and the key obtained according to the key material;

the called party UE is used for receiving the communication call of the MME, sending information whether the D2D communication is supported or not to the MME, receiving communication data sent by the MME when the MME judges that the two communication party devices have the same security algorithm, establishing communication data bearer according to the instruction of the eNB, receiving the RNTI distributed by the eNB, and responding to the communication initiated by the calling party UE by using the selected security algorithm and the key obtained according to the key material;

and the MME is also used for informing the eNB to finish the communication or selecting the existing mobile communication system to communicate if the owned security algorithms are different.

18. The system of claim 17, wherein the calling and called party devices communicate with an MME and an eNB in four cases:

the calling party equipment and the called party equipment communicate with the same MME and communicate with the same eNB; or,

the calling party equipment and the called party equipment communicate with the same MME but communicate with different eNBs; or,

the calling party equipment and the called party equipment communicate with different MMEs and communicate with different eNBs; or,

the calling party device and the called party device communicate with different MMEs but with the same eNB.