WO2024164333A1 - Key distribution method and apparatus, communication device, and storage medium - Google Patents

Abstract

Embodiments of the present disclosure provide a key distribution method. The method is executed by a terminal. The method comprises: sending first request information to a first network function, wherein the first request information is used for requesting to acquire a key for the terminal to broadcast sidelink positioning protocol (SLPP) signaling or receive the broadcasted SLPP signaling in sidelink (SL) communication. Here, the terminal sends, to the first network function, a request for acquiring a key for the terminal to broadcast SLPP signaling or receive the broadcasted SLPP signaling in SL communication, so that the key can be acquired, and encryption and integrity protection of data to be transmitted are performed on the basis of the key, thereby ensuring the security of data transmission.

Description

Key distribution method, device, communication equipment and storage medium Technical Field

The present disclosure relates to the field of wireless communication technology but is not limited to the field of wireless communication technology, and in particular to a key distribution method, device, communication equipment and storage medium.

Background Art

In wireless communication technology, for ranging or sidelink (SL) positioning services, it is feasible to send part of the SL positioning signaling by broadcasting. Since SL positioning capability and SL positioning assistance data are information used to obtain ranging results, they need to be integrity protected to ensure that they are not tampered with. SL positioning capability and location information are related to the privacy of the terminals involved, and they need to be encrypted to protect the privacy of the terminals. Therefore, after enabling the SL positioning broadcast mode, how to provide security keys and perform integrity protection and encryption on the broadcast messages is a problem that needs to be considered.

Summary of the invention

The embodiments of the present disclosure disclose a key distribution method, apparatus, communication equipment and storage medium.

According to a first aspect of an embodiment of the present disclosure, a key distribution method is provided, wherein the method is executed by a terminal, and the method includes:

Sending first request information to the first network function;

Among them, the first request information is used to request to obtain the key of the terminal broadcasting the side link positioning protocol SLPP signaling or receiving the broadcast SLPP signaling in the side link SL communication; the first network function is the network function of the network where the terminal is currently located.

According to a second aspect of an embodiment of the present disclosure, a key distribution method is provided, wherein the method is performed by a first network function, and the method includes:

Receiving first request information sent by a terminal;

The first request information is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

According to a third aspect of an embodiment of the present disclosure, a key distribution method is provided, wherein the method is performed by a second network function or a third network function, and the method includes:

sending third request information to the fourth network function;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

According to a fourth aspect of an embodiment of the present disclosure, a key distribution method is provided, wherein the method is performed by a fourth network function, and the method includes:

receiving third request information sent by the second network function or the third network function of the terminal;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

According to a fifth aspect of an embodiment of the present disclosure, a system is provided, wherein the system includes at least one of a first network function, a second network function, a third network function and a fourth network function; the first network function is used to implement a method for implementing the first network function; the second network function is used to implement a method for implementing the second network function; and the third network function is used to implement the method for implementing the third network function.

According to a sixth aspect of an embodiment of the present disclosure, a key distribution device is provided, wherein the device includes:

A sending module, configured to send first request information to the first network function;

The first request information is used to request the acquisition of the key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication; the first network function is the network function of the network where the terminal is currently located.

According to a seventh aspect of an embodiment of the present disclosure, a key distribution device is provided, wherein the device includes:

A receiving module, configured to receive first request information sent by a terminal;

The first request information is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

According to an eighth aspect of an embodiment of the present disclosure, a key distribution device is provided, wherein the device includes:

a sending module, configured to send third request information to the fourth network function;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

According to a ninth aspect of an embodiment of the present disclosure, a key distribution device is provided, wherein the device includes:

a receiving module, configured to receive third request information sent by the second network function or the third network function of the terminal;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

According to a tenth aspect of an embodiment of the present disclosure, a communication device is provided, the communication device including:

processor;

a memory for storing instructions executable by the processor;

The processor is configured to implement the method described in any embodiment of the present disclosure when running the executable instructions.

According to an eleventh aspect of the embodiments of the present disclosure, a computer storage medium is provided, wherein the computer storage medium stores a computer executable program, and when the executable program is executed by a processor, the method described in any embodiment of the present disclosure is implemented.

In an embodiment of the present disclosure, a first request message is sent to a first network function; wherein the first request message is used to request the acquisition of a key for the terminal to broadcast the sidelink positioning protocol SLPP signaling or receive the broadcast SLPP signaling in the sidelink SL communication; the first network function is a network function of the network where the terminal is currently located. Here, the terminal sends a message to the first network function to request the acquisition of a key for the terminal to broadcast the sidelink positioning protocol SLPP signaling or receive the broadcast SLPP signaling in the sidelink SL communication, so that the key can be obtained, and encryption and integrity protection of the data to be transmitted can be performed based on the key, thereby ensuring the security of data transmission.

BRIEF DESCRIPTION OF THE DRAWINGS

Fig. 1 is a schematic structural diagram of a wireless communication system according to an exemplary embodiment.

Fig. 2 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 3 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 4 is a schematic flow chart showing a key distribution method according to an exemplary embodiment.

Fig. 5 is a schematic flow chart showing a key distribution method according to an exemplary embodiment.

Fig. 6 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 7 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 8 is a schematic flow chart showing a key distribution method according to an exemplary embodiment.

Fig. 9 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 10 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 11 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 12 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 13 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 14 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 15 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 16 is a schematic diagram of a system according to an exemplary embodiment.

Fig. 17 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 18 is a schematic flow chart of a key distribution method according to an exemplary embodiment.

Fig. 19 is a schematic diagram of a key distribution device according to an exemplary embodiment.

Fig. 20 is a schematic diagram of a key distribution device according to an exemplary embodiment.

Fig. 21 is a schematic diagram of a key distribution device according to an exemplary embodiment.

Fig. 22 is a schematic diagram of a key distribution device according to an exemplary embodiment.

Fig. 23 is a schematic diagram showing the structure of a terminal according to an exemplary embodiment.

Fig. 24 is a block diagram of a base station according to an exemplary embodiment.

DETAILED DESCRIPTION

Exemplary embodiments will now be described in detail, examples of which are shown in the accompanying drawings. , and the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the embodiments of the present disclosure. Instead, they are only examples of devices and methods consistent with some aspects of the embodiments of the present disclosure as detailed in the attached claims.

The terms used in the disclosed embodiments are only for the purpose of describing specific embodiments and are not intended to limit the disclosed embodiments. The singular forms of "a" and "the" used in the disclosed embodiments and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings. It should also be understood that the term "and/or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

It should be understood that although the terms first, second, third, etc. may be used to describe various information in the disclosed embodiments, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the disclosed embodiments, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

For the purpose of brevity and ease of understanding, the terms "greater than" or "less than" are used herein to characterize size relationships. However, those skilled in the art can understand that the term "greater than" also covers the meaning of "greater than or equal to", and "less than" also covers the meaning of "less than or equal to".

Please refer to FIG1 , which shows a schematic diagram of the structure of a wireless communication system provided by an embodiment of the present disclosure. As shown in FIG1 , the wireless communication system is a communication system based on mobile communication technology, and the wireless communication system may include: a plurality of user equipments 110 and a plurality of base stations 120 .

The user equipment 110 may be a device that provides voice and/or data connectivity to a user. The user equipment 110 may communicate with one or more core networks via a radio access network (RAN). The user equipment 110 may be an IoT user equipment, such as a sensor device, a mobile phone, and a computer with an IoT user equipment. For example, it may be a fixed, portable, pocket-sized, handheld, computer-built-in, or vehicle-mounted device. For example, a station (STA), a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, a remote terminal, an access terminal, a user terminal, a user agent, a user device, or a user equipment. Alternatively, the user equipment 110 may also be a device of an unmanned aerial vehicle. Alternatively, the user device 110 may be a vehicle-mounted device, such as a driving computer with wireless communication function, or a wireless user device connected to a driving computer. Alternatively, the user device 110 may be a roadside device, such as a street lamp, a signal lamp, or other roadside device with wireless communication function.

The base station 120 may be a network-side device in a wireless communication system. The wireless communication system may be a fourth generation mobile communication technology (4G) system, also known as a long term evolution (LTE) system; or, the wireless communication system may be a 5G system, also known as a new air interface system or a 5G NR system. Alternatively, the wireless communication system may be a next generation system of the 5G system. The access network in the 5G system may be called NG-RAN (New Generation-Radio Access Network).

Among them, the base station 120 can be an evolved base station (eNB) adopted in the 4G system. Alternatively, the base station 120 can also be a base station (gNB) adopting a centralized distributed architecture in the 5G system. When the base station 120 adopts a centralized distributed architecture, it usually includes a centralized unit (central unit, CU) and at least two distributed units (distributed units, DU). The centralized unit is provided with a packet data convergence protocol (Packet Data Convergence Protocol, PDCP) layer, a radio link layer control protocol (Radio Link Control, RLC) layer, and a media access control (Media Access Control, MAC) layer protocol stack; the distributed unit is provided with a physical (Physical, PHY) layer protocol stack. The specific implementation method of the base station 120 is not limited in the embodiment of the present disclosure.

A wireless connection may be established between the base station 120 and the user equipment 110 via a wireless air interface. In different implementations, the wireless air interface is a wireless air interface based on the fourth generation mobile communication network technology (4G) standard; or, the wireless air interface is a wireless air interface based on the fifth generation mobile communication network technology (5G) standard, for example, the wireless air interface is a new air interface; or, the wireless air interface may also be a wireless air interface based on the next generation mobile communication network technology standard of 5G.

In some embodiments, an E2E (End to End) connection may also be established between the user devices 110. For example, in vehicle-to-everything (V2X) communication, V2V (vehicle to vehicle) communication, V2I (vehicle to Infrastructure) communication, and V2P (vehicle to pedestrian) communication, etc.

Here, the above user equipment can be considered as the terminal equipment in the following embodiments.

In some embodiments, the wireless communication system may further include a network management device 130 .

Several base stations 120 are respectively connected to a network management device 130. The network management device 130 may be a core network device in a wireless communication system, for example, the network management device 130 may be a mobility management entity (MME) in an evolved packet core (EPC). Alternatively, the network management device may also be other core network devices, such as a serving gateway (SGW), a public data network gateway (PGW), a policy and charging rules function (PCRF), or a home subscriber server (HSS). The embodiments of the present disclosure do not limit the implementation form of the network management device 130.

In order to facilitate the understanding of those skilled in the art, the embodiments of the present disclosure list multiple implementation methods to clearly illustrate the technical solutions of the embodiments of the present disclosure. Of course, those skilled in the art can understand that the multiple embodiments provided by the embodiments of the present disclosure can be executed separately, or can be executed together with the methods of other embodiments of the embodiments of the present disclosure, or can be executed together with some methods in other related technologies separately or in combination; the embodiments of the present disclosure do not limit this.

As shown in FIG. 2 , this embodiment provides a key distribution method, wherein the method is executed by a terminal, and the method includes:

Step 21: Sending a first request message to the first network function;

Among them, the first request information is used to request to obtain the key of the terminal broadcasting the side link positioning protocol SLPP signaling or receiving the broadcast SLPP signaling in the side link SL communication; the first network function is the network function of the network where the terminal is currently located.

Here, the terminal involved in the present disclosure may be, but is not limited to, a mobile phone, a wearable device, a vehicle-mounted terminal, a road side unit (RSU, Road Side Unit), a smart home terminal, an industrial sensor device and/or a medical device, etc. In some embodiments, the terminal may be a Redcap terminal or a predetermined version of a new air interface NR terminal (for example, an R17 NR terminal).

The first network function in the present disclosure may be an access and mobility management function (AMF), but is not limited to AMF. The second network function in the present disclosure may be a policy control function (PCF), but is not limited to PCF. The third network function in the present disclosure may be a location management function (LMF), but is not limited to LMF. The fourth network function in the present disclosure may be a central key management function, but is not limited to a central key management function.

In one embodiment, a first request message is sent to a first network function; wherein the first request message is used to request to obtain a key for the terminal to broadcast Sidelink Positioning Protocol (SLPP) signaling or receive broadcast SLPP signaling in a sidelink SL communication; the first request message indicates an identity of the terminal and an indicator for requesting to obtain the key.

In one embodiment, a first request message is sent to the first network function via a registration request message; wherein the first request message is used to request a key for the terminal to broadcast the sidelink positioning protocol SLPP signaling or receive the broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a first request message is sent to a first network function, wherein the first request message is used to request to obtain a key for the terminal to broadcast a sidelink positioning protocol SLPP signaling or receive a broadcast SLPP signaling in a sidelink SL communication. A first response message sent by the first network function is received, wherein the first response message indicates the key.

In one embodiment, a first request message is sent to a first network function, wherein the first request message is used to request a key for the terminal to broadcast a sidelink positioning protocol SLPP signaling or receive a broadcast SLPP signaling in a sidelink SL communication. The first response message sent by the first network function is received through a registration acceptance message.

In the embodiment of the present disclosure, a first request message is sent to a first network function; wherein the first request message is used to request the acquisition of a key for the terminal to broadcast a sidelink positioning protocol SLPP signaling or receive a broadcast SLPP signaling in the sidelink SL communication. Here, the terminal sends a key to the first network function for requesting the terminal to broadcast a sidelink positioning protocol SLPP signaling or receive a broadcast SLPP signaling in the sidelink SL communication, so that the key can be obtained, and encryption and integrity protection of the data to be transmitted are performed based on the key, thereby ensuring the security of data transmission.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG3 , this embodiment provides a key distribution method, wherein the method is executed by a terminal and includes:

Step 31: receiving a first response message sent by the first network function;

The first response information indicates a key for the terminal to broadcast Sidelink Positioning Protocol SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a first request message is sent to a first network function; wherein the first request message is used to request the acquisition of a key for the terminal to broadcast a sidelink positioning protocol SLPP signaling or receive a broadcast SLPP signaling in a sidelink SL communication; the first request message indicates the identity of the terminal and an indicator for requesting the acquisition of the key; the first network function is a network function of the network where the terminal is currently located.

In one embodiment, a first request message is sent to the first network function via a registration request message; wherein the first request message is used to request a key for the terminal to broadcast the sidelink positioning protocol SLPP signaling or receive the broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a first request message is sent to a first network function, wherein the first request message is used to request to obtain a key for the terminal to broadcast a sidelink positioning protocol SLPP signaling or receive a broadcast SLPP signaling in a sidelink SL communication. A first response message sent by the first network function is received, wherein the first response message indicates the key.

In one embodiment, a first request message is sent to a first network function, wherein the first request message is used to request a key for the terminal to broadcast a sidelink positioning protocol SLPP signaling or receive a broadcast SLPP signaling in a sidelink SL communication. The first response message sent by the first network function is received through a registration acceptance message.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 4 , this embodiment provides a key distribution method, wherein the method is performed by a first network function, and the method includes:

Step 41, receiving first request information sent by the terminal;

The first request information is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

Here, the terminal involved in the present disclosure may be, but is not limited to, a mobile phone, a wearable device, a vehicle-mounted terminal, a road side unit (RSU, Road Side Unit), a smart home terminal, an industrial sensor device and/or a medical device, etc. In some embodiments, the terminal may be a Redcap terminal or a predetermined version of a new air interface NR terminal (for example, an R17 NR terminal).

The first network function in the present disclosure may be an access and mobility management function (AMF), but is not limited to AMF. The second network function in the present disclosure may be a policy control function (PCF), but is not limited to PCF. The third network function in the present disclosure may be a location management function (LMF), but is not limited to LMF. The fourth network function in the present disclosure may be a central key management function, but is not limited to a central key management function.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication; the first request message indicates the identity of the terminal and an indicator for requesting to obtain the key.

In one embodiment, the first request information sent by the terminal is received through a registration request message; wherein the first request information is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling.

In one embodiment, a first request message sent by a receiving terminal is used to request a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. Based on the terminal subscription information, it is determined whether the terminal is allowed to broadcast the SLPP signaling or receive the broadcast SLPP signaling.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second request message is sent to a second network function; wherein the second request message indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication; and the second network function is a network function of the network where the terminal is currently located.

In one embodiment, a first request message sent by a receiving terminal is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second request message is sent to a second network function; wherein the second request message indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling in a sidelink SL communication. Or receive a key of a broadcast SLPP signaling; the second request information indicates the identity of the terminal and an indicator requesting to obtain the key.

In one embodiment, a first request message sent by a receiving terminal is used to request the acquisition of a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to allowing the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling, a second request message is sent to a second network function; wherein the second request message indicates a key for requesting the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to allowing the terminal to broadcast the SLPP signaling, send the second request message to the second network function; or, in response to allowing the terminal to receive the broadcast SLPP signaling, send the second request message to the second network function.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second request message is sent to a second network function; wherein the second request message indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second response message sent by the second network function or a third network function is received; wherein the second response message indicates the key.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. The second response message sent by the third network function is received through a notification message (e.g., Nlmf_Broadcast_CipheringKeyData); wherein the second response message indicates the key.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second request message is sent to a second network function; wherein the second request message indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second response message sent by the second network function or a third network function is received; wherein the second response message indicates the key. The key is stored.

In one embodiment, a first request message sent by a terminal is received, wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. A first response message is sent to the terminal, wherein the first response message indicates the key.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. The first response message is sent to the terminal through a registration acceptance message; wherein the first response message indicates the key.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to determining that the terminal is allowed to broadcast the SLPP signaling, send the first response message to the terminal; or, in response to determining that the terminal is allowed to receive the broadcast SLPP signaling, send the first response message to the terminal.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG5 , this embodiment provides a key distribution method, wherein the method is performed by a first network function, and the method includes:

Step 51: Determine whether the terminal is allowed to broadcast the SLPP signaling or receive the broadcasted SLPP signaling.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling.

In one embodiment, a first request message sent by a receiving terminal is received; wherein the first request message is used to request to obtain The key of the terminal broadcasting SLPP signaling or receiving the broadcast SLPP signaling in the link SL communication. Based on the terminal subscription information, determining whether the terminal is allowed to broadcast the SLPP signaling or receive the broadcast SLPP signaling.

In one embodiment, a first request message sent by a receiving terminal is used to request the acquisition of a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. Determine whether the terminal is allowed to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to allowing the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling, a second request message is sent to a second network function; wherein the second request message indicates a key for requesting the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication; the second network function is a network function of the network where the terminal is currently located.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to allowing the terminal to broadcast the SLPP signaling, send the second request message to the second network function; or, in response to allowing the terminal to receive the broadcast SLPP signaling, send the second request message to the second network function.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG6 , this embodiment provides a key distribution method, wherein the method is performed by a first network function, and the method includes:

Step 61: Send a second request message to the second network function;

The second request information indicates a key for requesting the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication; and the second network function is a network function of the network where the terminal is currently located.

In one embodiment, a first request message sent by a receiving terminal is used to request the acquisition of a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to allowing the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling, a second request message is sent to a second network function; wherein the second request message indicates a key for requesting the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to allowing the terminal to broadcast the SLPP signaling, send the second request message to the second network function; or, in response to allowing the terminal to receive the broadcast SLPP signaling, send the second request message to the second network function.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 7 , this embodiment provides a key distribution method, wherein the method is performed by a first network function, and the method includes:

Step 71: Receive second response information sent by the second network function or the third network function;

The second response information indicates a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second request message is sent to a second network function; wherein the second request message indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second response message sent by a second network function or a third network function is received; wherein the second response message indicates the key; the second network function is a network function of the network where the terminal is currently located.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. The second response message sent by the third network function is received through a notification message (e.g., Nlmf_Broadcast_CipheringKeyData); wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. The second response message indicates the key.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second request message is sent to a second network function; wherein the second request message indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in a sidelink SL communication. A second response message sent by the second network function or a third network function is received; wherein the second response message indicates the key. The key is stored.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG8 , this embodiment provides a key distribution method, wherein the method is performed by a first network function, and the method includes:

Step 81: Sending a first response message to the terminal;

The first response information indicates a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a first request message sent by a terminal is received, wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. A first response message is sent to the terminal, wherein the first response message indicates the key.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. The first response message is sent to the terminal through a registration acceptance message; wherein the first response message indicates the key.

In one embodiment, a first request message sent by a terminal is received; wherein the first request message is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. In response to determining that the terminal is allowed to broadcast the SLPP signaling, send the first response message to the terminal; or, in response to determining that the terminal is allowed to receive the broadcast SLPP signaling, send the first response message to the terminal.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 9 , this embodiment provides a key distribution method, wherein the method is performed by a second network function or a third network function, and the method includes:

Step 91: Send third request information to the fourth network function;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

Here, the terminal involved in the present disclosure may be, but is not limited to, a mobile phone, a wearable device, a vehicle-mounted terminal, a road side unit (RSU, Road Side Unit), a smart home terminal, an industrial sensor device and/or a medical device, etc. In some embodiments, the terminal may be a Redcap terminal or a predetermined version of a new air interface NR terminal (for example, an R17 NR terminal).

The first network function in the present disclosure may be an access and mobility management function (AMF), but is not limited to AMF. The second network function in the present disclosure may be a policy control function (PCF), but is not limited to PCF. The third network function in the present disclosure may be a location management function (LMF), but is not limited to LMF. The fourth network function in the present disclosure may be a central key management function, but is not limited to a central key management function.

In one embodiment, a third request message is sent to a fourth network function, wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message sent by the fourth network function is received, wherein the third response message indicates the key.

In one embodiment, a third request message is sent to a fourth network function; wherein the third request message indicates a key for requesting to obtain a key for broadcasting SLPP signaling or receiving broadcast SLPP signaling by the terminal in sidelink SL communication. A third response message sent by the fourth network function is received; wherein the third response message indicates the key. A second request message is sent to the first network function; wherein the third request message indicates a key for requesting to obtain a key for broadcasting SLPP signaling or receiving broadcast SLPP signaling by the terminal in sidelink SL communication. response information; wherein, the second response information indicates the key.

In one embodiment, in one embodiment, a third request message is sent to a fourth network function; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message sent by the fourth network function is received; wherein the third response message indicates the key. The second response message is sent to the first network function through a notification message (e.g., Nlmf_Broadcast_CipheringKeyData); wherein the second response message indicates the key.

In one embodiment, a second request message sent by a first network function of a receiving terminal is sent; wherein the second request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling by the terminal in a sidelink SL communication. A third request message is sent to a fourth network function; wherein the third request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling by the terminal in a sidelink SL communication.

In one embodiment, a second request message sent by a first network function of a receiving terminal is sent; wherein the second request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling of the terminal in a sidelink SL communication; the second request message indicates an identity of the terminal and an indicator for requesting to obtain the key. A third request message is sent to a fourth network function; wherein the third request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling of the terminal in a sidelink SL communication.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 10 , this embodiment provides a key distribution method, wherein the method is performed by a second network function or a third network function, and the method includes:

Step 101: receiving third response information sent by the fourth network function;

The third response information indicates a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a third request message is sent to a fourth network function, wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message sent by the fourth network function is received, wherein the third response message indicates the key.

In one embodiment, a third request message is sent to a fourth network function, wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message sent by the fourth network function is received, wherein the third response message indicates the key. A second response message is sent to the first network function, wherein the second response message indicates the key.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 11 , this embodiment provides a key distribution method, wherein the method is performed by a second network function or a third network function, and the method includes:

Step 111: Send second response information to the first network function;

The second response information indicates a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a third request message is sent to a fourth network function, wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message sent by the fourth network function is received, wherein the third response message indicates the key. A second response message is sent to the first network function, wherein the second response message indicates the key.

In one embodiment, in one embodiment, a third request message is sent to a fourth network function; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message sent by the fourth network function is received; wherein the third response message indicates the key. The second response message is sent to the first network function through a notification message (e.g., Nlmf_Broadcast_CipheringKeyData); wherein the second response message indicates the key.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 12 , this embodiment provides a key distribution method, wherein the method is performed by a second network function or a third network function, and the method includes:

Step 121: receiving second request information sent by a first network function of a terminal;

The second request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a second request message sent by a first network function of a receiving terminal is sent; wherein the second request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling by the terminal in a sidelink SL communication. A third request message is sent to a fourth network function; wherein the third request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling by the terminal in a sidelink SL communication.

In one embodiment, a second request message sent by a first network function of a receiving terminal is sent; wherein the second request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling of the terminal in a sidelink SL communication; the second request message indicates an identity of the terminal and an indicator for requesting to obtain the key. A third request message is sent to a fourth network function; wherein the third request message indicates a key for requesting to obtain a broadcast SLPP signaling or receiving a broadcast SLPP signaling of the terminal in a sidelink SL communication.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 13 , this embodiment provides a key distribution method, wherein the method is performed by a fourth network function, and the method includes:

Step 131: Receive third request information sent by a second network function or a third network function of a terminal;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

Here, the terminal involved in the present disclosure may be, but is not limited to, a mobile phone, a wearable device, a vehicle-mounted terminal, a road side unit (RSU, Road Side Unit), a smart home terminal, an industrial sensor device and/or a medical device, etc. In some embodiments, the terminal may be a Redcap terminal or a predetermined version of a new air interface NR terminal (for example, an R17 NR terminal).

The first network function in the present disclosure may be an access and mobility management function (AMF), but is not limited to AMF. The second network function in the present disclosure may be a policy control function (PCF), but is not limited to PCF. The third network function in the present disclosure may be a location management function (LMF), but is not limited to LMF. The fourth network function in the present disclosure may be a central key management function, but is not limited to a central key management function.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is received; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. In response to receiving the third request message, the key is generated.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. In response to receiving the third request message, the key is generated. The key includes one of the following: an asymmetric private key and a public key; a symmetric integrity and encryption key.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message is sent to the second network function or the third network function; wherein the third response message indicates the key.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. In response to receiving the third request message, the key is generated. The key includes one of the following: an asymmetric private key and The method further comprises: sending a third response message to the second network function or the third network function, wherein the third response message indicates the key.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 14 , this embodiment provides a key distribution method, wherein the method is performed by a fourth network function, and the method includes:

Step 141: Generate a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is received; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. In response to receiving the third request message, the key is generated.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. In response to receiving the third request message, the key is generated. The key includes one of the following: an asymmetric private key and a public key; a symmetric integrity and encryption key.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message is sent to the second network function or the third network function; wherein the third response message indicates the key.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. In response to receiving the third request message, the key is generated. The key includes one of the following: an asymmetric private key and a public key; a symmetric integrity and encryption key. A third response message is sent to the second network function or the third network function; wherein the third response message indicates the key.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 15 , this embodiment provides a key distribution method, wherein the method is performed by a fourth network function, and the method includes:

Step 151: Send third response information to the second network function or the third network function;

The third response information indicates a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. A third response message is sent to the second network function or the third network function; wherein the third response message indicates the key.

In one embodiment, a third request message sent by a second network function or a third network function of a receiving terminal is sent; wherein the third request message indicates a key for requesting to obtain a SLPP signaling broadcast by the terminal or receiving a broadcast SLPP signaling in a sidelink SL communication. In response to receiving the third request message, the key is generated. The key includes one of the following: an asymmetric private key and a public key; a symmetric integrity and encryption key. A third response message is sent to the second network function or the third network function; wherein the third response message indicates the key.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG16 , a system is provided in this embodiment, wherein the system includes at least one of a first network function 161, a second network function 162, a third network function 163, and a fourth network function 164; the first network function 161 is used to implement the method for implementing the first network function 161; the second network function 162 is used to implement the method for implementing the second network function 162; the third network function 163 is used to implement the method for implementing the fourth network function 164; the fourth network function 164 is used to implement the method for implementing the first network function 161; the fourth network function 164 is used to implement the method for implementing the second network function 164; the fourth network function 164 is used to implement the method for implementing the third network function 163; the fourth network function 164 is used to implement the method for implementing the third network function 164; the fourth network function 164 is used to implement the method for implementing the third network The third network function 163 is used to implement the method for implementing the third network function 163.

In order to better understand the embodiments of the present disclosure, the technical solution of the present disclosure is further described below through two exemplary embodiments:

In one embodiment, for a terminal capable of ranging or SL positioning, it should be able to broadcast SLPP signaling without having to perform a discovery process and a link establishment process. Therefore, security keys can be provided to the terminal during the registration process.

In one embodiment, in order to perform SLPP signaling broadcast, it is assumed that information about whether a terminal with ranging or SL positioning capability is allowed to broadcast and/or receive SLPP signaling is included in the UE subscription information. Based on this information in the subscription information, the core network can then determine to provide the required security keys to the UE when the UE registers with the network.

In one embodiment, for ranging or SL positioning services, two or more UEs involved in the service may be subscribed to different operators. If the UEs involved are subscribed to different operators, it is impossible for the 5GC NF in one Public Land Mobile Network (PLMN) to create the same security key for all the involved UEs belonging to different PLMNs. Therefore, it is recommended to use a centralized key management function that can be connected to different PLMNs to create and provide security keys to the 5GC NFs in different PLMNs. The 5GC NF then provides the security key to the UE in its own PLMN.

In one embodiment, the 5GC NF providing the security keys can be a PCF that sends the keys to the UE as part of the UE security policy configuration information; or it can be a LMF that sends the keys to the UE using the existing procedures defined in clause 6.14.2 of 3GPP TS 23.273 [3].

Example 1:

As shown in FIG. 17 , this embodiment provides a key distribution method, the method comprising:

Step 1701. The UE (B-UE) to broadcast SLPP signaling sends (perhaps periodically) a registration request message (corresponding to the first request information in the present disclosure) to its AMF. The registration request message includes the B-UE ID and an indicator for requesting a broadcast key (corresponding to the key in the present disclosure).

Step 1702: The AMF and Unified Data Management (UDM) of B-UE check whether B-UE is allowed to broadcast SLPP signaling according to the UE contract information.

Step 1703: If B-UE is allowed to broadcast SLPP signaling, the AMF of B-UE sends a UE policy creation request (corresponding to the second request information in the present disclosure) to the PCF of B-UE, indicating the broadcast key of the requesting broadcaster.

Step 1704: The PCF of the B-UE sends a key request (corresponding to the third request information in the present disclosure) to the central key management function, requesting a broadcast key for broadcasting SLPP signaling.

Step 1705: The central key management function (central key management function or centralized key management function) generates a broadcast key for broadcasting SLPP signaling. The broadcast key can be, for example, a pair of asymmetric private key and public key, or a pair of symmetric integrity and encryption keys.

Step 1706: The central key management function returns the broadcast key (eg, private key) in the key response (corresponding to the third response information in the present disclosure) to the PCF of the B-UE.

Step 1707: The PCF of the B-UE returns the broadcast key to the AMF of the B-UE in the UE policy creation response (corresponding to the second response information in the present disclosure).

Step 1708: The AMF of B-UE sends a broadcast key to B-UE in a registration acceptance message (corresponding to the first response information in the present disclosure).

Step 1709: The UE (R-UE) to receive the broadcast SL positioning signaling sends (possibly periodically) a registration request message (corresponding to the first request information in the present disclosure) to its AMF, where the registration request message contains the R-UE ID and an indicator for requesting a broadcast key.

Step 1710: The AMF and UDM of the R-UE check whether the R-UE is allowed to receive broadcast SLPP signaling by comparing the UE subscription information.

Step 1711: If the R-UE is allowed to receive broadcast SLPP signaling, the AMF of the R-UE sends a UE policy creation request (corresponding to the second request information in the present disclosure) to the PCF of the R-UE, indicating the broadcast key of the requesting recipient.

Step 1712: The PCF of the R-UE sends a key request (corresponding to the third request information in the present disclosure) to the central key management function to request a key for receiving the broadcast SLPP signaling.

Step 1713: The central key management function returns the key for receiving the broadcast SLPP signaling in the key response (corresponding to the third response information in the present disclosure) to the PCF of the R-UE. The key may be, for example, the public key of the asymmetric private key/public key created in step 1705.

Step 1714: In the UE policy creation response (corresponding to the second response information in the present disclosure), the PCF of the R-UE returns the key for receiving the broadcast SLPP signaling to the AMF of the R-UE.

Step 1715: In the registration acceptance message (corresponding to the first response information in the present disclosure), the AMF of the R-UE sends the key for receiving the broadcast SLPP signaling to the R-UE.

Step 1716: B-UE starts broadcasting SLPP signaling protected by the broadcast key received from the network.

Step 1717: The R-UE starts to monitor the broadcast message. When receiving the broadcast signaling from the B-UE, the R-UE verifies the broadcast message using the key received from the network.

It should be noted that each broadcast key is assigned a validity timer. When the timer expires, the UE needs to request a new broadcast key by initiating a periodic registration process again.

In one embodiment, the 5GC NF that provides security keys to the UE can also be the LMF that distributes encryption keys for broadcast assistance data as defined in clause 6.14.2 of 3GPP TS 23.273 [3]. It is used when the UE that is to broadcast SLPP signaling needs to obtain positioning assistance data from the core network. In this case, the UE will send a request to the AMF, and the AMF selects the LMF to invoke the network assistance data transmission. The LMF needs to obtain the security key to protect the network assistance data before starting to send the network assistance data.

Example 2:

As shown in FIG. 18 , this embodiment provides a key distribution method, the method comprising:

Step 1801: After receiving the network-assisted data transmission request, the LMF of the B-UE sends a key request to the central key management function, requesting the UE to use a broadcast key (corresponding to the key in the present disclosure) for broadcasting SLPP signaling.

Step 1802: The central key management function returns the security key used for SLPP signaling broadcast to the LMF of the B-UE.

Step 1803: The LMF of the B-UE calls the Nlmf_Broadcast_CipheringKeyData notification service operation to the AMF of the B-UE containing the received security key for SLPP signaling broadcast.

Step 1804: The AMF of the B-UE stores the broadcast key received from the LMF of the B-UE.

Step 1805: The B-UE to broadcast SLPP signaling sends a (periodic) registration request message to its AMF, which contains the B-UE ID and an indicator for requesting a broadcast key.

Step 1806: The AMF of B-UE checks with the UDM whether B-UE is allowed to broadcast SLPP signaling according to the UE subscription information.

Step 1807: The AMF of B-UE sends the stored broadcast key to B-UE in the registration accept message.

Step 1808: As in step 1801, the LMF of the R-UE sends a key request to the central key management function to request a key for the UE to receive the broadcast SLPP signaling.

Step 1809: The central key management function returns the security key used to receive the broadcast SLPP signaling to the LMF of the R-UE.

Step 1810: The LMF of the R-UE calls the Nlmf_Broadcast_CipheringKeyData notification service operation to the AMF of the R-UE containing the received security key.

Step 1811: The AMF of the R-UE stores the broadcast key received from the LMF of the R-UE.

Step 1812: The R-UE to receive the broadcast SLPP signaling sends (possibly periodically) a registration request message to its AMF, where the registration request message contains the R-UE ID and an indicator for requesting a broadcast key.

Step 1813: The AMF of the R-UE checks whether the R-UE is allowed to receive broadcast SLPP signaling by comparing the UE subscription information through UDM. Step 1814: In the registration acceptance message, the AMF of the R-UE sends the stored broadcast key to the R-UE.

Step 1815: B-UE starts broadcasting SLPP signaling protected by the broadcast key received from the network.

Step 1816: The R-UE starts to monitor the broadcast message. When receiving the broadcast signaling from the B-UE, the R-UE verifies the broadcast message using the key received from the network.

It should be noted that in the case where the LMF requests a broadcast key from the central key management function, only a symmetric key can be generated because the LMF does not know whether the requesting UE intends to broadcast or receive SLPP signaling before sending the registration request.

As shown in FIG. 19 , a key distribution device is provided in an embodiment of the present disclosure, wherein the device includes:

The sending module 191 is configured to send first request information to the first network function;

The first request information is used to request the acquisition of the key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication; the first network function is the network function of the network where the terminal is currently located.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 20, a key distribution device is provided in an embodiment of the present disclosure, wherein the device includes:

The receiving module 201 is configured to receive first request information sent by a terminal;

The first request information is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 21 , a key distribution device is provided in an embodiment of the present disclosure, wherein the device includes:

The sending module 211 is configured to send third request information to the fourth network function;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

As shown in FIG. 22, a key distribution device is provided in an embodiment of the present disclosure, wherein the device includes:

The receiving module 221 is configured to receive third request information sent by the second network function or the third network function of the terminal;

The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication.

It should be noted that those skilled in the art can understand that the method provided in the embodiments of the present disclosure can be executed alone or together with some methods in the embodiments of the present disclosure or some methods in related technologies.

The present disclosure provides a communication device, the communication device comprising:

processor;

a memory for storing processor-executable instructions;

The processor is configured to: implement the method applied to any embodiment of the present disclosure when running the executable instructions.

The processor may include various types of storage media, which are non-temporary computer storage media that can continue to memorize information stored thereon after the communication device loses power.

The processor may be connected to the memory via a bus or the like to read the executable program stored in the memory.

An embodiment of the present disclosure further provides a computer storage medium, wherein the computer storage medium stores a computer executable program, and when the executable program is executed by a processor, the method of any embodiment of the present disclosure is implemented.

Regarding the device in the above embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

As shown in FIG. 23 , an embodiment of the present disclosure provides a structure of a terminal.

Referring to the terminal 800 shown in Figure 23, this embodiment provides a terminal 800, which can be a mobile phone, a computer, a digital broadcast terminal, a message sending and receiving device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

23 , the terminal 800 may include one or more of the following components: a processing component 802 , a memory 804 , a power component 806 , a multimedia component 808 , an audio component 810 , an input/output (I/O) interface 812 , a sensor component 814 , and a communication component 816 .

The processing component 802 generally controls the overall operation of the terminal 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 may include one or more processors 820 to execute instructions to complete all or part of the steps of the above-mentioned method. In addition, the processing component 802 may include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 may include a multimedia module to facilitate the interaction between the multimedia component 808 and the processing component 802.

The memory 804 is configured to store various types of data to support operations on the device 800. Examples of such data include instructions for any application or method operating on the terminal 800, contact data, phone book data, messages, pictures, videos, etc. The memory 804 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (EPROM), etc. Read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk.

Power component 806 provides power to various components of terminal 800. Power component 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power to terminal 800.

The multimedia component 808 includes a screen that provides an output interface between the terminal 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front camera and/or a rear camera. When the device 800 is in an operating mode, such as a shooting mode or a video mode, the front camera and/or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

The audio component 810 is configured to output and/or input audio signals. For example, the audio component 810 includes a microphone (MIC), and when the terminal 800 is in an operation mode, such as a call mode, a recording mode, and a speech recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 804 or sent via the communication component 816. In some embodiments, the audio component 810 also includes a speaker for outputting audio signals.

I/O interface 812 provides an interface between processing component 802 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: home button, volume button, start button, and lock button.

The sensor assembly 814 includes one or more sensors for providing various aspects of status assessment for the terminal 800. For example, the sensor assembly 814 can detect the open/closed state of the device 800, the relative positioning of the components, such as the display and keypad of the terminal 800, and the sensor assembly 814 can also detect the position change of the terminal 800 or a component of the terminal 800, the presence or absence of contact between the user and the terminal 800, the orientation or acceleration/deceleration of the terminal 800 and the temperature change of the terminal 800. The sensor assembly 814 may include a proximity sensor configured to detect the presence of nearby objects without any physical contact. The sensor assembly 814 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor or a temperature sensor.

The communication component 816 is configured to facilitate wired or wireless communication between the terminal 800 and other devices. The terminal 800 can access a wireless network based on a communication standard, such as Wi-Fi, 2G or 3G, or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

In an exemplary embodiment, terminal 800 can be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors or other electronic components to perform the above methods.

In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 804 including instructions, and the instructions can be executed by the processor 820 of the terminal 800 to complete the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

As shown in FIG. 24 , an embodiment of the present disclosure illustrates a structure of a base station. For example, a base station 900 may be provided as a network-side device. Referring to FIG. 24 , the base station 900 includes a processing component 922, which further includes one or more processors, and a memory resource represented by a memory 932 for storing instructions executable by the processing component 922, such as an application. The application stored in the memory 932 may include one or more modules, each corresponding to a set of instructions. In addition, the processing component 922 is configured to execute instructions to execute any method of the aforementioned method applied to the base station.

The base station 900 may also include a power supply component 926 configured to perform power management of the base station 900, a wired or wireless network interface 950 configured to connect the base station 900 to the network, and an input/output (I/O) interface 958. The base station 900 may operate based on an operating system stored in the memory 932, such as Windows Server TM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM or the like.

Those skilled in the art will readily appreciate other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present invention that follow the general principles of the present invention and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are to be considered exemplary only, and the true scope and spirit of the present invention are indicated by the following claims.

It should be understood that the present invention is not limited to the exact construction that has been described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

Claims (43)

A key distribution method, wherein the method is performed by a terminal, and the method comprises: Sending first request information to the first network function; Among them, the first request information is used to request to obtain the key of the terminal broadcasting the side link positioning protocol SLPP signaling or receiving the broadcast SLPP signaling in the side link SL communication; the first network function is the network function of the network where the terminal is currently located. The method according to claim 1, wherein the sending the first request information to the first network function comprises: The first request information is sent to the first network function through a registration request message. The method according to claim 1, wherein the first request information indicates an identity of the terminal and an indicator requesting to obtain the key. The method according to claim 1, wherein the method further comprises: Receiving first response information sent by the first network function; The first response information indicates the key. The method according to claim 4, wherein the receiving the first response information sent by the first network function comprises: The first response information sent by the first network function is received through a registration acceptance message. The method according to claims 1 to 5, wherein the first network function is an access and mobility management function AMF. A key distribution method, wherein the method is performed by a first network function, and the method comprises: Receiving first request information sent by a terminal; The first request information is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication. The method according to claim 7, wherein the first request information sent by the receiving terminal comprises: The first request information sent by the terminal is received through a registration request message. The method according to claim 7, wherein the first request information indicates an identity of the terminal and an indicator requesting to obtain the key. The method according to claim 7, wherein the method further comprises: Determine whether to allow the terminal to broadcast the SLPP signaling or receive the broadcast SLPP signaling. The method according to claim 10, wherein the determining whether to allow the terminal to broadcast the SLPP signaling or receive the broadcasted SLPP signaling comprises: Based on the terminal subscription information, it is determined whether the terminal is allowed to broadcast the SLPP signaling or receive the broadcasted SLPP signaling. The method according to claim 11, wherein the method further comprises: Sending second request information to the second network function; The second request information indicates a key for requesting the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication; and the second network function is a network function of the network where the terminal is currently located. The method according to claim 12, wherein the second network function is a policy control function (PCF). The method according to claim 13, wherein the sending the second request information to the second network function comprises: In response to allowing the terminal to broadcast the SLPP signaling, sending the second request information to the second network function; or, In response to the SLPP signaling allowing the terminal to receive broadcast, the second request information is sent to the second network function. The method according to claim 12, wherein the second request information indicates an identity of the terminal and an indicator requesting to obtain the key. The method according to claim 12, wherein the method further comprises: Receiving second response information sent by the second network function or the third network function; The second response information indicates the key. The method according to claim 16, wherein the third network function is a location management function LMF. The method according to claim 16, wherein the receiving the second response information sent by the third network function comprises: The second response information sent by the third network function is received through a notification message. The method according to claim 16, wherein the method further comprises: The key is stored. The method according to claim 7, wherein the method further comprises: Sending first response information to the terminal; The first response information indicates the key. The method according to claim 20, wherein the sending the first response information to the terminal comprises: In response to determining that the terminal is allowed to broadcast the SLPP signaling, sending the first response information to the terminal; or, In response to determining that the terminal is allowed to receive the broadcasted SLPP signaling, the first response information is sent to the terminal. The method according to claim 20, wherein the sending the first response information to the terminal comprises: The first response information is sent to the terminal through a registration acceptance message. The method according to claims 7 to 22, wherein the first network function is an access and mobility management function AMF. A key distribution method, wherein the method is performed by a second network function or a third network function, and the method comprises: sending third request information to the fourth network function; The third request information indicates a key for requesting to obtain a key for a terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in sidelink SL communication. The method according to claim 24, wherein the method further comprises: receiving third response information sent by the fourth network function; The third response information indicates the key. The method according to claim 25, wherein the method further comprises: Sending second response information to the first network function; The second response information indicates the key. The method according to claim 26, in response to the method being performed by a third network function; the sending of second response information to the first network function comprises: The second response information is sent to the first network function through a notification message. The method according to claim 24, wherein the method further comprises: receiving second request information sent by the first network function of the terminal; The second request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication. The method according to claim 24, wherein the second request information indicates the identity of the terminal and an indicator requesting to obtain the key. The method according to any one of claims 24 to 29, wherein the second network function is a PCF, the third network function is a LMF and/or the fourth network function is a central key management function. A key distribution method, wherein the method is performed by a fourth network function, and the method comprises: receiving third request information sent by the second network function or the third network function of the terminal; The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication. The method according to claim 31, wherein the method further comprises: In response to receiving the third request information, the key is generated. The method according to claim 2, wherein the key comprises one of the following: Asymmetric private and public keys; Symmetric integrity and encryption keys. The method according to claim 31, wherein the method further comprises: Sending third response information to the second network function or the third network function; The third response information indicates the key. The method according to any one of claims 31 to 34, wherein the second network function is a PCF, the third network function is a LMF and/or the fourth network function is a central key management function. A system, wherein the system includes at least one of a first network function, a second network function, a third network function and a fourth network function; the first network function is used to implement the methods described in claims 7 to 23; the second network function is used to implement the methods described in claims 24 to 30; and the third network function is used to implement the methods described in claims 31 to 35. The system according to claim 36, wherein the first network function is AMF, the second network function is PCF, the third network function is LMF and/or the fourth network function is a central key management function. A key distribution device, wherein the device comprises: A sending module, configured to send first request information to the first network function; The first request information is used to request the key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication; the second network function is the network function of the network where the terminal is currently located. A key distribution device, wherein the device comprises: A receiving module, configured to receive first request information sent by a terminal; The first request information is used to request to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication. A key distribution device, wherein the device comprises: a sending module, configured to send third request information to the fourth network function; The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication. A key distribution device, wherein the device comprises: a receiving module, configured to receive third request information sent by the second network function or the third network function of the terminal; The third request information indicates a key for requesting to obtain a key for the terminal to broadcast SLPP signaling or receive broadcast SLPP signaling in the sidelink SL communication. A communication device, comprising: antenna; Memory; The processor is connected to the antenna and the memory respectively, and is configured to control the transmission and reception of the antenna by executing computer executable instructions stored in the memory, and can implement the method provided in any one of claims 1 to 6, 7 to 23, 24 to 30 or 31 to 35. A computer storage medium storing computer executable instructions, wherein the computer executable instructions, after being executed by a processor, can implement the method provided in any one of claims 1 to 6, 7 to 23, 24 to 30, or 31 to 35.