WO2025054983A1 - Communication method, apparatus and storage medium - Google Patents

Abstract

The present disclosure provides a communication method, an apparatus, and a storage medium. The method is executed by a first network device, and comprises: acquiring first information determined by a third network device, the first information being used for proximity service security, and the first information corresponding to a first service; and sending the first information to a first terminal and/or a second network device, the second network device corresponding to a second terminal. Unique discovery security information is generated for the same service identifier, and the problem of selection confusion of a terminal when multiple sets of discovery security information are generated for the same service identifier is avoided.

Description

A communication method, device and storage medium Technical Field

The present disclosure relates to the field of communication technology, and in particular to a communication method, device and storage medium.

Background Art

The Relay Service Code (RSC) can be used to identify the connection service between a terminal-to-network (UE to Network, U2N) relay device or a terminal-to-terminal (UE to UE, U2U) relay device and an authorized remote device or end device that the relay device can provide service.

Summary of the invention

The present disclosure provides a communication method, a device and a storage medium.

According to the first aspect of an embodiment of the present disclosure, a communication method is proposed, which is executed by a first network device, and the first network device corresponds to a first terminal. The method includes: obtaining first information determined by a third network device, the first information is used for proximity service security, and the first information corresponds to a first service; sending the first information to the first terminal and/or the second network device, and the second network device corresponds to the second terminal.

In the above method, the first network device obtains the first information determined by the third network device and sends the first information to the first terminal and/or the second network device. Based on the uniqueness of the first information determined by the third network device, the RSC for the same service generates unique first information.

According to a second aspect of an embodiment of the present disclosure, a communication method is proposed. The method is executed by a third network device, and the method includes: determining first information, the first information is used for proximity service security, and the first information corresponds to a first service.

In the above method, the third network device determines the unique corresponding first information based on the first service identifier, thereby realizing generation of unique first information for the RSC of the same service.

According to the third aspect of an embodiment of the present disclosure, a communication method is proposed, which is executed by a second network device. The method includes: receiving first information sent by a first network device, the first information is used for proximity service security, the first information corresponds to a first service, and the first network device corresponds to a first terminal.

In the above method, the second network device receives the first information from the first network device, and the second network device can send the first information to the second terminal, thereby obtaining the first information. Since the first information determined by the third network device is unique, the RSC for the same service can generate unique first information.

According to the fourth aspect of an embodiment of the present disclosure, a first network device is proposed, comprising a transceiver module, used to: obtain first information determined by a third network device, the first information being used for proximity service discovery security, the first information corresponding to a first service; and send the first information to a first terminal and/or a second network device, the second network device corresponding to a second terminal.

According to a fifth aspect of an embodiment of the present disclosure, a third network device is proposed, comprising a processing module, configured to: determine first information, wherein the first information is used for proximity service discovery security, and the first information corresponds to a first service.

According to the sixth aspect of an embodiment of the present disclosure, a second network device is proposed, comprising a transceiver module, for: receiving first information sent by a first network device, the first information being used for proximity service discovery security, the first information corresponding to a first service, and the first network device corresponding to a first terminal.

According to the seventh aspect of the embodiment of the present disclosure, a communication device is proposed, which includes: a transceiver; a memory; a processor, which is connected to the transceiver and the memory respectively, and is configured to control the wireless signal reception and transmission of the transceiver by executing computer-executable instructions on the memory, and can execute the communication method of any one of the first aspect, the second aspect, and the third aspect.

According to an eighth aspect of the embodiment of the present disclosure, a storage medium is provided, wherein the storage medium stores an instruction. When the instruction is in a communication device, When the communication device is run on the communication device, it enables the communication device to execute the communication method of any one of the first aspect, the second aspect, and the third aspect.

According to a ninth aspect of an embodiment of the present disclosure, a communication system is proposed, comprising a first network device, a third network device, and a second network device, wherein the first network device is configured to implement the method of the first aspect, the third network device is configured to implement the method of the second aspect, and the second network device is configured to implement the method of the third aspect.

BRIEF DESCRIPTION OF THE DRAWINGS

The above and/or additional aspects and advantages of the present disclosure will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

FIG1 is a schematic diagram of the architecture of some communication systems provided by embodiments of the present disclosure;

2a-2b are interactive schematic diagrams of a communication method provided by an embodiment of the present disclosure;

3a-3c are flowchart diagrams of some communication methods provided by embodiments of the present disclosure;

4a-4c are flowchart diagrams of other communication methods provided by embodiments of the present disclosure;

5a-5c are interaction schematic diagrams of other communication methods provided by embodiments of the present disclosure;

FIG6 is a schematic diagram of interaction of other communication methods provided by embodiments of the present disclosure;

FIG7a is a schematic diagram of the structure of a first network device provided by an embodiment of the present disclosure;

FIG7b is a schematic diagram of the structure of a third network device provided by an embodiment of the present disclosure;

FIG7c is a schematic diagram of the structure of a second network device provided by an embodiment of the present disclosure;

FIG8a is a schematic diagram of the structure of a communication device provided by an embodiment of the present disclosure;

FIG8b is a schematic diagram of the structure of a chip provided by an embodiment of the present disclosure.

DETAILED DESCRIPTION

The method disclosed in the present invention can be used to realize generation of unique discovery security information for the same service identifier, thereby avoiding the problem of terminal selection confusion when multiple sets of discovery security information are generated for the same service identifier.

The embodiments of the present disclosure provide a communication method, a device, and a storage medium.

In a first aspect, an embodiment of the present disclosure proposes a communication method, which is executed by a first network device, and the method includes: obtaining first information determined by a third network device, the first information is used for proximity service security, and the first information corresponds to a first service; sending the first information to a first terminal and/or a second network device, and the second network device corresponds to a second terminal.

In the above embodiment, the first network device obtains the first information, wherein the first information is determined by the third network device. Since the first information corresponds to the first service, the first information determined by the third network device is unique. After the first network device obtains the first information, it can provide it to the first terminal and/or the second network device, so that the first terminal can use the unique first information to perform security protection, security verification and other operations, thereby avoiding operational confusion in the terminal.

In combination with some embodiments of the first aspect, in some embodiments, the method also includes: obtaining first information determined by the third network device includes any one of the following: obtaining preconfigured first information, the first information is determined by the third network device; or; receiving first information sent by the third network device.

In the above embodiment, the first network device can use two different methods to obtain the first information, wherein the first information obtained by the two acquisition methods is determined by the third network device and is unique, so that the first terminal can use the unique first information to perform security protection, security verification and other operations, which can avoid operational confusion in the terminal. In addition, the third network device can provide the first information to the first network device in a pre-configured manner, or send the first information to the first network device in a manner such as signaling, which improves flexibility and expands the application boundary.

In combination with some embodiments of the first aspect, in some embodiments the method further includes: receiving a first message sent by a first terminal, where the first message is used to request first information, and the first message carries an identifier of a first service.

In the above embodiment, the first network device receives the first message sent by the first terminal, and the first message carries the identifier of the first service, so that the first network device can respond to the request of the first terminal and obtain the unique first information corresponding to the first service identifier. Under this scheme, the first network device can only obtain the first information corresponding to the first service requested by the first terminal, avoiding information redundancy and improving communication efficiency.

In combination with some embodiments of the first aspect, in some embodiments, the method further includes: based on the identifier of the first service, determining that first information corresponding to the identifier of the first service is stored in the first network device.

In the above embodiment, the first network device can determine whether the corresponding first information is stored locally based on the identifier of the first service, so as to confirm the storage status of the first information by the first network device and perform different processing for different situations. By determining whether the first information is already stored in the first network device, it is possible to avoid the first network device repeatedly requesting the first information of the same service from the third network device, causing confusion in the use of the first information on the terminal side. In other words, when the first information corresponding to the first service identifier is stored in the first network device, the stored first information can be provided to the terminal without requesting it from the third network device.

In combination with some embodiments of the first aspect, in some embodiments, the method further includes: determining that first information corresponding to an identifier of the first service is not stored in the first network device; and sending a second message to a third network device, the second message being used to request the first information.

In the above embodiment, when the first network device does not store the first information corresponding to the first service identifier, it can send a request message to the third network device to request the corresponding first information, and obtain the unique first information by interacting with the third network device to make the request.

In combination with some embodiments of the first aspect, in some embodiments, receiving the first information sent by the third network device includes: receiving a third message sent by the third network device, wherein the third message carries the first information.

In the above embodiment, the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired.

In the above embodiment, the first network device can receive a third message sent by a third network device, and the third message carries the first information and a timer corresponding to the first information, wherein the first information is determined by the third network device and is unique, so that the first terminal can use the unique first information to perform security protection, security verification and other operations to avoid operational confusion of the terminal; the timer information can be used to reflect the timeliness information of the first information, so that the first network device can determine the timeliness of the first information based on the timer information.

In combination with some embodiments of the first aspect, in some embodiments, the method further includes: determining that the first information stored in the first network device is expired; and sending a fourth message to the third network device, the fourth message being used to request an update of the first information.

In the above embodiment, when the first information stored in the first network device expires, a fourth message can be sent to the third network device, and the fourth message is used to request to update the first information, so as to realize the update of the first information. The third network device can update the first information based on the fourth message to improve the communication stability. Under this scheme, the first network device has the ability to determine whether the first information is expired.

In combination with some embodiments of the first aspect, in some embodiments, receiving first information sent by a third network device includes: receiving updated first information sent by the third network device in a first situation, wherein the first situation is that the third network device determines that the first information stored in the third network device is expired.

In the above embodiment, the first network device can obtain the first information updated by the third network device, and can update the first information locally stored by the first network device, so as to provide the updated first information to the first terminal and the second network device. Under this solution, the third network device has the ability to determine whether the first information is expired, and the first network device does not need to request the third network device to update the first information after determination, thus saving signaling consumption.

In an embodiment of the first aspect of the present disclosure, the first network device obtains the first information determined by the third network device and sends the first information to the first terminal and/or the second network device. This can achieve the goal that even when there are multiple first network devices, the generated first information is the same, thereby facilitating the system to use security information to perform security protection, security verification and other operations.

In a second aspect, an embodiment of the present disclosure proposes a communication method, which is executed by a third network device. The method includes: determining first information, where the first information is used for proximity service security and corresponds to a first service.

In the above embodiment, the third network device can determine the corresponding first information based on the identifier of the first service. The first information generated by the third network device is unique. The first terminal can use the unique first information to perform security protection, security verification and other operations, thereby avoiding operational confusion in the terminal.

In combination with some embodiments of the second aspect, in some embodiments, the method further includes: receiving a second message sent by the first network device, where the second message is used to request the first information.

In the above embodiment, the third network device may determine the first information corresponding to the first service identifier based on the received second message, and may generate the first information based on the response of the first network device.

In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes: sending first information to a first network device, the first network device corresponding to the first terminal. The first information is carried by a third message.

In the above embodiment, the third network device may send a third message to the first network device. The third message carries the first information, and can provide the first information corresponding to the first service identifier to the first network device, so that the first network device can store it.

In combination with some embodiments of the second aspect, in some embodiments, the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired.

In the above embodiment, the third message also carries a timer corresponding to the first information. The timer information can reflect the timeliness information of the first information, so that the first network device can determine the timeliness of the first information.

In combination with some embodiments of the second aspect, in some embodiments, sending the first information to the first network device includes: determining that the first information stored in the third network device is expired; and sending updated first information to the first network device.

In the above embodiment, when the third network device determines that the locally stored first information is expired, it can update the first information and provide the updated first information to the first network device, so that the first network device can update the stored first information. Under this solution, the third network device has the ability to determine whether the first information is expired, and the first network device does not need to request the third network device to update the first information after determination, thus saving signaling consumption.

In combination with some embodiments of the second aspect, in some embodiments, the first information is preconfigured into the first network device.

In the above embodiment, the first information can be stored in the first network device through a preconfiguration method, and the first information is determined by the third network device, so that the first network device can obtain the first information through a preconfiguration method. The third network device can provide the first information to the first network device through a preconfiguration method, or send the first information to the first network device through a signaling method, which improves flexibility and expands the application boundary.

In the embodiment of the second aspect of the present disclosure, the third network device can determine the unique first information corresponding to the identifier of the first service by determining the first information, and can achieve that even when there are multiple first network devices, the generated first information is the same, which facilitates the system to use security information to perform security protection, security verification and other operations.

In a third aspect, an embodiment of the present disclosure proposes a communication method, which is executed by a second network device, and the second network device corresponds to a second terminal. The method includes: receiving first information sent by a first network device, the first information is used for proximity service security, the first information corresponds to a first service, and the first network device corresponds to a first terminal.

In the above embodiment, the second network device can receive the first information sent by the first network device, and can obtain the first information corresponding to the first service identifier.

In combination with some embodiments of the third aspect, in some embodiments, the method further includes: sending first information to the second terminal, wherein the first information is used for the second terminal to select and use the first information for security protection.

In the above embodiment, the second network device may send the first information to the second terminal, so that the second terminal can use the first information to perform security protection, security verification and other operations.

In an embodiment of the third aspect of the present disclosure, the second network device receives the first information sent by the first network device and sends the first information to the second terminal. Since the first information is confirmed by the third network device, it is unique. Even if there are multiple first network devices, the generated first information is the same, which facilitates the system to use security information to perform security protection, security verification and other operations.

In the fourth aspect, an embodiment of the present disclosure proposes a first network device, including a transceiver module, for obtaining first information determined by a third network device, the first information being used for proximity service discovery security, and the first information corresponding to a first service; and sending the first information to a first terminal and/or a second network device, the second network device corresponding to a second terminal.

In a fifth aspect, an embodiment of the present disclosure proposes a third network device, including a processing module, for determining first information, where the first information is used for proximity service discovery security, and the first information corresponds to a first service.

In a sixth aspect, an embodiment of the present disclosure proposes a second network device, comprising a transceiver module, for: receiving first information sent by a first network device, the first information being used for proximity service discovery security, the first information corresponding to a first service, and the first network device corresponding to a first terminal.

In the seventh aspect, an embodiment of the present disclosure proposes a communication device, which includes: a transceiver; a memory; a processor, which is connected to the transceiver and the memory respectively, and is configured to control the wireless signal reception and transmission of the transceiver by executing computer-executable instructions on the memory, and can execute the communication method described in the first aspect, the second aspect and the third aspect, and the optional implementation methods of the first aspect, the second aspect and the third aspect.

In an eighth aspect, an embodiment of the present disclosure proposes a storage medium, wherein the computer storage medium stores computer executable instructions; after the computer executable instructions are executed by a processor, the method described in the first aspect, the optional implementation of the first aspect, the second aspect, the optional implementation of the second aspect, the third aspect, and the optional implementation of the third aspect can be executed.

In a ninth aspect, an embodiment of the present disclosure proposes a communication system, which includes: a first network device, a third network device, and a second network device; wherein the first network device is configured to execute the method described in the first aspect and the optional implementation of the first aspect, the third network device is configured to execute the method described in the second aspect and the optional implementation of the second aspect, and the second network device is configured to execute the method described in the third aspect and the optional implementation of the third aspect.

It can be understood that the first network device, the second network device, the third network device, the communication device, the communication system, and the storage medium are all It is used to execute the method proposed in the embodiment of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding method, which will not be repeated here.

The embodiments of the present disclosure provide a communication method, an apparatus, and a storage medium. In some embodiments, the terms communication method, information processing method, communication method, etc. can be interchangeable, the terms apparatus, terminal, network device, communication device, etc. can be interchangeable, and the terms information processing system, communication system, etc. can be interchangeable.

The embodiments of the present disclosure are not exhaustive, but are only illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined, for example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

In each embodiment of the present disclosure, unless otherwise specified or there is a logical conflict, the terms and/or descriptions between the embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form a new embodiment based on their internal logical relationships.

The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular form, such as "a", "an", "the", "above", "said", "aforementioned", "this", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun after the article may be understood as a singular expression or a plural expression.

In the embodiments of the present disclosure, “plurality” refers to two or more.

In some embodiments, the terms "at least one of", "at least one of", "at least one of", "one or more", "a plurality of", "multiple", etc. can be used interchangeably.

In the embodiments of the present disclosure, descriptions such as “at least one of A, B, C…”, “A and/or B and/or C…”, etc. include the case where any one of A, B, C… exists alone, and also include any combination of any multiple of A, B, C…, and each case may exist alone; for example, “at least one of A, B, C” includes the case where A exists alone, B exists alone, C exists alone, the combination of A and B, the combination of A and C, the combination of B and C, and the combination of A, B, and C; for example, A and/or B includes the case where A exists alone, B exists alone, and the combination of A and B.

In some embodiments, the description methods such as "in one case A, in another case B", "in response to one case A, in response to another case B", etc. may include the following technical solutions according to the situation: A is executed independently of B, that is, in some embodiments A; B is executed independently of A, that is, in some embodiments B; A and B are selectively executed, that is, selected from A and B in some embodiments; A and B are both executed, that is, A and B in some embodiments. When there are more branches such as A, B, C, etc., it is similar to the above.

The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects, and do not constitute restrictions on the position, order, priority, quantity or content of the description objects. The statement of the description object refers to the description in the context of the claims or embodiments, and should not constitute redundant restrictions due to the use of prefixes. For example, if the description object is a "field", the ordinal number before the "field" in the "first field" and the "second field" does not limit the position or order between the "fields", and the "first" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and the "second field". For another example, if the description object is a "level", the ordinal number before the "level" in the "first level" and the "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number, and can be one or more. Taking the "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes may be the same or different. For example, if the description object is "device", then the "first device" and the "second device" may be the same device or different devices, and their types may be the same or different. For another example, if the description object is "information", then the "first information" and the "second information" may be the same information or different information, and their contents may be the same or different.

In some embodiments, “including A”, “comprising A”, “used to indicate A”, and “carrying A” can be interpreted as directly carrying A or indirectly indicating A.

In some embodiments, terms such as "in response to ...", "in response to determining ...", "in the case of ...", "at the time of ...", "when ...", "if ...", "if ...", etc. can be used interchangeably.

In some embodiments, terms such as "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not lower than", and "above" can be replaced with each other, and terms such as "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "no more than", "lower than", "lower than or equal to", "not higher than", and "below" can be replaced with each other.

In some embodiments, the device and the like can be interpreted as physical or virtual, and their names are not limited to those described in the embodiments. The names of the devices, equipment, circuits, network elements, nodes, functions, units, sections, systems, networks, chips, chip systems, entities and other terms are interchangeable.

In some embodiments, the terms "access network device (AN device), "radio access network device (RAN device)", "base station (BS)", "radio base station (radio base station)", "fixed station (fixed station)", "node", "access point (access point)", "transmission point (TP)", "reception point (RP)", "transmission/reception point (TRP)", "panel", "antenna panel (antenna panel)", "antenna array (antenna array)", "cell", "macro cell", "small cell (small cell)", "femto cell (femto cell)", "pico cell (pico cell)", "sector (sector)", "cell group (cell)", "carrier (carrier)", "component carrier (component carrier)", "bandwidth part (bandwidth part (BWP))" and so on can be used interchangeably.

In some embodiments, the terms "terminal", "terminal device", "user equipment (UE)", "user terminal", "mobile station (MS)", "mobile terminal (MT)", subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client and the like can be used interchangeably.

In some embodiments, the access network device, the core network device, or the network device can be replaced by a terminal. For example, the various embodiments of the present disclosure can also be applied to a structure in which the communication between the access network device, the core network device, or the network device and the terminal is replaced by the communication between multiple terminals (for example, it can also be referred to as device-to-device (D2D), vehicle-to-everything (V2X), etc.). In this case, it can also be set as a structure in which the terminal has all or part of the functions of the access network device. In addition, the language such as "uplink" and "downlink" can also be replaced by the language corresponding to the communication between the terminals (for example, "side"). For example, the uplink channel, the downlink channel, etc. can be replaced by the side channel, and the uplink, the downlink, etc. can be replaced by the side link.

In some embodiments, the terminal may be replaced by an access network device, a core network device, or a network device. In this case, the access network device, the core network device, or the network device may also be configured to have a structure that has all or part of the functions of the terminal.

In some embodiments, the names of information, etc. are not limited to the names recorded in the embodiments, and terms such as "information", "message", "signal", "signaling", "report", "configuration", "indication", "instruction", "command", "channel", "parameter", "domain", "field", "symbol", "symbol", "code element", "codebook", "codeword", "codepoint", "bit", "data", "program", and "chip" can be used interchangeably.

In some embodiments, terms such as "uplink", "uplink", "physical uplink" can be interchangeable, and terms such as "downlink", "downlink", "physical downlink" can be interchangeable, and terms such as "side", "sidelink", "side communication", "sidelink communication", "direct connection", "direct link", "direct communication", "direct link communication" can be interchangeable.

In some embodiments, the terms "downlink control information (DCI)", "downlink (DL) assignment (assignment)", "DL DCI", "uplink (UL) grant (grant)", "UL DCI" and so on can be used interchangeably.

In some embodiments, the terms "physical downlink shared channel (PDSCH)", "DL data" and the like can be interchangeable with each other, and the terms "physical uplink shared channel (PUSCH)", "UL data" and the like can be interchangeable with each other.

In some embodiments, the terms "radio", "wireless", "radio access network (RAN)", "access network (AN)", "RAN-based" and the like can be used interchangeably.

In some embodiments, terms such as "synchronization signal (SS)", "synchronization signal block (SSB)", "reference signal (RS)", "pilot", and "pilot signal" can be used interchangeably.

In some embodiments, the terms "moment", "time point", "time", "time position" and the like can be used interchangeably, and "duration", "period", "time" and the like can be used interchangeably. The terms "interval window", "window" and "time" are used interchangeably.

In some embodiments, "obtain", "obtain", "get", "receive", "transmit", "bidirectional transmission", "send and/or receive" can be interchangeable, and can be interpreted as receiving from other entities, obtaining from a protocol, obtaining by self-processing, autonomous implementation, etc.

In some embodiments, terms such as "send", "transmit", "report", "send", "transmit", "bidirectional transmission", "send and/or receive" can be used interchangeably.

In some embodiments, "predetermined" or "preset" may be interpreted as being pre-specified in a protocol, etc., or may be interpreted as a pre-set action performed by a device, etc.

In some embodiments, determining can be interpreted as judging, deciding, calculating, computing, processing, deriving, investigating, searching, looking up, searching, inquiring, ascertaining, receiving, transmitting, inputting, outputting, accessing, resolving, selecting, choosing, establishing, comparing, “assuming,” “expecting,” “considering,” broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, assigning, etc., but is not limited to the foregoing.

In some embodiments, the determination or judgment can be performed by a value represented by 1 bit (0 or 1), by a true or false value (Boolean value) represented by true or false, or by comparison of numerical values (for example, comparison with a predetermined value), but is not limited to this.

In some embodiments, "network" may be interpreted as devices included in the network (eg, access network equipment, core network equipment, etc.).

In some embodiments, "not expecting to receive" can be interpreted as not receiving on time domain resources and/or frequency domain resources, or as not performing subsequent processing on the data after receiving the data; "not expecting to send" can be interpreted as not sending, or as sending but not expecting the recipient to respond to the sent content.

In some embodiments, the acquisition of data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

In some embodiments, data, information, etc. may be obtained with the user's consent.

In a communication system, RSC can be used to identify a connection service between a U2N relay device or a U2U relay device and an authorized remote device or end device that the relay device can provide services. For the same connection service, RSC is unique between different public land mobile communication networks.

In order to obtain key information, the remote device can send a key request to its corresponding core network element (such as DDNMF/PKMF). The remote device can discover the core network element corresponding to the potential relay device based on the local public land mobile network ID (such as PLMN ID) of the potential relay mapped to the RSC, and then send a key request to the core network element corresponding to the potential relay device. After receiving the key response message, the remote device's element sends the received key information to the remote device.

When discovering a potential relay device, if there are multiple potential relays that support the RSC, the core network element corresponding to each relay device can generate different key information. When the remote device receives multiple key information, it will be unable to choose which set of key information to use for encryption and decryption operations and integrity protection.

In order to solve the above problems, the present disclosure proposes a communication method, device and storage medium.

Fig. 1 is a schematic diagram of the architecture of a communication system according to an embodiment of the present disclosure. As shown in Fig. 1, the communication system 100 may include a first network device 101, a second network device 102 and a third network device 103. Optionally, the communication system 100 also includes a first terminal and a second terminal.

In some embodiments, the first network device 101 may be a core network device. For example, the first network device may be a network element corresponding to the first terminal, such as a Direct Discovery Name Management Function (DDNMF) network element and/or a ProSe Key Management Function (PKMF) network element corresponding to the first terminal. Optionally, the first network device may be a 5G-DDNMF and/or PKMF of the first terminal in a Home Public Land Mobile Network (HPLMN). Optionally, the first network device may also be other core network devices corresponding to the first terminal, such as a PCF.

In some embodiments, when the first network device 101 communicates with the first terminal through the user plane, the first network device 101 may be a PKMF network element; when the first network device 101 communicates with the first terminal through the control plane, the first network device 101 may be a DDNMF network element.

In some embodiments, the second network device 102 corresponds to the second terminal, and the second network device may be a core network device. For example, the second network device may be a DDNMF network element and/or a PKMF network element of the second terminal. 5G-DDNMF and/or PKMF in HPLMN. Optionally, the first network device may also be other core network devices corresponding to the second terminal, such as PCF.

In some embodiments, when the second network device 102 communicates with the second terminal through the user plane, the second network device 102 may be a PKMF network element; when the second network device 102 communicates with the second terminal through the control plane, the second network device 102 may be a DDNMF network element.

In some embodiments, the third network device 103 may be a proximity service application server (Prose Application Server). In other embodiments, the third network device 103 may be a network device in other proximity services.

In some embodiments, the first terminal may be a relay user equipment (User Equipment, UE). In terminal to network (UE to Network, U2N), the first terminal may be a relay UE between a remote UE and a network. In terminal to terminal (UE to UE, U2U), the first terminal may be a relay UE between two end UEs.

In the above embodiments, the name of the first terminal may be a relay terminal, a relay user equipment, a discovered device (Discoveree UE), an announcing device (Announcing UE), etc., which is not limited in the present disclosure.

In some embodiments, the second terminal can be a remote UE (remote UE) in U2N or an end UE (end UE) in U2U.

In the above embodiments, the name of the second terminal can be a remote terminal, a remote user equipment, an end user equipment, a discovery device (Discoverer UE), a monitoring device (Monitoring UE), etc., which is not limited in the present disclosure.

In some embodiments, the terminal includes, for example, a mobile phone, a wearable device, an Internet of Things device, a car with communication function, a smart car, a tablet computer (Pad), a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control (industrial control), a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid (smart grid), a wireless terminal device in transportation safety (transportation safety), a wireless terminal device in a smart city (smart city), and at least one of a wireless terminal device in a smart home (smart home), but is not limited to these.

In some embodiments, the access network device is, for example, a node or device that accesses a terminal to a wireless network. The access network device may include an evolved Node B (eNB), a next generation evolved Node B (ng-eNB), a next generation Node B (gNB), a node B (NB), a home node B (HNB), a home evolved node B (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an open base station (Open RAN), a cloud base station (Cloud RAN), a base station in other communication systems, and at least one of an access node in a wireless fidelity (WiFi) system, but is not limited thereto.

In some embodiments, the core network device may be a device including one or more network elements, or may be multiple devices or device groups, each including all or part of one or more network elements. The network element may be virtual or physical. The core network may include, for example, at least one of an Evolved Packet Core (EPC), a 5G Core Network (5GCN), and a Next Generation Core (NGC).

In some embodiments, the above-mentioned one or more network elements may include AMF, UPF, MME, etc., and may also include other network elements, such as Policy Control Function (PCF), Application Function (AF), Network Application Function (NAF), Application Layer Authentication and Key Management Anchor Function (AAnF), Bootstrapping Server Functionality (BSF), Session Management Function (SMF), etc.

It can be understood that the communication system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution proposed in the embodiment of the present disclosure. A person skilled in the art can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution proposed in the embodiment of the present disclosure is also applicable to similar technical problems.

The following embodiments of the present disclosure may be applied to the communication system 100 shown in FIG1 , or part of the subject, but are not limited thereto. The subjects shown in FIG1 are examples, and the communication system may include all or part of the subjects in FIG1 , or may include other subjects other than FIG1 , and the number and form of the subjects are arbitrary, and the connection relationship between the subjects is an example, and the subjects may be connected or disconnected, and the connection may be in any manner, which may be a direct connection or an indirect connection, and may be a wired connection or a wireless connection.

FIG2a is an interactive schematic diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG2a, the present disclosure embodiment relates to a communication method, For use in a communication system 100, the communication system 100 may include a first network device 101, a second network device 102, and a third network device 103. Optionally, the communication system 100 also includes a first terminal and a second terminal. The above method includes:

Step 2101: A first terminal sends a first message to a first network device.

In some embodiments, the first network device may receive the first message.

In some embodiments, the first network device may be a core network device. For example, the first network device may be a network element corresponding to the first terminal. For example, the first network device may be a network element of a Direct Discovery Name Management Function (DDNMF) and/or a ProSe Key Management Function (PKMF) corresponding to the first terminal. Optionally, the first network device may be a 5G-DDNMF and/or PKMF of the first terminal in a Home Public Land Mobile Network (HPLMN).

In some embodiments, the first terminal may be a relay user equipment (User Equipment, UE). In terminal to network (UE to Network, U2N), the first terminal may be a relay UE between a remote UE and a network. In terminal to terminal (UE to UE, U2U), the first terminal may be a relay UE between two end UEs.

In some embodiments, the name of the first terminal may be a relay terminal, a relay user equipment, a discovered device, an announcing device, etc., which is not limited in the present disclosure.

In some embodiments, the first message may be used to request first information, the first information is related to a first service, and the first message may carry an identifier of the first service.

In some embodiments, the first message may also carry the security capability of the first terminal PC5.

In some embodiments, the name of the first message is not limited, and it can be, for example, "Relay Discovery Key Request", "Key Request", "Discovery Key Request", etc.

In some embodiments, the first service may be a connection service provided by the first terminal, the identifier of the first service is used to uniquely identify the first service, and the identifier of the first service may be a relay service code (RSC).

In some embodiments, the first information may be used to protect the security of the proximity service (ProSe Security). For example, the first information may be used for the discovery security of the proximity service (ProSe Discovery Security). For example, the discovery security of the proximity service may include any one of encryption/decryption, integrity protection, scrambling, etc. The first information may also be used for the communication security of the proximity service (Prose Communication Security). For example, the communication security of the proximity service may include any one of encryption/decryption, integrity protection, scrambling, etc.

In some embodiments, the name of the first information is not limited, and it can be "key", "key information", "security materials", "security parameters", etc.

For example, the proximity service discovery security may be U2N discovery security or U2U discovery security, which is not limited in the present disclosure.

For example, the proximity service communication security may be U2N communication security or U2U communication security, which is not limited in the present disclosure.

In some embodiments, the first information may be determined (or generated) by a third network device.

Step 2102: The first network device determines whether first information corresponding to the first service identifier is stored in the first network device.

In some embodiments, the first network device may determine whether the first information is previously stored locally.

In some embodiments, the first network device may determine whether the first information corresponding to the identifier of the first service is stored in the first network device based on the identifier of the first service received from the first terminal.

Optionally, when the first network device determines that the first information corresponding to the identifier of the first service is stored locally, the validity of the stored first information may be judged, that is, step 2104 is executed.

Optionally, when the first network device determines that the first information corresponding to the identifier of the first service is not stored locally, the first network device may send a second message to the third network device, where the second message is used to request the first information, ie, execute step 2103.

In some optional embodiments, step 2102 is an optional step. In other words, step 2102 may be omitted in some embodiments. For example, the first network device may not perform the judgment action of determining "whether to store", but directly obtain the indication information stored or not stored in the first network device, and the indication information may be determined by other devices and provided to the first network device. For another example, the first network device may not perform the judgment action of determining "whether to store", but directly obtain the state information stored or not stored locally.

Step 2103: The first network device sends a second message to the third network device.

In some embodiments, the third network device may be a server or a network element function, optionally, the third network device may be an application server (Application Server), optionally, the third network device may be a proximity service application server (ProSe Application Server).

In some embodiments, the second message may be used to request the first information.

In some embodiments, the second message may carry an identifier of the first service, thereby requesting first information corresponding to the identifier of the first service.

In some embodiments, the first information is determined by a third network device.

In some embodiments, the name of the second message is not limited, and it can be, for example, "Relay Discovery Key Request", "Key Request", "Discovery Key Request", etc.

In some embodiments, step 2103 is optional, and when the first information corresponding to the identifier of the first service is stored in the first network device, step 2103 may be omitted. Optionally, when the first information corresponding to the identifier of the first service is stored in the first network device, the first network device may further determine the validity of the stored first information, and if the first information is valid (not expired), step 2103 may be omitted, and if the first information is invalid (or invalid, or expired), step 2104 is executed.

In the above embodiment, the first network device sends a request message to the third network device, thereby realizing the interaction between the network element and the application server. By acquiring the first information through the interaction, the uniqueness of the first information can be achieved.

Step 2104: The first network device determines whether the first information stored in the first network device is expired.

In some embodiments, the first network device may determine whether the locally stored first information is expired.

In some embodiments, the first network device may determine whether the first information is expired based on information related to the first information. For example, the determination may be made based on timer information related to the first information.

In some embodiments, the first network device may determine whether the locally stored first information is expired based on a timer. Optionally, the timer may be a timer associated with the first information, and the timer may be obtained by the first network device when obtaining the first information. Optionally, the timer may be provided by a third network device or may be preconfigured.

In some embodiments, the first network device may determine whether the first information is expired by other means, which is not limited in the present disclosure.

In the above embodiment, the first network device stores the timer associated with the first information when storing the first information corresponding to the identifier of the first service.

In some embodiments, the timer may indicate the timeliness information of the first information, for example, the timer may be information indicating the valid time period of the first information. The first network device may determine the expiration status of the first information according to the timer.

In some embodiments, when the first network device determines that the stored first information is invalid, the first network device may send a fourth message to the third network device, where the fourth message is used to request the third network device to update the first information, ie, execute step 2105 .

In some embodiments, when the first network device determines that the stored first information is valid, the first network device may send the stored first information to the first terminal and/or the second network device, that is, step 2109 and/or step 2110 may be executed.

In some embodiments, step 2104 is optional. When the first network device does not store the first information corresponding to the identifier of the first service, step 2104 may be omitted, and the first network device may obtain the first information from the third network device through step 2103 .

In some optional embodiments, step 2104 is an optional step. In other words, step 2104 may be omitted in some embodiments. For example, the first network device may not perform the judgment action of determining whether the stored first information is "expired", but directly obtain the locally stored state information of whether the first information is expired or not.

Step 2105: The first network device sends a fourth message to the third network device.

In some embodiments, the fourth message is used to request an update of the first information.

In some embodiments, the second message and the fourth message may be consistent with each other and are also used to request valid first information from the third network device.

In some embodiments, the name of the fourth message is not limited, and it can be, for example, "Relay Discovery Key Request", "Key Request", "Discovery Key Request", etc.

In some embodiments, the fourth message may carry an identifier of the first service, thereby requesting to update the first information corresponding to the identifier of the first service.

In some embodiments, when the first network device determines that the first information corresponding to the stored identifier of the first service is invalid, the first network device may send a fourth message to the third network device, and the fourth message may be used to instruct the third network device to generate valid first information.

In some embodiments, step 2105 is optional. When valid first information corresponding to the first service identifier is stored in the first network device, the first network device can send the corresponding first information to the second network device and/or the first terminal without sending a request to the third network device.

In the above embodiment, the first network device sends an update request message to the third network device, thereby realizing the interaction between the network element and the application server and the update of the first information. By acquiring the updated first information through the interaction, the uniqueness of the first information can be achieved.

Step 2106: The third network device determines whether the first information stored in the third network device is expired.

In some embodiments, the third network device can determine whether the first information is expired based on the information associated with the first information. For example, Whether the first information is expired is determined by the timer information associated with the first information. The timer can be referred to the above description and will not be described again.

In some embodiments, when the third network device determines that the first information corresponding to the first service identifier stored in the third network device is expired, the third network device may regenerate the first information corresponding to the first service identifier, that is, execute steps 2107 and 2108.

In some embodiments, when the third network device determines that the first information corresponding to the first service identifier stored in the third network device has not expired, the third network device may send a third message containing the first information to the first network device, that is, execute step 2108. Optionally, when the third network device determines that the first information corresponding to the first service identifier stored in the third network device has not expired, the third network device may send the first information to the first network device in response to a request from the first network device, that is, if the request from the first network device is not received, step 2108 may not be executed.

In some embodiments, when the third network device determines that the first information stored in the third network device is expired, it means that the first situation occurs. At this time, the first network device can receive the updated first information sent by the third network device in the first situation.

In some embodiments, step 2106 is optional, and the third network device may not determine whether the first information stored in the third network device is expired, and may only send the first information in response to the request of the first network device.

Step 2107: The third network device determines the first information.

In some embodiments, the third network device may determine (or generate) first information corresponding to an identifier of the first service. The identifier of the first service may be obtained from the first network device.

In some embodiments, the third network device may select a random number based on the first service identifier, and generate first information corresponding to the first service identifier based on the random number. The present disclosure does not limit the manner in which the third network device determines or generates the first information.

In some embodiments, different services of the same terminal have different identifiers, and the generated first information is also different.

In some embodiments, step 2107 is optional. For example, when the first network device stores valid first information corresponding to the first service identifier, the third network device may not need to regenerate new first information. It should be noted that the optional meaning of step 2107 is that the execution order of step 2107 is not limited. For example, when the first network device stores the first information corresponding to the first service identifier and does not send the second message to the third network device, step 2107 may not be executed after step 2102. For another example, when the first network device determines that the first information stored in the first network device has not expired and does not send the fourth message to the third network device, step 2107 may not be executed after step 2104. For another example, when the third network device determines that the first information stored in the third network device has not expired, step 2107 may not be executed after step 2106. However, in the present disclosure, the first information is determined by the third network device, and step 2107 may be executed after the first network device requests the first information, or before the first network device requests the first information, and the present disclosure does not limit this.

In the above embodiment, since the first network device no longer requests the first information from the third network device when the first information corresponding to the identifier of the first service is stored, the third network device generates corresponding unique first information for the same first service identifier.

Step 2108: The third network device sends a third message to the first network device.

In some embodiments, the third message may carry the first information. The third network device may send the determined first information to the first network device.

In some embodiments, the third message may also carry a timer corresponding to the first information.

In some embodiments, the third message may also carry a current time (Current_Time) parameter and a maximum offset (Max_Offset) parameter as well as a selected PC5 security protection algorithm.

In some embodiments, the name of the third message is not limited, and it can be, for example, "Relay Discovery Key Response", "Key Response", "Discovery Key Response", etc.

In some embodiments, when the first terminal is moving, in order to enable the first terminal to provide the same service when roaming, after executing step 2108, the 5G-DDNMF and/or PKMF of the relay user equipment in the visited public land mobile network (Visited Public Land Mobile Network, VPLMN) can exchange and publish authentication messages (Announce Auth. Message) with the 5G-DDNMF and/or PKMF of the first terminal in the home public land mobile network (Home Public Land Mobile Network, HPLMN) to synchronize the first information. When the relay user equipment is not roaming, no exchange is performed.

In some embodiments, the execution order of step 2108 is not limited. In one example, the third network device may send a third message carrying the first information in response to a request from the first network device, that is, execute step 2108 in response to step 2102 or 2105. In another example, the third network device may first send the third message carrying the first information to the first network device, for example, before any of the above steps 2101-2107, send the third message carrying the first information to the first network device.

Step 2109: The first network device sends first information to the first terminal.

In some embodiments, the first network device may send the first information to the first terminal after receiving the first information provided by the third network device.

In some embodiments, the first network device returns first information corresponding to the first service identifier, Current_Time, Max_Offset parameters and the selected PC5 security protection algorithm to the first terminal, and the first terminal stores the first information together with the selected PC5 algorithm and the first service identifier.

In some embodiments, the first information is provided to the first terminal to perform proximity service security. For example, the first terminal selects and uses the first information for encryption and decryption, integrity protection and verification, and the like.

In one example, after the first terminal obtains the first information, the first terminal may use the first information to perform security protection on the broadcast message and broadcast the protected broadcast message. Optionally, the second terminal may monitor the broadcast message and perform decryption.

In another example, after the first terminal obtains the first information, the first terminal can receive the protected broadcast message sent by the second terminal, and the first terminal can use the first information to perform security verification on the protected broadcast message sent by the second terminal. Optionally, the protected broadcast message sent by the second terminal can carry the identifier of the first service (taking RSC as an example), that is, the identifier of the first service corresponding to the first information used by the second terminal when performing security protection on the broadcast message. After the first terminal uses the first information to verify the security of the protected broadcast message, it can learn the RSC in the protected broadcast message. If the RSC in the protected broadcast message exists in the RSC supported by the first terminal, the first terminal can use the first information received from the first network device to perform security protection on the response message, and feedback the response message to the second terminal. The second terminal receives the response message and can use the first information received from the second network device to perform security verification on the response message; if the RSC in the protected broadcast message does not exist in the RSC supported by the first terminal, the first terminal does not feedback the response message to the second terminal.

In the above embodiment, since the first terminal requests the first information corresponding to the identifier of the first service from the first network device, the first network device can determine whether the first information corresponding to the identifier of the first service is stored locally (or the first information that has not expired is stored). If so, there is no need to request the first information corresponding to the identifier of the first service from the third network device. The first network device can send the stored first information to the first terminal, and the third network device will not generate two sets of first information for the same identifier of the first service, causing confusion for the first terminal when selecting the first information for proximity service security processing (such as encryption and decryption). The first information generated by the third network device is unique, and the first information provided by the first network device to the first terminal also uniquely corresponds to the identifier of the first service requested by the first terminal, so that the first terminal can use the unique first information to perform security protection, security verification and other operations, thereby avoiding operational confusion of the terminal.

Step 2110: The first network device sends first information to the second network device.

In some embodiments, the second network device corresponds to the second terminal, and the second network device may be a core network device, such as a DDNMF network element and/or a PKMF network element of the second terminal. Optionally, the second network device may be a 5G-DDNMF and/or PKMF of the second terminal in the HPLMN.

In some embodiments, the second terminal can be a remote UE (remote UE) in U2N or an end UE (end UE) in U2U.

In some embodiments, the name of the second terminal may be a remote terminal, a remote user device, an end user device, a discovery device, a monitoring device, etc., which is not limited in the present disclosure.

In some embodiments, the first network device may send the first information to the second network device upon receiving a request from the second terminal sent by the second network device. Specifically, before executing step 2110, the second terminal may send a request message to the second network device, and the request message may be used to request the first information corresponding to the identifier of the first service, and the request message may include the identifier of the first service (e.g., a relay service code) and the 5G proximity service PC5 security capability of the second terminal.

In some embodiments, the request message sent by the second terminal to the second network device may also include a public land mobile network (PLMN) list, and the second terminal is authorized to use the 5G proximity service relay in the relay discovery information request in the PLMN included in the list.

For example, the second network device can check through unified data management (UDM) whether the second terminal is authorized to monitor U2N relay discovery and/or U2U relay discovery.

In the above embodiment, if authorized, the 5G DDNMF and/or PKMF (i.e., the second network device) of the second terminal in the HPLMN can send a discovery request message to the 5G DDNMF and/or PKMF (i.e., the first network device) of the first terminal in the HPLMN, and the discovery request message may include the PC5 security capabilities of the second terminal.

In some embodiments, after receiving the request message from the second terminal, the second network device may execute a relay discovery process and send a request message to the first network device of the discovered relay, where the request message may be used to request the first information corresponding to the identifier of the first service.

For example, the 5G DDNMF and/or PKMF of the second terminal (i.e., the second network device) may be based on the potential 5G neighbor mapped to the RSC. HPLMNs of nearby serving relays discover the 5G DDNMF and/or PKMF of potential 5G nearby serving relays supporting the RSC.

In some embodiments, the second network device may perform the relay discovery process in different ways. For example, the 5G DDNMF and/or PKMF of the second terminal (i.e., the second network device) may obtain the HPLMN of the potential 5G proximity service relay in different ways (e.g., from a policy control function (PCF) or based on local configuration).

In some embodiments, when the second terminal is moving, in order to enable the second terminal to provide the same service when roaming, the 5G-DDNMF and/or PKMF of the second terminal in the VPLMN can exchange and publish authentication messages (Announce Auth.Message) with the 5G-DDNMF and/or PKMF of the second terminal in the HPLMN. When the second terminal is not roaming, no exchange is performed.

Step 2111: The second network device sends first information to the second terminal.

In some embodiments, the first information is provided to the second terminal to perform proximity based service security. For example, the second terminal selects and uses the first information to perform security operations such as encryption and decryption, integrity protection and verification.

In some embodiments, the second terminal sends broadcast information protected by the first information security to the first terminal.

In the above embodiment, the second terminal performs security protection on the broadcast information based on the discovery security information (i.e., the first information) received in step 2110, and sends the protected broadcast message to the first terminal, the broadcast message including the first service identifier. In some embodiments, the first terminal sends a protected response message to the second terminal.

In the above embodiment, the first terminal performs security verification on the broadcast message received from the second terminal based on the discovery security information (i.e., the first information) received from the 5G DDNMF and/or PKMF of the first terminal. After verification, the RSC corresponding to the broadcast message is matched with the RSC information configured by the first terminal itself. When the match is successful, a security protection response message is sent to the second terminal. When the match is unsuccessful, no message is sent.

In some embodiments, the first terminal performs security protection on the response message based on the first information received in step 2109, and sends the protected response message to the second terminal.

In some embodiments, the second terminal performs security verification on the response message received from the first terminal based on the first information received from the 5G DDNMF and/or PKMF of the second terminal.

For example, after the second terminal obtains the first information, the second terminal can use the first information sent by the second network device to perform security protection on the broadcast message, and broadcast the protected broadcast message. Optionally, the first terminal can receive the protected broadcast information and perform security verification. Optionally, the broadcast message sent by the second terminal can carry the identifier of the first service (taking RSC as an example), that is, the identifier of the first service corresponding to the first information used by the second terminal when performing security protection on the broadcast message. After the first terminal uses the first information to perform security verification on the protected broadcast message, the RSC in the protected broadcast message can be learned. If the RSC in the protected broadcast message exists in the RSC supported by the first terminal, the first terminal can use the first information received from the first network device to perform security protection on the response message, and feedback the response message to the second terminal. The second terminal receives the response message and can use the first information received from the second network device to perform security verification on the response message; if the RSC in the protected broadcast message does not exist in the RSC supported by the first terminal, the first terminal does not feedback the response message to the second terminal.

In the above embodiment, since the first terminal requests the first information corresponding to the identifier of the first service from the first network device, the first network device can determine whether the first information corresponding to the identifier of the first service is stored locally (or the first information that has not expired is stored). If so, there is no need to request the first information corresponding to the identifier of the first service from the third network device. The first network device can send the stored first information to the first terminal, and the third network device will not generate two sets of first information for the same identifier of the first service, causing confusion for the first terminal when selecting the first information for proximity service security processing (such as encryption and decryption). The first information generated by the third network device is unique, and the first information provided by the first network device to the first terminal also uniquely corresponds to the identifier of the first service requested by the first terminal, so that the first terminal can use the unique first information to perform security protection, security verification and other operations, thereby avoiding operational confusion of the terminal.

In some embodiments, step 2109 may be performed before step 2110 .

The method provided by the present invention can use an application server to determine the discovery security information. Since the security information generated by the application server for different RSCs is unique, it can be achieved that even when there are multiple relay devices, the generated discovery security information is the same, which facilitates the system to use security information to perform security protection, security verification and other operations.

The communication method involved in the embodiments of the present disclosure may include at least one of steps 2101 to 2111. For example, step 2108 may be implemented as an independent embodiment, steps 2101+2102+2104+2105+2106+2107+2108+2109+110+2111 may be implemented as an independent embodiment, steps 2101+2102+2103+2107+2108+2109+2110+2111 may be implemented as an independent embodiment, and steps 2101+2102+2103+2104+2105+2106+2107+2108+2109+2110+2111 may be implemented as an independent embodiment, but are not limited thereto.

FIG2b is an interactive schematic diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG2b, the present disclosure embodiment relates to a communication method, For use in a communication system 100, the communication system 100 may include a first network device 101, a second network device 102, and a third network device 103. Optionally, the communication system 100 also includes a first terminal and a second terminal. The above method includes:

Step 2201: A first network device obtains first information.

In some embodiments, the description of the first information can refer to Figure 2a and will not be repeated here.

In some embodiments, the first network device may obtain one or more first information corresponding to each of the one or more first service identifiers. For example, the first network device may obtain a configuration list of first information, which may include one or more first information and the identifier of the first service corresponding to the first information.

In some embodiments, the first information may be preconfigured. The first network device may obtain the preconfigured first information.

In some embodiments, the first network device acquiring the first information may mean that the first information is preconfigured in the first network device.

In some embodiments, the first information may be obtained through operator preconfiguration, and the first information is determined by the third network device.

In some embodiments, the first network device may not request the first information from the third network device in real time. In other words, the first network device may not receive the first information from the third network device, but obtains the first information preconfigured by the third network device.

In the above embodiment, in the configuration list of the first information acquired by the first network device, the first information is unique for different service identifiers, so that a specific service identifier can have unique corresponding first information.

Step 2202: The first terminal sends a first message to the first network device.

The optional implementation of step 2202 can refer to the optional implementation of step 2101 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

Step 2203: The third network device determines that the first information stored in the third network device is expired.

In some embodiments, the third network device can determine whether the first information is expired according to information associated with the first information. For example, the third network device can determine whether the first information is expired according to timer information associated with the first information. The timer can be referred to the above description and will not be repeated here.

In some embodiments, when the third network device determines that the first information corresponding to the first service acquired by the third network device is expired, the third network device may regenerate the first information, that is, execute step 2204 .

In some embodiments, when the first network device determines that the first information corresponding to the first service acquired by the first network device is not expired, the first information can be directly sent to the first terminal and/or the second network device, that is, steps 2206 and/or 2207 can be directly executed.

Some optional implementations of step 2203 can refer to the optional implementations of step 2106 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, step 2203 is optional, and the third network device may not determine whether the first information stored in the third network device is expired.

Step 2204: The third network device determines the first information.

In some embodiments, step 2204 is optional. When the third network device determines in step 2203 that the first information is not expired, step 2204 may be omitted.

The optional implementation of step 2204 can refer to the optional implementation of step 2107 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

In the above embodiment, the third network device no longer determines new first information when the first information has not expired.

Step 2205: The third network device sends a third message to the first network device.

In some embodiments, the third message carries updated first information.

In some embodiments, step 2205 is optional. When the third network device determines in step 2203 that the first information is not expired, the third network device does not need to update the first information, and the third network device does not need to send a third message to the first network device, that is, step 2205 is not executed.

In some embodiments, the execution order of step 2205 may not be fixed. The update of the first information by the third network device depends on whether the first information is expired. The update process can be executed before the request step or after the step of obtaining the first information is completed, that is, step 2205 can be executed before step 2202 or after step 2208.

The optional implementation of step 2205 can refer to the optional implementation of step 2108 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

Step 2206: The first network device sends first information to the first terminal.

The optional implementation of step 2206 can refer to the optional implementation of step 2109 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

Step 2207: The first network device sends first information to the second network device.

The optional implementation of step 2207 can refer to the optional implementation of step 2110 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

Step 2208: The second network device sends the first information to the second terminal.

In some embodiments, the second terminal performs security protection on the broadcast information based on the first information received in step 2208, and sends the protected broadcast message to the first terminal, where the broadcast message includes the RSC.

In some embodiments, the first terminal performs security protection on the response message based on the first information received in step 2206, and sends the encrypted response message to the second terminal.

The optional implementation of step 2208 can refer to the optional implementation of step 2111 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

In the above embodiment, the second network device sends the first information to the second terminal. The first information generated based on the third network device is unique, and the second terminal no longer needs to select different discovered security information, so that the second terminal can use the first information for security protection, security verification and other operations.

In some embodiments, step 2206 may be performed before step 2207 .

According to the method provided by the present disclosure, a first network device can obtain first information in a pre-configuration manner, the first information is determined by a third network device, and the first information is pre-configured in the first network device. The first network device can query according to the identifier of the first service requested by the first terminal to obtain the corresponding first information, and send the first information to the first terminal and/or the second network device, so as to avoid confusion of the first terminal when selecting the first information for proximity service security processing (such as encryption and decryption). The first information obtained in a pre-configuration manner is unique, and the first information provided by the first network device to the first terminal also uniquely corresponds to the identifier of the first service requested by the first terminal, so that the first terminal can use the unique first information to perform security protection, security verification and other operations, so as to avoid confusion in terminal operations.

The communication method involved in the embodiments of the present disclosure may include at least one of steps 2201 to 2208. For example, step 2201 may be implemented as an independent embodiment, steps 2201+2202+2206+2207+2208 may be implemented as an independent embodiment, and steps 2201+2202+2203+2204+2205+2206+2207+2208 may be implemented as an independent embodiment, but are not limited thereto.

FIG3a is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG3a, the present disclosure embodiment relates to a communication method, which is used for a first network device 101, and the method includes:

Step 3101: Get the first message.

The optional implementation of step 3101 can refer to the optional implementation of step 2101 in Figure 2a, step 2202 in Figure 2b, and other related parts in the embodiments involved in Figures 2a and 2b, which will not be repeated here.

In some embodiments, the first network device 101 may obtain the first message sent by the first terminal, but is not limited thereto, and may also receive the first message sent by other entities.

In some embodiments, the first network device 101 obtains a first message specified by a protocol.

In some embodiments, the first network device 101 obtains the first message from an upper layer(s).

In some embodiments, the first network device 101 performs processing to obtain the first message.

In some embodiments, step 3101 is omitted, and the first network device 101 autonomously implements the function indicated by the first message, or the above function is default or acquiescent.

Step 3102: Determine whether the first network device stores first information corresponding to the identifier of the first service.

The optional implementation of step 3102 can refer to the optional implementation of step 2101 of step 2102 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

Step 3103: Send the second message.

The optional implementation of step 3103 can refer to the optional implementation of step 2103 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, the second message may be used to request the first information.

In some embodiments, the first network device 101 may send the second message to the third network device 103 , but is not limited thereto, and the second message may also be sent to other entities.

In some embodiments, the first network device 101 can send the second message through various messages. The third network device has different types and can send the second message via an uplink signal, a sidelink signal, or a high-layer signaling message.

In some embodiments, step 3103 is omitted and the above functions are default or acquiescent.

Step 3104: Determine whether the first information stored in the first network device is expired.

The optional implementation of step 3104 can refer to the optional implementation of step 2104 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, step 3104 is omitted and the above functions are default or by default.

Step 3105: Send the fourth message.

The optional implementation of step 3105 can refer to the optional implementation of step 2105 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, the fourth message may be used to request an update of the first information.

In some embodiments, the first network device 101 may send the fourth message to the third network device 103 , but is not limited thereto, and the fourth message may also be sent to other entities.

In some embodiments, the first network device 101 may send the fourth message through various messages. For example, depending on the types of the first network device and the third network device, the fourth message may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

In some embodiments, step 3105 is omitted and the above functions are default or acquiescent.

Step 3106: Get the third message.

The optional implementation of step 3106 can refer to the optional implementation of step 2108 in Figure 2a, step 2205 in Figure 2b, and other related parts in the embodiments involved in Figures 2a and 2b, which will not be repeated here.

In some embodiments, the first network device 101 may obtain a third message sent by a third network device, but is not limited thereto, and may also receive a third message sent by other entities.

In some embodiments, the first network device 101 obtains a third message specified by the protocol.

In some embodiments, the first network device 101 obtains the third message from an upper layer(s).

In some embodiments, the first network device 101 performs processing to obtain the third message.

Step 3107: Send first information to the first terminal.

The optional implementation of step 3107 can refer to the optional implementation of step 2109 in Figure 2a, step 2206 in Figure 2b, and other related parts in the embodiments involved in Figures 2a and 2b, which will not be repeated here.

In some embodiments, the first information may be used for discovery security of the proximity service, such as encryption, integrity protection, scrambling, etc., wherein the first information corresponds to the first service.

In some embodiments, the first network device 101 may send the first information to the first terminal, but is not limited thereto, and may also send the first information to other entities.

In some embodiments, the first network device 101 may send the first information through various messages. For example, depending on the types of the first network device and the first terminal, the first information may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

Step 3108: Send the first information to the second network device.

The optional implementation of step 3108 can refer to step 2110 of Figure 2a. The optional implementation of step 2207 of Figure 2b and other related parts of the embodiments involved in Figures 2a and 2b are not described in detail here.

In some embodiments, the first information may be used for discovery security of the proximity service, such as encryption, integrity protection, scrambling, etc., wherein the first information corresponds to the first service.

In some embodiments, the first network device 101 may send the first information to the second network device, but is not limited thereto, and may also send the first information to other entities.

In some embodiments, the first network device 101 may send the first information through various messages. For example, depending on the types of the first network device and the second network device, the first information may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

The communication method involved in the embodiment of the present disclosure may include at least one of step 3101 to step 3108. For example, step 3106 may be implemented as an independent embodiment, steps 3101+3102+3103+3106+3107+3108 may be implemented as an independent embodiment, and steps 3101+3102+3103+3106+3107+3108 may be implemented as an independent embodiment, but are not limited thereto.

In some embodiments, step 3103, step 3104, step 3105, and step 3106 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

FIG3b is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG3b, the present disclosure embodiment relates to a communication method, which is used for a first network device 101, and the method includes:

Step 3201: Obtain first information.

The optional implementation of step 3201 can refer to the optional implementation of step 2201 in Figure 2b and other related parts in the embodiment involved in Figure 2b, which will not be repeated here.

In some embodiments, the first network device 101 may obtain the first information configuration list sent by the third network device, but is not limited thereto, and may also receive the first information configuration list sent by other entities.

In some embodiments, the first network device 101 obtains a first information configuration list specified by a protocol.

In some embodiments, the first network device 101 obtains the first information configuration list from an upper layer(s).

In some embodiments, the first network device 101 performs processing to obtain a first information configuration list.

Step 3202: Get the first message.

The optional implementation of step 3202 can refer to the optional implementation of step 2101 in Figure 2a, step 2202 in Figure 2b, step 3101 in Figure 3a, and other related parts in the embodiments involved in Figures 2a, 2b, and 3a, which will not be repeated here.

In some embodiments, the first network device 101 may obtain the first message sent by the first terminal, but is not limited thereto, and may also receive the first message sent by other entities.

In some embodiments, the first network device 101 obtains a first message specified by a protocol.

In some embodiments, the first network device 101 obtains the first message from an upper layer(s).

In some embodiments, the first network device 101 performs processing to obtain the first message.

Step 3203: Get the third message.

The optional implementation of step 3203 can refer to the optional implementation of step 2108 in Figure 2a, step 2205 in Figure 2b, step 3106 in Figure 3a, and other related parts in the embodiments involved in Figures 2a, 2b, and 3a, which will not be repeated here.

In some embodiments, the first network device 101 may obtain a third message sent by a third network device, but is not limited thereto, and may also receive a third message sent by other entities.

In some embodiments, the first network device 101 obtains a third message specified by the protocol.

In some embodiments, the first network device 101 obtains the third message from an upper layer(s).

In some embodiments, the first network device 101 performs processing to obtain the third message.

In some embodiments, step 3203 is omitted and the above functions are default or by default.

Step 3204: Send first information to the first terminal.

The optional implementation of step 3204 can refer to the optional implementation of step 2109 in Figure 2a, step 2206 in Figure 2b, step 3107 in Figure 3a and other related parts in the embodiments involved in Figures 2a, 2b and 3a, which will not be repeated here.

In some embodiments, the first information may be used for discovery security of the proximity service, such as encryption, integrity protection, scrambling, etc., wherein the first information corresponds to the first service.

In some embodiments, the first network device 101 may send the first information to the first terminal, but is not limited thereto, and may also send the first information to other entities.

In some embodiments, the first network device 101 may send the first information through various messages. For example, depending on the types of the first network device and the first terminal, the first information may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

Step 3205: Send the first information to the second network device.

The optional implementation of step 3205 can refer to the optional implementation of step 2110 in Figure 2a, step 2207 in Figure 2b, step 3108 in Figure 3a and other related parts in the embodiments involved in Figures 2a, 2b and 3a, which will not be repeated here.

In some embodiments, the first information may be used for discovery security of the proximity service, such as encryption, integrity protection, scrambling, etc., wherein the first information corresponds to the first service.

In some embodiments, the first network device 101 may send the first information to the second network device, but is not limited thereto, and may also send the first information to other entities.

In some embodiments, the first network device 101 can send the first information through various messages. The second network device has different types and can send the first information via an uplink signal, a sidelink signal, or a high-layer signaling message.

The communication method involved in the embodiment of the present disclosure may include at least one of step 3201 to step 3205. For example, step 3201 may be implemented as an independent embodiment, and steps 3201+3202+3204+3205 may be implemented as independent embodiments, but are not limited thereto.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, and the optional methods or optional examples can be arbitrarily combined and can be arbitrarily combined with other implementation modes or examples.

FIG3c is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG3c, the present disclosure embodiment relates to a communication method, which is used for a first network device 101, and the method includes:

Step 3301: Obtain first information.

The optional implementation methods of step 3301 can refer to the optional implementation methods of step 2108 of Figure 2a, step 2205 of Figure 2b, step 3106 of Figure 3a, step 3203 of Figure 3b, and other related parts in the embodiments involved in Figures 2a, 2b, 3a, and 3b, which will not be repeated here.

In some embodiments, the first network device 101 may obtain a third message sent by a third network device, but is not limited thereto, and may also receive a third message sent by other entities.

In some embodiments, the third message carries the first information.

In some embodiments, the first network device 101 obtains a third message specified by the protocol.

In some embodiments, the first network device 101 obtains the third message from an upper layer(s).

In some embodiments, the first network device 101 performs processing to obtain the third message.

Step 3302: Send the first message.

For the optional implementation of step 3302, please refer to the optional implementation of step 2109 and/or 2110 of Figure 2a, the optional implementation of step 2206 and/or 2207 of Figure 2b, the optional implementation of step 3107 and/or 3108 of Figure 3a, the optional implementation of step 3204 and/or 3205 of Figure 3b and other related parts in the embodiments involved in Figures 2a, 2b, 3a and 3b, which will not be repeated here.

In some embodiments, the first information may be used for discovery security of the proximity service, such as encryption, integrity protection, scrambling, etc., wherein the first information corresponds to the first service.

In some embodiments, the first network device 101 may send the first information to the second network device and/or the first terminal, but is not limited thereto, and may also send the first information to other entities.

In some embodiments, the first network device 101 may send the first information through various messages. For example, depending on the types of the first network device and the second network device and/or the first terminal, the first information may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

Optionally, in some embodiments, obtaining the first information determined by the third network device includes any of the following: obtaining preconfigured first information, the first information being determined by the third network device; or receiving the first information sent by the third network device.

Optionally, in some embodiments, the method further includes: based on the identifier of the first service, determining that first information corresponding to the identifier of the first service is stored in the first network device.

Optionally, in some embodiments, the method further includes: determining that the first information corresponding to the identifier of the first service is not stored in the first network device; and sending a second message to the third network device, where the second message is used to request the first information.

Optionally, in some embodiments, receiving the first information sent by the third network device includes: receiving a third message sent by the third network device, wherein the third message carries the first information.

Optionally, in some embodiments, the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired.

Optionally, in some embodiments, the method further includes: determining that the first information stored in the first network device is expired; and sending a fourth message to the third network device, where the fourth message is used to request to update the first information.

Optionally, in some embodiments, receiving the first information sent by the third network device includes: receiving updated first information sent by the third network device in a first situation, wherein the first situation is that the third network device determines that the first information stored in the third network device is expired.

For a detailed description of steps 3301 - 3302 , please refer to the embodiments shown in FIG. 2 a and FIG. 2 b .

FIG4a is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG4a, the present disclosure embodiment relates to a communication method, which is used for a third network device 103, and the method includes:

Step 4101: Get the second message.

The optional implementation of step 4101 can refer to the optional implementation of step 2103 in FIG. 2a and the optional implementation of step 3103 in FIG. 3a. The method and other related parts of the embodiments involved in Figures 2a and 3a will not be repeated here.

In some embodiments, the third network device 103 may obtain the second message sent by the first network device, but is not limited thereto, and may also receive the second message sent by other entities.

In some embodiments, the third network device 103 obtains a second message specified by the protocol.

In some embodiments, the third network device 103 obtains the second message from an upper layer(s).

In some embodiments, the third network device 103 performs processing to obtain the second message.

In some embodiments, step 4101 is omitted and the above functions are default or acquiescent.

Step 4102: Get the fourth message.

The optional implementation of step 4102 can refer to the optional implementation of step 2105 in Figure 2a, the optional implementation of step 3105 in Figure 3a and other related parts in the embodiments involved in Figures 2a and 3a, which will not be repeated here.

In some embodiments, the third network device 103 may obtain the fourth message sent by the first network device, but is not limited thereto, and may also receive the second message sent by other entities.

In some embodiments, the third network device 103 obtains a fourth message specified by the protocol.

In some embodiments, the third network device 103 obtains the fourth message from an upper layer(s).

In some embodiments, the third network device 103 performs processing to obtain a fourth message.

In some embodiments, step 4102 is omitted and the above functions are default or acquiescent.

Step 4103: Determine whether the first information stored in the third network device is expired.

The optional implementation of step 4103 can refer to the optional implementation of step 2106 in FIG. 2a and other related parts in the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, step 4103 is omitted and the above functions are default or acquiescent.

Step 4104: Determine the first information.

The optional implementation of step 4104 can refer to the optional implementation of step 2107 in Figure 2a and other related parts in the embodiment involved in Figure 2a, which will not be repeated here.

In some embodiments, step 4104 is omitted and the above functions are default or acquiescent.

Step 4105: Send the third message.

The optional implementation of step 4105 can refer to the optional implementation of step 2108 in Figure 2a, the optional implementation of step 3106 in Figure 3a, and other related parts in the embodiments involved in Figures 2a and 3a, which will not be repeated here.

In some embodiments, the third message carries the first information.

In some embodiments, the third network device 103 may send the third message to the first network device 101 , but is not limited thereto, and the third message may also be sent to other entities.

In some embodiments, the third network device 103 may send the third message through various messages. For example, depending on the types of the first network device and the third network device, the third message may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

The communication method involved in the embodiment of the present disclosure may include at least one of step 4101 to step 4105. For example, step 4103 may be implemented as an independent embodiment, for example, steps 4101+4103+4104+4105 may be implemented as an independent embodiment, and steps 4102+4103+4104+4105 may be implemented as an independent embodiment, but are not limited thereto.

In some embodiments, step 4101, step 4102, and step 4103 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, and the optional methods or optional examples can be arbitrarily combined and can be arbitrarily combined with other implementation modes or examples.

FIG4b is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG4b, the present disclosure embodiment relates to a communication method for a third network device 103, the method comprising:

Step 4201: Determine whether the first information stored in the third network device is expired.

The optional implementation of step 4201 can refer to the optional implementation of step 2106 in Figure 2a, the optional implementation of step 2203 in Figure 2b, and other related parts in the embodiments involved in Figures 2a and 2b, which will not be repeated here.

In some embodiments, step 4201 is omitted and the above functions are default or default.

Step 4202: Determine the first information.

The optional implementation of step 4202 can refer to the optional implementation of step 2107 in Figure 2a, the optional implementation of step 2204 in Figure 2b, the optional implementation of step 4104 in Figure 4a, and other related parts in the embodiments involved in Figures 2a, 2b, and 4a, which will not be repeated here.

Step 4203: Send the third message.

For the optional implementation of step 4203, reference may be made to the optional implementation of step 2108 of Figure 2a, the optional implementation of step 2205 of Figure 2b, the optional implementation of step 3106 of Figure 3a, the optional implementation of step 3203 of Figure 3b, the optional implementation of step 4105 of Figure 4a and other related parts in the embodiments involved in Figures 2a, 2b, 3a, 3b and 4a, which will not be repeated here.

In some embodiments, the third message carries the first information.

In some embodiments, the third network device 103 may send the third message to the first network device 101 , but is not limited thereto, and the third message may also be sent to other entities.

In some embodiments, the third network device 103 may send the third message through various messages. For example, depending on the types of the first network device and the third network device, the third message may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

In some embodiments, step 4203 is omitted and the above functions are default or acquiescent.

FIG4c is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG4c, the present disclosure embodiment relates to a communication method for a third network device 103, the method comprising:

Step 4301: Determine the first information.

The optional implementation method of step 4301 can refer to the optional implementation method of step 2107 in Figure 2a, the optional implementation method of step 2204 in Figure 2b, the optional implementation method of step 4104 in Figure 4a, the optional implementation method of step 4202 in Figure 4b, and other related parts in the embodiments involved in Figures 2a, 2b, 4a, and 4b, which will not be repeated here.

Optionally, in some embodiments, the method further includes: receiving a second message sent by the first network device, where the second message is used to request the first information.

Optionally, in some embodiments, the method further includes: sending first information to a first network device, the first network device corresponding to the first terminal.

Optionally, in some embodiments, sending the first information to the first network device includes: sending a third message to the first network device, wherein the third message carries the first information.

Optionally, in some embodiments, the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired.

Optionally, in some embodiments, sending the first information to the first network device includes: determining that the first information stored in the third network device is expired; and sending updated first information to the first network element.

Optionally, in some embodiments, the first information is preconfigured into the first network device.

For a detailed description of step 4301, please refer to the above-mentioned embodiments of Figures 2a and 2b.

FIG5a is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG5a, the present disclosure embodiment relates to a communication method, which is used for a second network device 102, and the method includes:

Step 5101: Obtain first information.

For optional implementations of step 5101, see step 2110 of Figure 2a, step 2207 of Figure 2b, step 3108 of Figure 3a, step 3205 of Figure 3b, and other related parts of the embodiments involved in the steps of Figures 2a, 2b, 3a, and 3b.

In some embodiments, the second network device 102 may obtain the first information sent by the first network device, but is not limited thereto, and may also receive the first information sent by other entities.

In some embodiments, the second network device 102 obtains first information specified by the protocol.

In some embodiments, the second network device 102 obtains the first information from an upper layer(s).

In some embodiments, the second network device 102 performs processing to obtain the first information.

Step 5102: Send the first message.

The optional implementation of step 5102 can refer to the optional implementation of step 2111 in Figure 2a, step 2208 in Figure 2b, and other related parts in the embodiments involved in Figures 2a and 2b, which will not be repeated here.

In some embodiments, the first information may be used for discovery security of the proximity service, such as encryption, integrity protection, scrambling, etc., wherein the first information corresponds to the first service.

In some embodiments, the second network device 102 may send the first information to the second terminal, but is not limited thereto, and may also send the first information to other entities. Send the first message.

In some embodiments, the second network device 102 may send the first information through various messages. For example, depending on the types of the second network device and the second terminal, the first information may be sent through an uplink signal, a sidelink signal, or a high-layer signaling message.

FIG5b is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG5b, the present disclosure embodiment relates to a communication method, which is used for the second network device 102, and the method includes:

Step 5201: Obtain first information.

For optional implementations of step 5201, see step 2110 of Figure 2a, step 2207 of Figure 2b, step 3108 of Figure 3a, step 3205 of Figure 3b, step 5101 of Figure 5a, and other related parts of the embodiments involved in the steps of Figures 2a, 2b, 3a, 3b, and 5a.

In some embodiments, the second network device 102 may obtain the first information sent by the first network device, but is not limited thereto, and may also receive the first information sent by other entities.

In some embodiments, the second network device 102 obtains first information specified by the protocol.

In some embodiments, the second network device 102 obtains the first information from an upper layer(s).

In some embodiments, the second network device 102 performs processing to obtain the first information.

Optionally, in some embodiments, the method further includes: sending first information to the second terminal, wherein the first information is used for the second terminal to select and use the first information for security protection.

The following is an exemplary introduction to the above method.

A flow chart of a communication method is shown in Figure 6. The method shown in the embodiment of the present disclosure involves discovery security material generated by a proximity service application server.

The method may include the steps of:

Steps 6101-6104 involve a discovered UE or an announcing UE, which may be referred to as a U2N relay or relay UE or U2U relay:

Step 6101, in 5G ProSe UE-to-Network Relay Discovery and 5G ProSe UE-to-UE Relay Discovery, the 5G ProSe U2N Relay and U2U Relay, as discovered user devices or declaring devices, send a Relay Discovery Key Request to 5G-DDNMF or PKMF, and the key request includes a Relay Service Code (RSC) and its PC5 security capability.

Step 6102, in 5G ProSe U2N relay discovery or U2U relay discovery, 5GDDNMF and/or PKMF checks in UDM whether the U2N relay or U2U relay is authorized to issue the U2N relay discovery procedure or the U2U ultimate discovery procedure. If the U2N relay or U2U relay is authorized and the discovery security information associated with the RSC is not stored in 5GDDNMF and/or PKMF, 5GDDNMF and/or PKMF may request the discovery security information by sending a key request message to the ProSe Application Server.

Optionally, the discovery security information may be updated, and once the discovery security information stored in the 5G DDNMF and/or PKMF becomes invalid, the 5G DDNMF and/or PKMF may request new discovery security information associated with the RSC from the proximity service application server.

In step 6103, the 5G-DDNMF and/or PKMF of the relay user equipment in the VPLMN may exchange and publish authentication messages (Announce Auth.Message) with the 5G-DDNMF and/or PKMF of the relay user equipment in the HPLMN. This step is not executed when the relay user equipment is not roaming.

In step 6104, the 5GDDNMF and/or PKMF of the relay user equipment in the HPLMN returns the discovery security information (also referred to as the discovery security parameter), Current_Time and Max_Offset parameters, and the selected PC5 security protection algorithm associated with the RSC, and the relay user equipment stores the discovery security information and the selected PC5 algorithm together with the RSC.

Steps 6105-6110 are for a discoverer UE or a monitoring UE, which may be referred to as a U2N remote UE or an end UE:

Step 6105: For 5G proximity service U2N relay discovery, the 5G proximity service remote user equipment plays the role of discovering UE or monitoring UE. For 5G proximity service U2U relay discovery, the 5G proximity service end user equipment plays the role of discovering UE or monitoring UE and sends a discovery key request to the 5G DDNMF and/or PKMF. The key request includes RSC and PC5 security capabilities of the 5G proximity service remote user equipment. The remote user equipment or end user equipment can provide a PLMN list, and the remote user equipment or end user equipment is authorized to use the 5G proximity service U2N relay service or U2U relay service in the PLMNs included in the list.

In step 6106, the 5G DDNMF and/or PKMF of the remote user device or the end user device may check through UDM whether the remote user device is authorized to monitor U2N relay discovery or U2U relay discovery.

If authorized, the 5G DDNMF and/or PKMF of the remote user device or the end user device in the HPLMN may send a key discovery request to the 5G DDNMF and/or PKMF of the relay user device in the HPLMN, and the key discovery request information includes the PC5 user device security capabilities in step 6105.

The 5G DDNMF and/or PKMF of the remote user equipment or the end user equipment discovers the 5G DDNMF and/or PKMF of the potential 5G proximity service U2N relay or U2U relay supporting the RSC based on the HPLMNs of the potential 5G proximity service U2N relay or U2U relay mapped to the RSC.

Optionally, the 5G DDNMF and/or PKMF may obtain the HPLMN of a potential 5G proximity service U2N relay or U2U relay in different ways (e.g., from the PCF or based on local configuration).

Step 6107, if the PC5UE security capability in step 6104 includes the selected PC5 security protection algorithm, the 5G DDNMF and/or PKMF of the relay user equipment in the HPLMN sends a discovery key response message to the 5G DDNMF and/or PKMF of the remote user equipment in the HPLMN, and the message includes the discovery security information associated with the RSC and the selected PC5 security protection algorithm.

Optionally, a selected PC5 security protection algorithm is associated with the RSC.

In step 6108, the 5G DDNMF and/or PKMF of the remote user equipment or end user equipment in the HPLMN may exchange and publish authentication messages with the 5G DDNMF and/or PKMF of the remote user equipment or end user equipment in the VPLMN. This step is not performed when the remote user equipment or end user equipment is not roaming.

Step 6109, the 5G DDNMF and/or PKMF of the remote user device or the end user device returns the discovery security information, Current_Time and Max_Offset parameters, and the selected PC5 security protection algorithm associated with the RSC, and the remote user device or the end user device stores the discovery security information and the selected PC5 algorithm together with the RSC.

Steps 6110 - 6112 are performed on PC 5 to perform discovery between user devices protected using discovery security information associated with the RSC.

In step 6110, the remote user device or end user device may use the discovery security information received from its 5G DDNMF and/or PKMF to perform security protection on the broadcast information, and send the protected broadcast message including the RSC to the relay user device.

In step 6111, the relay user device performs security verification on the broadcast message received from the remote user device based on the discovery security information received from the 5G DDNMF and/or PKMF of the relay user device. After verification, the RSC corresponding to the broadcast message is matched with the RSC information configured by the relay user device itself. When the match is successful, step 6112 is executed. When the match is unsuccessful, it is not executed.

Step 6112: The relay user equipment performs security protection on the response message based on the discovery security information received in step 6104, and sends the protected response message to the remote user equipment or the end user equipment.

Step 6113, the remote user device or end user device performs security verification on the response message received from the relay user device based on the discovery security information received from its 5G DDNMF and/or PKMF.

FIG7a is a schematic diagram of the structure of the first network device 101 proposed in an embodiment of the present disclosure. As shown in FIG7a, the first network device 101 includes: a transceiver module 7101. In some embodiments, the transceiver module can be used to obtain the first information determined by the third network device, wherein the first information is used for proximity service discovery security, and the first information corresponds to the first service; send the first information to the first terminal and/or the second network device, and the second network device corresponds to the second terminal. Optionally, the transceiver module 7101 is used to execute at least one of the communication steps such as sending and/or receiving performed by the first network device 101 in any of the above methods (for example, step 2101, step 2103, step 2105, step 2108, step 2109, step 2110, etc., but not limited to this), which will not be repeated here. In some embodiments, the first network device 101 also includes a processing module for executing at least one of the other steps (for example, step 2102, step 2104, etc., but not limited to this) performed by the first network device 101 in any of the above methods, which will not be repeated here.

In some embodiments, obtaining the first information determined by the third network device includes any of the following: obtaining preconfigured first information, where the first information is determined by the third network device; or receiving the first information sent by the third network device.

In some embodiments, the transceiver module 7101 is further used to execute: receiving a first message sent by a first terminal, where the first message is used to request first information, and the first message carries an identifier of a first service.

In some embodiments, the first network device further includes a processing module, configured to determine, based on the identifier of the first service, that first information corresponding to the identifier of the first service is stored in the first network device.

In some embodiments, the first network device further includes a processing module for determining that the first network device does not store an identifier of the first service. The corresponding first information.

In some embodiments, the transceiver module 7101 is further used to execute: sending a second message to a third network device, where the second message is used to request the first information.

In some embodiments, the transceiver module 7101 is further used to execute: receiving a third message sent by a third network device, where the third message carries the first information.

In some embodiments, the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired.

In some embodiments, the first network device further includes a processing module configured to determine that the first information stored in the first network device is expired.

In some embodiments, the transceiver module 7101 is further used to execute: sending a fourth message to the third network device, where the fourth message is used to request to update the first information.

In some embodiments, receiving the first information sent by the third network device includes: receiving updated first information sent by the third network device under a first situation, wherein the first situation is that the third network device determines that the first information stored in the third network device is expired.

FIG7b is a schematic diagram of the structure of the third network device 103 proposed in an embodiment of the present disclosure. As shown in FIG7b, the third network device 103 includes: a processing module 7301. In some embodiments, the processing module can be used to determine the first information, the first information is used for proximity service discovery security, and the first information corresponds to the first service. Optionally, the processing module 7301 is used to execute at least one of the communication determination steps (such as step 2107, step 2204, etc., but not limited to this) performed by the third network device 103 in any of the above methods, which will not be repeated here. In some embodiments, the third network device 103 also includes a transceiver module for executing at least one of the other steps (such as step 2103, step 2105, etc., but not limited to this) performed by the third network device 103 in any of the above methods, which will not be repeated here.

In some embodiments, the third network device further includes a transceiver module for receiving a second message sent by the first network device, where the second message is used to request the first information.

In some embodiments, the third network device further includes a transceiver module for sending the first information to the first network device, and the first network device corresponds to the first terminal.

In some embodiments, the third network device further includes a transceiver module, configured to send a third message to the first network device, wherein the third message carries the first information.

In some embodiments, the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired.

In some embodiments, the processing module 7301 is further used to execute: determining that the first information stored in the third network device is expired.

In some embodiments, the third network device further includes a transceiver module configured to send updated first information to the first network element.

In some embodiments, the first information is preconfigured into the first network device.

FIG7c is a schematic diagram of the structure of the second network device 102 proposed in an embodiment of the present disclosure. As shown in FIG7c, the third network device 102 includes: a transceiver module 7201. In some embodiments, the transceiver module can be used to receive the first information sent by the first network device, the first information is used for proximity service discovery security, the first information corresponds to the first service, and the first network device corresponds to the first terminal. Optionally, the transceiver module 7201 can be used to execute at least one of the sending and/or receiving communication steps (such as step 2110, step 2111, etc., but not limited to this) performed by the second network device 102 in any of the above methods, which will not be repeated here.

In some embodiments, the transceiver module 7201 is further used to execute: sending first information to the second terminal, wherein the first information is used for the second terminal to select and use the first information for security protection.

As shown in FIG8a, the communication device 8100 includes one or more processors 8101. The processor 8101 may be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor may be used to process the communication protocol and the communication data, and the central processing unit may be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute a program, and process the data of the program. The processor 8101 is used to call instructions so that the communication device 8100 executes any of the above methods.

In some embodiments, the communication device 8100 further includes one or more memories 8102 for storing instructions. Optionally, all or part of the memory 8102 may also be outside the communication device 8100.

In some embodiments, the communication device 8100 further includes one or more transceivers 8103. When the communication device 8100 includes one or more transceivers 8103, the communication steps such as sending and receiving in the above method are executed by the transceiver 8103, and the other steps are executed by the processor 8101.

In some embodiments, the transceiver may include a receiver and a transmitter, and the receiver and the transmitter may be separate or integrated. Optionally, the terms such as transceiver, transceiver unit, transceiver, transceiver circuit, etc. may be replaced with each other, the terms such as transmitter, transmission unit, transmitter, transmission circuit, etc. may be replaced with each other, and the terms such as receiver, receiving unit, receiver, receiving circuit, etc. may be replaced with each other.

Optionally, the communication device 8100 further includes one or more interface circuits 8104, the interface circuit 8104 is connected to the memory 8102, and the interface circuit 8104 is connected to the memory 8102. The circuit 8104 may be used to receive signals from the memory 8102 or other devices, and may be used to send signals to the memory 8102 or other devices. For example, the interface circuit 8104 may read instructions stored in the memory 8102 and send the instructions to the processor 8101.

The communication device 8100 described in the above embodiments may be a network device or a terminal, but the scope of the communication device 8100 described in the present disclosure is not limited thereto, and the structure of the communication device 8100 may not be limited by FIG. 8a. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: 1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data and programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, a vehicle-mounted device, a network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

Fig. 8b is a schematic diagram of the structure of a chip 8200 provided in an embodiment of the present disclosure. In the case where the communication device 8100 may be a chip or a chip system, reference may be made to the schematic diagram of the structure of the chip 8200 shown in Fig. 8b, but the present invention is not limited thereto.

The chip 8200 includes one or more processors 8201, and the processor 8201 is used to call instructions so that the chip 8200 executes any of the above methods.

In some embodiments, the chip 8200 further includes one or more interface circuits 8202, which are connected to the memory 8203. The interface circuit 8202 can be used to receive signals from the memory 8203 or other devices, and the interface circuit 8202 can be used to send signals to the memory 8203 or other devices. For example, the interface circuit 8202 can read the instructions stored in the memory 8203 and send the instructions to the processor 8201. Optionally, the terms such as interface circuit, interface, transceiver pin, and transceiver can be replaced with each other.

In some embodiments, the chip 8200 further includes one or more memories 8203 for storing instructions. Optionally, all or part of the memory 8203 may be outside the chip 8200.

The present disclosure also proposes a storage medium, on which instructions are stored, and when the instructions are executed on the communication device 8100, the communication device 8100 executes any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited to this, and it can also be a storage medium readable by other devices. Optionally, the storage medium can be a non-transitory storage medium, but is not limited to this, and it can also be a temporary storage medium.

The present disclosure also proposes a program product, which, when executed by the communication device 8100, enables the communication device 8100 to execute any of the above methods. Optionally, the program product is a computer program product.

The present disclosure also proposes a computer program, which, when executed on a computer, causes the computer to execute any one of the above methods.

In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs. When the computer program is loaded and executed on a computer, the process or function described in the embodiment of the present disclosure is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a magnetic tape), an optical medium (e.g., a high-density digital video disc (DVD)), or a semiconductor medium (e.g., a solid state disk (SSD)), etc.

The corresponding relationships shown in the tables in the present disclosure can be configured or predefined. The values of the information in each table are only examples and can be configured as other values, which are not limited by the present disclosure. When configuring the corresponding relationship between the information and each parameter, it is not necessarily required to configure all the corresponding relationships illustrated in each table. For example, in the table in the present disclosure, the corresponding relationships shown in some rows may not be configured. For another example, appropriate deformation adjustments can be made based on the above table, such as splitting, merging, etc. The names of the parameters shown in the titles of the above tables can also use other names that can be understood by the communication device, and the values or representations of the parameters can also be other values or representations that can be understood by the communication device. When implementing the above tables, other data structures can also be used, such as arrays, queues, containers, stacks, linear lists, pointers, linked lists, trees, graphs, structures, classes, heaps, hash tables or hash tables.

The predefined in the present disclosure may be understood as defined, predefined, stored, pre-stored, pre-negotiated, pre-configured, solidified, or pre-burned.

Those skilled in the art will appreciate that the units and algorithm steps of the various examples described in the embodiments disclosed herein can be These functions are implemented in electronic hardware, or in a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this disclosure.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

The above is only a specific embodiment of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present disclosure, which should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.

Claims (23)

A communication method, characterized in that the method is performed by a first network device, the first network device corresponds to a first terminal, and the method includes: Acquire first information determined by a third network device, where the first information is used for proximity service security and corresponds to a first service; The first information is sent to the first terminal and/or a second network device, where the second network device corresponds to the second terminal. The method according to claim 1, wherein obtaining the first information determined by the third network device comprises any one of the following: Acquire the pre-configured first information, where the first information is determined by the third network device; or The first information sent by the third network device is received. The method according to claim 1 or 2, characterized in that the method further comprises: A first message sent by the first terminal is received, where the first message is used to request the first information, and the first message carries an identifier of the first service. The method according to any one of claims 1 to 3, characterized in that the method further comprises: Based on the identifier of the first service, it is determined that first information corresponding to the identifier of the first service is stored in the first network device. The method according to any one of claims 1 to 3, characterized in that the method further comprises: Determining that the first information corresponding to the identifier of the first service is not stored in the first network device; A second message is sent to the third network device, where the second message is used to request the first information. The method according to any one of claims 2 to 5, characterized in that the receiving the first information sent by the third network device comprises: A third message sent by the third network device is received, where the third message carries the first information. The method according to claim 6 is characterized in that the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired. The method according to claim 4 or 7, further comprising: Determining that the first information stored in the first network device is expired; A fourth message is sent to the third network device, where the fourth message is used to request updating of the first information. The method according to any one of claims 2 to 8, characterized in that the receiving the first information sent by the third network device comprises: receiving updated first information sent by the third network device in the first situation, The first situation is that the third network device determines that the first information stored in the third network device is expired. A communication method, characterized in that the method is performed by a third network device, and the method comprises: Determine first information, where the first information is used for proximity service security and the first information corresponds to a first service. The method according to claim 10, characterized in that the method further comprises: A second message sent by the first network device is received, where the second message is used to request the first information. The method according to any one of claims 10 to 11, characterized in that the method further comprises: The first information is sent to a first network device, the first network device corresponds to a first terminal, and the first information is carried by a third message. According to the method according to claim 12, the third message also carries a timer corresponding to the first information, and the timer is used to determine whether the first information is expired. The method according to any one of claims 12 to 13, characterized in that sending the first information to the first network device comprises: Determining that the first information stored in the third network device is expired; Send updated first information to the first network element. The method according to any one of claims 10 to 14, characterized in that the first information is preconfigured into the first network device. A communication method, characterized in that the method is performed by a second network device, the second network device corresponds to a second terminal, and the method includes: receiving first information sent by a first network device, where the first information is used for proximity service security and corresponds to a first service, The first network device corresponds to the first terminal. The method according to claim 16, characterized in that the method further comprises: sending the first information to the second terminal, The first information is used by the second terminal to select and use the first information for security protection. A first network device, characterized by comprising a transceiver module, configured to: Acquire first information determined by a third network device, where the first information is used for proximity service discovery security, and the first information corresponds to a first service; The first information is sent to the first terminal and/or a second network device, where the second network device corresponds to the second terminal. A third network device, characterized by comprising a processing module, configured to: Determine first information, where the first information is used for proximity service discovery security, and the first information corresponds to a first service. A second network device, characterized by comprising a transceiver module, configured to: First information sent by a first network device is received, where the first information is used for proximity service discovery security, the first information corresponds to a first service, and the first network device corresponds to a first terminal. A communication device, comprising: a transceiver; a memory; a processor, connected to the transceiver and the memory respectively, configured to control the wireless signal reception and transmission of the transceiver by executing computer executable instructions on the memory, and capable of implementing any one of the methods of claims 1-18. A computer storage medium, wherein the computer storage medium stores computer executable instructions; after the computer executable instructions are executed by a processor, the method according to any one of claims 1 to 17 can be implemented. A communication system, characterized in that it comprises: a first network device, a third network device, and a second network device, wherein the first network device is used to execute the method as described in any one of claims 1 to 9; the third network device is used to execute the method as described in any one of claims 10 to 15, and the second network device is used to execute the method as described in any one of claims 16 to 17.