CN112956236A - Method and device for processing safety information in switching process, network equipment and terminal - Google Patents
Method and device for processing safety information in switching process, network equipment and terminal Download PDFInfo
- Publication number
- CN112956236A CN112956236A CN201980073085.7A CN201980073085A CN112956236A CN 112956236 A CN112956236 A CN 112956236A CN 201980073085 A CN201980073085 A CN 201980073085A CN 112956236 A CN112956236 A CN 112956236A
- Authority
- CN
- China
- Prior art keywords
- base station
- target base
- terminal
- key
- base stations
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 152
- 230000008569 process Effects 0.000 title claims abstract description 66
- 238000012545 processing Methods 0.000 title claims abstract description 39
- 238000004891 communication Methods 0.000 claims abstract description 56
- 238000004590 computer program Methods 0.000 claims description 43
- 230000015654 memory Effects 0.000 claims description 40
- 238000005259 measurement Methods 0.000 description 16
- 238000002360 preparation method Methods 0.000 description 14
- 238000010586 diagram Methods 0.000 description 13
- 238000009795 derivation Methods 0.000 description 8
- 230000001360 synchronised effect Effects 0.000 description 7
- 230000006870 function Effects 0.000 description 6
- 238000006243 chemical reaction Methods 0.000 description 5
- 238000003672 processing method Methods 0.000 description 5
- 230000001413 cellular effect Effects 0.000 description 4
- 238000012546 transfer Methods 0.000 description 4
- 230000008878 coupling Effects 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 230000003068 static effect Effects 0.000 description 3
- 101100059553 Caenorhabditis elegans cdk-1 gene Proteins 0.000 description 2
- GVQYIMKPSDOTAH-UHFFFAOYSA-N NCC 1 Natural products CC1=C(C=C)C(=O)NC1CC1=C(C)C(CCC(O)=O)=C(C2C=3NC(CC4=C(C(C)=C(C=O)N4)CCOC(=O)CC(O)=O)=C(C)C=3C(=O)C2C(O)=O)N1 GVQYIMKPSDOTAH-UHFFFAOYSA-N 0.000 description 2
- 238000012790 confirmation Methods 0.000 description 2
- 230000007774 longterm Effects 0.000 description 2
- 238000010295 mobile communication Methods 0.000 description 2
- 230000000737 periodic effect Effects 0.000 description 2
- 230000004044 response Effects 0.000 description 2
- 230000000717 retained effect Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 229920001690 polydopamine Polymers 0.000 description 1
- 230000011664 signaling Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W36/00—Hand-off or reselection arrangements
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The embodiment of the application provides a method and a device for processing safety information in a switching process, network equipment and a terminal, wherein the method comprises the following steps: the source base station generates a plurality of corresponding first keys for a plurality of target base stations; and the source base station respectively sends the plurality of first keys to the plurality of target base stations, and the first keys are used for the communication between the target base stations and the terminal.
Description
The embodiment of the application relates to the technical field of mobile communication, in particular to a method and a device for processing security information in a switching process, network equipment and a terminal.
The switching process comprises a switching preparation process, a switching execution process and a switching completion process. The switching preparation process comprises the steps of cell measurement by the terminal, measurement report by the terminal, switching command transmission by the network and the like. When the terminal is successfully switched to a target base station, the terminal considers that the switching is completed, and for the next switching, a switching preparation process is still needed, and the redundant switching preparation process brings extra signaling overhead, so that how to support the continuous switching of the terminal, especially the updating of the security key in the continuous switching, is a problem to be solved.
Disclosure of Invention
The embodiment of the application provides a method and a device for processing security information in a switching process, network equipment and a terminal.
The method for processing the safety information in the switching process, provided by the embodiment of the application, comprises the following steps:
the source base station generates a plurality of corresponding first keys for a plurality of target base stations;
and the source base station respectively sends the plurality of first keys to the plurality of target base stations, and the first keys are used for the communication between the target base stations and the terminal.
The method for processing the safety information in the switching process, provided by the embodiment of the application, comprises the following steps:
a terminal receives a switching command sent by a source base station, wherein the switching command comprises first configuration information and switching conditions of a plurality of target base stations;
the terminal generates a first key corresponding to a first target base station under the condition that the terminal determines that the first target base station in the target base stations meets the switching condition, and accesses the first key to the first target base station, wherein the first key corresponding to the first target base station is used for the terminal to communicate with the first target base station;
and after the terminal is successfully accessed to the first target base station, reserving all or part of information carried in the switching command.
The device for processing security information in a handover process provided by the embodiment of the application is applied to a source base station, and comprises:
a generating unit, configured to generate a plurality of corresponding first keys for a plurality of target base stations;
a sending unit, configured to send the multiple first keys to the multiple target base stations, respectively, where the first keys are used for the target base stations to communicate with a terminal.
The device for processing the safety information in the switching process, provided by the embodiment of the application, is applied to a terminal, and comprises:
a receiving unit, configured to receive a handover command sent by a source base station, where the handover command includes first configuration information and handover conditions of multiple target base stations;
a generating unit, configured to generate a first key corresponding to a first target base station in the multiple target base stations and access the first key to the first target base station when it is determined that the first target base station satisfies the handover condition, where the first key corresponding to the first target base station is used for the terminal to communicate with the first target base station;
and the storage unit is used for reserving all or part of information carried in the switching command after the first target base station is successfully accessed.
The network equipment provided by the embodiment of the application comprises a processor and a memory. The memory is used for storing computer programs, and the processor is used for calling and running the computer programs stored in the memory and executing the processing method of the safety information in the switching process.
The terminal provided by the embodiment of the application comprises a processor and a memory. The memory is used for storing computer programs, and the processor is used for calling and running the computer programs stored in the memory and executing the processing method of the safety information in the switching process.
The chip provided by the embodiment of the application is used for realizing the method for processing the safety information in the switching process.
Specifically, the chip includes: and the processor is used for calling and running the computer program from the memory so that the equipment provided with the chip executes the processing method of the safety information in the switching process.
The computer-readable storage medium provided in the embodiments of the present application is used for storing a computer program, and the computer program enables a computer to execute the method for processing security information in the handover process.
The computer program product provided by the embodiment of the present application includes computer program instructions, and the computer program instructions enable a computer to execute the method for processing security information in the handover process.
The computer program provided in the embodiment of the present application, when running on a computer, enables the computer to execute the method for processing security information in the handover process.
Through the technical scheme, a plurality of target base stations are configured in the switching command, and after the terminal is successfully accessed to one target base station, all information or part of information carried in the switching command is reserved so as to carry out continuous switching of the next target base station, thereby avoiding a redundant switching preparation process; on the other hand, the updating of the security key in continuous switching is realized, and the security of communication is guaranteed.
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:
fig. 1 is a schematic diagram of a communication system architecture provided in an embodiment of the present application;
fig. 2 is a handover flowchart according to an embodiment of the present application;
fig. 3 is a flowchart of a Conditional handle provided in an embodiment of the present application;
FIG. 4 is a schematic diagram of key derivation provided by an embodiment of the present application;
fig. 5 is a schematic diagram of key update in a handover process according to an embodiment of the present application;
fig. 6 is a first flowchart illustrating a method for processing security information in a handover process according to an embodiment of the present application;
fig. 7(a) is a schematic view of a first application scenario provided in the embodiment of the present application;
fig. 7(b) is a schematic view of an application scenario provided in the embodiment of the present application;
fig. 8 is a second flowchart illustrating a method for processing security information in a handover process according to an embodiment of the present application;
fig. 9 is a third schematic flowchart of a method for processing security information in a handover process according to the embodiment of the present application;
fig. 10 is a fourth flowchart illustrating a method for processing security information in a handover process according to an embodiment of the present application;
fig. 11 is a first schematic structural diagram of a device for processing security information in a handover process according to an embodiment of the present application;
fig. 12 is a schematic structural diagram of a second apparatus for processing security information in a handover process according to an embodiment of the present application;
fig. 13 is a schematic structural diagram of a communication device according to an embodiment of the present application;
FIG. 14 is a schematic block diagram of a chip according to an embodiment of the present application;
fig. 15 is a schematic block diagram of a communication system according to an embodiment of the present application.
Technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are some embodiments of the present application, but not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
The technical scheme of the embodiment of the application can be applied to various communication systems, for example: a Global System for Mobile communications (GSM) System, a Code Division Multiple Access (CDMA) System, a Wideband Code Division Multiple Access (WCDMA) System, a General Packet Radio Service (GPRS), a Long Term Evolution (Long Term Evolution, LTE) System, an LTE Frequency Division Duplex (FDD) System, an LTE Time Division Duplex (TDD), a Universal Mobile Telecommunications System (UMTS), a Worldwide Interoperability for Microwave Access (WiMAX) communication System, or a 5G System.
Illustratively, a communication system 100 applied in the embodiment of the present application is shown in fig. 1. The communication system 100 may include a network device 110, and the network device 110 may be a device that communicates with a terminal 120 (or referred to as a communication terminal, a terminal). Network device 110 may provide communication coverage for a particular geographic area and may communicate with terminals located within the coverage area. Optionally, the Network device 110 may be a Base Transceiver Station (BTS) in a GSM system or a CDMA system, a Base Station (NodeB, NB) in a WCDMA system, an evolved Node B (eNB or eNodeB) in an LTE system, or a wireless controller in a Cloud Radio Access Network (CRAN), or may be a Network device in a Mobile switching center, a relay Station, an Access point, a vehicle-mounted device, a wearable device, a hub, a switch, a bridge, a router, a Network-side device in a 5G Network, or a Network device in a Public Land Mobile Network (PLMN) for future evolution, or the like.
The communication system 100 further comprises at least one terminal 120 located within the coverage area of the network device 110. As used herein, "terminal" includes, but is not limited to, connection via a wireline, such as via a Public Switched Telephone Network (PSTN), a Digital Subscriber Line (DSL), a Digital cable, a direct cable connection; and/or another data connection/network; and/or via a Wireless interface, e.g., to a cellular Network, a Wireless Local Area Network (WLAN), a digital television Network such as a DVB-H Network, a satellite Network, an AM-FM broadcast transmitter; and/or means of another terminal arranged to receive/transmit communication signals; and/or Internet of Things (IoT) devices. A terminal that is arranged to communicate over a wireless interface may be referred to as a "wireless communication terminal", "wireless terminal", or "mobile terminal". Examples of mobile terminals include, but are not limited to, satellite or cellular telephones; personal Communications Systems (PCS) terminals that may combine cellular radiotelephones with data processing, facsimile, and data Communications capabilities; PDAs that may include radiotelephones, pagers, internet/intranet access, Web browsers, notepads, calendars, and/or Global Positioning System (GPS) receivers; and conventional laptop and/or palmtop receivers or other electronic devices that include a radiotelephone transceiver. A terminal can refer to an access terminal, User Equipment (UE), subscriber unit, subscriber station, mobile station, remote terminal, mobile device, User terminal, wireless communication device, User agent, or User Equipment. An access terminal may be a cellular telephone, a cordless telephone, a Session Initiation Protocol (SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA), a handheld device having Wireless communication capabilities, a computing device or other processing device connected to a Wireless modem, a vehicle mounted device, a wearable device, a terminal in a 5G network, or a terminal in a future evolved PLMN, etc.
Optionally, a Device to Device (D2D) communication may be performed between the terminals 120.
Alternatively, the 5G system or the 5G network may also be referred to as a New Radio (NR) system or an NR network.
Fig. 1 exemplarily shows one network device and two terminals, and optionally, the communication system 100 may include a plurality of network devices and may include other numbers of terminals within the coverage of each network device, which is not limited in this embodiment of the present application.
Optionally, the communication system 100 may further include other network entities such as a network controller, a mobility management entity, and the like, which is not limited in this embodiment.
It should be understood that a device having a communication function in a network/system in the embodiments of the present application may be referred to as a communication device. Taking the communication system 100 shown in fig. 1 as an example, the communication device may include a network device 110 and a terminal 120 having a communication function, and the network device 110 and the terminal 120 may be the specific devices described above and are not described again here; the communication device may also include other devices in the communication system 100, such as other network entities, for example, a network controller, a mobility management entity, and the like, which is not limited in this embodiment.
It should be understood that the terms "system" and "network" are often used interchangeably herein. The term "and/or" herein is merely an association describing an associated object, meaning that three relationships may exist, e.g., a and/or B, may mean: a exists alone, A and B exist simultaneously, and B exists alone. In addition, the character "/" herein generally indicates that the former and latter related objects are in an "or" relationship.
For the convenience of understanding the technical solutions of the embodiments of the present application, the following description is provided for the related art of the embodiments of the present application, and any combination of the related art and the technical solutions of the embodiments of the present application falls within the scope of the embodiments of the present application.
1) Switching (Handover, HO)
Referring to fig. 2, fig. 2 is a switching flow chart provided in the embodiment of the present application, where the switching flow mainly includes the following steps:
1. and the source base station issues measurement configuration to the terminal.
2. And the terminal performs related measurement based on the measurement configuration and reports the measurement result to the source base station.
3. The source base station makes a handover decision (handover decision) based on the measurement results.
4. The source base station initiates a Handover Request (Handover Request) to the target base station.
5. And the target base station performs Admission Control (Admission Control).
6. The target base station sends a Handover Request-acknowledgement feedback message (Handover Request Ack) to the source base station.
7. The source base station sends an RRC connection reconfiguration message to the terminal, wherein the RRC connection reconfiguration message carries mobility control information (mobility control information) of the target base station.
Here, the RRC connection reconfiguration message is carried in a handover command.
8. The source base station performs SN Status Transfer (SN Status Transfer) to the target base station.
9. The terminal synchronizes to the target base station.
10a, the target base station performs Periodic uplink allocation (Periodic UL allocation) on the terminal.
10b, the target base station configures an uplink allocation and Tracking Area (TA) for the terminal.
11. And the terminal sends an RRC connection reconfiguration completion message to the target base station.
12. And the target base station initiates a path switching request to the MME.
13. The MME initiates a modify bearer request to a Serving Gateway (Serving Gateway).
14. The serving gateway switches the downlink path.
15. The serving gateway sends a modify bearer response message to the MME.
16. The MME sends a path switching request-acknowledgement feedback message to the target base station.
17. And the target base station informs the source base station to release the terminal context.
18. The source base station releases the resources.
The handover process in fig. 2 mainly includes the following procedures:
handover preparation (steps 1-6 in fig. 2): and the source base station configures the terminal for measurement reporting, and sends a switching request to the target base station based on the reporting result of the terminal. When the target base station agrees to the handover request, the target base station configures an RRC message for the terminal, where the RRC message carries mobility control information (mobility control information), where the mobility control information includes a Random Access Channel (RACH) resource, a Cell-Radio Network Temporary Identifier (C-RNTI), a target base station security algorithm, a system message of the target base station, and the like.
Handover execution (steps 7-11 in fig. 2): the source base station forwards the mobility control information to the terminal through the switching command, and the terminal initiates a random access process to the target base station after receiving the switching command. Meanwhile, the source base station may forward a Serial Number STATUS TRANSFER (SN STATUS TRANSFER) to the target base station, and tell the target base station the uplink Packet Data Convergence Protocol (PDCP) SN receiving STATUS and the downlink PDCP SN sending STATUS.
Handover complete (steps 12-18 in fig. 2): when the terminal is successfully accessed to the target base station (i.e. the random access is successful), the target base station will initiate a path switching REQUEST (PATH SWITCH REQUEST), REQUEST a Mobility Management Entity (MME) to switch a downlink path, and after the path switching is completed, the target base station will instruct the source base station to release the terminal context, and the switching is completed.
2) Condition switching (Conditional handle)
For some special scenarios, such as high-speed terminal movement or high-frequency conditions, frequent switching is required. The Conditional handover avoids the problem that the terminal is late when the handover is required due to the fact that the handover preparation time is too long, and a handover command is configured for the terminal in advance. On the other hand, for a high-speed rail scene, the operation track of the terminal is specific, so the base station may allocate a target base station to the terminal in advance, and include a condition for triggering the terminal to perform handover (hereinafter referred to as a handover condition) in the handover command, and when the target base station satisfies the handover condition, the terminal initiates an access request to the target base station.
Further, a plurality of target base stations (i.e., a plurality of target cells) and handover conditions may be configured in the handover command in the Conditional handover scenario. The terminal judges which target cell is accessed based on the configured switching condition.
As shown in fig. 3, the Conditional handle mainly includes the following steps:
1. and carrying out measurement configuration/reporting of the measurement result between the terminal and the source base station.
Here, the source base station issues measurement configuration to the terminal, and the terminal performs related measurement based on the measurement configuration and reports the measurement result to the source base station.
2. And carrying out a switching preparation process between the source base station and the target base station.
3. And the source base station transmits a switching command to the terminal, wherein the switching command carries the configuration information and the switching conditions of the target base stations.
4. When the target base station meets the handover condition, the terminal synchronizes to the target base station (i.e. the terminal accesses to the target base station).
3) Key update in handover procedure
As shown in fig. 4, key derivation (i.e., key update) includes the following two types:
horizontal derivation of keys: based on KgNBAnd Physical Cell Identity (PCI) and downlink frequency (DL frequency) generation K of the target Cell (Cell of the target base station)NG-RAN*。
Vertical derivation of the key: k is generated based on the PCI and downlink frequency (DL frequency) of the Next Hop (Next Hop, NH) and target cell (cell of target base station)NG-RAN*. Further, NH may be generated based on a Next hop chain count (NCC).
In fig. 4, the base station is taken as an example of the gNB, and the original secret key is denoted by KgNBThe derived new key is denoted KNG-RAN*Or as KgNB*. If the base station is eNB, the original secret key is marked as KeNBThe derived new key is denoted KeNB*。
It should be noted that, data communicated between the base station and the terminal is encrypted and transmitted by using a key and other parameters and then using an encryption algorithm, the key used by the base station and the key used by the terminal need to be kept consistent, and when the terminal accesses a target base station, the terminal and the target base station need to determine the key used by the terminal and the target base station through horizontal derivation of the key or vertical derivation of the key.
As shown in fig. 5, the key update in the handover process includes the following steps:
1. the source base station sends a switching request message to the target base station, the switching request message carries the safety capability of the terminal, the safety algorithm used by the source base station, KNG-RAN*,NCC。
Here, KNG-RAN*The source base station generates according to the PCI and the downlink frequency of the target base station.
2. Target base station sends KNG-RAN*As KgNBAnd stored after being associated with the NCC.
3. The target base station sends the security algorithm selected by the NCC and the target base station to the source base station, and the source base station sends a switching command to the terminal, wherein the switching command carries the security algorithm selected by the NCC and the target base station.
4. The terminal synchronizes NH according to the received NCC and calculates KgNBAnd stored after being associated with the NCC.
5. And the terminal sends a switching completion message to the target base station.
6. The Target base station sends a path switching request message to a Target Access and Mobility Management entity (T-AMF, Target-Access and Mobility Management Function).
7. T-AMF updates NCC by NCC ═ NCC + 1.
Here, updating NCC by NCC ═ NCC +1 means that the value of NCC is added by 1.
8. And the T-AMF sends a path switching request-confirmation feedback message to the target base station, wherein the path switching request-confirmation feedback message carries { NH, NCC }.
9. The target base station stores the { NH, NCC }, and switches for standby next time.
10. The terminal initiates an Intra-cell (Intra cell) handover procedure to a target base station.
The key update in fig. 5 above processes the source base station, the target base station, and the terminal as follows:
for the source base station: 1) first, K is generated based on PCI and downlink frequency of a target base stationNG-RAN*(ii) a Further, if there is unused { NH, NCC }, K is generated based on the NH and the PCI and downlink frequency of the target base stationNG-RAN*If there is no unused { NH, NCC }, then use the existing KgNBGenerating K from PCI and downlink frequency of target base stationNG-RAN*(ii) a Will generate KNG-RAN*Forwarding to the target base station; using K after handover is completeNG-RAN*As KgNB(ii) a Carrying in handover command for generating KNG-RAN*The NCC of (1).
For the target base station: the target base station will receive KNG-RAN*As KgNBCommunicating with a terminal; receiving NCC and K from source base stationgNBAssociating; the NCC is contained in the switching command and is sent to the terminal through the source base station; and after the switching is finished, the target base station sends a path switching request to the T-AMF.
For the terminal: if the terminal receives NCC and current terminal side K in the switching commandgNBThe associated NCC is equal based on KgNBAnd PCI and downlink frequency generation K of target base stationNG-RAN*(ii) a If the terminal receives the NCC in the switching command and the K of the current terminal sidegNBDifferent from the NCC, NH is generated based on the stored NCC, and K is generated based on the generated NH, the PCI of the target base station and the downlink frequencyNG-RAN*(ii) a The terminal will use the generated KNG-RAN*As KgNB, communicating with the target base station.
In fig. 5, the base station is taken as the gNB for example, and the original secret key is denoted by KgNBThe derived new key is denoted KNG-RAN*Or as KgNB*. If the base station is eNB, the original secret key is marked as KeNBThe derived new key is denoted KeNB*。
Based on the above handover procedure, even if multiple target base stations are configured in the handover command, when the terminal successfully switches to one of the target base stations, the terminal considers that the handover is completed, and for the next handover, the procedures such as handover preparation and the like are still required. In order to avoid a redundant handover preparation process, an embodiment of the present application provides a method for supporting continuous handover of a terminal, so as to implement updating of a security key in the continuous handover.
Fig. 6 is a first flowchart illustrating a method for processing security information in a handover process according to an embodiment of the present application, where as shown in fig. 6, the method for processing security information in a handover process includes the following steps:
step 601: the source base station generates a plurality of corresponding first keys for a plurality of target base stations.
In the embodiment of the present application, the source base station and the target base station may be, but are not limited to, a gNB, an eNB, an NG-gNB, and the like. Further, the types of the source base station and the target base station may be the same or different.
The embodiment of the application can be applied to a Conditional handover scene, in which a source base station sends a handover command to a terminal, and the handover command includes first configuration information and handover conditions of a plurality of target base stations. Here, the first configuration information is, for example, an RRC connection reconfiguration message. The switching condition is, for example, a Reference Signal Receiving Power (RSRP) threshold. When the terminal determines that a first target base station in the multiple target base stations meets a handover condition (if the RSRP measurement value of the first target base station is greater than or equal to the RSRP threshold value), the terminal accesses the first target base station. And after the terminal is successfully accessed to the first target base station, reserving all or part of information carried in the switching command.
In a scenario where the terminal moves around a specific trajectory starting from the source base station and sequentially accessing the target base station 1, the target base station 2, … … and the target base station 6, as shown in fig. 7(a), the terminal does not go around. At this time, after the terminal successfully accesses the target base station 1, the first configuration information except the target base station 1 is retained for use in the next continuous handover. And then, the terminal detects that the target base station 2 meets the switching condition in the moving process, and after the target base station 2 is successfully accessed, the first configuration information except the target base station 2 is reserved so as to be used in the next continuous switching. By analogy, continuous switching is realized, and a redundant switching preparation process is avoided.
In another scenario, as shown in fig. 7(b), the trajectory of the terminal is unpredictable, and starts to access from the source base station and randomly accesses to any one of the target base stations 1 to 6. At this time, after the terminal successfully accesses the target base station 1, the first configuration information of the 6 target base stations is continuously reserved for use in the next continuous handover. Then, if the target base station 6 is detected to meet the handover condition in the terminal moving process, after the target base station 6 is successfully accessed, the first configuration information of the 6 target base stations is continuously reserved for being used in the next continuous handover. By analogy, continuous switching is realized, and a redundant switching preparation process is avoided.
In the continuous switching process, a source base station generates a plurality of corresponding first keys for a plurality of target base stations, and respectively sends the plurality of first keys to the plurality of target base stations, wherein the first keys are used for the communication between the target base stations and a terminal. It should be noted that, data communicated between the base station and the terminal is encrypted by using the key and other parameters and then using an encryption algorithm, and the key used by the base station and the key used by the terminal need to be consistent.
Step 602: and the source base station respectively sends the plurality of first keys to the plurality of target base stations, and the first keys are used for the communication between the target base stations and the terminal.
In this embodiment of the present application, the source base station generates a plurality of corresponding first keys for a plurality of target base stations, and may be implemented in the following manner:
the first method is as follows: the source base station generates a plurality of first keys corresponding to a plurality of target base stations based on a second key of the source base station, wherein the second key is used for the source base station to communicate with a terminal.
Further, the source base station sends the first keys to the target base stations respectively.
Here, after the source base station generates a plurality of first keys corresponding to the plurality of target base stations based on the second key of the source base station, the first keys of the plurality of target base stations are not updated.
Further, for each target base station in the target base stations, the source base station generates a first key corresponding to the target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the target base station, and sends the first key to the target base station.
For example: the second secret key of the source base station is KgNBAssume that 3 target base stations are allocated in the handover command, which are target base station 1, target base station 2, and target base station 3. For target base station 1, the source base station is based on KgNBPCI and downlink frequency generation K1 of target base station 1NG-RAN*. For target base station 2, the source base station is based on KgNBPCI and downlink frequency generation K2 of the target base station 2NG-RAN*. For target base station 3, the source base station is based on KgNBPCI and downlink frequency generation K3 of the target base station 3NG-RAN*。
The second method comprises the following steps: the source base station receives first indication information sent by a terminal or a first target base station in a plurality of target base stations, wherein the first indication information is used for indicating that the terminal is successfully accessed to the first target base station and carries a first secret key corresponding to the first target base station; and the source base station generates first keys corresponding to other target base stations except the first target base station in the plurality of target base stations based on the first key corresponding to the first target base station.
Further, the source base station sends the first keys corresponding to the other target base stations, respectively.
Here, as the terminal moves, the accessed target base station may change, the first key of the target base station currently accessed by the terminal, received by the source base station, may be continuously updated, and the source base station regenerates the first keys of the other target base stations based on the updated first key, and thus, the first keys of the other target base stations may be updated.
Further, for each target base station in the other target base stations, the source base station generates a first key corresponding to the target base station based on the first key corresponding to the first target base station and the PCI and/or downlink frequency information of the target base station, and sends the first key to the target base station.
For example: assume that 3 target base stations are configured for the handover command, which are target base station 1, target base station 2, and target base station 3. After the terminal successfully accesses the target base station 1, the terminal or the target base station 1 sends the first key of the target base station 1 to the source base station. The source base station generates a first key of the target base station 2 based on the first key of the target base station 1, the PCI of the target base station 2 and the downlink frequency; the source base station generates the first key of the target base station 3 based on the first key of the target base station 1, the PCI of the target base station 3 and the downlink frequency. And the source base station issues the first key of the target base station 2 and the first key of the target base station 3 to the target base station 2 and the target base station 3 respectively. And then, the terminal continues to move and continuously monitors the channel quality of other configured target base stations, and when the target base station 2 meets the switching condition, the terminal accesses the target base station 2 and communicates with the target base station 2 by using the first key of the target base station 2.
Optionally, when the source base station sends the updated key to the other target base stations, the other target base stations may update the feedback configuration information, and the like.
Optionally, the terminal may actively report an operation scene (for example, moving at a high speed or moving under a high-frequency condition), so that the base station is convenient to configure a Conditional handover.
For the second method, if the target base station to which the terminal accesses changes, the source base station regenerates the first secret key of the other target base station based on the first secret key of the target base station to which the terminal newly accesses.
Fig. 8 is a second flowchart illustrating a method for processing security information in a handover process according to an embodiment of the present application, where as shown in fig. 8, the method for processing security information in a handover process includes the following steps:
step 801: the terminal receives a switching command sent by a source base station, wherein the switching command comprises first configuration information and switching conditions of a plurality of target base stations.
In the embodiment of the application, the terminal can be any equipment capable of communicating with a network, such as a mobile phone, a tablet computer, a notebook computer, a vehicle-mounted terminal, a wearable device and the like.
The method and the device for switching the target base stations can be applied to a Conditional handover scene, wherein the terminal receives a switching command sent by a source base station, and the switching command comprises first configuration information and switching conditions of a plurality of target base stations. Here, the first configuration information is, for example, an RRC connection reconfiguration message. The handover condition is, for example, an RSRP threshold value.
Step 802: and the terminal generates a first key corresponding to a first target base station under the condition that the terminal determines that the first target base station in the target base stations meets the switching condition, and accesses the first key to the first target base station, wherein the first key corresponding to the first target base station is used for the communication between the terminal and the first target base station.
In this embodiment of the application, when a terminal determines that a first target base station in a plurality of target base stations meets a handover condition (if an RSRP measurement value of the first target base station is greater than or equal to an RSRP threshold value), a first key corresponding to the first target base station is generated and accessed to the first target base station, and the first key corresponding to the first target base station is used for the terminal to communicate with the first target base station.
Here, the terminal generating the first key corresponding to the first target base station may be implemented by:
the first method is as follows: and the terminal generates a first key corresponding to the first target base station based on a second key of the source base station, wherein the second key is used for the source base station to communicate with the terminal.
Further, the terminal generates a first key corresponding to the first target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the first target base station.
For example: the second secret key of the source base station is KgNBAssume that 3 target base stations are allocated in the handover command, which are target base station 1, target base station 2, and target base station 3. When the terminal is accessed to the target base station 1, based on KgNBPCI and downlink frequency generation K1 of target base station 1NG-RAN*The K1 is addedNG-RAN*As KgNBCommunicating with the target base station 1. When the terminal is accessed to the target base station 2, based on KgNBPCI and downlink frequency generation K2 of the target base station 2NG-RAN*The K2 is addedNG-RAN*As KgNBCommunicating with the target base station 2. When the terminal is accessed to the target base station 3, based on KgNBPCI and downlink frequency generation K3 of the target base station 3NG-RAN*The K3 is addedNG-RAN*As KgNBCommunicating with the target base station 3.
For the first method, the keys between all the target base stations and the terminal configured in the handover command are generated based on the PCI and the downlink frequency of the target base station and the second key of the source base station, and at this time, when the terminal is successfully handed over to any one target base station, the second key of the source base station needs to be saved for derivation of the subsequent key.
Optionally, other cell identification information may be added when performing key derivation based on the second key, and the identification information is carried in the handover command.
The second method comprises the following steps: and the terminal generates a first key corresponding to the first target base station based on the latest key of the terminal.
Further, the terminal generates a first key corresponding to the first target base station based on the latest key of the terminal and the PCI and/or downlink frequency information of the first target base station.
Here, the latest key of the terminal is a second key of the source base station; or the latest key of the terminal is a first key corresponding to a second target base station in the plurality of target base stations, and the second target base station is a target base station accessed by the terminal before accessing the first target base station.
For example: assume that 3 target base stations are configured for the handover command, which are target base station 1, target base station 2, and target base station 3. And after the terminal is successfully accessed to the target base station 1, the terminal uses the first secret key of the target base station 1 to communicate with the target base station 1. After the terminal successfully accesses the target base station 2, the terminal generates the first key of the target base station 2 by using the first key of the target base station 1, the PCI of the target base station 2 and the downlink frequency, and communicates with the target base station 2 by using the first key of the target base station 2. After the terminal successfully accesses the target base station 3, the terminal generates the first key of the target base station 3 by using the first key of the target base station 2, the PCI of the target base station 3 and the downlink frequency, and communicates with the target base station 3 by using the first key of the target base station 3.
Step 803: and after the terminal is successfully accessed to the first target base station, reserving all or part of information carried in the switching command.
In the embodiment of the application, after the terminal successfully accesses the first target base station, all or part of information carried in the handover command is reserved.
In a scenario where the terminal moves around a specific trajectory starting from the source base station and sequentially accessing the target base station 1, the target base station 2, … … and the target base station 6, as shown in fig. 7(a), the terminal does not go around. At this time, after the terminal successfully accesses the target base station 1, the first configuration information except the target base station 1 is retained for use in the next continuous handover. And then, the terminal detects that the target base station 2 meets the switching condition in the moving process, and after the target base station 2 is successfully accessed, the first configuration information except the target base station 2 is reserved so as to be used in the next continuous switching. By analogy, continuous switching is realized, and a redundant switching preparation process is avoided.
In another scenario, as shown in fig. 7(b), the trajectory of the terminal is unpredictable, and starts to access from the source base station and randomly accesses to any one of the target base stations 1 to 6. At this time, after the terminal successfully accesses the target base station 1, the first configuration information of the 6 target base stations is continuously reserved for use in the next continuous handover. Then, if the target base station 6 is detected to meet the handover condition in the terminal moving process, after the target base station 6 is successfully accessed, the first configuration information of the 6 target base stations is continuously reserved for being used in the next continuous handover. By analogy, continuous switching is realized, and a redundant switching preparation process is avoided.
The technical solutions in the embodiments of the present application are described below by way of example with reference to specific flow charts, and it should be noted that the technical solutions in the embodiments of the present application are not limited to the following flow charts.
Fig. 9 is a third schematic flowchart of a method for processing security information in a handover process according to an embodiment of the present application, where as shown in fig. 9, the flowchart includes the following steps:
1. source base station based on KeNBGeneration of KeNB*。
Here, the secret key of the source base station is KeNBThe value of NCC associated therewith is 0, i.e., NCC ═ 0. Recording the safety information of the source base station side as KeNB,NCC=0。
Similarly, since the terminal currently accesses the source base station, the security information at the terminal side is also KeNB,NCC=0。
Source base station based on its own KeNBThe PCI and downlink frequency of the target base station 1 generate K of the target base station 1eNB*And is combined with KeNB*Associated with NCC ═ 0.
2. The source base station sends KeNB*NCC ═ 0 is forwarded to the target base station 1.
3. Target base station 1 sends KeNB*Is set to KeNB,NCC=0。
Here, the target base station 1 will KeNB*Is set to KeNBThen, K iseNBFor communication between the target base station 1 and the terminal.
4. The source base station sends a handover command to the terminal.
Here, the handover command carries RRC reconfiguration messages and handover conditions of the plurality of target base stations. Here, two target base stations are taken as an example, and are a target base station 1 and a target base station 2.
5. Terminal is based on KeNBGeneration of KeNB*Is a reaction of KeNB*Is set to KeNB,NCC=0。
Here, the terminal is based on KeNBThe PCI and downlink frequency of the target base station 1 generate K of the target base station 1eNB*And is combined with KeNB*Associated with NCC ═ 0. Terminal will KeNB*Is set to KeNBThen, K iseNBFor communication between the terminal and the target base station 1.
6. The target base station 1 transmits a path switch request message to the MME.
7. MME updates NCC with current security information of KeNB,NCC=1。
8. The MME sends a path switch response message to the target base station 1.
9. The target base station 1 sends first indication information to the source base station, wherein the first indication information carries NCC (number 1).
10. The source base station updates NH based on NCC ═ 1, generates K based on NHeNB*。
Here, the source base station generates K of the target base station 2 based on NH, PCI and downlink frequency of the target base station 2eNB*And is combined with KeNB*Associated with NCC ═ 1.
11. The source base station forwards the security information K to the target base station 2eNB*,NCC=1。
12. The source base station transmits NCC 1 to the terminal.
Here, the target base station 1 may transmit NCC 1 to the terminal.
13. Terminal is based on KeNBGeneration of KeNB*Is a reaction of KeNB*Is set to KeNB,NCC=1。
Here, the terminal is based on KeNBThe PCI and the downlink frequency of the target base station 2 generate K of the target base station 2eNB*And is combined with KeNB*Associated with NCC ═ 1. Terminal will KeNB*Is set to KeNBThen, K iseNBFor communication between the terminal and the target base station 2.
14. Target base station 2 sends KeNB*Is set to KeNB,NCC=1。
Here, the target base station 2 will KeNB*Is set to KeNBThen, K iseNBFor communication between the target base station 2 and the terminal.
It should be noted that the above scheme is an LTE system as an example, and the 5G system is similar to the above process and is not described again.
Fig. 10 is a fourth schematic flowchart of a method for processing security information in a handover process according to an embodiment of the present application, where as shown in fig. 10, the flowchart includes the following steps:
1. source base station based on KeNBGeneration of KeNB*。
Here, the secret key of the source base station is KeNBThe value of NCC associated therewith is 0, i.e., NCC ═ 0. Recording the safety information of the source base station side as KeNB,NCC=0。
Similarly, since the terminal currently accesses the source base station, the security information at the terminal side is also KeNB,NCC=0。
Source base station based on its own KeNBThe PCI and downlink frequency of the target base station 1 generate K of the target base station 1eNB*And is combined with KeNB*Associated with NCC ═ 0.
Source base station based on its own KeNBThe PCI and the downlink frequency of the target base station 2 generate K of the target base station 2eNB*And is combined with KeNB*Associated with NCC ═ 0.
Source base station based on its own KeNBThe PCI and the downlink frequency of the target base station 3 generate K of the target base station 3eNB*And is combined with KeNB*Associated with NCC ═ 0.
2. The source base station sends KeNB*NCC ═ 0 is forwarded to target base station 1, target base station 2, and target base station 3, respectively.
3. Target base station 1 sends KeNB*Is set to KeNB,NCC=0。
Here, the target base station 1 will KeNB*Is set to KeNBThen, K iseNBFor communication between the target base station 1 and the terminal.
4. The source base station sends a handover command to the terminal.
Here, the handover command carries RRC reconfiguration messages and handover conditions of the plurality of target base stations. Here, three target base stations are taken as an example, and are a target base station 1, a target base station 2, and a target base station 3.
5. Terminal is based on KeNBGeneration of KeNB*Is a reaction of KeNB*Is set to KeNB,NCC=0。
Here, the terminal is based on KeNBThe PCI and downlink frequency of the target base station 1 generate K of the target base station 1eNB*And is combined with KeNB*Associated with NCC ═ 0. Terminal will KeNB*Is set to KeNBThen, K iseNBFor communication between the terminal and the target base station 1.
6. And a random access process is executed between the terminal and the target base station 1.
7. Target base station 2 sends KeNB*Is set to KeNB,NCC=0。
Here, the target base station 2 will KeNB*Is set to KeNBThen, K iseNBFor communication between the target base station 2 and the terminal.
8. Terminal is based on KeNBGeneration of KeNB*Is a reaction of KeNB*Is set to KeNB,NCC=0。
Here, the terminal is based on KeNBThe PCI and the downlink frequency of the target base station 2 generate K of the target base station 2eNB*And is combined with KeNB*Associated with NCC ═ 0. Terminal will KeNB*Is set to KeNBThen, K iseNBFor communication between the terminal and the target base station 2.
9. A random access procedure is performed between the terminal and the target base station 2.
10. Target base station 3 sends KeNB*Is set to KeNB,NCC=0。
Here, the target base station 3 will KeNB*Is set to KeNBThen, K iseNBFor communication between the target base station 3 and the terminal.
11. Terminal is based on KeNBGeneration of KeNB*Is a reaction of KeNB*Is set to KeNB,NCC=0。
Here, the terminal is based on KeNBThe PCI and the downlink frequency of the target base station 3 generate K of the target base station 3eNB*And is combined with KeNB*Associated with NCC ═ 0. Terminal will KeNB*Is set to KeNBThen, K iseNBFor communication between the terminal and the target base station 3.
12. A random access procedure is performed between the terminal and the target base station 3.
It should be noted that the above scheme is an LTE system as an example, and the 5G system is similar to the above process and is not described again.
It should be noted that the above technical solution in the embodiment of the present application is not limited to be applied to cell handover between base stations (inter-NodeB, inter-NB), but may also be applied to cell handover within base stations (intra-NB ). Wherein, the cell switching of the inter-NB means that: handover between two cells belonging to different target base stations. Cell handover for intra-NB refers to: handover between two cells belonging to the same target base station.
Fig. 11 is a schematic structural diagram of a first apparatus for processing security information in a handover process according to an embodiment of the present application, where the apparatus is applied to a source base station, and as shown in fig. 11, the apparatus includes:
a generating unit 1101, configured to generate a plurality of corresponding first keys for a plurality of target base stations;
a sending unit 1102, configured to send the multiple first keys to the multiple target base stations, respectively, where the first keys are used for the target base stations to communicate with a terminal.
In an embodiment, the generating unit 1101 is configured to generate a plurality of first keys corresponding to a plurality of target base stations based on a second key of the source base station, where the second key is used for the source base station to communicate with a terminal.
In an embodiment, for each target base station in the plurality of target base stations, the generating unit 1101 generates a first key corresponding to the target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the target base station.
In one embodiment, the apparatus further comprises:
a receiving unit 1103, configured to receive first indication information sent by a terminal or a first target base station in multiple target base stations, where the first indication information is used to indicate that the terminal successfully accesses the first target base station, and the first indication information carries a first key corresponding to the first target base station;
the generating unit 1101 is configured to generate a first key corresponding to a target base station other than the first target base station in the plurality of target base stations based on the first key corresponding to the first target base station;
the sending unit 1102 is configured to send the first keys corresponding to the other target base stations, respectively.
In an embodiment, for each of the other target base stations, the generating unit 1101 generates a first key corresponding to the target base station based on the first key corresponding to the first target base station and the PCI and/or downlink frequency information of the target base station.
In an embodiment, the sending unit 1102 is further configured to send a handover command to the terminal, where the handover command includes the first configuration information and the handover condition of the multiple target base stations.
It should be understood by those skilled in the art that the description of the processing apparatus for processing security information in the handover process in the embodiment of the present application may be understood by referring to the description of the processing method for security information in the handover process in the embodiment of the present application.
Fig. 12 is a schematic structural diagram of a second apparatus for processing security information in a handover process according to an embodiment of the present application, where the apparatus is applied to a terminal, and as shown in fig. 12, the apparatus includes:
a receiving unit 1201, configured to receive a handover command sent by a source base station, where the handover command includes first configuration information and handover conditions of multiple target base stations;
a generating unit 1202, configured to generate a first key corresponding to a first target base station in the plurality of target base stations and access the first key to the first target base station when it is determined that the first target base station satisfies the handover condition, where the first key corresponding to the first target base station is used for the terminal to communicate with the first target base station;
a saving unit 1203, configured to reserve all or part of the information carried in the handover command after the first target base station is successfully accessed.
In an embodiment, the generating unit 1202 is configured to generate a first key corresponding to the first target base station based on a second key of the source base station, where the second key is used for the source base station to communicate with a terminal.
In an embodiment, the generating unit 1202 is configured to generate a first key corresponding to the first target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the first target base station.
In an embodiment, the generating unit 1202 is configured to generate a first key corresponding to the first target base station based on a latest key of the terminal.
In an embodiment, the generating unit 1202 is configured to generate a first key corresponding to the first target base station based on a latest key of the terminal and the PCI and/or downlink frequency information of the first target base station.
In one embodiment, the latest key of the terminal is the second key of the source base station; or,
the latest key of the terminal is a first key corresponding to a second target base station in the plurality of target base stations, and the second target base station is a target base station accessed by the terminal before accessing the first target base station.
It should be understood by those skilled in the art that the description of the processing apparatus for processing security information in the handover process in the embodiment of the present application may be understood by referring to the description of the processing method for security information in the handover process in the embodiment of the present application.
Fig. 13 is a schematic structural diagram of a communication device 600 according to an embodiment of the present application. The communication device may be a network device, such as a base station, or a terminal, and the communication device 600 shown in fig. 13 includes a processor 610, and the processor 610 may call and execute a computer program from a memory to implement the method in the embodiment of the present application.
Optionally, as shown in fig. 13, the communication device 600 may further include a memory 620. From the memory 620, the processor 610 may call and run a computer program to implement the method in the embodiment of the present application.
The memory 620 may be a separate device from the processor 610, or may be integrated into the processor 610.
Optionally, as shown in fig. 13, the communication device 600 may further include a transceiver 630, and the processor 610 may control the transceiver 630 to communicate with other devices, and specifically, may transmit information or data to the other devices or receive information or data transmitted by the other devices.
The transceiver 630 may include a transmitter and a receiver, among others. The transceiver 630 may further include one or more antennas.
Optionally, the communication device 600 may specifically be a network device in the embodiment of the present application, and the communication device 600 may implement a corresponding process implemented by the network device in each method in the embodiment of the present application, which is not described herein again for brevity.
Optionally, the communication device 600 may specifically be a mobile terminal/terminal according to this embodiment, and the communication device 600 may implement a corresponding process implemented by the mobile terminal/terminal in each method according to this embodiment, which is not described herein again for brevity.
Fig. 14 is a schematic structural diagram of a chip of an embodiment of the present application. The chip 700 shown in fig. 14 includes a processor 710, and the processor 710 can call and run a computer program from a memory to implement the method in the embodiment of the present application.
Optionally, as shown in fig. 14, the chip 700 may further include a memory 720. From the memory 720, the processor 710 can call and run a computer program to implement the method in the embodiment of the present application.
The memory 720 may be a separate device from the processor 710, or may be integrated into the processor 710.
Optionally, the chip 700 may further include an input interface 730. The processor 710 may control the input interface 730 to communicate with other devices or chips, and in particular, may obtain information or data transmitted by other devices or chips.
Optionally, the chip 700 may further include an output interface 740. The processor 710 may control the output interface 740 to communicate with other devices or chips, and in particular, may output information or data to the other devices or chips.
Optionally, the chip may be applied to the network device in the embodiment of the present application, and the chip may implement the corresponding process implemented by the network device in each method in the embodiment of the present application, and for brevity, details are not described here again.
Optionally, the chip may be applied to the mobile terminal/terminal in the embodiment of the present application, and the chip may implement a corresponding process implemented by the mobile terminal/terminal in each method in the embodiment of the present application, and for brevity, no further description is given here.
It should be understood that the chips mentioned in the embodiments of the present application may also be referred to as a system-on-chip, a system-on-chip or a system-on-chip, etc.
Fig. 15 is a schematic block diagram of a communication system 900 according to an embodiment of the present application. As shown in fig. 15, the communication system 900 includes a terminal 910 and a network device 920.
The terminal 910 may be configured to implement the corresponding function implemented by the terminal in the foregoing method, and the network device 920 may be configured to implement the corresponding function implemented by the network device in the foregoing method, which is not described herein again for brevity.
It should be understood that the processor of the embodiments of the present application may be an integrated circuit chip having signal processing capabilities. In implementation, the steps of the above method embodiments may be performed by integrated logic circuits of hardware in a processor or instructions in the form of software. The Processor may be a general purpose Processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf Programmable Gate Array (FPGA) or other Programmable logic device, discrete Gate or transistor logic device, or discrete hardware components. The various methods, steps, and logic blocks disclosed in the embodiments of the present application may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in connection with the embodiments of the present application may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module may be located in ram, flash memory, rom, prom, or eprom, registers, etc. storage media as is well known in the art. The storage medium is located in a memory, and a processor reads information in the memory and completes the steps of the method in combination with hardware of the processor.
It will be appreciated that the memory in the embodiments of the subject application can be either volatile memory or nonvolatile memory, or can include both volatile and nonvolatile memory. The non-volatile Memory may be a Read-Only Memory (ROM), a Programmable ROM (PROM), an Erasable PROM (EPROM), an Electrically Erasable PROM (EEPROM), or a flash Memory. Volatile Memory can be Random Access Memory (RAM), which acts as external cache Memory. By way of example, but not limitation, many forms of RAM are available, such as Static random access memory (Static RAM, SRAM), Dynamic Random Access Memory (DRAM), Synchronous Dynamic random access memory (Synchronous DRAM, SDRAM), Double Data Rate Synchronous Dynamic random access memory (DDR SDRAM), Enhanced Synchronous SDRAM (ESDRAM), Synchronous link SDRAM (SLDRAM), and Direct Rambus RAM (DR RAM). It should be noted that the memory of the systems and methods described herein is intended to comprise, without being limited to, these and any other suitable types of memory.
It should be understood that the above memories are exemplary but not limiting illustrations, for example, the memories in the embodiments of the present application may also be Static Random Access Memory (SRAM), dynamic random access memory (dynamic RAM, DRAM), Synchronous Dynamic Random Access Memory (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (enhanced SDRAM, ESDRAM), Synchronous Link DRAM (SLDRAM), Direct Rambus RAM (DR RAM), and the like. That is, the memory in the embodiments of the present application is intended to comprise, without being limited to, these and any other suitable types of memory.
The embodiment of the application also provides a computer readable storage medium for storing the computer program.
Optionally, the computer-readable storage medium may be applied to the network device in the embodiment of the present application, and the computer program enables the computer to execute the corresponding process implemented by the network device in each method in the embodiment of the present application, which is not described herein again for brevity.
Optionally, the computer-readable storage medium may be applied to the mobile terminal/terminal in the embodiment of the present application, and the computer program enables the computer to execute the corresponding process implemented by the mobile terminal/terminal in each method in the embodiment of the present application, which is not described herein again for brevity.
Embodiments of the present application also provide a computer program product comprising computer program instructions.
Optionally, the computer program product may be applied to the network device in the embodiment of the present application, and the computer program instructions enable the computer to execute corresponding processes implemented by the network device in the methods in the embodiment of the present application, which are not described herein again for brevity.
Optionally, the computer program product may be applied to the mobile terminal/terminal in the embodiment of the present application, and the computer program instructions enable the computer to execute the corresponding processes implemented by the mobile terminal/terminal in the methods in the embodiment of the present application, which are not described herein again for brevity.
The embodiment of the application also provides a computer program.
Optionally, the computer program may be applied to the network device in the embodiment of the present application, and when the computer program runs on a computer, the computer is enabled to execute the corresponding process implemented by the network device in each method in the embodiment of the present application, and for brevity, details are not described here again.
Optionally, the computer program may be applied to the mobile terminal/terminal in the embodiment of the present application, and when the computer program runs on a computer, the computer is enabled to execute the corresponding process implemented by the mobile terminal/terminal in each method in the embodiment of the present application, which is not described herein again for brevity.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the several embodiments provided in the present application, it should be understood that the disclosed system, apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit.
The functions, if implemented in the form of software functional units and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present application or portions thereof that substantially contribute to the prior art may be embodied in the form of a software product stored in a storage medium and including instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
The above description is only for the specific embodiments of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present application, and shall be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.
Claims (34)
- A method for processing security information in a handover process, the method comprising:the source base station generates a plurality of corresponding first keys for a plurality of target base stations;and the source base station respectively sends the plurality of first keys to the plurality of target base stations, and the first keys are used for the communication between the target base stations and the terminal.
- The method of claim 1, wherein the source base station generates a corresponding plurality of first keys for a plurality of target base stations, comprising:the source base station generates a plurality of first keys corresponding to a plurality of target base stations based on a second key of the source base station, wherein the second key is used for the source base station to communicate with a terminal.
- The method of claim 2, wherein for each target base station in the plurality of target base stations, the source base station generates a first key corresponding to the target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the target base station, and sends the first key to the target base station.
- The method of claim 1, wherein the source base station generates a corresponding plurality of first keys for a plurality of target base stations, comprising:the source base station receives first indication information sent by a terminal or a first target base station in a plurality of target base stations, wherein the first indication information is used for indicating that the terminal is successfully accessed to the first target base station and carries a first secret key corresponding to the first target base station;and the source base station generates first keys corresponding to other target base stations except the first target base station in the plurality of target base stations based on the first key corresponding to the first target base station.
- The method of claim 4, wherein for each of the other target base stations, the source base station generates a first key corresponding to the target base station based on the first key corresponding to the first target base station and the PCI and/or downlink frequency information of the target base station, and sends the first key to the target base station.
- The method of any of claims 1 to 5, wherein the method further comprises:and the source base station sends a switching command to a terminal, wherein the switching command comprises first configuration information and switching conditions of the target base stations.
- A method for processing security information in a handover process, the method comprising:a terminal receives a switching command sent by a source base station, wherein the switching command comprises first configuration information and switching conditions of a plurality of target base stations;the terminal generates a first key corresponding to a first target base station under the condition that the terminal determines that the first target base station in the target base stations meets the switching condition, and accesses the first key to the first target base station, wherein the first key corresponding to the first target base station is used for the terminal to communicate with the first target base station;and after the terminal is successfully accessed to the first target base station, reserving all or part of information carried in the switching command.
- The method of claim 7, wherein the generating a first key corresponding to the first target base station comprises:and the terminal generates a first key corresponding to the first target base station based on a second key of the source base station, wherein the second key is used for the source base station to communicate with the terminal.
- The method of claim 8, wherein the terminal generating a first key corresponding to the first target base station based on a second key corresponding to the source base station comprises:and the terminal generates a first key corresponding to the first target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the first target base station.
- The method of claim 7, wherein the generating a first key corresponding to the first target base station comprises:and the terminal generates a first key corresponding to the first target base station based on the latest key of the terminal.
- The method of claim 10, wherein the terminal generating a first key corresponding to the first target base station based on a latest key of the terminal comprises:and the terminal generates a first key corresponding to the first target base station based on the latest key of the terminal and the PCI and/or downlink frequency information of the first target base station.
- The method of claim 10 or 11,the latest key of the terminal is a second key of the source base station; or,the latest key of the terminal is a first key corresponding to a second target base station in the plurality of target base stations, and the second target base station is a target base station accessed by the terminal before accessing the first target base station.
- An apparatus for processing security information in handover process, applied to a source base station, the apparatus comprising:a generating unit, configured to generate a plurality of corresponding first keys for a plurality of target base stations;a sending unit, configured to send the multiple first keys to the multiple target base stations, respectively, where the first keys are used for the target base stations to communicate with a terminal.
- The apparatus of claim 13, wherein the generating unit is configured to generate a plurality of first keys corresponding to a plurality of target base stations based on a second key of the source base station, and the second key is used for the source base station to communicate with a terminal.
- The apparatus of claim 14, wherein for each of the plurality of target base stations, the generating unit generates the first key corresponding to the target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the target base station.
- The apparatus of claim 13, wherein the apparatus further comprises:a receiving unit, configured to receive first indication information sent by a terminal or a first target base station in multiple target base stations, where the first indication information is used to indicate that the terminal successfully accesses the first target base station, and the first indication information carries a first key corresponding to the first target base station;the generating unit is configured to generate a first key corresponding to a target base station other than the first target base station in the plurality of target base stations based on the first key corresponding to the first target base station;the sending unit is configured to send the first keys corresponding to the other target base stations, respectively.
- The apparatus of claim 16, wherein for each of the other target base stations, the generating unit generates the first key for the target base station based on the first key for the first target base station and the PCI and/or downlink frequency information for the target base station.
- The apparatus according to any one of claims 13 to 17, wherein the sending unit is further configured to send a handover command to a terminal, where the handover command includes the first configuration information and the handover condition of the plurality of target base stations.
- A processing device of safety information in a switching process is applied to a terminal, and the device comprises:a receiving unit, configured to receive a handover command sent by a source base station, where the handover command includes first configuration information and handover conditions of multiple target base stations;a generating unit, configured to generate a first key corresponding to a first target base station in the multiple target base stations and access the first key to the first target base station when it is determined that the first target base station satisfies the handover condition, where the first key corresponding to the first target base station is used for the terminal to communicate with the first target base station;and the storage unit is used for reserving all or part of information carried in the switching command after the first target base station is successfully accessed.
- The apparatus of claim 19, wherein the generating unit is configured to generate a first key corresponding to the first target base station based on a second key of the source base station, and the second key is used for the source base station to communicate with a terminal.
- The apparatus of claim 20, wherein the generating unit is configured to generate the first key corresponding to the first target base station based on the second key of the source base station and the PCI and/or downlink frequency information of the first target base station.
- The apparatus of claim 19, wherein the generating unit is configured to generate the first key corresponding to the first target base station based on a latest key of the terminal.
- The apparatus of claim 22, wherein the generating unit is configured to generate the first key corresponding to the first target base station based on a latest key of the terminal and PCI and/or downlink frequency information of the first target base station.
- The apparatus of claim 22 or 23,the latest key of the terminal is a second key of the source base station; or,the latest key of the terminal is a first key corresponding to a second target base station in the plurality of target base stations, and the second target base station is a target base station accessed by the terminal before accessing the first target base station.
- A network device, comprising: a processor and a memory for storing a computer program, the processor being configured to invoke and execute the computer program stored in the memory to perform the method of any of claims 1 to 6.
- A terminal, comprising: a processor and a memory for storing a computer program, the processor being configured to invoke and execute the computer program stored in the memory to perform the method of any of claims 7 to 12.
- A chip, comprising: a processor for calling and running a computer program from a memory so that a device on which the chip is installed performs the method of any one of claims 1 to 6.
- A chip, comprising: a processor for calling and running a computer program from a memory so that a device on which the chip is installed performs the method of any one of claims 7 to 12.
- A computer-readable storage medium storing a computer program for causing a computer to perform the method of any one of claims 1 to 6.
- A computer-readable storage medium storing a computer program for causing a computer to perform the method of any one of claims 7 to 12.
- A computer program product comprising computer program instructions to cause a computer to perform the method of any one of claims 1 to 6.
- A computer program product comprising computer program instructions to cause a computer to perform the method of any one of claims 7 to 12.
- A computer program for causing a computer to perform the method of any one of claims 1 to 6.
- A computer program for causing a computer to perform the method of any one of claims 7 to 12.
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
PCT/CN2019/074628 WO2020155157A1 (en) | 2019-02-02 | 2019-02-02 | Security information processing method and apparatus during handover process, network device, and terminal |
Publications (2)
Publication Number | Publication Date |
---|---|
CN112956236A true CN112956236A (en) | 2021-06-11 |
CN112956236B CN112956236B (en) | 2022-10-21 |
Family
ID=71840682
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201980073085.7A Active CN112956236B (en) | 2019-02-02 | 2019-02-02 | Method and device for processing safety information in switching process, network equipment and terminal |
Country Status (2)
Country | Link |
---|---|
CN (1) | CN112956236B (en) |
WO (1) | WO2020155157A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2023125342A1 (en) * | 2021-12-27 | 2023-07-06 | 华为技术有限公司 | Communication method, apparatus, and system |
WO2024120500A1 (en) * | 2022-12-08 | 2024-06-13 | 华为技术有限公司 | Communication method and related apparatus |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101336554A (en) * | 2006-01-04 | 2008-12-31 | 诺基亚公司 | Secure distributed handover signaling |
WO2010105442A1 (en) * | 2009-03-20 | 2010-09-23 | 深圳华为通信技术有限公司 | Method, apparatus and system for generating key evolving parameters |
CN101931950A (en) * | 2009-06-19 | 2010-12-29 | 大唐移动通信设备有限公司 | Method, system and device for acquiring key in switching process |
CN101953191A (en) * | 2008-02-20 | 2011-01-19 | 阿尔卡特朗讯美国公司 | System and method for performing handovers, or key management while performing handovers in a wireless communication system |
US20110044455A1 (en) * | 2008-06-23 | 2011-02-24 | Huawei Technologies Co., Ltd. | Method, Apparatus and System for Key Derivation |
CN102215485A (en) * | 2010-04-04 | 2011-10-12 | 中兴通讯股份有限公司 | Method for guaranteeing safety of multi-carrier switching or reconstructing in multi-carrier communication system |
CN102340774A (en) * | 2010-07-22 | 2012-02-01 | 中兴通讯股份有限公司 | Key distribution method of handover and system thereof |
Family Cites Families (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP5167759B2 (en) * | 2007-10-24 | 2013-03-21 | 日本電気株式会社 | Communication system, communication method, authentication information management server, and small base station |
US20090209259A1 (en) * | 2008-02-15 | 2009-08-20 | Alec Brusilovsky | System and method for performing handovers, or key management while performing handovers in a wireless communication system |
CN108934049B (en) * | 2017-05-26 | 2021-08-17 | 捷开通讯(深圳)有限公司 | Communication switching method and device |
-
2019
- 2019-02-02 WO PCT/CN2019/074628 patent/WO2020155157A1/en active Application Filing
- 2019-02-02 CN CN201980073085.7A patent/CN112956236B/en active Active
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101336554A (en) * | 2006-01-04 | 2008-12-31 | 诺基亚公司 | Secure distributed handover signaling |
CN101953191A (en) * | 2008-02-20 | 2011-01-19 | 阿尔卡特朗讯美国公司 | System and method for performing handovers, or key management while performing handovers in a wireless communication system |
US20110044455A1 (en) * | 2008-06-23 | 2011-02-24 | Huawei Technologies Co., Ltd. | Method, Apparatus and System for Key Derivation |
WO2010105442A1 (en) * | 2009-03-20 | 2010-09-23 | 深圳华为通信技术有限公司 | Method, apparatus and system for generating key evolving parameters |
CN101931950A (en) * | 2009-06-19 | 2010-12-29 | 大唐移动通信设备有限公司 | Method, system and device for acquiring key in switching process |
CN102215485A (en) * | 2010-04-04 | 2011-10-12 | 中兴通讯股份有限公司 | Method for guaranteeing safety of multi-carrier switching or reconstructing in multi-carrier communication system |
CN102340774A (en) * | 2010-07-22 | 2012-02-01 | 中兴通讯股份有限公司 | Key distribution method of handover and system thereof |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2023125342A1 (en) * | 2021-12-27 | 2023-07-06 | 华为技术有限公司 | Communication method, apparatus, and system |
WO2024120500A1 (en) * | 2022-12-08 | 2024-06-13 | 华为技术有限公司 | Communication method and related apparatus |
Also Published As
Publication number | Publication date |
---|---|
CN112956236B (en) | 2022-10-21 |
WO2020155157A1 (en) | 2020-08-06 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20220386184A1 (en) | Mobility management method, terminal, and base station | |
CN108029054B (en) | Anchor point replacing method and device | |
WO2020164016A1 (en) | Cell switching method and device | |
CN113490244B (en) | Cell switching method, terminal equipment and network equipment | |
CN111373783A (en) | Information transmission method and device and communication equipment | |
US20200015288A1 (en) | Radio communication method and device | |
CN113056935A (en) | Method for switching network equipment and terminal equipment | |
CN113796118A (en) | Switching method and device, and communication equipment | |
EP4164291A1 (en) | Condition-based secondary node or primary secondary cell addition method and device | |
CN112956236B (en) | Method and device for processing safety information in switching process, network equipment and terminal | |
CN113068276B (en) | Information configuration method and device, terminal and network equipment | |
CN112789891B (en) | Wireless communication method, device and terminal equipment | |
WO2020024301A1 (en) | Method and device for ensuring data transmission reliability, and network apparatus | |
CN112602370A (en) | Information transmission method and device and network equipment | |
CN112789895A (en) | Switching method and device, terminal and network equipment | |
CN112205055A (en) | Information transmission method and device, terminal and network equipment | |
CN113261340B (en) | Information transmission method, terminal equipment, base station and core network equipment | |
WO2020029275A1 (en) | Wireless communication method, terminal device, and network device | |
CN111972001A (en) | Signaling interaction method and device in switching process and network equipment | |
CN113316947A (en) | Wireless communication method, terminal equipment and network equipment | |
CN112789894A (en) | Information processing method and network equipment for switching | |
CN111989951B (en) | Data forwarding method and device, and network equipment | |
CN111869262B (en) | Base station switching method and device, and network equipment | |
CN113261329B (en) | Method for switching network equipment, terminal equipment and network equipment | |
CN113115390A (en) | Data transmission method, terminal equipment and network equipment |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |