WO2013170668A1

WO2013170668A1 - Method, device and system for performing communication through mobile communication network

Info

Publication number: WO2013170668A1
Application number: PCT/CN2013/073399
Authority: WO
Inventors: 张向东; 国炜; 张丽佳
Original assignee: 华为技术有限公司
Priority date: 2012-05-18
Filing date: 2013-03-29
Publication date: 2013-11-21
Also published as: CN102711105B; CN102711105A

Abstract

The present invention is applicable to the field of communications, and provided is a method for performing communication through a mobile communication network. The method comprises the steps of: a mobility management entity (MME) sending communication data to devices of both communication parties; an evolved nodeB (eNB) instructing the devices of both communication parties to establish a communication data bearer, generating a radio network temporary identifier (RNTI), and distributing the RNTI to the devices of both communication parties; and according to the received communication data, the devices of both communication parties using an existing mobile communication network to perform communication. In the embodiments of the present invention, an MME acquires information as to whether user equipment (UE) can perform device-to-device (D2D) communication, judges whether both communication parties can perform the same security algorithm, and issues a security algorithm used in the existing mobile communication to both communication parties, so as to allow both communication parties to perform communication using the mature and safe security algorithm of the existing mobile communication technology, so that not only the mobile communication technology is applied in the aspect of D2D communication, but also the verification process is simple and the security is high because of using the existing mobile communication technology to perform communication.

Description

Method, device and system for communicating through mobile communication network

The present invention pertains to the field of communications, and more particularly to a method, apparatus and system for communicating over a mobile communication network.

Background technique

eNB: enhanced NodeB, evolved NodeB, which is equivalent to a base station in existing mobile communication technologies.

MME: Mobility Management Entity, a mobility management entity, a key control node in existing mobile communication systems.

UE: User Equipment, client device.

RNTI: The temporary identifier of the wireless network, which is used as the identity of the UE inside the signal.

RRC: Radio Resource Control, Radio Resource Control Protocol.

The Internet of Things (IoT) refers to the acquisition of information in the physical world by deploying various devices with certain sensing, computing, execution, and communication capabilities, and the realization of information transmission, coordination, and processing through the network, thereby realizing the interconnection of people, objects, and objects. The internet. Device to device D2D communication, as a kind of IoT application, mainly to achieve direct communication between two devices. Possible technologies may include short-range wireless communication technologies such as Wireless Personal Area Network (WPAN), Ultra Wideband (UWB: Ultra Wideband), Bluetooth (Bluetooth), and Wifi.

The booming Internet of Things has further demonstrated the huge market potential and value of short-range wireless applications. Mobile operators have little to do in this area or lack the necessary control. At present, relevant companies have carried out research on supporting D2D applications in the licensed frequency bands of operators, and actively promoted the establishment of 3GPP in the well-known standards organization. The goal is to support and implement D2D applications using carrier licensed bands, enabling operators to take greater advantage in the short-range wireless applications market.

One of the conveniences of implementing D2D in the operator's mobile communication network is that it is easy to operate safely and no longer requires human intervention. The key can be implemented based on the existing security mechanism of the mobile communication network. Negotiation and data encryption. However, according to the existing mobile communication network, the security processes of the calling side and the called side, including authentication, key agreement and encryption (integrity check) algorithm negotiation, are independent of each other. Devices with different capabilities may have different support for the encryption (integrity check) algorithm, and the encryption (integrity check) algorithm they choose may be different. Therefore, if the judgment of whether or not D2D communication can be performed is performed only on the communication device side, it is possible that the encryption (integrity check) algorithm support capability is different, and two devices are judged to be D2D communication, and as a result, the two devices select different ones. Encryption (integrity check) algorithm, so that actual D2D communication cannot be performed. This does not make good use of the existing security mechanisms of the mobile communication network for D2D communication services.

Summary of the invention

It is an object of embodiments of the present invention to provide a D2D communication problem by a party communication technology for performing D2D communication through a mobile communication network.

The embodiment of the present invention is implemented by the method for performing D2D communication through a mobile communication network, and the method includes the following steps:

The MME sends communication data to the communication device, and the communication data includes: information about whether the two communication devices can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both communication devices, and a D2D communication key material;

The eNB instructs the two communication devices to establish a communication data bearer, generates an RNTI, and distributes the RNTI to the communication device, where the RNTI is used for D2D communication;

The communication device communicates using the selected security algorithm and the key obtained from the key material based on the received communication data.

Another object of embodiments of the present invention is to provide a method for communicating over a mobile communication network, the method comprising the steps of:

Obtaining information on whether D2D communication can be performed by devices on both sides of the communication;

Determining whether the devices on both sides of the communication have the same security algorithm;

Sending the communication data to the communication device, the communication data includes: Whether to perform D2D communication information, a security algorithm of an existing mobile communication technology supported by both communication devices, and a key material for D2D communication.

Receiving and storing communication data sent by the MME, where the communication data includes: information about whether the two communication devices can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both communication devices, and a key material of D2D communication;

Transmitting the communication data to the communication device;

Instructing the two communication devices to establish a communication data bearer;

An RNTI is generated and distributed to both communication devices.

Another object of embodiments of the present invention is to provide a method for communicating over a mobile communication network, the method comprising the following steps:

Sending a communication request to the MME, the communication request includes information about whether to support D2D communication; receiving communication data, where the communication data includes: information that the two communication devices can perform D2D communication, and existing mobile communication supported by both communication devices Technical security algorithms, and keying materials for D2D communication;

Establishing a communication data bearer according to an indication of the eNB;

Receiving an RNTI distributed by the eNB;

The communication is initiated to the called party UE using the selected security algorithm and the key obtained from the key material. Another object of embodiments of the present invention is to provide a method for communicating over a mobile communication network, the method comprising the steps of:

Receiving a communication call of the MME, where the communication call includes information asking whether to support D2D communication;

Sending information to the MME whether to support D2D communication;

Receiving communication data, the communication data includes: information about whether the two communication devices can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both communication devices, and D2D communication Key material

Establishing a communication data bearer according to an indication of the eNB;

Receiving an RNTI distributed by the eNB;

The communication initiated by the calling party UE is responded to using the selected security algorithm and the key obtained from the key material.

Another object of the embodiments of the present invention is to provide an apparatus for communicating over a mobile communication network, the apparatus comprising:

The D2D communication information acquiring unit is configured to obtain information about whether the two devices of the communication can perform D2D communication;

The same security algorithm determining unit is configured to determine whether the devices of the communication parties have the same security algorithm;

The communication data sending unit is configured to send the communication data to the communication device.

a communication data receiving unit, configured to receive communication data sent by the MME;

a communication data forwarding unit, configured to forward the communication data received by the communication data receiving unit to the communication device;

And a communication data bearer indicating unit, configured to instruct the communication device to establish a communication data bearer, and an RNTI distribution unit, configured to generate the RNTI and distribute the RNTI to the communication device. Another object of the embodiments of the present invention is to provide an apparatus for communicating over a mobile communication network, the apparatus comprising:

D2D communication self-test unit, used for self-test to support D2D communication;

a communication request sending unit, configured to initiate a communication request to the MME, where the communication request carries information about whether the D2D communication self-test unit self-test supports D2D communication;

a communication data receiving unit, configured to receive communication data sent by the MME or the eNB;

a communication data bearer establishing unit, configured to establish a communication data bearer according to an indication of the eNB; An RNTI receiving unit, configured to receive an RNTI distributed by an eNB;

And a communication unit, configured to initiate communication to the called party UE according to the communication data received by the communication data receiving unit using the selected security algorithm and the key acquired according to the key material.

a D2D detection information receiving unit, configured to receive information sent by the MME for performing D2D communication function detection;

a D2D detecting unit, configured to support, according to the information received by the D2D detection information receiving unit, whether the D2D communication function is supported;

a D2D communication information sending unit, configured to send, to the MME, information about whether the D2D pass function is supported according to the detection result of the D2D detecting unit;

a communication data bearer establishing unit, configured to establish a communication data bearer according to an indication of the eNB;

An RNTI receiving unit, configured to receive an RNTI distributed by the eNB;

And a communication unit, configured to respond to the communication initiated by the calling party UE according to the communication data received by the communication data receiving unit using the selected security algorithm and the key acquired according to the key material.

Another object of the embodiments of the present invention is to provide a system for communicating over a mobile communication network, the system comprising:

The MME is configured to obtain information about whether the devices of the communication device can perform D2D communication, determine whether the devices of the two communication devices support the same security algorithm, and send the communication data to the communication device, where the communication data includes: whether the communication device can perform D2D communication Security algorithms for existing mobile communication technologies supported by both information and communication devices, and keying materials;

The eNB is configured to receive and store the communication data sent by the MME, send the communication data to the communication device, and instruct the communication device to establish a communication data bearer, generate the RNTI, and distribute the RNTI to the communication device;

a calling party UE, configured to send a communication request to the MME, where the communication request includes whether to support The D2D communication information, receiving the communication data, establishing a communication data bearer according to the indication of the eNB, receiving the RNTI distributed by the eNB, and initiating communication to the called party UE by using the selected security algorithm and the key obtained according to the key material;

The called party UE is configured to receive a communication call of the MME, send information to the MME whether to support the D2D communication, receive the communication data, establish a communication data bearer according to the indication of the eNB, receive the RNTI distributed by the eNB, and respond to the calling party UE using the selected The security algorithm and the communication initiated by the key obtained from the key material.

In the embodiment of the present invention, the MME obtains information about whether the UE supports D2D communication, determines whether the communication parties have the same security algorithm, and discovers a security algorithm used by the mobile communication to the communication parties, so that the communication parties use the existing mobile communication technology to mature and secure. The communication of the security algorithm not only enables the mobile communication technology to be applied in D2D communication, but also because the communication using the existing mobile communication technology is simple, and the security is high.

DRAWINGS

1 is a flowchart of a method for performing communication by using a mobile communication network according to an embodiment of the present invention; FIG. 2 is a flowchart of a specific implementation of step S101 shown in FIG. 1 according to an embodiment of the present invention; FIG. 3 is another embodiment of the present invention; A flow chart of a communication method provided by a mobile communication network;

4 is a flow chart of a method for communicating over a mobile communication network according to another embodiment of the present invention;

FIG. 5 is a flow chart of a communication method performed by a mobile communication network according to another embodiment of the present invention; FIG.

6 is a flow chart of a method for communicating over a mobile communication network according to another embodiment of the present invention;

7 is a structural diagram of a communication system performed by a mobile communication network according to an embodiment of the present invention; FIG. 8 is a specific structural diagram of the MME shown in FIG. 7 according to an embodiment of the present invention;

FIG. 9 is a specific structural diagram of an eNB shown in FIG. 7 according to an embodiment of the present disclosure; FIG. 10 is a specific structural diagram of the calling party UE shown in FIG. 7 according to an embodiment of the present invention; FIG. 11 is a specific structural diagram of the called party UE shown in FIG. 7 according to an embodiment of the present invention.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

Embodiment 1

FIG. 1 is a flow chart of a communication method performed by a mobile communication network according to an embodiment of the present invention, which is described in detail as follows:

In step S101, the MME acquires information on whether the two communication devices support D2D communication. In the embodiment of the present invention, before the communication device performs communication, the MME needs to obtain information about whether the communication device supports D2D communication. If yes, the process proceeds to step S102. If not, the existing mobile communication system is selected for communication. The specific process for the MME to obtain whether the two communication devices support D2D communication is shown in FIG. 2 and the description of FIG. 2 .

In step S102, the MME determines whether the two communication devices have the same security algorithm. In the embodiment of the present invention, the security algorithms owned by each device may be different. If the same security algorithm is present, the process proceeds to step S103. Otherwise, the eNB or the UE is notified to end the communication, or the existing mobile communication system is selected for communication. For the problem that the MME determines whether the devices of the two communication devices have the same security algorithm, the present application uses the prior art for detection, and details are not described herein again.

In step S103, the MME sends communication data to the communication device, and the communication data includes: information about whether the communication device can perform D2D communication, and the existing migration supported by both communication devices. Security algorithms for mobile communication technologies, and D2D communication keying materials.

In the embodiment of the present invention, the MME sends communication data to the communication UE, where the communication data is used by the communication parties to perform verification when transmitting and receiving data, and the communication data includes: information about whether the two communication devices can perform D2D communication, and both communication devices Supported security algorithms for existing mobile communication technologies, and keying materials, the security algorithms including: encryption and decryption algorithms and integrity verification algorithms. The method for the MME to send communication data to the UE includes the following two methods:

A. The MME sends the communication data to the eNB, and the eNB forwards the information to the communication device. The step of the MME transmitting the communication data to the eNB is specifically:

The communication data is carried to the eNB by defining the following message:

Initial Context Setup Request

- Message Type

- MME UE S1AP ID

- eNB UE S1AP ID

- UE Aggregate Maximum Bit Rate

- E-RAB to Be Setup List

• E-RAB to Be Setup Item IEs

- UE Security Capabilities

• Encryption Algorithms: BIT STRING (16, ...)

• Integrity Protection Algorithms: BIT STRING

(16, . . . )

- Security Key

- D2D capability

- D2D UE Security Capabilities

• D2D Encryption Algorithms: BIT STRING (16, . . . )

• D2D Integrity Protection Algorithms: BIT STRING (16, . . . ) D2D Security stuff

as well as

UE CONTEXT MODIFICATION REQUEST

- Message Type

- MME UE S1AP ID

- eNB UE S1AP ID

- UE Security Capabilities

- Security Key

- Subscriber Profile ID for RAT/Frequency priority

- UE Aggregate Maximum Bit Rate

- CS Fallback Indicator

- UE Security Capabilities

- CSG Membership Status

- D2D capability

- D2D UE Security Capabilities

• D2D Encryption Algorithms: BIT STRING (16, . . . )

• D2D Integrity Protection Algorithms: BIT STRING

(16, . . . )

D2D Security stuff

B. The MME directly sends the communication data to the communication device, and the steps are specifically: transmitting the communication data by using the NAS information communicated between the MME and the UE. In this method, the two communication devices or the MME need to transmit information indicating whether or not the communication device can perform D2D communication to the eNB.

In step S104, the eNB instructs the two communication devices to establish a communication data bearer, generates an RNTI, and distributes the RNTI to the communication two-party equipment, and the RNTI is used for D2D communication.

In the embodiment of the present invention, the eNB instructs the two communication devices to establish a communication data bearer, generate an RNTI, and distribute the RNTI to the communication device. The eNB indicates the communication double by modifying the RRC The party device establishes a communication data bearer, which is specifically:

The Connection Reconfiguration message contains the elements radio Resource Config Dedicated->drb-To Add Mod List->DRB-To Add Mod:

- DRB-ToAddMod ::=SEQUENCE {

- eps-Bearerldentity INTEGER (0..15) OPTIONAL, --

Cond DRB- Setup

- drb-Identity DRB-Identity,

- dcp-ConfigPDCP-Config OPTIONAL, -Cond PDCP - rlc-ConfigRLC-ConfigOPTIONAL, -- Cond Setup - logicalChannelldentity INTEGER (3..10) OPTIONAL,

-- Cond DRB-Setup

- logicalChannelConfig LogicalChannelConfiOPTIONAL,

― Cond Setup

- D2D security AlgorithmConfig

- D2D Security stuff

- D2D-RNTI

In step S105, the two communication devices communicate using the selected security algorithm and the key acquired based on the key material based on the received communication data.

In the embodiment of the present invention, the communication device receives the communication data, and determines the opposite according to the communication data: D2D communication can be performed, and the same security algorithm is supported. The communication is based on the security algorithm of the existing mobile communication technology in the communication data, and the key obtained by the key material in the communication data.

It should be noted that the communication between the calling party device and the called party device and the MME and the eNB is divided into the following four cases:

The calling party device and the called party device communicate with the same MME and perform the same eNB Communication; or,

The calling party device and the called party device communicate with the same MME but communicate with different eNBs; or

The calling party device and the called party device communicate with different MMEs and communicate with different eNBs; or

The calling party device and the called party device communicate with different MMEs but communicate with the same eNB.

Embodiment 2

FIG. 2 is a flowchart of a specific implementation of step S101 shown in FIG. 1 according to an embodiment of the present invention, and details are as follows:

In step S201, the calling party UE self-checks whether to support D2D communication, and in the case of supporting D2D communication, the calling party UE initiates a D2D communication request to the MME.

In step S202, the MME receives the communication request sent by the calling party UE and the information supporting the D2D communication, and carries an instruction to detect whether to support the D2D communication when calling the called party UE.

In step S203, the called party UE receives the communication call of the MME, and according to the detection instruction, the self-checking supports D2D communication, and sends the detection result to the MME.

In the embodiment of the present invention, the MME in the mobile communication technology detects the UEs of the calling and the called parties. When the MME calls the called UE, the MME carries an instruction to detect whether to support the D2D communication, and the called UE sends the result back after the self-test. The MME provides a reasonable method for detecting whether a device can perform D2D traffic.

Embodiment 3 FIG. 3 is a flowchart of a method for communicating over a mobile communication network according to another embodiment of the present invention, where the method includes the following steps:

In step S301, information is obtained whether the calling party UE and the called party UE support D2D communication. In the embodiment of the present invention, before the communication device performs communication, the MME needs to obtain information about whether the communication device supports D2D communication. If yes, the process goes to step S302. If not, the existing mobile communication system is selected for communication. The steps are as follows:

51. The calling party UE self-checks whether to support D2D communication. In the case of supporting D2D communication, the calling party UE initiates a D2D communication request to the MME;

52. Receive a communication request sent by the calling party UE and information supporting D2D communication, and carry an instruction to detect whether to support D2D communication when calling the called UE.

53. The called party UE receives the communication call of the MME, and according to the detection instruction, the self-test supports D2D communication, and sends the detection result to the MME.

In step S302, it is determined whether the calling party UE and the called party UE have the same security algorithm. In the embodiment of the present invention, the security algorithm owned by each device may be different. If the same security algorithm is present, the process proceeds to step S303. Otherwise, the eNB or the UE is notified to end the communication, or the existing mobile communication system is selected for communication. . Regarding the problem that the MME determines whether the calling UE and the called UE have the same security algorithm, the present application uses the prior art for detection, and details are not described herein.

In step S303, the communication data is sent to the communication dual-issue device, and the communication data includes: information that the calling party UE and the called party UE can perform D2D communication, and the calling party UE and the called party UE support Security algorithms for existing mobile communication technologies, and keying materials for D2D communication.

In the embodiment of the present invention, the communication data is sent to the UE, where the communication data is used by the communication parties to perform verification when transmitting and receiving data, and the communication data includes: information about whether the calling party UE and the called party UE can perform D2D communication, A security algorithm of an existing mobile communication technology supported by both the calling UE and the called UE, and a keying material, the security algorithm comprising: an encryption and decryption algorithm and an integrity verification algorithm. The method for transmitting communication data to a communication dual-issue device includes: A. The MME sends the communication data to the eNB, and the eNB forwards the information to the calling UE and the called UE. The step of the MME sending the communication data to the eNB is specifically:

The communication data is carried to the eNB by defining the following message:

Initial Context Setup Request

- Message Type

- MMEUE S1APID

- eNBUE S1APID

- UE Aggregate Maximum Bit Rate

- E-RAB to Be Setup List

• E-RAB to Be Setup Item IEs

- UE Security Capabilities

• Encryption Algorithms: BIT STRING (16, ...)

• Integrity Protection Algorithms: BIT STRING

(16, ..·)

- Security Key

- D2D capability

- D2D UE Security Capabilities

• D2D Encryption Algorithms: BIT STRING (16, ..·)

• D2D Integrity Protection Algorithms: BIT STRING

(16, ..·)

D2D Security stuff

as well as

UE CONTEXT MODIFICATION REQUEST

- Message Type

- MMEUE S1AP ID

- eNBUE S1AP ID

- UE Security Capabilities - Security Key

- Subscriber Profile ID for RAT/Frequency priority

- UE Aggregate Maximum Bit Rate

- CS Fallback Indicator

- UE Security Capabilities

- CSG Membership Status

- D2D capability

- D2D UE Security Capabilities

• D2D Encryption Algorithms : BIT STRING (16, . · ·)

• D2D Integrity Protection Algorithms: BIT STRING

(16, . . . )

D2D Security stuff

B. The MME directly sends the communication data to the calling party UE and the called party UE, and the steps are specifically: transmitting the communication data by using the NAS information communicated between the MME and the UE. In this method, the calling party UE and the called party UE or the MME need to send information about whether the calling party UE and the called party UE can perform D2D communication to the eNB.

Embodiment 4

FIG. 4 is a flowchart of a method for communicating over a mobile communication network according to another embodiment of the present invention, where the method includes the following steps:

In step S401, the communication data sent by the MME is received and stored;

In the embodiment of the present invention, the eNB accepts and stores the communication data sent by the MME, where the communication data includes: information about whether the two devices of the communication can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both communication devices, and Key material for D2D communication.

In step S402, the communication material is transmitted to the communication device.

In step S403, the communication device is instructed to establish a communication data bearer.

In the embodiment of the present invention, the eNB instructs the two communication devices to establish a communication data bearer. In step S404, an RNTI is generated, and the RNTI is distributed to both communication devices. In the embodiment of the present invention, the eNB also generates an RNTI, and distributes the RNTI to the communication device, where the RNTI is used for D2D communication.

Embodiment 5

FIG. 5 is a flowchart of a method for performing communication by using a mobile communication network according to another embodiment of the present invention, where the method includes the following steps:

In step S501, the self-test supports D2D communication.

In step S502, a communication request is sent to the MME, and the communication request includes information on whether or not to support D2D communication.

In the embodiment of the present invention, the calling party UE sends a communication request to the MME, and carries information about whether to support D2D communication in the communication request.

In step S503, the communication data is received, and the communication data includes: information about whether the two communication devices can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both communication devices, and a key material of D2D communication.

In the embodiment of the present invention, the communication data directly sent by the MME is received or the communication data forwarded by the eNB is received.

In step S504, a communication data bearer is established according to an indication of the eNB.

In step S505, the RNTI distributed by the eNB is received.

In the embodiment of the present invention, the calling party UE receives the RNTI for D2D communication distributed by the eNB. In step S506, communication is initiated to the called party UE using the selected security algorithm and the key obtained from the key material.

In an embodiment of the invention, the calling party UE initiates communication with the called party UE using the selected security algorithm and the key obtained from the keying material.

Embodiment 6

FIG. 6 is a flowchart of a method for performing communication by using a mobile communication network according to another embodiment of the present invention, where the method includes the following steps: In step S601, a communication call of the MME is received, where the communication call includes information asking whether to support D2D communication.

In the embodiment of the present invention, the called party UE receives the communication call sent by the MME, and the communication call includes information for inquiring whether the called party UE supports D2D communication.

In step S602, the self-test supports D2D communication, and sends information to the MME whether or not to support D2D communication.

In step S603, the communication data is received, and the communication data includes: information about whether the two communication devices can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both communication devices, and a key material of D2D communication.

In step S604, a communication data bearer is established according to an indication of the eNB.

In step S605, the RNTI distributed by the eNB is received.

In the embodiment of the present invention, the called party UE receives the RNTI for D2D communication distributed by the eNB. In step S606, the communication initiated by the calling party UE is responded to using the selected security algorithm and the key obtained from the key material.

Example 7

FIG. 7 is a structural diagram of a communication system performed by using a mobile communication network according to an embodiment of the present invention. For the convenience of description, only parts related to the embodiment of the present invention are shown, including:

The MME 71 is configured to obtain information about whether the devices of the two communication parties support the D2D communication, determine whether the devices of the communication parties support the same security algorithm, and send the communication data to the communication device, where the communication data includes: whether the communication device can perform D2D communication. Security algorithms and keying materials for existing mobile communication technologies supported by both information and communication devices.

The eNB 72 is configured to receive and store the communication data sent by the MME 71, send the communication data to the communication device, and instruct the communication device to establish a communication data bearer, generate an RNTI, and distribute the RNTI to the communication device. The calling party UE73 is configured to send a communication request to the MME, where the communication request includes information about whether to support D2D communication, receive communication data, establish a communication data bearer according to the indication of the eNB 72, receive the RNTI distributed by the eNB 72, and use the selected security algorithm. The communication is initiated to the called party UE with a key obtained from the key material.

The called party UE74 is configured to receive a communication call of the MME, send information to the MME whether to support the D2D communication, receive the communication data, establish a communication data bearer according to the indication of the eNB 72, receive the RNTI distributed by the eNB 72, and respond to the calling party UE using the selected The security algorithm and the communication initiated by the key obtained from the key material.

As shown in FIG. 8, the MME 71 specifically includes:

The D2D communication information acquiring unit 711 is configured to acquire information about whether the devices of the communication parties support D2D communication.

The same security algorithm determining unit 712 is configured to determine whether the devices of the communication parties have the same security algorithm.

The communication data sending unit 713 is configured to send the communication data to the communication device, and includes: sending the communication data to the eNB, forwarding the information to the communication device, or directly transmitting the communication data to the communication device.

As shown in FIG. 8, the eNB 72 specifically includes:

The communication data receiving unit 721 is configured to receive the communication data sent by the MME 71.

The communication data forwarding unit 722 is configured to forward the communication data received by the communication data receiving unit 721 to the communication device.

The communication data bearer indicating unit 723 is configured to instruct the communication device to establish a communication data bearer.

The RNTI distribution unit 724 is configured to generate an RNTI and distribute the RNTI to the communication device.

As shown in FIG. 6, the calling party UE33 specifically includes:

The D2D communication self-test unit 731 is used to perform self-test to support D2D communication.

a communication request sending unit 732, configured to initiate a communication request to the MME, where the communication request carries Whether or not the information of the D2D communication is supported by the D2D communication self-test unit 731 self-test.

The communication data receiving unit 733 is configured to receive the communication data sent by the MME or the eNB.

The communication data bearer establishing unit 734 is configured to establish a communication data bearer according to the indication of the eNB.

The RNTI receiving unit 735 is configured to receive the RNTI distributed by the eNB.

The communication unit 736 is configured to communicate with the called party UE according to the communication data received by the communication data receiving unit 733 using the selected security algorithm and the key obtained according to the key material.

As shown in FIG. 9, the called party UE74 specifically includes:

The D2D detection information receiving unit 741 is configured to receive information sent by the MME for performing D2D communication function detection.

The D2D detecting unit 742 is configured to perform a D2D communication function according to the information self-checking received by the D2D detecting information receiving unit 741.

The D2D communication information transmitting unit 743 is configured to send, to the MME, information about whether the D2D traffic is supported according to the detection result of the D2D detecting unit 742.

The communication data receiving unit 744 is configured to receive the communication data sent by the MME or the eNB.

The communication data bearer establishing unit 745 is configured to establish a communication data bearer according to the indication of the eNB.

The RNTI receiving unit 746 is configured to receive an RNTI distributed by the eNB.

The communication unit 747 is configured to respond to the communication initiated by the calling party UE according to the communication data received by the communication data receiving unit 333 using the selected security algorithm and the key obtained according to the key material.

The calling party device and the called party device communicate with the same MME and communicate with the same eNB; or

The calling party device and the called party device communicate with different MMEs and communicate with different eNBs; or The calling party device and the called party device communicate with different MMEs but communicate with the same eNB.

In the embodiment of the present invention, the MME obtains information about whether the UE supports D2D communication, determines whether the communication parties can perform the same security algorithm, and discovers a security algorithm used by the mobile communication to the communication parties, so that the communication parties mature using the existing mobile communication technology. The secure security algorithm communicates not only to make mobile communication technology applicable to D2D communication, but also to communicate using existing mobile communication technology, which not only has a simple verification process but also high security.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection of the present invention. Within the scope.

Claims

claims

1. A method of communicating through a mobile communication network, characterized in that the method includes the following steps:

The MME sends communication data to the devices of both communicating parties. The communication data includes: information on whether the devices of both communicating parties can perform D2D communication, security algorithms of existing mobile communication technologies supported by devices of both communicating parties, and D2D communication key materials;

The eNB instructs the devices of both communicating parties to establish a communication data bearer, generates an RNTI and distributes the RNTI to the devices of both communicating parties, and the RNTI is used for D2D communication;

The devices on both sides of the communication communicate using the selected security algorithm and the key obtained based on the key material based on the received communication data.

2. The method of claim 1, wherein before the MME sends communication data to the devices of both communicating parties, the method further includes the following steps:

The MME obtains information about whether the devices of both communicating parties support D2D communication;

The MME determines whether the devices on both sides of the communication have the same security algorithm.

3. The method of claim 2, wherein the step for the MME to obtain information on whether the devices of both communicating parties can perform D2D communication is specifically:

The calling party UE self-checks whether it supports D2D communication. If it supports D2D communication, the calling party UE initiates a communication request to the MME;

The MME receives the communication request and information supporting D2D communication sent by the calling party UE, and carries an instruction to detect whether D2D communication is supported when calling the called party UE;

The called party UE receives the communication call from the MME, self-checks whether it supports D2D communication according to the detection instruction, and sends the detection result to the MME.

4. The method according to claim 1, characterized in that the step of the MME sending communication data to the devices of both communicating parties is specifically:

The MME sends communication data to the eNB, and the eNB forwards the communication data to the devices of both communicating parties; or, The MME directly sends communication data to the devices of both communicating parties.

5. The method of claim 1, wherein the eNB instructs the devices of both communicating parties to establish a communication data bearer by modifying the RRC.

6. The method according to any one of claims 1 to 5, characterized in that the communication between the calling party equipment and the called party equipment and the MME and eNB is divided into the following four situations:

The calling party equipment and the called party equipment communicate with the same MME and the same eNB; or,

The calling party equipment and the called party equipment communicate with the same MME but different eNBs; or,

The calling party equipment and the called party equipment communicate with different MMEs and communicate with different eNBs; or,

The calling party device and the called party device communicate with different MMEs but with the same eNB.

7. A method of communicating through a mobile communication network, characterized in that the method includes the following steps:

Obtain information about whether the devices of both communicating parties support D2D communication;

Determine whether the devices on both sides of the communication have the same security algorithm;

Send communication data to the devices of both communicating parties. The communication data includes: information on whether the devices of both communicating parties can perform D2D communication, security algorithms of existing mobile communication technologies supported by devices of both communicating parties, and key materials for D2D communication.

8. The method of claim 7, wherein the step of obtaining information on whether the devices of both communicating parties support D2D communication is specifically:

Receive the communication request and information supporting D2D communication sent by the calling party UE, and carry an instruction to detect whether D2D communication is supported when calling the called party UE; The called party UE receives the communication call from the MME, self-checks whether it supports D2D communication according to the detection instruction, and sends the detection result to the MME.

9. The method of claim 8, wherein the step of sending communication data to the devices of both communicating parties is specifically:

The MME sends communication data to the eNB, and the eNB forwards the communication data to the devices of both communicating parties; or,

The MME directly sends communication data to the devices of both communicating parties.

10. A method of communicating through a mobile communication network, characterized in that the method includes the following steps:

Receive and store the communication data sent by the MME. The communication data includes: information on whether the devices of both communicating parties can perform D2D communication, security algorithms of existing mobile communication technologies supported by the devices of both communicating parties, and key materials for D2D communication;

Send the communication data to the devices of both communicating parties;

Instruct the devices on both sides of the communication to establish communication data bearers;

Generate RNTI and distribute the RNTI to the devices of both communicating parties.

11. A method of communicating through a mobile communication network, characterized in that the method includes the following steps:

Send a communication request to the MME, where the communication request includes information on whether D2D communication is supported; receive communication data, where the communication data includes: information on whether the devices on both sides of the communication can perform D2D communication, and existing mobile communications supported by the devices on both sides of the communication. Technical security algorithms and key materials for D2D communications;

Establish communication data bearers according to eNB instructions;

Receive RNTI distributed by eNB;

Initiate communication to the called party UE using the selected security algorithm and the key obtained based on the key material.

12. A method of communicating through a mobile communication network, characterized in that the method includes the following steps: Receive a communication call from the MME, where the communication call includes information asking whether D2D communication is supported;

Send information to ΜΜE whether D2D communication is supported;

Receive communication data. The communication data includes: information on whether the devices of both communicating parties can perform D2D communication, security algorithms of existing mobile communication technologies supported by the devices of both communicating parties, and key materials for D2D communication;

Establish communication data bearers according to eNB instructions;

Receive RNTI distributed by eNB;

Respond to the communication initiated by the calling party UE using the selected security algorithm and the key obtained based on the key material.

13. A device for communicating through a mobile communication network, characterized in that the device includes: a D2D communication information acquisition unit, used to obtain information on whether the devices of both communicating parties support D2D communication; an identical security algorithm judgment unit, used to judge Whether the devices on both sides of the communication have the same security algorithm; the communication data sending unit is used to send communication data to the devices on both sides of the communication.

14. A device for communicating through a mobile communication network, characterized in that the device includes: a communication data receiving unit, configured to receive communication data sent by the MME;

A communication data forwarding unit, used to forward the communication data received by the communication data receiving unit to the devices of both communicating parties;

The communication data bearer instruction unit is used to instruct the devices of both communicating parties to establish the communication data bearer;

RNTI distribution unit, used to generate RNTI and distribute the RNTI to the devices of both communicating parties.

15. A device for communicating through a mobile communication network, characterized in that the device includes: a D2D communication self-test unit, used to self-test whether D2D communication is supported;

A communication request sending unit, configured to initiate a communication request to the MME, where the communication request carries information on whether the D2D communication self-checking unit self-tests to support D2D communication;

Communication data receiving unit, used to receive communication data sent by MME or eNB;

A communication data bearer establishment unit, configured to establish a communication data bearer according to instructions from the eNB; RNTI receiving unit, used to receive the RNTI distributed by the eNB;

A communication unit, configured to initiate communication to the called party UE using the selected security algorithm and the key obtained according to the key material according to the communication material received by the communication material receiving unit.

16. A device for communicating through a mobile communication network, characterized in that the device includes: a D2D detection information receiving unit, configured to receive information sent by the MME for D2D communication function detection;

A D2D detection unit, configured to self-check whether the D2D communication function is supported based on the information received by the D2D detection information receiving unit;

A D2D communication information sending unit, configured to send information about whether D2D traffic is supported to the MME according to the detection result of the D2D detection unit;

The communication data bearer establishment unit is used to establish the communication data bearer according to the instructions of the eNB;

RNTI receiving unit, used to receive RNTI distributed by eNB;

The communication unit is configured to use the selected security algorithm according to the communication material received by the communication material receiving unit and the key obtained according to the key material to respond to the communication initiated by the calling party UE.

17. A system for communicating through a mobile communication network, characterized in that the system includes: MME, used to obtain information about whether the devices of both communicating parties support D2D communication, determine whether the devices of both communicating parties support the same security algorithm, and transfer the communication The data is sent to the devices of both communicating parties. The communication data includes: information on whether the devices of both communicating parties can perform D2D communication, security algorithms of existing mobile communication technologies supported by the devices of both communicating parties, and key materials;

eNB, used to receive and store the communication data sent by the MME, send the communication data to the devices of both communicating parties, instruct the devices of both communicating parties to establish communication data bearers, generate RNTI and distribute the RNTI to the devices of both communicating parties, where the RNTI is used In D2D communication;

The calling party UE is used to send a communication request to the MME. The communication request contains information about whether D2D communication is supported, receives communication data, establishes a communication data bearer according to the instructions of the eNB, receives the RNTI distributed by the eNB, and uses the selected security algorithm. and sends the key obtained based on the key material to the called party UE. start communication;

The called party UE is used to receive the communication call from the MME, send information to the MME whether it supports D2D communication, receive communication data, establish a communication data bearer according to the instructions of the eNB, receive the RNTI distributed by the eNB, and respond to the calling party UE using the selected Security algorithms and communications initiated by keys derived from key material.

18. The system according to claim 17, wherein the communication between the calling party equipment and the called party equipment and the MME and eNB is divided into the following four situations: