WO2018076190A1 - Communication method, terminal, core network user plane device and access network device - Google Patents

Abstract

The present invention provides a communication method, a terminal, a core network user plane device, an access network device, and a communication system. The communication method of the present invention comprises: the terminal encrypting plaintext data according to a first key and a first security capability of the terminal, to obtain encrypted data; the terminal sending data to be sent to the core network user plane device, the data to be sent comprising the encrypted data and tags, the tags comprising security capability information, first ciphertext information of the first key and a first signature value, the security capability information being the plaintext information or ciphertext information of the first security capability, the first signature value being a signature value obtained by signing the security capability information and the first ciphertext information. The communication method, terminal, core network user plane device and access network device, and communication system provided by the present invention can reduce data transmission time overheads and improve resource utilization.

Description

Communication method, terminal, core network user plane device and access network device Technical field

The invention designs the communication field, in particular, the communication method, the terminal, the core network user plane device and the access network device.

Background technique

With the development of communication technology, the application of small data is more and more extensive. In general, small data has at least the following characteristics: small amount of data and long interval between transmissions. For example, in the smart meter reading system, the user equipment can report the power usage information once a month. The power usage information reported by the user equipment is a small data.

The transmission of small data, like the transmission of other traditional types of data, also requires the security of data, that is, the security of small data during transmission.

If the traditional secure transmission method is used to transmit small data, the user equipment needs to use more resources for a large number of signaling interactions each time before recovering from the idle state of the data transmission to the connection state of the data transmission to transmit the small data. To resume the session between the user device and the network side.

That is to say, when the user equipment only needs to transmit data with a small amount of data in a long time interval, more resources and more signaling are still needed. This secure transmission of small data not only makes the transmission time of small data large, but also the utilization of communication resources is relatively low.

Summary of the invention

The communication method, the terminal, the core network user plane device, the access network device and the communication system provided by the invention can reduce the data transmission time overhead and improve the utilization of communication resources.

In a first aspect, the present invention provides a communication method, including: a terminal encrypts plaintext data according to a first key and a first security capability of the terminal, to obtain encrypted data; and the terminal sends a user plane device to a core network. Sending data to be sent, the encrypted data and the label, the label includes security capability information, first ciphertext information of the first key, and a first signature value, where the security capability information is A plaintext information or ciphertext information of a security capability, the first signature value being a signature value obtained by signing the security capability information and the first ciphertext information.

In the communication method, the terminal encrypts the plaintext data according to the first security capability and the first key to obtain encrypted data, which can improve the security of the data in the transmission process; the terminal sends the encrypted data. The first ciphertext information encrypted by the first key and the security capability information of the terminal are carried in the data to be sent carrying the encrypted data, so that the core network user plane device can be based on the security capability information and the first key. The encrypted data in the data to be sent is decrypted to obtain the plaintext data, and the first ciphertext information of the first key is carried in the data to be sent, so that the first key can be securely protected; secondly, the data to be sent is And carrying the first signature value obtained by the first ciphertext information and the security capability information, so that the core network user plane device can perform security verification according to the first signature value, so that the terminal and the core network user plane device do not need to be used. In order to resume the session, security verification is performed over a long period of time and using more resources before transmitting the encrypted data. In addition, the core network user plane device performs security verification on the data to be sent of the terminal, so that end-to-end secure communication between the core network user plane device and the terminal can be realized.

In a possible implementation, the to-be-sent data further includes a second signature value, where the communication method further includes: the terminal, according to the first security capability and the second key pair, the first data and The tag is signed to obtain the second signature value, and the first data is the plaintext data or the encrypted data.

In the communication method of the implementation manner, the terminal also signs one of the plaintext data and the encrypted data, and the label, that is, the integrity signature, and the core network user plane device and/or the access network device correspondingly can complete the integrity. The second signature value obtained by the signature is verified, so that the integrity of the data can be protected.

If the terminal signs the plaintext data and the label instead of signing the encrypted data and the label, the time for the terminal signature to obtain the second signature value can be reduced; if the terminal signs the encrypted data and the label instead of the plaintext data When the label is signed, the core network user plane device can directly verify the second signature value according to the encrypted data without decrypting the encrypted data, thereby reducing the time for the core network user plane device to verify the second signature value.

In a possible implementation, the data to be sent further includes additional information, where the additional information is used for an anti-replay attack; wherein the terminal is configured according to the first security capability and the second key pair. The first data and the label are signed to obtain a second signature value, including: the terminal, according to the first security capability and the second key, the additional information, the first data, and the The tag is signed to obtain the second signature value.

In the communication method of the implementation manner, the data to be sent sent by the terminal further carries the additional information, and the integrity information is also performed on the additional information, so that the anti-replay protection of the data can be implemented.

In a possible implementation manner, the second key is a private key of the terminal.

In the communication method of the implementation manner, the terminal uses its private key for integrity signature, so that the core network user plane device and/or the access network device can use the public key of the terminal to verify the second signature value in the data to be sent. Therefore, the maintenance cost of the core network user plane device and/or the access network device is low.

In a possible implementation manner, the communication method further includes: receiving, by the terminal, a security context sent by the core network user plane device by using a secure channel, where the security context includes the first key and the label .

Optionally, if the security capability information included in the label is the ciphertext information of the first security capability of the terminal, the security context may further include the plaintext information of the first security capability of the terminal.

In the communication method, the terminal acquires a security context from the core network user plane device, and encrypts the plaintext data according to the first key in the security context and the first security capability of the terminal, and sends the security data after the transmission is carried. The data to be sent in the data also carries the label in the security context, so that the core network user plane device and/or the access network device can obtain the data in the to-be-sent data according to various information in the label in the data to be sent, thereby The security network can ensure the secure communication of data without requiring storage and maintenance of security contexts on the core network user plane device and/or the access network device, thereby reducing the operational burden of the core network user plane device and/or the access network device.

In a possible implementation manner, the communication method further includes: receiving, by the terminal, a security context sent by the core network user plane device by using a secure channel, where the security context includes the first key, the label And the second key, the label further includes second ciphertext information, and the second ciphertext information is ciphertext information of the second key.

Optionally, if the security capability information included in the label is the ciphertext information of the first security capability of the terminal, the security context may further include the first security capability of the terminal.

In the communication method of the implementation manner, the terminal may further carry the second ciphertext information obtained by encrypting the second key used for the integrity signature in the label of the data to be sent, so that the core network user plane device can be sent. The second ciphertext information carried in the data is decrypted, and the second signature value in the to-be-sent data, that is, the integrity signature value, is verified according to the decrypted second key. This symmetry integrity signature and verification algorithm for integrity signature values results in short computation times.

In a possible implementation manner, the label further includes first plaintext information, where the first plaintext information includes at least one of the following: routing information of the core network user plane device, identifier information of the label, Identification information of the terminal, identification information of the user plane device of the core network, and valid time information of the label; wherein the first signature value is the security capability information and the location The signature value obtained by signing the first ciphertext information and the first plaintext information.

In a second aspect, the present invention provides a communication method, including: a core network user plane device receiving data to be sent sent by a terminal, the data to be transmitted includes encrypted data and a label, and the encrypted data is the first according to the terminal. The data obtained by encrypting the plaintext data by the key and the first security capability of the terminal, the label includes security capability information, first ciphertext information of the first key, and a first signature value, the security capability The information is the plaintext information or the ciphertext information of the first security capability, and the first signature value is a signature value obtained by signing the security capability information and the first ciphertext information; if the core network user plane And the device discards the to-be-sent data if the device fails to verify the first signature value in the label of the to-be-sent data; or if the core network user plane device sends the label to the to-be-sent data If the first signature value is successfully verified, the core network user plane device decrypts the first ciphertext information in the to-be-sent data to obtain the first key, and It is said to be the security capability information of the transmission data and the first key, the encrypted data is decrypted, to obtain the plaintext data.

In the communication method, the core network user plane device can verify the first signature value in the label of the data to be sent according to the first ciphertext information and the security capability information in the label in the data to be sent. The data to be sent is discarded when the verification fails, or when the verification is successful, the first key in the label is obtained to obtain data in the data to be sent. The communication method enables the terminal to securely transmit data with the core network without wasting a lot of time and resources to restore the session, thereby saving data transmission time overhead and improving resource utilization.

In addition, the core network user plane device treats the transmitted data for security verification, and can implement an end-to-end secure transmission mechanism between the terminal and the core network user plane device.

In a possible implementation manner, the to-be-sent data further includes a second signature value, where the second signature value is, according to the first security capability and the second key pair, the first data and the And the first data is the plaintext data, where the communication method further includes: the core network user plane device according to the second key and the to-be-sent data The security capability information is used to verify the second signature value in the to-be-sent data; when the core network user plane device fails to verify the second signature value in the to-be-sent data, the device is discarded. send data.

In the communication method of the implementation manner, since the second signature value is a signature value obtained by signing the plaintext data and the label, the terminal generates the second value compared to the signature value obtained by signing the encrypted data and the label with the second signature value. Signature values can be used for less time. Moreover, the core network user plane device After the first signature value is successfully verified and the plaintext data is obtained, the second signature value in the data to be sent is verified, and the data to be sent that is failed to be verified is discarded, so that the integrity of the data can be protected.

In a possible implementation, the data to be sent further includes a second signature value, where the second signature value is obtained by the terminal signing the first data and the label according to the second key. The first data is the encrypted data, wherein the core network user plane device decrypts the first ciphertext information in the to-be-sent data, obtains the first key, and according to the waiting Transmitting the security capability information and the first key in the data, and decrypting the encrypted data to obtain the plaintext data, including: the core network user plane device according to the second key and the Verifying, by the security capability information in the data to be sent, the second signature value in the to-be-sent data; and verifying, by the core network user plane device, the second signature value in the to-be-sent data Upon successful, the core network user plane device decrypts the first ciphertext information in the to-be-sent data, obtains the first key, and according to the first key and the to-be-sent data The safety energy Information, the encrypted data is decrypted, to obtain the plaintext data.

In the communication method of the implementation manner, since the second signature value is a signature value obtained by signing the encrypted data and the label, the core network user plane device can send the plain signature data without successfully obtaining the plaintext data after successfully verifying the first signature value. The second signature value in the data is verified so that less time can be used to verify the second signature value. Then, the core network user plane device obtains the plaintext data when the second signature value is verified successfully, otherwise the data to be sent is discarded, so that the integrity of the data can be protected.

In a possible implementation manner, the communication method further includes: when the core network user plane device fails to verify the second signature value in the to-be-sent data, discarding the to-be-sent data.

In a possible implementation manner, the data to be sent further includes additional information, where the additional information is used for an anti-replay attack, and the second signature value is the terminal according to the first security capability and the A signature value obtained by signing the additional information, the first data, and the tag by a second key.

In the communication method of the implementation manner, the data to be sent by the terminal further carries the additional information, and the integrity information is also performed on the additional information, so that the playback protection of the data can be implemented.

In a possible implementation manner, the second key is a private key of the terminal, where the core network user plane device is configured according to the second key and the security in the to-be-sent data. can And verifying, by the core information, the second signature value in the data to be sent, where: the core network user plane device is configured according to the public key of the terminal and the security capability information in the to-be-sent data. Verifying the second signature value in the to-be-sent data.

In the communication method of the implementation manner, since the terminal uses its private key for integrity signature, the core network user plane device can use the public key of the terminal to verify the integrity signature value in the data to be transmitted. This makes the maintenance cost of the key for the core network user plane device low.

In a possible implementation manner, the communication method further includes: the core network user plane device sends a security context to the terminal by using a secure channel, where the security context includes the first key and the label; The core network user plane device deletes the security context.

In the communication method of the implementation manner, after the core network user plane device sends the security context to the terminal, the security context is not stored and maintained, but the information in the data to be sent sent by the terminal is used to implement secure communication of data, thereby reducing The operational burden of the core network user plane device.

Optionally, when the security capability information in the label is the plaintext information of the first security capability, the core network user plane device may directly perform subsequent related operations according to the security capability information. When the security capability information in the tag is ciphertext information of the first security capability, the security context may include plaintext information of the first security capability. After the core network user plane device receives the data to be sent sent by the terminal, it needs to decrypt the security capability information in the label of the data to be sent, and obtain the corresponding first security capability before performing related operations.

In a possible implementation manner, the communication method further includes: the core network user plane device sends a security context to the terminal by using a secure channel, where the security context includes the first key, the label, and The second key, the label further includes second ciphertext information, where the second ciphertext information is ciphertext information of the second key; and the core network user plane device deletes the security context; The core network user plane device verifies the second signature value in the to-be-sent data according to the second key and the security capability information in the to-be-sent data, including: The core network user plane device verifies the second signature value in the to-be-sent data according to the security capability information in the to-be-sent data and the second ciphertext information in the to-be-sent data. .

In the communication method of the implementation manner, the terminal carries the encrypted second ciphertext information of the second key used for the integrity signature in the data to be sent, so that the core network user plane device can carry the data to be sent. The second ciphertext information is decrypted to obtain a second key to verify the second signature value in the data to be transmitted, and the symmetry integrity signature and integrity signature value verification algorithm Make the calculation time short.

In a possible implementation manner, the label further includes first plaintext information, where the first plaintext information includes at least one of the following: routing information of the core network user plane device, identifier information of the label, The identifier information of the terminal, the identifier information of the user plane device of the core network, or the valid time information of the label, where the first signature value is the security capability information, the first ciphertext information, and the location The signature value obtained by signing the first plaintext information.

Optionally, the core network user plane device can verify the identifier information of the terminal to verify whether the terminal belongs to the terminal domain. Optionally, the core network user plane device can verify the valid time of the label to check whether the label is A label that falls within the validity period.

In a third aspect, the present invention provides a communication method, including: an access network device receives first data to be sent by a terminal, the first data to be sent includes encrypted data and a label, and the label includes security capability information, a first ciphertext information of the key and a first signature value, where the security capability information is plaintext information of the first security capability of the terminal, and the first signature value is the security capability information and the first a signature value obtained by signing the ciphertext information, where the encrypted data is data obtained by the terminal encrypting the plaintext data according to the first security capability and the first key; Sending, to the core network user plane device, the second to-be-sent data, where the first signature value in the first to-be-sent data is successfully verified, where the second to-be-sent data includes the encrypted data and the label; or And the access network device fails to verify the first signature value in the first to-be-sent data, and discards the first to-be-sent data.

In the communication method, the access network device can verify the first to-be-sent data according to the label in the first to-be-sent data, so that the terminal can perform the network with the core network without wasting a lot of time and resources to restore the session. Secure transmission of data, thereby saving data transmission time overhead and improving resource utilization.

In addition, the access network device verifies the first to-be-sent data, and discards the first to-be-sent data that fails to be verified, thereby reducing the verification pressure of the core network user plane device.

In a possible implementation manner, the first to-be-sent data further includes a second signature value, where the second signature value is the terminal according to the first security capability and the private key of the terminal. Encrypting data and a signature value obtained by signing the label; wherein, the access network device successfully verifies the first signature value in the label of the first to-be-sent data, and then sends the signature to the core network Transmitting, by the user plane device, the second to-be-sent data, the access network device performing the second signature value in the first to-be-sent data according to the security capability information and the public key of the terminal If the access network device verifies the first signature value in the label of the first to-be-sent data successfully, and verifies the second signature value in the first to-be-sent data. If successful, the second to-be-sent data is sent to the core network user plane device.

In the communication method of the implementation manner, the access network device can verify the second signature value in the data to be sent, so that the integrity of the data can be protected.

In a possible implementation manner, the second to-be-sent data further includes the second signature value.

In the communication method of the implementation manner, the data to be sent sent by the access network device to the user equipment of the core network further includes a second signature value, and the user equipment of the core network can verify the integrity of the data to be sent according to the second signature value. Thereby, the integrity protection between the access network device and the core network user plane device is realized.

In a possible implementation manner, the first to-be-sent data further includes additional information, where the additional information is used for an anti-replay attack, and the second signature value is used by the terminal according to the first security capability and A signature value obtained by signing the encrypted data, the label, and the additional information by a private key of the terminal.

In the communication method of the implementation manner, the data to be sent sent by the terminal further carries information such as a time stamp, and the information such as the time stamp corresponding to the data to be sent is integrity signed, so that the data can be anti-replayed. protection.

In a possible implementation, the label further includes the identifier information of the terminal, where the communication method further includes: the access network device verifies whether the terminal belongs to the terminal according to the identifier information of the terminal The access network device discards the first to-be-sent data when the terminal device does not belong to the terminal domain according to the identifier information of the terminal.

In a possible implementation manner, the label further includes routing information of the core network user plane device, where the communications method further includes: the access network device determining the core network according to the routing information User plane device.

In a possible implementation manner, the label further includes identifier information of the core network user plane device, where the communication method further includes: the access network device according to the identifier of the core network user plane device Verifying that the core network user plane device belongs to the core network user plane device domain; the access network device verifies that the core network user plane device does not belong to the core network user plane device according to the identifier information of the core network user plane device When the domain is in the domain, the first to-be-sent data is discarded.

In a fourth aspect, the present invention provides a terminal, the terminal comprising Module of the communication method.

In a fifth aspect, the present invention provides a core network user plane device, the core network user plane device comprising a module for performing the communication method of the second aspect.

In a sixth aspect, the present invention provides an access network device, the access network device comprising means for performing the communication method of the third aspect.

In a seventh aspect, the present invention provides a communication system comprising the terminal of the fourth aspect and the core network user plane device of the fifth aspect.

Optionally, the communication system may further include the access network device of the sixth aspect.

In an eighth aspect, the present invention provides a terminal comprising a memory, a processor, a receiver, and a transmitter, the memory for storing code, the processor for executing code in the memory, the receiver and The transmitter is used to communicate with other devices. When the code is executed, the processor invokes the receiver and transmitter to implement the communication method in the first aspect.

In a ninth aspect, the present invention provides a core network user plane device, including a memory, a processor, a receiver, and a transmitter, the memory for storing code, and the processor for executing code in the memory, The receiver and transmitter are used to communicate with other devices. When the code is executed, the processor invokes the receiver and transmitter to implement the communication method of the second aspect.

In a tenth aspect, the present invention provides an access network device including a memory, a processor, a receiver, and a transmitter, the memory for storing code, the processor for executing code in the memory, Receivers and transmitters are used to communicate with other devices. When the code is executed, the processor invokes the receiver and the transmitter to implement the communication method in the third aspect.

In an eleventh aspect, the present invention provides a communication system comprising the terminal of the eighth aspect and the core network user plane device of the ninth aspect.

Optionally, the communication system may further include the access network device of the tenth aspect.

In a twelfth aspect, the invention provides a computer readable medium storing program code for execution by a terminal, the program code comprising instructions for performing the communication method of the first aspect.

In a thirteenth aspect, the present invention provides a computer readable medium storing program code for execution by a core network user plane device, the program code comprising a communication method for performing the second aspect Instructions.

In a fourteenth aspect, the present invention provides a computer readable medium storing program code for execution by an access network device, the program code comprising for performing a third aspect The instruction of the communication method.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings to be used in the embodiments of the present invention will be briefly described below. It is obvious that the drawings described below are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without paying any creative work.

FIG. 1 is a schematic structural diagram of an application scenario of an embodiment of the present invention.

FIG. 2 is a schematic flowchart of a communication method according to an embodiment of the present invention.

FIG. 3 is a schematic flowchart of a communication method according to an embodiment of the present invention.

FIG. 4 is a schematic structural diagram of a terminal according to an embodiment of the present invention.

FIG. 5 is a schematic structural diagram of a core network user plane device according to an embodiment of the present invention.

FIG. 6 is a schematic structural diagram of an access network device according to an embodiment of the present invention.

FIG. 7 is a schematic structural diagram of a terminal according to an embodiment of the present invention.

FIG. 8 is a schematic structural diagram of a core network user plane device according to an embodiment of the present invention.

FIG. 9 is a schematic structural diagram of an access network device according to an embodiment of the present invention.

FIG. 10 is a schematic structural diagram of a communication system according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

For ease of understanding, an exemplary diagram of a communication system architecture capable of implementing the method of transmitting data of an embodiment of the present invention is first described as a whole.

The communication system shown in FIG. 1 includes a terminal 110, an access network device 120, a core network user plane device 130, a core network control plane device 140, and an Internet 150.

The terminal 110 can access one or more core network user plane devices 130 and one or more core network control plane devices 140 in the core network (CN) via the access network device 120 to communicate with the core network. The terminal 110 can also access the Internet 150 through the core network user plane device 130. in. A terminal may also be called an access terminal, a user equipment (User Equipment, UE), a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a terminal device, a wireless communication device, and a user. Agent or user device. The UE may be a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA), or a wireless communication function. Handheld devices, computing devices or other processing devices connected to wireless modems, in-vehicle devices, wearable devices, and terminals in future 5G networks.

Terminal 110 may also be referred to as a Next Generation (NG) UE, such as a terminal in the Internet Of Things (IOT).

The access network device 120 is an access network (AN), such as a device in a radio access network (RAN). The access network device 120 may be a base station, such as a Global System for Mobile communication (GSM) system or a Base Transceiver Station (BTS) in a Code Division Multiple Access (CDMA) system. It can also be a base station (NodeB) in a Wideband Code Division Multiple Access (WCDMA) system, or an Evolutionary Node B (eNB or a Long Term Evolution (LTE) system). The eNodeB) is a base station device and a small base station device in a future 5G network, and the present invention is not limited thereto.

The core network user plane device 130 may also be referred to as a User Plane-Core Network (UP-CN), which can implement a data packet forwarding function, which may be a core network user plane device in a future 5G system, such as an S in an LTE system. -GW similar network device; the core network control plane device 140 may also be called a Control Plane-Core Network (CP-CN), which can implement a control message or signaling forwarding function, such as a mobile management network element (Mobile Management Network, MM) ) Similar network devices. An IP network is a network in which computer networks using an IP protocol are connected to each other.

It should be understood that the embodiment of the present invention is not limited to the communication system architecture shown in FIG. 1. In addition, the device in FIG. 1 may be hardware, functionally divided software, or a combination of the two.

In the conventional technology, when the terminal 110 communicates with the access network device 120, the security context of the terminal 110 is stored on the access network device 120. In this way, if the terminal 110 is in an idle state and needs to send data to the access network device, it needs to use more resources and signaling to recover from the idle state to the connected state, such as completing the authentication process, and then restoring with the access network device. Session to send data to the access network device.

When the above communication method is applied in a small data application scenario, since the data volume of the small data is small and the transmission time interval is long (normally, the interval of transmitting data exceeds the time when the terminal enters the idle state), the terminal and the access network are caused. More resources and time are spent between the device or the core network user plane device, only a small amount of data is transmitted, thereby increasing the time transmission overhead of the data and reducing the utilization of resources.

The small data in the embodiment of the present invention may refer to data with a small amount of data, and may also refer to data with a long interval of transmission, and may also refer to data with a small amount of data and a long interval of transmission.

When the terminal 110 transmits data with a small amount of data, the size of the data may be within the data packet. For example, in the smart meter reading system, the user's power usage information for one month can be a small amount of data.

When the terminal 110 transmits data with a long interval, it may generally mean that the interval of the data packet sent by the terminal 110 exceeds the time when the terminal 110 enters the idle state. For example, in the smart meter reading system, the terminal reports the power usage information once a month.

In order to solve the above problems, the present invention proposes a new communication method, terminal, core network user plane device, access network device, and communication system.

FIG. 2 is a schematic flowchart of a communication method according to an embodiment of the present invention. It should be understood that FIG. 2 illustrates steps or operations of the communication method, but these steps or operations are merely examples, and embodiments of the present invention may perform other operations or variations of the various operations in FIG. 2.

S210. The terminal encrypts the plaintext data according to the first key and the first security capability of the terminal, to obtain encrypted data.

The terminal may be the terminal 110 shown in FIG. 1.

It should be noted that, the terminal encrypts the plaintext data according to the first key and the first security capability of the terminal, and before the encrypted data is obtained, the terminal may store the first key and the terminal for encrypting the plaintext data. A security capability.

The plaintext data may be the service data of the terminal, or may be other data, such as a context for establishing a session or a bearer.

The first security capability of the terminal may include a security algorithm identifier set, such as an encryption algorithm identifier or an integrity protection algorithm identifier.

If the first security capability of the terminal includes the encryption algorithm identifier, the terminal encrypts the plaintext data according to the first key and the first security capability of the terminal, and the following implementation manner is adopted: the terminal determines the corresponding encryption according to the identifier of the encryption algorithm. The algorithm encrypts the plaintext data using the first key and the encryption algorithm.

Optionally, the first security capability of the terminal may be a security capability determined by the terminal and the core network user plane device according to the security capability supported by the terminal, or may be a security capability pre-agreed by the terminal and the core network user plane device.

The security capabilities supported by the terminal may include a set of at least one security algorithm that the terminal may use when encrypting or decrypting. The set of identifiers of all security algorithms that the terminal can use or can support can be referred to as a set of security algorithm identifiers supported by the terminal. Specifically, the set of security algorithm identifiers supported by the terminal may include at least one encryption algorithm identifier and/or at least one integrity protection algorithm identifier.

At this time, the first security capability of the terminal is a security capability determined by the terminal and the core network user plane device according to the security capability supported by the terminal, including: the first security capability of the terminal includes the security supported by the terminal and the core network user plane device from the terminal. In the algorithm identification set, some or all of the security algorithm identifiers determined by negotiation are determined.

S220: The terminal sends the to-be-sent data to the core network user plane device, where the to-be-sent data includes the encrypted data and the label.

The tag includes first ciphertext information, security capability information, and a first tag value. The first ciphertext information is the ciphertext information obtained after the first key is encrypted; the security capability information may be the plaintext information of the first security capability of the terminal, or may be the ciphertext information of the first security capability, that is, the first The ciphertext obtained by encrypting the plaintext information of the security capability; the first signature value is the signature value obtained after the security capability information and the first ciphertext information are signed.

The security capability information may be the ciphertext information obtained by the unified encryption of the first key and the first security capability when the security capability information is the ciphertext information of the first security capability. That is, from the form, the security capability information and the first ciphertext information are carried in the same ciphertext information.

The core network user plane device may be the core network user plane device 130 shown in FIG. 1. Correspondingly, the core network user plane device receives the data to be sent sent by the terminal.

Specifically, when the first key and the first security capability are stored on the terminal, if the terminal needs to send data to the user plane device of the core network (the data is referred to as plaintext data in the embodiment of the present invention), The first security capability and the first key encrypt the plaintext data to obtain the encrypted data. Then, the terminal may compose the encrypted data and the label into the to-be-sent data, and send the to-be-sent data to the core network user plane device.

It should be noted that when the terminal composes the encrypted data and the label into the data to be transmitted, the encrypted data and the label can be encapsulated into the same data packet. At this time, correspondingly, the core network user plane device receives After the data packet is obtained, the data to be sent is obtained from the data packet, and the encrypted data and the label can be obtained.

Of course, the terminal can also encapsulate the encrypted data and the label into different data packets, that is, the data to be sent is encapsulated into multiple data packets. At this time, correspondingly, after receiving the data to be sent, the core network user plane device can obtain the label from one data packet, and then obtain the encrypted data from another data packet.

In addition, the terminal can also uniformly encapsulate the data to be sent composed of the encrypted data and the label into different data packets. At this time, correspondingly, after receiving the plurality of data packets, the core network user plane device can obtain the data to be sent from the plurality of data packets, that is, obtain the encrypted data and the label.

S230: If the verification of the first signature value in the label of the core network user plane device to be sent data fails, discarding the data to be sent; or, if the first signature value in the label of the core network user plane device to be sent data is successfully verified, Then, the first ciphertext information in the sent data is decrypted to obtain a first key, and the encrypted data is decrypted according to the security capability information and the first key in the data to be sent to obtain plaintext data.

Specifically, after receiving the data to be sent sent by the terminal, the core network user plane device verifies the first signature value in the data to be sent, and if the verification fails, discards the data to be sent; or, if the verification succeeds, sends the data to be sent. The first ciphertext information in the label of the data is decrypted to obtain a first key, and the encrypted data is decrypted according to the security capability information and the first key in the data to be sent to obtain plaintext data.

In the embodiment of the present invention, the terminal encrypts the plaintext data according to the first security capability and the first key to obtain encrypted data, which can improve the security of the data during transmission; when the terminal sends the encrypted data, the terminal carries the encrypted data. The to-be-sent data carries the first ciphertext information encrypted by the first key and the security capability information of the terminal, so that the core network user plane device can decrypt the encrypted data in the to-be-sent data according to the security capability information and the first key. To obtain the plaintext data, and the first ciphertext information of the first key is carried in the data to be sent, so that the first key can be securely protected; secondly, the first ciphertext information is carried in the data to be sent. And the first signature value obtained by the signature of the security capability information, so that the core network user plane device can perform security verification according to the first signature value, so that the terminal and the core network user plane device do not need to send encrypted data in order to resume the session. Security verification is achieved by taking a long time and using more resources.

In addition, in the embodiment of the present invention, the core network user plane device performs security verification on the to-be-sent data of the terminal, so that the end-to-end security communication between the core network user plane device and the terminal can be realized. letter.

In an implementation scenario of the foregoing embodiment, when the security capability information in the to-be-sent data is the plaintext information of the first security capability of the terminal, in step S230, the core network user plane device according to the security capability information in the data to be sent and The specific implementation manner of decrypting the encrypted data by the first key may be as follows:

The core network user plane device decrypts the encrypted data according to the first key and the plaintext information of the first security capability.

In another implementation scenario of the foregoing embodiment, when the security capability information in the to-be-sent data is the ciphertext information of the first security capability of the terminal, in step S230, the core network user plane device according to the security capability in the data to be sent The information and the first key are used to decrypt the encrypted data, and the following implementation manners may be adopted:

The core network user plane device decrypts the security capability information in the data to be sent, obtains the plaintext information of the first security capability, and decrypts the encrypted data according to the first key and the plaintext information of the first security capability.

If the security capability information and the first ciphertext information are carried in the same ciphertext information, the core network user plane device decrypts the security capability information in the data to be sent, and obtains the plaintext information of the first security capability, meaning that the core The network user plane device also decrypts the first ciphertext information to obtain the first key; or the core network user plane device decrypts the first ciphertext information in the data to be sent to obtain the first key, which means that the core network user The face device is also decrypted by the security capability information to obtain the plaintext information of the first security capability. That is to say, in this case, the core network user plane device decrypts the security capability information in the data to be sent to obtain the plaintext information of the first security capability, and the first ciphertext in the label of the core network user plane device to send the data. The information is decrypted to obtain the first key, and the following steps can be synthesized:

The core network user plane device decrypts the same ciphertext information including the first ciphertext information and the security capability information in the data to be sent, and obtains the first key and the plaintext information of the first security capability.

If the first security capability includes the encryption algorithm identifier, the core network user plane device decrypts the encrypted data according to the first key and the plaintext information of the first security capability, which may be implemented in the following manner: the core network user plane device is determined. The encryption algorithm included in the first security capability identifies the corresponding encryption algorithm, and decrypts the encrypted data using the first key and the encryption algorithm.

It should be understood that the embodiment of the present invention does not limit the order in which the core network user plane device performs the following steps: the first signature value in the label of the data to be sent is verified; in the label of the data to be sent The first ciphertext information is decrypted to obtain a first key, and the encrypted data is decrypted according to the security capability information and the first key in the data to be transmitted to obtain plaintext data.

For example, the core network user plane device may first decrypt the first ciphertext information in the label of the sending data to obtain the first key, and decrypt the encrypted data according to the security capability information and the first key, and then send the data to be sent. The first signature value in the label is verified. If the verification fails, the data to be sent is discarded; if the verification is successful, the plaintext data can be forwarded.

Decrypting the first ciphertext information in the label of the core network user plane device to send the data first, to obtain the first key, decrypting the encrypted data according to the security capability information and the first key, and then sending the data to be sent In an implementation scenario of S230, in the implementation scenario of S230, "the first signature value in the core network user plane device to be sent in the data is successfully verified, and then in the label of the data to be sent. Decrypting the first ciphertext information to obtain a first key, and decrypting the encrypted data according to the security capability information and the first key in the data to be sent may be used to prevent the core network user plane device from avoiding the failure of the first signature value verification before The step of "decrypting the first ciphertext information in the tag to be sent data to obtain the first key and decrypting the encrypted data according to the security capability information and the first key" improves resource utilization.

In S230, an exemplary implementation manner of verifying the first signature value in the label of the core network user plane device to be sent data may be: signing the first ciphertext information and the security capability information in the label of the data to be sent. And obtaining a first verification signature value for verifying the first signature value; comparing the first signature value in the label in the data to be transmitted with the first verification signature value. If the first signature value does not match the first verification signature value, the verification of the first signature value fails; if the match, the verification of the first signature value is successful.

In the embodiment of the present invention, optionally, the communication method shown in FIG. 2 may further include: the terminal signs the first data and the label according to the first security capability and the second key of the terminal, to obtain a second signature value, The first data is plaintext data or ciphertext data. The data to be sent sent by the terminal to the user plane device of the core network may further include the second signature value.

Correspondingly, the data to be sent received by the core network user plane device further includes a second signature value, and if the second signature value is obtained by the terminal signing the first data and the label according to the first security capability and the second key, And the first data is the plaintext data, the communication method performed by the core network user plane device may further include: verifying, according to the second key and the security capability information in the to-be-sent data, the second signature value in the data to be sent; If the verification of the second signature value in the data to be transmitted fails, the data to be transmitted is discarded.

At this time, optionally, if the second signature value in the data to be sent by the core network user plane device is successfully verified, the plaintext data may be forwarded.

Optionally, the data to be sent received by the core network user plane device further includes a second signature value, where the second signature value is obtained by the terminal signing the first data and the label according to the first security capability and the second key. And the first data is ciphertext data, in S230, the first ciphertext information in the data to be sent by the core network user plane device is decrypted to obtain the first key, and according to the security capability information in the data to be sent. And decrypting the encrypted data with the first key to obtain plaintext data, including:

The core network user plane device verifies the second signature value in the data to be sent according to the second key and the security capability information in the data to be sent; if the second signature value in the data to be sent by the core network user plane device is successfully verified, Then, the first ciphertext information in the data to be sent by the core network user plane device is decrypted, the first key is obtained, and the encrypted data is decrypted according to the first key and the security capability information in the data to be sent, to obtain the plaintext data. .

At this time, optionally, if the verification of the second signature value in the data to be sent by the core network user plane device fails, the data to be sent is discarded.

The foregoing terminal sends, to the core network user plane device, a to-be-sent data that further includes a second signature value, and the core network user plane device verifies the second signature value in the communication method, because the second signature value is the terminal-to-first data sum. The signature value obtained by the signature of the tag, so that the core network user plane device discards the to-be-sent data when the second signature value fails to be verified, thereby preventing the core network user plane device from encrypting the data to be sent that is attacked or tampered with. The plaintext data corresponding to the data is forwarded normally. Thereby achieving data integrity protection.

The terminal sends a data to be sent to the core network user plane device, which further includes a second signature value, and the core network user plane device verifies the second signature value in the communication method, and the core network user plane device according to the second key and the The step of verifying the security capability information in the data and verifying the second signature value in the data to be sent may be located in the core network user before the first signature value in the label of the user network device to be sent by the core network is verified. After the face device verifies the first signature value in the tag of the data to be sent.

For example, the core network user plane device may first decrypt the encrypted data in the sent data, and obtain the plaintext data, and then verify the first signature value in the label of the data to be sent. If the verification of the first signature value is successful, the second signature value in the data to be transmitted is verified. If the verification of the second signature value fails, the data to be sent is discarded, and if the second signature value is verified, the plaintext number may be forwarded. according to.

For another example, the core network user plane device may first verify the first signature value in the label of the data to be sent. If the verification of the first signature value is successful, the encrypted data in the transmission data is decrypted to obtain plaintext data. The second signature value in the transmitted data is then verified. If the verification of the second signature value fails, the data to be sent is discarded, and if the second signature value is verified, the plaintext data may be forwarded.

For another example, the core network user plane device may first verify the first signature value in the label of the data to be sent. If the verification of the first signature value fails, the data to be sent is discarded; if the verification of the first signature value is successful, the second signature value in the transmission data is verified. If the verification of the second signature value fails, the data to be sent is discarded. If the second signature value is verified, the encrypted data in the data to be transmitted is decrypted to obtain plaintext data, and finally the plaintext data is forwarded.

However, it should be noted that the core network user plane device first verifies the first signature value, and then verifies the second signature value, if the second signature value is the signature value obtained by the terminal signing the plaintext data and the label, regardless of the encryption according to the encryption The step of obtaining the plaintext data is to perform the step of obtaining the plaintext data based on the encrypted data before verifying the first signature value or after verifying the first signature value, before the second signature value is verified. Because the core network user plane device needs to obtain the plaintext data first, the plaintext data and the label can be signed to obtain the second verification signature value, so that the second signature value is verified according to the second verification signature value.

Specifically, the core network user plane device verifies the second signature value in the data to be sent according to the second key and the security capability information in the data to be sent, and may adopt the following implementation manner: the core network user plane device is based on the second secret The key and the security capability information in the data to be sent, the first data and the label are signed to obtain a second verification signature value; the second signature value and the second verification signature value are compared, and if the matching, the second signature value is successfully verified. If it does not match, the verification of the second signature value fails.

Specifically, if the second signature value is a signature value obtained by the terminal hashing the first data and the label and encrypting the result of the hash operation according to the first security capability and the second key, the second verification signature The value may be a signature value obtained by the core network user plane device hashing the first data and the label, and encrypting the result of the hash operation according to the second key and the security capability information in the to-be-sent data.

Specifically, if the first security capability corresponding to the security capability information includes the encryption algorithm identifier, the core network user plane device signs the first data and the label according to the second key and the security capability information in the to-be-sent data, to obtain the first Second, verify the signature value, you can use the following implementation: core network The user equipment determines an encryption algorithm corresponding to the encryption algorithm identifier included in the first security capability, and uses the second key and the encryption algorithm to sign the first data and the label to obtain a second signature verification value.

In the embodiment of the present invention, optionally, the data to be sent sent by the terminal to the user equipment of the core network may further include additional information, which is used for anti-replay attacks.

Specifically, the additional information may include at least one of a time stamp and first count information. The first count information may be used to synchronize with the second count information on the core network user plane device.

Optionally, there may be a counter on the terminal, such as a NAS counter. The counter on the terminal may be used to measure the number of times the terminal sends the data to be sent to the user equipment of the core network. The data to be sent may be data to be sent carrying only the label, or any data to be sent. A counter corresponding to the counter on the terminal may also exist on the core network user plane device, and the counter on the core network user plane device may also be a NAS counter. The counter on the core network user plane device can be used to measure the number of times the terminal sends the data to be sent to the core network user plane device. The data to be sent can be the data to be sent carrying only the label, or any data to be sent. The counters on the core network user plane device can be synchronized with the counters on the terminal.

At this time, the first count information may be all or part of the count information represented by the counter on the terminal, and the second count information may be all or part of the count information represented by the counter on the core network user plane device.

For example, if the count information of the counter on the terminal can be represented by 8 bits, the first count information may include the 8 bits, or may be only some of the 8 bits, such as 3 bits.

At this time, the terminal signs the first data and the label according to the first security capability and the second key of the terminal, and obtains the second signature value. The corresponding implementation manner may be: the terminal according to the first security capability and the second key. The additional information, the first data, and the tag are signed to obtain a second signature value.

The additional information may be pre-stored on the terminal. Correspondingly, the core network user plane device may also record additional information corresponding to the additional information stored on the terminal, for example, the core network user plane device may store a timestamp synchronized with the timestamp on the terminal, and/or may A second count information synchronized with the first calculated information is stored. It should be noted that the timestamp and the first count information on the terminal, or the timestamp and the second count information on the core network user plane device, cannot be repeated in a short time.

If the core network user plane device records the additional information corresponding to the additional information on the terminal, the core network user plane device receives the data to be sent that further includes the additional information, and after verifying the second signature value in the data to be sent, Can be sent according to additional information on the core network user plane device Additional information in the data is verified.

If the verification of the additional information in the data to be sent by the user equipment of the core network fails, the data to be sent may be discarded; if the verification is successful, the plaintext data corresponding to the encrypted data in the data to be sent may be forwarded. That is to say, the core network user plane device can implement anti-replay protection of the data by using additional information in the data to be transmitted.

Specifically, if the additional information in the data to be sent sent by the terminal includes the first calculation information, and the second information that can be synchronized with the first calculation information is recorded on the user equipment of the core network, the user equipment of the core network is based on the core network. The additional information on the user plane device verifies the additional information in the data to be sent, and the following implementation manner can be adopted:

The core network user plane device compares the second count information included in the stored additional information with the first count information included in the additional information in the to-be-sent data, if the second count information is synchronized with the first count information in the to-be-sent data If the data to be sent is not subjected to a replay attack, that is, the verification is successful; if the second count information is not synchronized with the first count information in the data to be sent, the data to be sent is subjected to a replay attack, that is, the verification fails. .

Optionally, the second key used by the terminal to sign the first data and the label according to the first security capability and the second key to obtain the second signature value may be a private key of the terminal.

At this time, correspondingly, the core network user plane device verifies the second signature value in the data to be sent according to the second key and the security capability information in the data to be sent, and may include: the core network user plane device according to the terminal public The security capability information in the key and the data to be transmitted, and the second signature value in the data to be transmitted is verified.

In the embodiment of the present invention, optionally, the communication method shown in FIG. 2 may further include: the core network user plane device sends a security context to the terminal through the secure channel, where the security context includes the first key and the label described above. Correspondingly, the terminal receives the security context sent by the core network user plane device.

The core network user plane device can send a security context to the terminal through the secure channel when the terminal first accesses or attaches or performs the tracking area update process.

The security channel used by the core network user plane device to send the security context to the terminal may be the terminal and the core network user plane device when the terminal first accesses or attaches or reconnects to the core network where the core network user plane device is located. A secure channel established between.

For the specific manner of establishing a connection between the terminal and the core network user plane device and establishing a secure channel, reference may be made to the prior art, which is not limited by the present invention.

After the core network user plane device establishes a secure channel with the terminal, the terminal and the core network user plane device can use the secure channel to complete the negotiation of the first security capability of the terminal, and determine the security context of the terminal according to the first security capability, and finally to the terminal. Send the security context.

Specifically, the determining, by the core network user plane device, the security context according to the first security capability of the terminal, may include: determining the first key, and encrypting the first key according to the first security capability of the terminal, to obtain the first ciphertext. Determining the security capability information; signing the first ciphertext information and the security capability information to obtain a first signature value; determining a label including the first ciphertext information, the security capability information, and the first signature value; determining to include the label and The security context of the first key. The security capability information may be plaintext information or ciphertext information of the first security capability of the terminal.

The core network user plane device determines the first key, and the method may be: the core network user plane device randomly generates the first key according to the first security capability of the terminal, or uses the security secret generated after authenticating the terminal. The key is used as the first key.

Specifically, if the security capability information in the label of the security context is the ciphertext information of the first security capability of the terminal, the core network user plane device may further include the implementation manner of determining the security context according to the first security capability of the terminal. : Encrypting the plaintext information of the first security capability to generate ciphertext information of the first security capability. At this time, the security context sent by the core network user plane device to the terminal may further include plaintext information of the first security capability.

Optionally, the core network user plane device encrypts the first key, or signs the first ciphertext information and the security capability, or encrypts the plaintext information of the first security capability, and may use a symmetric crypto mechanism or a non- A symmetric cryptosystem is implemented.

If the core network user plane device uses a symmetric cryptosystem, the encryption or signature algorithm takes a short time, but needs to maintain the key encrypted or signed by the user. If the core network user plane device uses an asymmetric cryptosystem, the core network user plane device does not need to maintain the key used for encryption or signature, and the maintenance cost is low, but the encryption or signature algorithm takes a short time.

Specifically, if the core network user plane device uses an asymmetric cryptosystem, the related encryption and decryption parameters applied in the asymmetric cryptosystem may have been configured on the core network user plane device.

For example, the asymmetric cryptographic mechanism used by the core network user plane device is specifically an RSA public key cryptography algorithm or an Elliptic Curve Cryptography (ECC) algorithm, and the core network user plane device may be pre-configured to include a secret consisting of a public key and a private key. Key pair.

At this point, the core network user plane device can use the public key in the key pair to the first key and / Or the plaintext information of the first security capability is encrypted, and the first ciphertext information and the security capability information may be signed by using the private key in the key pair.

For example, if the asymmetric mechanism used by the core network user plane device is a public key infrastructure (PKI), the core network user plane device can be pre-configured with a digital certificate authorized by a certificate authority (CA). (Digital Certificate).

For example, the asymmetric key mechanism used by the core network user plane device is specifically an identity-based encryption (IBE) mechanism, and the private key of the core network user plane device may be pre-configured on the core network user plane device. The private key is simply referred to as Kpr), the identifier of the core network user plane device (which may be the device domain name of the core network user plane device) and the public system parameters.

Specifically, if the core network user plane device uses the asymmetric crypto mechanism to sign the first ciphertext information and the security capability information, a specific implementation manner of the step is: the core network user plane device firstly uses the first ciphertext The information and security capability information is hashed, and then the result of the hash operation is encrypted using the private key of the core network user plane device to obtain the first signature value.

Optionally, after the core network user plane device sends the security context to the terminal, the core network user plane device may delete the security context.

Specifically, the core network user plane device may delete the first security capability and the security context after a session with the terminal for a period of time and after the session ends for a period of time, or after the terminal enters an idle state (IDLE) state.

The core network user plane device deletes the security context, which can reduce the storage and maintenance burden of the core network user plane device on the security context. Especially in the case of a large number of terminals, the effect will be more obvious.

For example, in the next 5G, the number of terminals may increase significantly. Storing and maintaining the security context of a large number of terminals can cause a burden on the core network user plane devices. Therefore, if the core network user plane device does not store and maintain the first security capability and security context, the storage and maintenance pressure of the core network user plane device can be greatly reduced.

Optionally, when determining, by the core network user plane device, the security context according to the first security capability of the terminal, the method further includes: determining a second key, and encrypting the second key to obtain second ciphertext information. At this time, the core network user plane device signs the first ciphertext information and the security capability to obtain the first signature value, and determines the label including the first ciphertext information, the security capability information, and the first signature value, and may include: a core network. The user plane device enters the first ciphertext information, the second ciphertext information, and the security capability. The row signature obtains the first signature value; and the label including the first ciphertext information, the second ciphertext information, the security capability information, and the first signature value is determined. The second key may also be included in the security context.

The core network user plane device determines the second key, and the method may be: the core network user plane device randomly generates the second key according to the first security capability of the terminal, or uses the security secret generated after authenticating the terminal. The key acts as the second key.

Correspondingly, the communication method performed by the terminal may further include: receiving, by the terminal, the security context sent by the user plane device of the core network through the secure channel, where the security context includes the first key, the label, and the second key, and the label further includes the second ciphertext information. The second ciphertext information is ciphertext information of the second key.

If the security information received by the terminal through the secure channel includes the second key, the terminal using the second key to sign the first data and the label may include: the terminal uses the second key in the security context to Data and tags are signed.

Correspondingly, the core network user plane device verifies the second signature value in the data to be sent according to the second key and the security capability information in the data to be sent, including: the security capability of the core network user plane device according to the data to be sent. The second ciphertext information in the information and the data to be transmitted is verified by the second signature value in the data to be transmitted.

Specifically, the core network user plane device verifies the second signature value in the data to be sent according to the security capability information in the to-be-sent data and the second ciphertext information in the to-be-sent data, and may include: a core network user plane device pair The second ciphertext information is decrypted to obtain a second key; and the second signature value in the data to be transmitted is verified according to the security capability information in the to-be-sent data and the decrypted second key.

Optionally, the label in the security context sent by the core network user plane device to the terminal may further include first plaintext information, where the first plaintext information may include at least one of the following information: routing information of the core network user plane device, and label Identification information, identification information of the terminal, identification information of the user plane device of the core network, or effective time information of the label. At this time, the first signature value included in the label in the security context is the security capability information, the first ciphertext information, and the signature value obtained by signing the first plaintext information.

Correspondingly, the label in the to-be-sent data sent by the terminal to the core network user plane device may further include the first plaintext information, where the first plaintext information may include at least one of the following information: routing information of the core network user plane device, and label Identification information, identification information of the terminal, identification information of the user plane device of the core network, or effective time information of the label. At this time, the first signature value included in the label in the to-be-sent data is the security capability information, the first ciphertext information, and the signature obtained by signing the first plaintext information. value.

That is, the label in the to-be-sent data sent by the terminal received by the core network user plane device may further include the first plaintext information, where the first plaintext information may include at least one of the following information: routing information of the core network user plane device, The identification information of the label, the identification information of the terminal, the identification information of the user equipment of the core network, or the effective time information of the label. The first signature value is a signature value obtained by signing the security capability information, the first ciphertext information, and the first plaintext information.

Specifically, if the tag of the data to be sent received by the terminal to the core network user plane device includes the valid time information of the tag, the core network user plane device may update the tag of the terminal when the use of the tag exceeds the expiration date. At this time, the core network user plane device also needs to maintain a data table for recording the valid time.

Specifically, if the label of the to-be-sent data received by the core network user plane device includes the identifier information of the terminal, the user equipment of the core network may verify whether the terminal belongs to the terminal domain according to the identifier information of the terminal, and the verification may fail to discard the waiting. send data. In addition, the identification information of the terminal may also be used as the audit information to identify the terminal; or the identification information of the terminal may be used as the public key of the terminal for verifying the second signature value in the data to be sent.

Specifically, if the label of the to-be-sent data received by the core network user plane device includes the identifier information of the core network user plane device, the identifier information of the core network user plane device may also be used as the audit information to identify the core network user plane device. In addition, the identification information of the core network user plane device may be used as the public key of the core network user plane device under the IBE mechanism, and used to verify the first signature value in the label of the data to be sent; or the identification information of the core network user plane device may be It is used to verify whether the core network user plane device belongs to a core network user plane device domain.

In the embodiment of the present invention, the core network user plane device verifies the data to be sent sent by the terminal, that is, realizes end-to-end data security protection between the terminal and the core network user plane device, and can resist the passive sniffing attack. Moreover, the core network user plane device verifies the first signature value included in the label in the to-be-sent data, and can implement identity verification of the terminal, and the core network user plane device verifies the second signature value in the to-be-sent data. That is, the integrity protection of data transmitted between the terminal and the core network user plane device can be realized, and the tampering attack can be resisted. In addition, the terminal and the core network user plane device can defend against the replay attack by the timestamp in the data to be sent.

In the embodiment of the present invention, optionally, when the core network user plane device sends the security context to the terminal, the core network user plane device may send the security context to the terminal by using the access network device. The access network device may be the access network device 120 shown in FIG. 1.

Similarly, when the terminal sends the data to be sent to the core network user plane device, the terminal may send the information in the to-be-sent data to the core network user plane device through the access network device.

Specifically, the terminal may transparently transmit information in the data to be sent to the core network user plane device by using the access network device.

More specifically, if the terminal transparently transmits the information in the data to be sent to the user equipment of the core network through the access network device, the label of the data to be sent sent by the terminal to the user plane device of the core network includes the user equipment of the core network. When the routing information or the identification information of the core network user plane device is used, the access network device acts as a communication device between the terminal and the core network user plane device, and after receiving the to-be-sent data sent by the terminal, may be based on the data to be sent. The routing information of the core network user plane device in the tag or the identification information of the core network user plane device transmits the data to be sent by the terminal to the core network user plane device.

In the embodiment of the present invention, optionally, if the terminal sends the information in the to-be-sent data to the user equipment of the core network through the access network device, the access network device may also receive the data to be sent after the terminal sends the data to be sent. The data to be sent of the terminal is verified, and then the information in the data to be transmitted is forwarded to the user plane device of the core network. The communication method at this time is as shown in FIG. 3 .

It should be understood that FIG. 3 illustrates the steps or operations of the communication method, but these steps or operations are merely examples, and embodiments of the present invention may perform other operations or variations of the various operations in FIG. Moreover, the various steps in FIG. 3 may be performed in a different order than that presented in FIG. 3, and it is possible that not all operations in FIG. 3 are to be performed.

The same reference numerals in FIG. 3 as those in FIG. 2 denote the same or similar meanings, and are not described herein again for the sake of brevity.

S222. The access network device receives the first to-be-sent data sent by the terminal. The first to-be-sent data includes the encrypted data and the label, where the label includes the security capability information, the first ciphertext information of the first key, and the first signature value, and the security capability information is the plaintext information of the first security capability of the terminal, A signature value is a signature value obtained by signing the security capability information and the first ciphertext information, and the encrypted data is data obtained by the terminal encrypting the plaintext data according to the first security capability and the first key.

The access network device may be the access network device 120 shown in FIG. 1.

The first to-be-sent data may be the to-be-sent data sent by the terminal to the core network user plane device in S220 of FIG. 2 . In other words, in the communication method shown in FIG. 3, the data to be sent sent by the terminal to the user plane device of the core network may be referred to as the first to-be-sent data. S224. If the access network device fails to verify the first signature value in the first to-be-sent data, discarding the first to-be-sent data.

S226, if the access network device successfully verifies the first signature value in the first to-be-sent data, sends the second to-be-sent data to the core network user plane device, where the second to-be-sent data includes the encrypted data and the label, where the label includes Security capability information, first ciphertext information, and encrypted data.

Correspondingly, the core network user plane device receives the second to-be-sent data sent by the access network device.

In S224 and S226, specifically, the access network device verifies the first signature value in the first to-be-sent data, and the method used may refer to the label of the core network user plane device to be sent data. The method of verifying the first signature value is not described here.

It is only worth noting that, at this time, the first signature value is usually a signature obtained by the core network user plane device using the private key corresponding to the public key that the access network device can learn (such as the private key of the core network user plane device). value. In this way, the access network device can verify the first signature value in the label of the first data to be sent according to the learned public key.

S228, if the core network user plane device fails to verify the first signature value in the second to-be-sent data, discarding the second to-be-sent data; or, if the first signature value in the second to-be-sent data is successfully verified, The first ciphertext information in the second to-be-sent data is decrypted to obtain a first key, and the encrypted data is decrypted according to the security capability information in the first key and the second to-be-sent data to obtain plaintext data.

Optionally, if the first to-be-sent data sent by the terminal to the core network user plane device includes the second signature value, the first to-be-sent data received by the access network device from the terminal may also be a second signature value. The second signature value may be a signature value obtained by the terminal signing the encrypted data and the label according to the first security capability and the private key of the terminal.

Correspondingly, after the access network receives the first to-be-sent data including the second signature value, the access network device verifies the first signature value in the label of the first to-be-sent data, and then sends the information to the core network user plane device. Sending the second to-be-sent data includes: the access network device verifies the second signature value in the first to-be-sent data according to the security capability information in the first to-be-sent data and the public key of the terminal; After the first signature value in the label of the first data to be sent is successfully verified, and the second signature value in the first to-be-sent data is successfully verified, the second to-be-sent data is sent to the core network user plane device. .

The method for the access network device to verify the second signature value in the first to-be-sent data according to the security capability information in the first to-be-sent data and the public key of the terminal may refer to the foregoing core network user plane device according to the foregoing The method for verifying the second signature value in the data to be sent in the second key and the security capability information to be sent is not described here.

It is only worth noting that, at this time, the second signature value is usually the signature value obtained by the terminal signing the encrypted data and the label.

Optionally, if the first to-be-sent data received by the access network device from the terminal further includes the second signature value, the second to-be-sent data sent by the access network device to the core network user plane device may further include the second Signature value.

Specifically, if the second to-be-sent data received by the core network user plane device from the access network device includes the second signature value, the core network user plane device may further verify the second signature value in the second to-be-sent data. The verification method is similar to the method for verifying the second signature value in the data to be sent by the core network user plane device in the communication method shown in FIG. 2, and details are not described herein again.

Optionally, if the first to-be-sent data sent by the terminal to the core network user plane device further includes additional information, where the additional information is used for the anti-replay attack, the second signature value in the first to-be-sent data is the terminal according to the a second signature value obtained by signing the encrypted data, the additional information, and the label by the second security key and the second key, and the method for verifying the second signature value in the first to-be-sent data by the access network device, and the foregoing core The method for verifying the second signature value in the to-be-sent data including the additional information is similar to the method of verifying the second signature and the security capability information in the to-be-sent data, and is not described here.

Optionally, if the label in the first to-be-sent data sent by the terminal to the core network user plane device further includes the identifier information of the core network user plane device, the access network device may further receive the first to-be-sent data. And verifying, according to the identifier information of the core network user plane device included in the label in the first to-be-sent data, whether the core network user plane device belongs to a core network domain that communicates with the access network device. If the verification fails, the data to be sent can be discarded.

Optionally, if the label of the first to-be-sent data sent by the terminal to the core network user plane device further includes the identifier information of the terminal, the access network device may further receive the first to-be-sent data according to the first to-be-sent data. The tag for transmitting data includes the identification information of the terminal, and verifies whether the terminal belongs to a terminal domain that communicates with the access network device. If the verification fails, the data to be sent can be discarded.

Optionally, if the label of the first to-be-sent data sent by the terminal to the core network user plane device further includes the routing information or the identifier information of the user plane of the core network, after receiving the first data to be sent, the access network device may The routing information or the identification information determines the target core network user plane device of the terminal to be sent data, and then sends the second to-be-sent data to the target core network user plane.

In summary, in the embodiment of the present invention, the access network may verify the first to-be-sent data sent by the terminal, and discard the first to-be-sent data that fails to be verified, thereby reducing the core network user plane. The verification pressure of the device to send data.

Optionally, the access network device periodically broadcasts the public key or certificate of the access network device, and the access network device periodically broadcasts the to-be-sent data to the core network user plane device, and the access network device periodically broadcasts the public key or certificate of the access network device, and The security capabilities of access network devices. When the terminal is configured to send data, the terminal can use the public key or certificate of the access network device when the length of the data to be sent is short, and encrypt the label according to the security capability of the access network device, and in the data to be sent. Carrying the encrypted label; or randomly generating a key according to the security capability of the access network device when the length of the data to be sent is long, and using the key to encrypt the label, obtaining an encrypted label, and then using the access network device The public key or certificate encrypts the key and carries the encrypted label and the encryption key in the data to be sent.

At this time, after receiving the data to be sent, the access network device may use the private key or certificate of the access network device to decrypt the encrypted label in the data to be sent to obtain a plaintext label; or may use the private key or certificate of the access network device. The encryption key in the data to be sent is decrypted to obtain a plaintext key, and the plaintext key is used to decrypt the encrypted label in the data to be sent to obtain a plaintext label. In this way, the label can be verified when needed or the label needs to be used for integrity verification of the data to be sent, thereby further improving the security of data communication.

The communication method of the embodiment of the present invention is described above. The terminal, the core network user plane device, and the access network device according to the embodiment of the present invention are described below with reference to FIG. 4 to FIG.

FIG. 4 is a schematic structural diagram of a terminal 400 according to an embodiment of the present invention. It should be understood that the terminal shown in FIG. 4 is only an example, and the terminal of the embodiment of the present invention may further include other modules or units, or include modules similar to those of the respective modules in FIG. 4, or not including the FIG. All modules.

The processing module 410 is configured to encrypt the plaintext data according to the first key and the first security capability of the terminal to obtain encrypted data.

The sending module 430 is configured to send data to be sent to the core network user plane device, where the to-be-sent data includes the encrypted data and a label, where the label includes security capability information, and first ciphertext information of the first key. And the first signature value, the security capability information is plaintext information or ciphertext information of the first security capability, and the first signature value is obtained by signing the security capability information and the first ciphertext information Signature value.

The terminal of the embodiment of the present invention encrypts the plaintext data according to the first security capability and the first key to obtain encrypted data, which can improve the security of the data during transmission; when the terminal sends the encrypted data, the terminal carries the encrypted data. The first ciphertext encrypted after the first key is encrypted in the data to be sent The security capability information of the information and the terminal enables the core network user plane device to decrypt the encrypted data in the data to be sent according to the security capability information and the first key, to obtain the plaintext data, and the data to be transmitted carries the first The first ciphertext information of the key, so that the first key can be securely protected; secondly, the to-be-sent data further carries the first signature value obtained by the first ciphertext information and the security capability information, so that the core network The user plane device can perform security verification according to the first signature value, so that the terminal and the core network user plane device do not need to use a longer time and use more resources to implement security before sending the encrypted data in order to restore the session. verification. In addition, the core network user plane device performs security verification on the data to be sent of the terminal, so that end-to-end secure communication between the core network user plane device and the terminal can be realized.

Optionally, as an embodiment, the data to be sent further includes a second signature value, where the processing module is further configured to: compare the first data and the label according to the first security capability and the second key Performing a signature to obtain a second signature value, the first data being the plaintext data or the encrypted data;

Optionally, as an embodiment, the data to be sent further includes additional information, where the additional information is used for an anti-replay attack; wherein the processing module is specifically configured to: according to the security capability information and the The second key signs the additional information, the first data, and the tag to obtain the second signature value.

Optionally, as an embodiment, the second key is a private key of the terminal.

Optionally, as an embodiment, the terminal further includes: a receiving module, configured to receive, by using a secure channel, a security context sent by the core network user plane device, where the security context includes the first key and the label.

Optionally, as an embodiment, the terminal further includes: a receiving module, configured to receive, by using a secure channel, a security context sent by the core network user plane device, where the security context includes the first key, the The label and the second key, the label further includes second ciphertext information, and the second ciphertext information is encrypted information obtained by encrypting the second key.

Optionally, as an embodiment, the label further includes first plaintext information, where the first plaintext information includes at least one of the following: routing information of the core network user plane device, identifier information of the label, The identification information of the terminal, the identification information of the user plane device of the core network, and the valid time information of the label; wherein the first signature value is the security capability information, the first ciphertext information, and the The signature value obtained by signing the first plaintext information.

It should be understood that the above and other operations of the various units in the terminal of the embodiment of the present invention shown in FIG. The functions and/or functions are respectively implemented in the communication method in FIG. 2 or FIG. 3 for the sake of brevity, and are not described herein again.

FIG. 5 is a schematic structural diagram of a core network user plane device 500 according to an embodiment of the present invention. It should be understood that the core network user plane device shown in FIG. 5 is only an example, and the core network user plane device of the embodiment of the present invention may further include other modules or units, or include modules similar in function to the modules in FIG. 5, Or not all of the modules in Figure 5 are included.

The receiving module 510 is configured to receive data to be sent sent by the terminal, where the to-be-sent data includes encrypted data and a label, where the encrypted data is used by the terminal according to the first key and the first security capability of the terminal to the plaintext data. Performing the encrypted data, the label includes security capability information, first ciphertext information of the first key, and a first signature value, where the security capability information is plaintext information or ciphertext of the first security capability. The information, the first signature value is a signature value obtained by signing the security capability information and the first ciphertext information.

The processing module 520 is configured to discard the to-be-sent data when the first signature value in the label of the to-be-sent data fails to be verified.

Or the processing module 520 is configured to: when the first signature value in the label of the data to be sent is successfully verified, decrypt the first ciphertext information in the to-be-sent data, Obtaining the first key, and decrypting the encrypted data according to the security capability information and the first key in the to-be-sent data to obtain the plaintext data.

In the embodiment of the present invention, the core network user plane device may verify the first signature value in the label of the data to be sent according to the security capability information in the label in the data to be sent and the encrypted data. The data to be sent is discarded when the verification fails, or when the verification is successful, the first key in the label is obtained to obtain data in the data to be sent. The communication method enables the terminal to securely transmit data with the core network without wasting a lot of time and resources to restore the session, thereby saving data transmission time overhead and improving resource utilization.

In addition, the core network user plane device treats the transmitted data for security verification, and can implement an end-to-end secure transmission mechanism between the terminal and the core network user plane device.

Optionally, as an embodiment, the to-be-sent data further includes a second signature value, where the second signature value is, according to the first security capability and the second key pair, the first data and the And the first data is the plaintext data, where the processing module is further configured to: according to the second key and the security capability information in the to-be-sent data, Determining, by the second signature value in the sent data, the verification, in the data to be sent When the signature verification fails, the data to be sent is discarded.

Optionally, as an embodiment, the data to be sent further includes a second signature value, where the second signature value is the first data and the terminal according to the second key and the first security capability. And the first data is the encrypted data, where the processing module is specifically configured to: according to the second key and the security capability information in the to-be-sent data, Determining the second signature value in the data to be sent; and verifying the first ciphertext information in the to-be-sent data when the second signature value in the to-be-sent data is successfully verified Obtaining the first key, and decrypting the encrypted data according to the first key and the security capability information in the to-be-sent data to obtain the plaintext data.

Optionally, as an embodiment, the processing module is further configured to: when the verification of the second signature value in the to-be-sent data fails, discard the to-be-sent data.

Optionally, as an embodiment, the to-be-sent data further includes additional information, where the additional information is used to resist an attack, and the second signature is the terminal according to the first security capability and the first A signature value obtained by signing the additional information, the first data, and the label by a second key.

Optionally, as an embodiment, the second key is a private key of the terminal, where the processing module is specifically configured to: according to the public key of the terminal and the to-be-sent data Security capability information, verifying the second signature value in the to-be-sent data.

Optionally, as an embodiment, the core network user plane device further includes: a sending module, configured to send a security context to the terminal by using a secure channel, where the security context includes the first key and the label . The processing module is further configured to delete the security context.

Optionally, as an embodiment, the core network user plane device further includes: a sending module, configured to send a security context to the terminal by using a secure channel, where the security context includes the first key, the label And the second key, the label further includes second ciphertext information, and the second ciphertext information is ciphertext information of the second key. The processing module is further configured to: delete the security context, where the processing module is specifically configured to: according to the security capability information in the to-be-sent data and the second ciphertext in the to-be-sent data The information verifies the second signature value in the to-be-sent data.

Optionally, as an embodiment, the label further includes first plaintext information, where the first plaintext information includes at least one of the following: routing information of the core network user plane device, identifier information of the label, Identification information of the terminal, identification information of the user equipment of the core network, or The effective time information of the tag. The first signature value is a signature value obtained by signing the security capability information, the first ciphertext information, and the first plaintext information.

It should be understood that the foregoing and other operations and/or functions of the respective units in the core network user plane device of the embodiment of the present invention shown in FIG. 5 are respectively performed by the core network user plane device in the communication method in FIG. 2 or FIG. The corresponding process, for the sake of brevity, will not be described here.

FIG. 6 is a schematic structural diagram of an access network device 600 according to an embodiment of the present invention. It should be understood that the access network device shown in FIG. 6 is only an example, and the access network device in the embodiment of the present invention may further include other modules or units, or include modules similar to those of the modules in FIG. 6, or not To include all the modules in Figure 6.

The receiving module 610 is configured to receive the first to-be-sent data sent by the terminal, where the first to-be-sent data includes the encrypted data and the label, where the label includes the security capability information, the first ciphertext information of the first key, and the first a signature value, the security capability information is plaintext information of the first security capability of the terminal, and the first signature value is a signature value obtained by signing the security capability information and the first ciphertext information, The encrypted data is data obtained by the terminal encrypting the plaintext data according to the first security capability and the first key.

The sending module 630 is configured to: when the access network device successfully verifies the first signature value in the first to-be-sent data, send the second to-be-sent data to the core network user plane device, where The data to be transmitted includes the encrypted data and the tag.

Alternatively, the sending module 630 is configured to discard the first to-be-sent data when the access network device successfully verifies the first signature value in the first to-be-sent data.

The access network device in the embodiment of the present invention can verify the data to be sent according to the label in the data to be sent, so that the access network device can ensure the secure communication of data without storing and maintaining the security context, thereby reducing the access network. The operational burden of the device.

In addition, the access network device verifies the data to be sent, and discards the data to be sent that fails to be verified, which can alleviate the verification pressure of the user equipment of the core network.

Optionally, as an embodiment, the first to-be-sent data further includes a second signature value, where the second signature value is the terminal according to the first security capability and the private key of the terminal. The encrypted data and the signature value obtained by signing the tag. The sending module is specifically configured to: verify, according to the security capability information and the public key of the terminal, the second signature value in the first to-be-sent data; Determining that the first signature value in the label of the first to-be-sent data is successful, and the second signature value in the first to-be-sent data When the verification is successful, the second to-be-sent data is sent to the core network user plane device.

Optionally, as an embodiment, the second to-be-sent data further includes the second signature value.

Optionally, as an embodiment, the first to-be-sent data further includes additional information, where the additional information is used for an anti-replay attack, and the second signature value is used by the terminal according to the first security capability and A signature value obtained by signing the encrypted data, the label, and the additional information by a private key of the terminal.

It should be understood that the foregoing and other operations and/or functions of the respective units in the access network device of the embodiment of the present invention shown in FIG. 6 are respectively implemented in order to implement the corresponding execution by the access network device in the communication method in FIG. 2 or FIG. The process, for the sake of brevity, will not be described here.

FIG. 7 is a schematic structural diagram of a terminal 700 according to an embodiment of the present invention. The terminal 700 includes a memory 710, a processor 720, and a transmitter 740. Optionally, the terminal 700 may further include a receiver 730.

The memory 710 is configured to store a program.

The processor 720 is configured to execute the program stored by the memory 710.

When the processor 720 executes the program stored in the memory 710, it is specifically configured to encrypt the plaintext data according to the first key and the first security capability of the terminal to obtain encrypted data.

The transmitter 740 is configured to send data to be sent to the core network user plane device, where the to-be-sent data includes the encrypted data and a label, where the label includes security capability information, and first ciphertext information of the first key. And the first signature value, the security capability information is plaintext information or ciphertext information of the first security capability, and the first signature value is obtained by signing the security capability information and the first ciphertext information Signature value.

The terminal of the embodiment of the present invention encrypts the plaintext data according to the first security capability and the first key to obtain encrypted data, which can improve the security of the data during transmission; when the terminal sends the encrypted data, the terminal carries the encrypted data. The to-be-sent data carries the first ciphertext information encrypted by the first key and the security capability information of the terminal, so that the core network user plane device can decrypt the encrypted data in the to-be-sent data according to the security capability information and the first key. To obtain the plaintext data, and the first ciphertext information of the first key is carried in the data to be sent, so that the first key can be securely protected; secondly, the first ciphertext information is carried in the data to be sent. And the first signature value obtained by the signature of the security capability information, so that the core network user plane device can perform security verification according to the first signature value, so that the terminal and the core network user plane device do not need to send encrypted data in order to resume the session. Security verification is achieved by taking a long time and using more resources. In addition, the core network user plane device performs security verification on the data to be sent of the terminal, so that the core network can be implemented. End-to-end secure communication between the device and the terminal.

Optionally, as an embodiment, the to-be-sent data further includes a second signature value, where the processor is further configured to: perform, by using the first security capability and the second key, the first data and the label Signing, obtaining the second signature value, the first data being the plaintext data or the encrypted data.

Optionally, as an embodiment, the to-be-sent data further includes additional information, where the additional information is used for an anti-replay attack. The processing module is specifically configured to: sign the additional information, the first data, and the label according to the security capability and the second key to obtain the second signature value.

Optionally, as an embodiment, the second key is a private key of the terminal.

Optionally, as an embodiment, the receiver is configured to receive, by using a secure channel, a security context sent by the core network user plane device, where the security context includes the first key and the label.

Optionally, as an embodiment, the receiver is configured to receive, by using a secure channel, a security context sent by the core network user plane device, where the security context includes the first key, the label, and the The second key, the label further includes second ciphertext information, and the second ciphertext information is encrypted information obtained by encrypting the second key.

Optionally, as an embodiment, the label further includes first plaintext information, where the first plaintext information includes at least one of the following: routing information of the core network user plane device, identifier information of the label, The identification information of the terminal, the identification information of the user plane device of the core network, and the valid time information of the label; wherein the first signature value is the security capability information, the first ciphertext information, and the The signature value obtained by signing the first plaintext information.

It should be understood that the terminal of the embodiment of the present invention shown in FIG. 7 may correspond to the terminal shown in FIG. 4, and the foregoing and other operations and/or functions of the respective units in the terminal of the embodiment of the present invention are respectively implemented to implement FIG. 2 or FIG. The corresponding flow executed by the terminal in the communication method in 3 is not described here for brevity.

FIG. 8 is a schematic structural diagram of a core network user plane device according to an embodiment of the present invention. The core network user plane device 800 includes a memory 810, a processor 820, and a receiver 830. Optionally, the core network user plane device 800 may also include a transmitter 840.

The memory 810 is configured to store a program.

The processor 820 is configured to execute a program stored by the memory 810.

When the processor 820 executes the program stored by the memory 810, the receiver 830 is used Receiving data to be sent sent by the terminal, the data to be sent includes the encrypted data and the label, where the encrypted data is data obtained by the terminal encrypting the plaintext data according to the first key and the first security capability of the terminal, The tag includes security capability information, first ciphertext information of the first key, and a first signature value, where the security capability information is plaintext information or ciphertext information of the first security capability, the first The signature value is a signature value obtained by signing the security capability information and the first ciphertext information.

The processor 820 is further configured to discard the to-be-sent data when the first signature value in the label of the to-be-sent data fails to be verified.

Alternatively, the processor 820 is further configured to decrypt the first ciphertext information in the to-be-sent data after the first signature value in the label of the data to be sent is successfully verified. Obtaining the first key, and decrypting the encrypted data according to the security capability information and the first key in the to-be-sent data to obtain the plaintext data.

In the embodiment of the present invention, the core network user plane device can verify the data to be sent according to the information in the label in the data to be sent. The data to be sent is discarded when the verification fails, or when the verification is successful, the first key in the label is obtained to obtain data in the data to be sent. The communication method enables the terminal to securely transmit data with the core network without wasting a lot of time and resources to restore the session, thereby saving data transmission time overhead and improving resource utilization.

In addition, the core network user plane device treats the transmitted data for security verification, and can implement an end-to-end secure transmission mechanism between the terminal and the core network user plane device.

Optionally, as an embodiment, the to-be-sent data further includes a second signature value, where the second signature value is, according to the first security capability and the second key pair, the first data and the The label is obtained by signature, and the first data is the plaintext data. The processor is further configured to: verify, according to the second key and the security capability information in the to-be-sent data, the second signature value in the to-be-sent data; When the verification of the second signature value in the transmission data fails, the data to be transmitted is discarded.

Optionally, as an embodiment, the to-be-sent data further includes a second signature value, where the second signature value is, according to the first security capability and the second key pair, the first data and the The label is obtained by signature, and the first data is the encrypted data. The processor is specifically configured to: verify, according to the second key and the security capability information in the to-be-sent data, the second signature value in the to-be-sent data; Describe the number in the sent data Decrypting the first ciphertext information in the to-be-sent data to obtain the first key, and according to the first key and the to-be-sent data, The security capability information is obtained, and the encrypted data is decrypted to obtain the plaintext data.

Optionally, as an embodiment, the processor is further configured to: when the verification of the second signature value in the to-be-sent data fails, discard the to-be-sent data.

Optionally, as an embodiment, the data to be sent further includes additional information, where the additional information is used for an anti-replay attack, and the second signature value is the terminal according to the first security capability and the A signature value obtained by signing the additional information, the first data, and the tag by a second key.

Optionally, as an embodiment, the second key is a private key of the terminal. The processor is specifically configured to: verify the second signature value in the to-be-sent data according to the public key of the terminal and the security capability information in the to-be-sent data.

Optionally, as an embodiment, the sender is configured to send a security context to the terminal by using a secure channel, where the security context includes the first key and the label. The processor is further configured to delete the security context.

Optionally, as an embodiment, the sender is configured to send a security context to the terminal by using a secure channel, where the security context includes the first key, the label, and the second key, The tag further includes second ciphertext information, and the second ciphertext information is ciphertext information of the second key. The processor is further configured to: delete the security context, where the processor is specifically configured to: according to the security capability information in the to-be-sent data and the second ciphertext in the to-be-sent data The information verifies the second signature value in the to-be-sent data.

Optionally, as an embodiment, the label further includes first plaintext information, where the first plaintext information includes at least one of the following: routing information of the core network user plane device, identifier information of the label, The identifier information of the terminal, the identifier information of the user plane device of the core network, or the valid time information of the label, where the first signature value is the security capability information, the first ciphertext information, and the location The signature value obtained by signing the first plaintext information.

It should be understood that the core network user plane device of the embodiment of the present invention shown in FIG. 8 may correspond to the core network user plane device shown in FIG. 5, and the foregoing and other units of each unit in the core network user plane device according to the embodiment of the present invention are The operations and/or functions are respectively implemented in the communication method of FIG. 2 or FIG. 3 to be executed by the core network user plane device. For brevity, details are not described herein again.

FIG. 9 is a schematic structural diagram of an access network device according to an embodiment of the present invention. Access network equipment 900 package A memory 910, a processor 920, a receiver 930, and a transmitter 940 are included.

The memory 910 is configured to store a program.

The processor 920 is configured to execute a program stored by the memory 910.

When the processor 920 executes the program stored in the memory 910, the receiver 930 is configured to receive the first to-be-sent data of the terminal, where the first to-be-sent data includes the encrypted data and the label, where the label includes the security capability information. The first ciphertext information of the first key and the first signature value, where the security capability information is plaintext information of the first security capability of the terminal, and the first signature value is the security capability information and the A signature value obtained by signing the first ciphertext information, where the encrypted data is data obtained by the terminal encrypting the plaintext data according to the first security capability and the first key.

The transmitter 940 is configured to: when the access network device successfully verifies the first signature value in the first to-be-sent data, send the second to-be-sent data to the core network user plane device, where The data to be transmitted includes the encrypted data and the tag.

Or the transmitter 940 is configured to discard the first to-be-sent data after the access network device successfully verifies the first signature value in the first to-be-sent data.

The access network device in the embodiment of the present invention can verify the data to be sent according to the label in the data to be sent, so that the access network device can ensure the secure communication of data without storing and maintaining the security context, thereby reducing the access network. The operational burden of the device.

In addition, the access network device verifies the data to be sent, and discards the data to be sent that fails to be verified, which can alleviate the verification pressure of the user equipment of the core network.

Optionally, as an embodiment, the first to-be-sent data further includes a second signature value, where the second signature value is the terminal according to the first security capability and the private key of the terminal. The encrypted data and the signature value obtained by signing the tag. The processor is specifically configured to: verify, according to the security capability information and the public key of the terminal, the second signature value in the first to-be-sent data; When the first signature value in the label of the first to-be-sent data is successfully verified, and the second signature value in the first to-be-sent data is successfully verified, to the core network user plane device Sending the second to-be-sent data.

Optionally, as an embodiment, the second to-be-sent data further includes the second signature value.

Optionally, as an embodiment, the first to-be-sent data further includes additional information, where the additional information is used for an anti-replay attack, and the second signature value is used by the terminal according to the first security capability and The private key of the terminal signs the encrypted data, the label, and the additional information The signature value to.

It should be understood that the access network device of the embodiment of the present invention shown in FIG. 9 may correspond to the access network device shown in FIG. 6, and the above and other operations of each unit in the access network device according to the embodiment of the present invention and/or For the sake of brevity, the functions of the communication method in FIG. 2 or FIG. 3 are respectively omitted for the sake of brevity.

FIG. 10 is a schematic structural diagram of a communication system 1000 according to an embodiment of the present invention. It should be understood that the communication system illustrated in FIG. 10 is merely an example, and the communication system of the embodiment of the present invention may further include other devices or units, or include devices or modules similar to those of the respective devices in FIG. 10, or are not intended to be included. All the devices in Figure 10.

The communication system 1000 includes a terminal 1010, a core network user plane device 1020, and an access network device 1030.

The terminal 1010 may be the terminal 400 shown in FIG. 4 or the terminal 700 shown in FIG. 7. The core network user plane device 1020 may be the core network user plane device 500 shown in FIG. 5 or the core network user shown in FIG. The face device 800, the access network device 1030 may be the access network device 600 shown in FIG. 6 or the access network device 900 shown in FIG.

When the terminal 1010 in the communication system 1000 is the terminal 400 or the terminal 700, and the core network user plane device 1020 is the core network user plane device 500 or the core network user plane device 800, the terminal sends the data to be sent carrying the security processed data. The tag is also carried in the network, so that the core network user plane device and the terminal do not waste a lot of time and resources to restore the session, so that the terminal and the core network user plane device can securely transmit data, thereby saving data transmission time overhead. And improve the utilization of resources.

When the terminal 1010 terminal 400 or the terminal 700 in the communication system 1000, the core network user plane device 1020 is the core network user plane device 500 or the core network user plane device 800, and the access network device 1030 is the access network device 600 or the access network. In the case of the device 900, the terminal carries the label in the data to be sent that carries the data after the security processing, so that the core network user plane device, the access network device, and the terminal do not waste a lot of time and resources to restore the session. The data can be securely transmitted by the terminal, the access network device, and the core network user plane device, thereby saving data transmission time overhead and improving resource utilization.

At the same time, the access network device can verify the data to be sent according to the label in the data to be sent, so that the access network device can ensure the secure communication of data without storing and maintaining the security context, thereby reducing the operation of the access network device. burden.

It can be understood that the processor in the embodiment of the present invention may be an integrated circuit chip with signal processing capability. In the implementation process, each step of the foregoing method embodiment may be completed by an integrated logic circuit of hardware in a processor or an instruction in a form of software. The processor may be a general-purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a Field Programmable Gate Array (FPGA), or the like. Programming logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of the present invention may be implemented or carried out. The general purpose processor may be a microprocessor or the processor or any conventional processor or the like. The steps of the method disclosed in the embodiments of the present invention may be directly implemented by the hardware decoding processor, or may be performed by a combination of hardware and software modules in the decoding processor. The software module can be located in a conventional storage medium such as random access memory, flash memory, read only memory, programmable read only memory or electrically erasable programmable memory, registers, and the like. The storage medium is located in the memory, and the processor reads the information in the memory and combines the hardware to complete the steps of the above method.

It is to be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory. The non-volatile memory may be a read-only memory (ROM), a programmable read only memory (PROM), an erasable programmable read only memory (Erasable PROM, EPROM), or an electric Erase programmable read only memory (EEPROM) or flash memory. The volatile memory can be a Random Access Memory (RAM) that acts as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (Synchronous DRAM). SDRAM), Double Data Rate SDRAM (DDR SDRAM), Enhanced Synchronous Dynamic Random Access Memory (ESDRAM), Synchronous Connection Dynamic Random Access Memory (Synchlink DRAM, SLDRAM) ) and direct memory bus random access memory (DR RAM). It should be noted that the memories of the systems and methods described herein are intended to comprise, without being limited to, these and any other suitable types of memory.

Additionally, the terms "system" and "network" are used interchangeably herein. The term "and/or" in this article is merely an association describing the associated object, indicating that there can be three types. Relationships, for example, A and/or B, may indicate that there are three cases where A exists separately, and both A and B exist, and B exists alone. In addition, the character "/" in this article generally indicates that the contextual object is an "or" relationship.

It should be understood that in the embodiment of the present invention, "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that determining B from A does not mean that B is only determined based on A, and that B can also be determined based on A and/or other information.

Those of ordinary skill in the art will appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

In the several embodiments provided by the present application, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

The functions may be stored in a computer readable storage medium if implemented in the form of a software functional unit and sold or used as a standalone product. Based on such understanding, the technical solution of the present invention is essentially or a part contributing to the prior art or a part of the technical solution. The points may be embodied in the form of a software product stored in a storage medium, including instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform various embodiments of the present invention All or part of the steps of the method. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. .

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims (42)

1. A communication method, comprising:

   The terminal encrypts the plaintext data according to the first key and the first security capability of the terminal to obtain encrypted data.

   Sending, to the core network user plane device, the to-be-sent data, the to-be-sent data includes the encrypted data and a label, where the label includes security capability information, first ciphertext information of the first key, and first And a signature value, where the security capability information is plaintext information or ciphertext information of the first security capability, and the first signature value is a signature value obtained by signing the security capability information and the first ciphertext information.
2. The communication method according to claim 1, wherein the data to be transmitted further includes a second signature value, and the communication method further comprises:

   The terminal signs the first data and the label according to the first security capability and the second key, to obtain the second signature value, where the first data is the plaintext data or the encrypted data. .
3. The communication method according to claim 2, wherein the data to be transmitted further includes additional information, and the additional information is used for an anti-replay attack;

   The terminal, according to the first security capability and the second key, signs the first data and the label to obtain a second signature value, including:

   And the terminal signs the additional information, the first data, and the label according to the first security capability and the second key, to obtain the second signature value.
4. The communication method according to claim 2 or 3, wherein the second key is a private key of the terminal.
5. The communication method according to any one of claims 1 to 4, wherein the communication method further comprises:

   Receiving, by the terminal, a security context sent by the core network user plane device by using a secure channel, where the security context includes the first key and the label.
6. The communication method according to claim 2 or 3, wherein the communication method further comprises:

   Receiving, by the terminal, a security context sent by the core network user plane device, where the security context includes the first key, the label, and the second key, and the label further includes a second secret The text information, the second ciphertext information is ciphertext information of the second key.
7. The communication method according to any one of claims 1 to 6, wherein the label further comprises first plaintext information, and the first plaintext information comprises at least one of the following: the core network user plane device Routing information, identification information of the label, identification information of the terminal, identification information of the user equipment of the core network, and valid time information of the label;

   The first signature value is a signature value obtained by signing the security capability information, the first ciphertext information, and the first plaintext information.
8. A communication method, comprising:

   The core network user plane device receives the data to be sent sent by the terminal, and the data to be sent includes the encrypted data and the label, where the encrypted data is the clear text of the terminal according to the first key and the first security capability of the terminal. The data is encrypted, and the label includes security capability information, first ciphertext information of the first key, and a first signature value, where the security capability information is plaintext information or secret of the first security capability. And the first signature value is a signature value obtained by signing the security capability information and the first ciphertext information;

   If the core network user plane device fails to verify the first signature value in the label of the data to be sent, discarding the to-be-sent data; or

   Decrypting the first ciphertext information in the to-be-sent data, if the core network user plane device successfully verifies the first signature value in the label of the to-be-sent data Decoding the encrypted data according to the security capability information and the first key in the to-be-sent data to obtain the plaintext data.
9. The communication method according to claim 8, wherein the data to be transmitted further includes a second signature value, and the second signature value is based on the first security capability and the second key pair. a data and the label are obtained by signature, the first data is the plaintext data;

   The communication method further includes:

   The core network user plane device verifies the second signature value in the to-be-sent data according to the second key and the security capability information in the to-be-sent data;

   And when the core network user plane device fails to verify the second signature value in the to-be-sent data, discarding the to-be-sent data.
10. The communication method according to claim 8, wherein the data to be transmitted further includes a second signature value, and the second signature value is based on the first security capability and the second key pair. a data and the label are obtained, and the first data is the encrypted number according to;

    The core network user plane device decrypts the first ciphertext information in the to-be-sent data to obtain the first key, and according to the security capability information in the to-be-sent data. Decrypting the encrypted data to obtain the plaintext data, including:

    The core network user plane device verifies the second signature value in the to-be-sent data according to the second key and the security capability information in the to-be-sent data;

    When the core network user plane device successfully verifies the second signature value in the to-be-sent data, the core network user plane device decrypts the first ciphertext information in the to-be-sent data Obtaining the first key, and decrypting the encrypted data according to the first key and the security capability information in the to-be-sent data to obtain the plaintext data.
11. The communication method according to claim 10, wherein the communication method further comprises:

    And when the core network user plane device fails to verify the second signature value in the to-be-sent data, discarding the to-be-sent data.
12. The communication method according to any one of claims 9 to 11, wherein the data to be transmitted further includes additional information, the additional information is used for an anti-replay attack, and the second signature value is the a signature value obtained by the terminal signing the additional information, the first data, and the label according to the first security capability and the second key.
13. The communication method according to any one of claims 9 to 12, wherein the second key is a private key of the terminal;

    The core network user plane device verifies the second signature value in the to-be-sent data according to the second key and the security capability information in the to-be-sent data, including:

    The core network user plane device verifies the second signature value in the to-be-sent data according to the public key of the terminal and the security capability information in the to-be-sent data.
14. The communication method according to any one of claims 8 to 13, wherein the communication method further comprises:

    The core network user plane device sends a security context to the terminal through a secure channel, where the security context includes the first key and the label;

    The core network user plane device deletes the security context.
15. The communication method according to any one of claims 9 to 12, wherein the communication method further comprises:

    The core network user plane device sends a security context to the terminal through a secure channel, where the security context includes the first key, the label, and the second key, and the label further includes a second ciphertext Information, the second ciphertext information is ciphertext information of the second key;

    The core network user plane device deletes the security context;

    The core network user plane device verifies the second signature value in the to-be-sent data according to the second key and the security capability information in the to-be-sent data, including:

    And the second signature value in the to-be-sent data according to the security capability information in the to-be-sent data and the second ciphertext information in the to-be-sent data authenticating.
16. The communication method according to any one of claims 8 to 15, wherein the label further comprises first plaintext information, and the first plaintext information comprises at least one of the following: the core network user plane device Routing information, identification information of the label, identification information of the terminal, identification information of the user equipment of the core network, or valid time information of the label;

    The first signature value is a signature value obtained by signing the security capability information, the first ciphertext information, and the first plaintext information.
17. A communication method, comprising:

    The access network device receives the first to-be-sent data of the terminal, where the first to-be-sent data includes the encrypted data and the label, where the label includes the security capability information, the first ciphertext information of the first key, and the first signature value. The security capability information is plaintext information of the first security capability of the terminal, and the first signature value is a signature value obtained by signing the security capability information and the first ciphertext information, where the encrypted data is The data obtained by the terminal encrypting the plaintext data according to the first security capability and the first key;

    And if the access network device successfully verifies the first signature value in the first to-be-sent data, sending, to the core network user plane device, second to-be-sent data, where the second to-be-sent data includes the Encrypting the data and the tag; or

    And if the access network device fails to verify the first signature value in the first to-be-sent data, discarding the first to-be-sent data.
18. The communication method according to claim 17, wherein the first to-be-sent data further includes a second signature value, and the second signature value is the terminal according to the first security capability and the terminal a signature value obtained by signing the encrypted data and the tag by a private key;

    The first of the labels of the first data to be sent by the access network device After the signature value is successfully verified, the second to-be-sent data is sent to the core network user plane device, including:

    The access network device verifies the second signature value in the first to-be-sent data according to the security capability information and the public key of the terminal;

    After the access network device verifies the first signature value in the label of the first to-be-sent data, and successfully verifies the second signature value in the first to-be-sent data, Sending the second to-be-sent data to the core network user plane device.
19. The communication method according to claim 18, wherein said second to-be-sent data further includes said second signature value.
20. The communication method according to claim 18 or 19, wherein the first to-be-sent data further includes additional information, and the second signature value is used by the terminal according to the a first security capability and a signature value obtained by signing the encrypted data, the tag, and the additional information by a private key of the terminal.
21. A terminal, comprising:

    a processing module, configured to encrypt the plaintext data according to the first key and the first security capability of the terminal, to obtain encrypted data;

    a sending module, configured to send data to be sent to the core network user plane device, where the to-be-sent data includes the encrypted data and a label, where the label includes security capability information, first ciphertext information of the first key, and a first signature value, where the security capability information is plaintext information or ciphertext information of the first security capability, and the first signature value is a signature obtained by the security capability information and the first ciphertext information being signed. value.
22. The terminal according to claim 21, wherein the data to be transmitted further includes a second signature value, and the processing module is further configured to: compare the first data according to the first security capability and the second key Signing with the tag to obtain the second signature value, the first data being the plaintext data or the encrypted data.
23. The terminal according to claim 22, wherein the data to be transmitted further includes additional information, and the additional information is used for an anti-replay attack;

    The processing module is specifically configured to: sign the additional information, the first data, and the label according to the first security capability and the second key, to obtain the second signature value. .
24. The terminal according to claim 22 or 23, wherein the second key is a private key of the terminal.
25. A terminal according to any one of claims 21 to 24, wherein said terminal The terminal also includes:

    And a receiving module, configured to receive, by using a secure channel, a security context sent by the core network user plane device, where the security context includes the first key and the label.
26. The terminal according to claim 22 or 23, wherein the terminal further comprises:

    a receiving module, configured to receive, by using a secure channel, a security context sent by the core network user plane device, where the security context includes the first key, the label, and the second key, and the label further includes The second ciphertext information is the encrypted information obtained by encrypting the second key.
27. The terminal according to any one of claims 21 to 26, wherein the label further includes first plaintext information, and the first plaintext information includes at least one of the following: the core network user plane device Routing information, identification information of the label, identification information of the terminal, identification information of the user equipment of the core network, and valid time information of the label;

    The first signature value is a signature value obtained by signing the security capability information, the first ciphertext information, and the first plaintext information.
28. A core network user plane device, comprising:

    a receiving module, configured to receive data to be sent sent by the terminal, where the data to be sent includes the encrypted data and the label, where the encrypted data is used by the terminal to perform the plaintext data according to the first key and the first security capability of the terminal. Encrypting the obtained data, the label includes security capability information, first ciphertext information of the first key, and a first signature value, where the security capability information is plaintext information or ciphertext information of the first security capability The first signature value is a signature value obtained by signing the security capability information and the first ciphertext information;

    a processing module, configured to discard the to-be-sent data after failing to verify the first signature value in the label of the data to be sent; or

    The processing module is used to:

    After the first signature value in the tag of the data to be sent is successfully verified, decrypting the first ciphertext information in the to-be-sent data to obtain the first key, and according to And the security capability information and the first key in the to-be-sent data, and decrypting the encrypted data to obtain the plaintext data.
29. The core network user plane device according to claim 28, wherein the data to be transmitted further includes a second signature value, and the second signature value is based on the first security capability and the second secret The key is obtained by signing the first data and the label, and the first data is Describe the text data;

    The processing module is further configured to:

    And verifying, according to the second key and the security capability information in the to-be-sent data, the second signature value in the to-be-sent data;

    When the verification of the second signature value in the to-be-sent data fails, the to-be-sent data is discarded.
30. The core network user plane device according to claim 28, wherein the data to be transmitted further includes a second signature value, and the second signature value is based on the first security capability and the second secret The key is obtained by signing the first data and the label, and the first data is the encrypted data;

    The processing module is specifically configured to:

    And verifying, according to the second key and the security capability information in the to-be-sent data, the second signature value in the to-be-sent data;

    Decrypting the first ciphertext information in the to-be-sent data to obtain the first key, and according to the first, when the second signature value in the to-be-sent data is successfully verified Decrypting the encrypted data to obtain the plaintext data by using the key and the security capability information in the to-be-sent data.
31. The core network user plane device according to claim 30, wherein the processing module is further configured to:

    When the verification of the second signature value in the to-be-sent data fails, the to-be-sent data is discarded.
32. The core network user plane device according to any one of claims 29 to 31, wherein the data to be transmitted further includes additional information, the additional information is used for anti-replay attack, and the second signature value And a signature value obtained by the terminal signing the additional information, the first data, and the label according to the first security capability and the second key.
33. The core network user plane device according to any one of claims 30 to 32, wherein the second key is a private key of the terminal;

    The processing module is specifically configured to:

    And verifying, according to the public key of the terminal and the security capability information in the to-be-sent data, the second signature value in the to-be-sent data.
34. Core network user plane device according to any one of claims 28 to 33, characterized in that The core network user plane device further includes:

    a sending module, configured to send a security context to the terminal by using a secure channel, where the security context includes the first key and the label;

    The processing module is further configured to delete the security context.
35. The core network user plane device according to any one of claims 29 to 32, wherein the core network user plane device further comprises:

    a sending module, configured to send a security context to the terminal by using a secure channel, where the security context includes the first key, the label, and the second key, and the label further includes second ciphertext information, The second ciphertext information is ciphertext information of the second key;

    The processing module is further configured to delete the security context;

    The processing module is specifically configured to:

    And verifying, according to the security capability information in the to-be-sent data and the second ciphertext information in the to-be-sent data, the second signature value in the to-be-sent data.
36. The core network user plane device according to any one of claims 28 to 35, wherein the label further includes first plaintext information, and the first plaintext information includes at least one of the following: the core network The routing information of the user plane device, the identifier information of the label, the identifier information of the terminal, the identifier information of the user plane device of the core network, or the valid time information of the label;

    The first signature value is a signature value obtained by signing the security capability information, the first ciphertext information, and the first plaintext information.
37. An access network device, comprising:

    The receiving module is configured to receive the first to-be-sent data of the terminal, where the first to-be-sent data includes the encrypted data and the label, where the label includes the security capability information, the first ciphertext information of the first key, and the first signature value. The security capability information is plaintext information of the first security capability of the terminal, and the first signature value is a signature value obtained by signing the security capability information and the first ciphertext information, the encrypted data. Data obtained by encrypting the plaintext data by the terminal according to the first security capability and the first key;

    a sending module, configured to send a second to-be-sent data to the core network user plane device when the access network device successfully verifies the first signature value in the first to-be-sent data, and the second to-be-sent Transmitting data includes the encrypted data and the tag; or,

    The sending module is further configured to be used by the access network device in the first to-be-sent data. When the first signature value verification is successful, the first to-be-sent data is discarded.
38. The access network device according to claim 37, wherein the first to-be-sent data further includes a second signature value, and the second signature value is the terminal according to the first security capability and the a signature value obtained by signing the encrypted data and the label by a private key of the terminal;

    The processing module is specifically configured to:

    And verifying, according to the security capability information and the public key of the terminal, the second signature value in the first to-be-sent data;

    Verifying that the first signature value in the label of the first to-be-sent data is successful, and when the second signature value in the first to-be-sent data is successfully verified, to the core network user The device sends the second to-be-sent data.
39. The access network device according to claim 38, wherein the second to-be-sent data further includes the second signature value.
40. The access network device according to claim 38 or 39, wherein the first to-be-sent data further includes additional information, the additional information is used for anti-replay attack, and the second signature value is the a signature value obtained by the terminal signing the encrypted data, the label, and the additional information according to the first security capability and the private key of the terminal.
41. A communication system comprising the terminal according to any one of claims 21 to 27 and the core network user plane device according to any one of claims 28 to 36.
42. The communication system according to claim 41, wherein said communication system further comprises the access network device according to any one of claims 37 to 40.

Images