CN102711105B

CN102711105B - The method, the Apparatus and system that communicate is carried out by mobile communications network

Info

Publication number: CN102711105B
Application number: CN201210154986.9A
Authority: CN
Inventors: 张向东; 国炜; 张丽佳
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2012-05-18
Filing date: 2012-05-18
Publication date: 2016-03-02
Anticipated expiration: 2032-05-18
Also published as: WO2013170668A1; CN102711105A

Abstract

The present invention is applicable to the communications field, provides a kind of method of being undertaken communicating by mobile communications network, said method comprising the steps of: MME sends communication data to communicating pair equipment; ENB indicates communicating pair equipment to set up communication data carrying, generates RNTI and described RNTI is distributed to communicating pair equipment; Communicating pair equipment, according to the communication data received, uses existing mobile communications network to communicate.The embodiment of the present invention, MME obtains the information that can UE carry out D2D communication, judge that can communicating pair carry out identical security algorithm, the security algorithm that mobile communication uses is found that there is under communicating pair, communicating pair is made to use the security algorithm of the ripe safety of existing mobile communication technology to communicate, not only make mobile communication technology obtain application in D2D communication aspects, and not only proof procedure is simple because the existing mobile communication technology of use carries out communicating, and fail safe is high.

Description

Method, device and system for communication through mobile communication network

Technical Field

The present invention relates to the field of communications, and in particular, to a method, an apparatus, and a system for performing communications via a mobile communication network.

Background

eNB: an enhanced node b, evolved NodeB, is equivalent to a base station in the existing mobile communication technology.

MME: mobility management entity, a key control node in an existing mobile communication system.

UE: user equipment, customer premises equipment.

RNTI: and the radio network temporary identifier is used as the identity of the UE in the signal.

RRC: radio resource control, radio resource control protocol.

The internet of things means that various devices with certain sensing, calculating, executing and communication capabilities are deployed to acquire information of a physical world, and information transmission, cooperation and processing are realized through a network, so that a network for interconnecting people and objects and for interconnecting objects and things is realized. Device-to-device communication (devicetedeviced d 2D) communication, which is one of applications of the internet of things, mainly realizes direct communication between two devices. Possible technologies may include short-range wireless communication technologies such as Wireless Personal Area Network (WPAN), Ultra Wide Band (UWB), Bluetooth (Bluetooth), Wifi, and the like.

The vigorous development of the internet of things shows the huge market potential and value of short-distance wireless application. Mobile operators have little involvement in this area, or lack the necessary control. At present, related companies have developed research for supporting D2D applications in the authorized frequency band of the operator, and actively promote 3GPP establishment in the well-known standards organization. The purpose is to use the authorized frequency band of the operator to support and implement the D2D application, so that the operator can take a greater initiative in the short-distance wireless application market.

One of the benefits of implementing D2D in the mobile communication network of the operator is that the security operation is convenient, and human involvement is not required, and key agreement and data encryption can be implemented based on the existing security mechanism of the mobile communication network. However, according to the existing mobile communication network, the security procedures of the calling side and the called side, including authentication, key agreement, and encryption (integrity check) algorithm agreement, are independent of each other. The support capability of the encryption (integrity check) algorithm may be different for devices with different capabilities, and the encryption (integrity check) algorithm selected by the devices may be different. Therefore, if the determination as to whether the D2D communication is possible is made only on the communication device side, it is possible that two devices different in cryptographic (integrity check) algorithm support capability are determined to be able to perform the D2D communication, and as a result, the two devices select different cryptographic (integrity check) algorithms and are unable to perform the actual D2D communication. This does not make good use of the existing security mechanisms of mobile communication networks to serve D2D communication.

Disclosure of Invention

An embodiment of the present invention is to provide a method and a system for performing D2D communication through a mobile communication network, and aims to solve the problem that the prior art cannot successfully perform D2D communication using the prior art mobile communication technology due to the security verification problem.

The embodiment of the invention is realized by a method for carrying out D2D communication through a mobile communication network, which comprises the following steps:

the MME sends communication data to the equipment of the two communication parties, wherein the communication data comprises: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and D2D communication key material;

the eNB indicates equipment of two communication parties to establish communication data bearer, generates RNTI and distributes the RNTI to the equipment of the two communication parties, wherein the RNTI is used for D2D communication;

and the equipment of the two communication parties communicates by using the selected security algorithm and the key obtained according to the key material according to the received communication material.

Another object of an embodiment of the present invention is to provide a method for communicating via a mobile communication network, the method including the following steps:

acquiring information whether the devices of the two communication parties can carry out D2D communication;

judging whether the communication two-party equipment has the same security algorithm;

sending communication materials to equipment of both communication parties, wherein the communication materials comprise: information on whether the devices of the two parties of communication can perform D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of the D2D communication.

receiving and storing communication data sent by an MME, wherein the communication data comprises: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

sending the communication data to the equipment of both communication parties;

indicating the equipment of the two communication parties to establish communication data bearing;

and generating the RNTI and distributing the RNTI to the equipment of the two communication parties.

Another object of an embodiment of the present invention is to provide a method for performing communication through a mobile communication network, where the method includes:

sending a communication request to an MME, wherein the communication request comprises information whether D2D communication is supported;

receiving a communication profile, the communication profile comprising: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

establishing communication data bearer according to the instruction of the eNB;

receiving an RNTI (radio network temporary identifier) distributed by the eNB;

and initiating communication to the called party UE by using the selected security algorithm and the key obtained according to the key material.

receiving a communication call of an MME, wherein the communication call comprises information for inquiring whether D2D communication is supported;

sending information to the MME whether D2D communication is supported;

establishing communication data bearer according to the instruction of the eNB;

receiving an RNTI (radio network temporary identifier) distributed by the eNB;

the communication initiated by the calling party UE is responded to using the selected security algorithm and the key obtained from the keying material.

Another object of an embodiment of the present invention is to provide an apparatus for communicating via a mobile communication network, the apparatus including:

a D2D communication information obtaining unit, for obtaining the information whether the communication both-side equipment can carry out D2D communication;

the same security algorithm judging unit is used for judging whether the two communication parts have the same security algorithm;

and the communication data sending unit is used for sending the communication data to the equipment of the two parties of communication.

a communication data receiving unit, configured to receive communication data sent by the MME;

a communication data forwarding unit, configured to forward the communication data received by the communication data receiving unit to both communication party devices;

the communication data bearing indicating unit is used for indicating the equipment of the two communication parties to establish communication data bearing;

and an RNTI distribution unit for generating RNTI and distributing the RNTI to the equipment of both communication parties.

the D2D communication self-checking unit is used for carrying out self-checking whether the D2D communication is supported or not;

a communication request sending unit, configured to initiate a communication request to an MME, where the communication request carries information about whether the D2D communication self-check unit self-check supports D2D communication;

a communication data receiving unit, configured to receive communication data sent by an MME or an eNB;

a communication data bearer establishing unit, configured to establish a communication data bearer according to the instruction of the eNB;

an RNTI receiving unit configured to receive an RNTI distributed by an eNB;

and the communication unit is used for initiating communication to the called party UE according to the communication material received by the communication material receiving unit by using the selected security algorithm and the key acquired according to the key material.

a D2D detection information receiving unit, configured to receive information sent by the MME to perform D2D communication function detection;

a D2D detecting unit, for detecting whether the self-checking supports the D2D communication function according to the information received by the D2D detecting information receiving unit;

a D2D communication information transmitting unit, for transmitting information whether the D2D pass function is supported to MME according to the detection result of the D2D detecting unit;

an RNTI receiving unit configured to receive an RNTI distributed by an eNB;

and the communication unit is used for responding to the communication initiated by the calling party UE by using the selected security algorithm and the key acquired according to the key material according to the communication material received by the communication material receiving unit.

Another object of an embodiment of the present invention is to provide a system for performing communication through a mobile communication network, the system including:

the MME is used for acquiring information whether the equipment of the two communication parties can carry out D2D communication, judging whether the equipment of the two communication parties supports the same security algorithm or not, and sending communication data to the equipment of the two communication parties, wherein the communication data comprises: information on whether the devices of the two parties can perform D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties, and key material;

the eNB is used for receiving and storing the communication data sent by the MME, sending the communication data to the equipment of both communication parties, indicating the equipment of both communication parties to establish communication data bearer, generating RNTI and distributing the RNTI to the equipment of both communication parties;

the calling party UE is used for sending a communication request to the MME, wherein the communication request contains information about whether D2D communication is supported or not, receiving communication data, establishing communication data bearer according to the instruction of the eNB, receiving the RNTI distributed by the eNB, and initiating communication to the called party UE by using a selected security algorithm and a key obtained according to a key material;

the called party UE is used for receiving the communication call of the MME, sending information whether to support D2D communication to the MME, receiving communication data, establishing communication data bearer according to the instruction of the eNB, receiving the RNTI distributed by the eNB, and responding to the communication initiated by the calling party UE by using the selected security algorithm and the key obtained according to the key material.

In the embodiment of the invention, the MME acquires the information whether the UE supports D2D communication, judges whether two communication parties have the same security algorithm, and sends the security algorithm used by the existing mobile communication to the two communication parties, so that the two communication parties use the mature and safe security algorithm of the existing mobile communication technology to communicate, the mobile communication technology is applied to D2D communication, and the communication using the existing mobile communication technology has simple verification process and high safety.

Drawings

Fig. 1 is a flowchart of a method for communicating via a mobile communication network according to an embodiment of the present invention;

fig. 2 is a flowchart illustrating a specific implementation of step S101 shown in fig. 1 according to an embodiment of the present invention;

fig. 3 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention;

fig. 4 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention;

fig. 5 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention;

fig. 6 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention;

fig. 7 is a block diagram of a communication system through a mobile communication network according to an embodiment of the present invention;

fig. 8 is a specific structural diagram of the MME shown in fig. 7 according to an embodiment of the present invention;

fig. 9 is a specific structural diagram of the eNB in fig. 7 according to an embodiment of the present invention;

fig. 10 is a detailed structural diagram of the calling party UE in fig. 7 according to an embodiment of the present invention;

fig. 11 is a specific structural diagram of the called UE in fig. 7 according to an embodiment of the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention is described in further detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

Example one

Fig. 1 is a flowchart of a method for performing communication via a mobile communication network according to an embodiment of the present invention, which is detailed as follows:

in step S101, the MME acquires information as to whether the devices of both communication parties support D2D communication.

In the embodiment of the present invention, before the two communication devices communicate with each other, the MME needs to acquire information whether the two communication devices support D2D communication, and if so, the MME proceeds to step S102, and if not, selects an existing mobile communication system for communication. Specific procedures for the MME to obtain whether the two communication devices support D2D communication are detailed in fig. 2 and the description of fig. 2.

In step S102, the MME determines whether both communication devices have the same security algorithm.

In the embodiment of the present invention, the security algorithms owned by each device may be different, and if the devices own the same security algorithm, step S103 is performed, otherwise, the eNB or the UE is notified to end the communication, or the existing mobile communication system is selected for communication. Regarding the problem that the MME determines whether the two communication devices have the same security algorithm, the present application uses the prior art to perform detection, which is not described herein again.

In step S103, the MME sends communication data to the two communicating devices, where the communication data includes: information on whether the devices of both parties can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both parties, and D2D communication key material.

In an embodiment of the present invention, an MME sends, to a communication UE, communication data used for verification when both communication parties send and receive data, where the communication data includes: the method comprises the following steps of information about whether D2D communication can be carried out by two communication devices, a security algorithm of the existing mobile communication technology supported by the two communication devices and key materials, wherein the security algorithm comprises the following steps: an encryption and decryption algorithm and an integrity check algorithm. The method for sending the communication data to the UE by the MME comprises the following two steps:

A. the MME sends the communication data to the eNB and forwards the communication data to equipment of both communication parties by the eNB, and the step that the MME sends the communication data to the eNB specifically comprises the following steps:

sending the communication material to the eNB by defining the following messages:

InitialContextSetupRequest

–MessageType

–MMEUES1APID

–eNBUES1APID

–UEAggregateMaximumBitRate

–E-RABtoBeSetupList

·E-RABtoBeSetupItemIEs

–UESecurityCapabilities

·EncryptionAlgorithms：BITSTRING(16，...)

·IntegrityProtectionAlgorithms：BITSTRING(16，...)

–SecurityKey

–D2Dcapability

–D2DUESecurityCapabilities

·D2DEncryptionAlgorithms：BITSTRING(16，...)

·D2DIntegrityProtectionAlgorithms：BITSTRING(16，...)

D2DSecuritystuff

and

UECONTEXTMODIFICATIONREQUEST

–MessageType

–MMEUES1APID

–eNBUES1APID

–UESecurityCapabilities

–SecurityKey

–SubscriberProfileIDforRAT/Frequencypriority

–UEAggregateMaximumBitRate

–CSFallbackIndicator

–UESecurityCapabilities

–CSGMembershipStaus

–D2Dcapability

–D2DUESecurityCapabilities

·D2DEncryptionAlgorithms：BITSTRING(16,...)

·D2DIntegrityProtectionAlgorithms：BITSTRING(16，...)

D2DSecuritystuff

B. the MME directly sends the communication data to the equipment of both communication parties, and the steps are as follows: communicating the communication material through NAS information communicated between the MME and the UE. In this method, the device or MME needs to transmit information to the eNB whether the device or MME is capable of D2D communication.

In step S104, the eNB instructs the device of both parties to establish a communication data bearer, generates an RNTI for D2D communication, and distributes the RNTI to the device of both parties.

In the embodiment of the invention, the eNB instructs the equipment of the two communication parties to establish communication data bearer, generates the RNTI and distributes the RNTI to the equipment of the two communication parties. The eNB indicates the two communication party devices to establish a communication data bearer by modifying the RRC, and the method specifically comprises the following steps:

the ConnectionReconfiguration message contains the elements radioResourceConfigDedicated- > DRB-ToAddModList- > DRB-ToAddMod:

–DRB-ToAddMod::=SEQUENCE{

–eps-BearerIdentityINTEGER(0..15)OPTIONAL,--

CondDRB-Setup

–drb-IdentityDRB-Identity,

–pdcp-ConfigPDCP-ConfigOPTIONAL,--CondPDCP

–rlc-ConfigRLC-ConfigOPTIONAL,--CondSetup

–logicalChannelIdentityINTEGER(3..10)OPTIONAL,--

CondDRB-Setup

–logicalChannelConfigLogicalChannelConfigOPTIONAL,

--CondSetup

–D2DsecurityAlgorithmConfig

–D2DSecuritystuff

–D2D-RNTI

–}

in step S105, the devices of the two parties communicate with each other by using the selected security algorithm and the key obtained from the key material according to the received communication material.

In the embodiment of the invention, the equipment of the two communication parties receives the communication materials, and determines the opposite party according to the communication materials: D2D communication may be possible and the same security algorithm is supported. And carrying out communication according to the security algorithm of the existing mobile communication technology in the communication material and the key obtained by the key material in the communication material.

It should be noted that the communication between the calling party device and the called party device and the MME and the eNB is divided into the following four cases:

the calling party equipment and the called party equipment communicate with the same MME and communicate with the same eNB; or,

the calling party equipment and the called party equipment communicate with the same MME but communicate with different eNBs; or,

the calling party equipment and the called party equipment communicate with different MMEs and communicate with different eNBs; or,

the calling party device and the called party device communicate with different MMEs but with the same eNB.

Example two

Fig. 2 is a flowchart illustrating a specific implementation of step S101 shown in fig. 1 according to an embodiment of the present invention, which is detailed as follows:

in step S201, the calling UE self-checks whether D2D communication is supported, and in case of D2D communication is supported, the calling UE initiates a D2D communication request to the MME.

In step S202, the MME receives the communication request sent by the calling party UE and the information of supporting D2D communication, and carries an instruction to detect whether D2D communication is supported when calling the called party UE.

In step S203, the called UE receives the communication call from the MME, performs self-test according to the detection instruction to determine whether D2D communication is supported, and sends the detection result to the MME.

The embodiment of the invention detects the UE of the calling party and the called party through the MME in the mobile communication technology, the MME carries an instruction for detecting whether D2D communication is supported or not when the MME calls the UE of the called party, and the UE of the called party sends the result back to the MME after self-checking, thereby providing a reasonable method for detecting whether D2D equipment can pass.

EXAMPLE III

Fig. 3 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention, where the method includes the following steps:

in step S301, information is obtained whether the calling party UE and the called party UE support D2D communication.

In the embodiment of the present invention, before the two communication devices communicate with each other, the MME needs to acquire information whether the two communication devices support D2D communication, and if so, the MME proceeds to step S302, and if not, selects an existing mobile communication system for communication. The method comprises the following steps:

s1, the calling party UE self-checks whether the D2D communication is supported, and under the condition that the D2D communication is supported, the calling party UE initiates a D2D communication request to the MME;

s2, receiving the communication request sent by the calling party UE and the information supporting D2D communication, and carrying an instruction for detecting whether the D2D communication is supported when the called party UE is called;

s3, the called UE receives the communication call of the MME, performs self-checking whether the D2D communication is supported or not according to the detection instruction, and sends the detection result to the MME.

In step S302, it is determined whether the calling UE and the called UE have the same security algorithm.

In the embodiment of the present invention, the security algorithms owned by each device may be different, and if the devices own the same security algorithm, step S303 is performed, otherwise, the eNB or the UE is notified to end the communication, or the existing mobile communication system is selected for communication. Regarding the problem that the MME determines whether the calling party UE and the called party UE have the same security algorithm, the present application uses the prior art for detection, which is not described herein again.

In step S303, a communication material is transmitted to the communication dual-transmission device, where the communication material includes: information on whether the calling party UE and the called party UE can perform D2D communication, security algorithms of existing mobile communication technologies supported by both the calling party UE and the called party UE, and key material for D2D communication.

In the embodiment of the present invention, a communication material is sent to a UE, where the communication material is used for verification when both communication parties send and receive data, and the communication material includes: information on whether the calling party UE and the called party UE can perform D2D communication, a security algorithm of an existing mobile communication technology supported by both the calling party UE and the called party UE, and key material, wherein the security algorithm includes: an encryption and decryption algorithm and an integrity check algorithm. The method for sending the communication material to the communication dual-sending equipment comprises the following steps:

A. the MME sends the communication data to the eNB, and the eNB forwards the communication data to the calling party UE and the called party UE, and the step that the MME sends the communication data to the eNB specifically comprises the following steps:

InitialContextSetupRequest

-MessageType

–MMEUES1APID

–eNBUES1APID

–UEAggregateMaximumBitRate

–E-RABtoBeSetupList

·E-RABtoBeSetupItemIEs

–UESecurityCapabilities

·EncryptionAlgorithms：BITSTRING(16,...)

·IntegrityProtectionAlgorithms：BITSTRING(16，...)

–SecurityKey

–D2Dcapability

–D2DUESecurityCapabilities

·D2DEncryptionAlgorithms：BITSTRING(16,…)

·D2DIntegrityProtectionAlgorithms：BITSTRING(16，...)

D2DSecuritystuff

and

UECONTEXTMODIFICATIONREQUEST

–MessageType

–MMEUES1APID

–eNBUES1APID

–UESecurityCapabilities

–SecurityKey

–SubscriberProfileIDforRAT/Frequencypriority

–UEAggregateMaximumBitRate

–CSFallbackIndicator

–UESecurityCapabilities

-CSGMembershipStatus

–D2Dcapability

–D2DUESecurityCapabilities

·D2DEncryptionAlgorithms：BITSTRING(16，...)

·D2DIntegrityProtectionAlgorithms：BITSTRING(16，...)

D2DSecuritystuff

B. the MME directly sends the communication data to the calling party UE and the called party UE, and the steps are as follows: communicating the communication material through NAS information communicated between the MME and the UE. In this method, the calling UE and the called UE or MME need to send information to the eNB about whether the calling UE and the called UE can perform D2D communication.

Example four

Fig. 4 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention, where the method includes the following steps:

in step S401, receiving and storing the communication data sent by the MME;

in the embodiment of the present invention, an eNB receives and stores communication data sent by an MME, where the communication data includes: information on whether the devices of the two parties of communication can perform D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of the D2D communication.

In step S402, the communication material is sent to the devices of both parties.

In step S403, the devices of the two parties of communication are instructed to establish a communication data bearer.

In the embodiment of the invention, the eNB instructs the equipment of the two communication parties to establish the communication data bearer.

In step S404, an RNTI is generated and the RNTI is distributed to both communication party apparatuses.

In the embodiment of the invention, the eNB further generates an RNTI and distributes the RNTI to the devices of the two communication parties, wherein the RNTI is used for D2D communication.

EXAMPLE five

Fig. 5 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention, where the method includes the following steps:

in step S501, a self-test is performed as to whether D2D communication is supported.

In step S502, a communication request including information on whether or not D2D communication is supported is transmitted to the MME.

In the embodiment of the invention, the calling party UE sends a communication request to the MME, and information whether D2D communication is supported is carried in the communication request.

In step S503, a communication material is received, where the communication material includes: information on whether the devices of the two parties of communication can perform D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of the D2D communication.

In the embodiment of the invention, the communication data directly sent by the MME or the communication data forwarded by the eNB is received.

In step S504, a communication data bearer is established according to the instruction of the eNB.

In step S505, the RNTI distributed by the eNB is received.

In the embodiment of the invention, the calling party UE receives the RNTI distributed by the eNB and used for D2D communication.

In step S506, communication is initiated to the called party UE using the selected security algorithm and the key obtained from the keying material.

In the embodiment of the invention, the calling party UE initiates communication to the called party UE by using the selected security algorithm and the key obtained according to the key material.

EXAMPLE six

Fig. 6 is a flowchart of a method for communicating via a mobile communication network according to another embodiment of the present invention, where the method includes the following steps:

in step S601, a communication call of the MME is received, where the communication call includes information asking whether D2D communication is supported

In the embodiment of the invention, the called party UE receives a communication call sent by an MME, wherein the communication call comprises information for inquiring whether the called party UE supports D2D communication.

In step S602, it is self-checked whether D2D communication is supported, and information whether D2D communication is supported is transmitted to the MME.

In step S603, a communication material is received, where the communication material includes: information on whether the devices of the two parties of communication can perform D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of the D2D communication.

In step S604, a communication data bearer is established according to the instruction of the eNB.

In step S605, the RNTI distributed by the eNB is received.

In the embodiment of the invention, the called party UE receives the RNTI distributed by the eNB and used for D2D communication.

In step S606, the communication initiated by the calling party UE is responded to using the selected security algorithm and the key obtained from the keying material.

EXAMPLE seven

Fig. 7 is a block diagram of a communication system via a mobile communication network according to an embodiment of the present invention, which only shows a part related to the embodiment of the present invention for convenience of description, and includes:

the MME71 is configured to obtain information about whether the two communication devices support D2D communication, determine whether the two communication devices support the same security algorithm, and send communication data to the two communication devices, where the communication data includes: information on whether the communication of D2D is possible or not, a security algorithm of an existing mobile communication technology supported by both the communication devices, and key material.

And the eNB72 is configured to receive and store the communication data sent by the MME71, send the communication data to the device of the two parties of communication, instruct the device of the two parties of communication to establish a communication data bearer, generate an RNTI, and distribute the RNTI to the device of the two parties of communication.

The calling party UE73 is configured to send a communication request to the MME, where the communication request includes information on whether D2D communication is supported, receive communication data, establish a communication data bearer according to an indication of the eNB72, receive the RNTI distributed by the eNB72, and initiate communication to the called party UE using the selected security algorithm and the key obtained according to the key material.

The called party UE74 is used for receiving the communication call of the MME, sending information whether D2D communication is supported to the MME, receiving communication materials, establishing communication data bearer according to the instruction of the eNB72, receiving the RNTI distributed by the eNB72, and responding to the communication initiated by the calling party UE by using the selected security algorithm and the key obtained according to the key material.

As shown in fig. 8, the MME71 specifically includes:

a D2D communication information obtaining unit 711, configured to obtain information whether the devices of the two parties of communication support D2D communication.

And a same security algorithm determining unit 712, configured to determine whether the two communication devices possess the same security algorithm.

A communication material sending unit 713, configured to send communication material to the device of both communication parties, includes: and sending the communication data to the eNB, and forwarding the communication data to the equipment of the two communication parties by the eNB or directly sending the communication data to the equipment of the two communication parties.

As shown in fig. 8, the eNB72 specifically includes:

a communication data receiving unit 721 is configured to receive the communication data sent by the MME 71.

A communication data forwarding unit 722, configured to forward the communication data received by the communication data receiving unit 721 to the two communication party devices.

A communication data bearer indicating unit 723, configured to indicate the two communication party devices to establish a communication data bearer.

An RNTI distributing unit 724 configured to generate an RNTI and distribute the RNTI to the device of both communication parties.

As shown in fig. 6, the calling party UE33 specifically includes:

the D2D communication self-check unit 731 for performing self-check if D2D communication is supported.

A communication request sending unit 732, configured to initiate a communication request to an MME, where the communication request carries information of whether the D2D communication self-test unit 731 self-tests supports D2D communication.

A communication data receiving unit 733, configured to receive communication data transmitted by the MME or eNB.

A communication data bearer establishing unit 734, configured to establish a communication data bearer according to the instruction of the eNB.

An RNTI receiving unit 735 configured to receive an RNTI distributed by the eNB.

A communication unit 736 for communicating to the called party UE using the selected security algorithm and the key obtained from the key material according to the communication material received by the communication material receiving unit 733.

As shown in fig. 9, the called UE74 specifically includes:

a D2D detection information receiving unit 741, configured to receive information that is transmitted by the MME and performs D2D communication function detection.

A D2D detecting unit 742 for detecting whether the information received by the information receiving unit 741 supports the D2D communication function according to the information received by the D2D detecting unit.

A D2D communication information transmitting unit 743 for transmitting information whether D2D traffic is supported to MME according to the detection result of the D2D detecting unit 742.

A communication data receiving unit 744, configured to receive the communication data sent by the MME or eNB.

A communication data bearer establishing unit 745, configured to establish a communication data bearer according to the indication of the eNB.

An RNTI receiving unit 746, configured to receive an RNTI distributed by the eNB.

A communication unit 747, configured to respond to the communication initiated by the calling party UE with the selected security algorithm according to the communication material received by the communication material receiving unit 333 and the key obtained according to the key material.

In the embodiment of the invention, the MME acquires the information whether the UE supports D2D communication, judges whether the two communication parties can carry out the same security algorithm, and sends the security algorithm used by the existing mobile communication to the two communication parties, so that the two communication parties use the mature and safe security algorithm of the existing mobile communication technology to carry out communication, the mobile communication technology is applied to the D2D communication, and the authentication process is simple and the safety is high because the existing mobile communication technology is used for carrying out communication.

The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents and improvements made within the spirit and principle of the present invention are intended to be included within the scope of the present invention.

Claims

1. A method of communicating over a mobile communications network, the method comprising the steps of:

the MME judges whether the two communication side devices have the same security algorithm, if so, the MME sends communication materials to the two communication side devices, and the communication materials comprise: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and D2D communication key material;

the equipment of the two communication parties communicates by using the selected security algorithm and the key obtained according to the key material according to the received communication data;

and if the owned security algorithms are different, the MME informs the eNB to finish the communication or selects the existing mobile communication system to communicate.

2. The method of claim 1, wherein prior to the step of the MME sending the communication material to both devices, the method further comprises the steps of:

the MME acquires information whether the devices of the two communication parties support D2D communication.

3. The method according to claim 2, wherein the step of the MME acquiring the information whether the two communicating devices can perform D2D communication specifically comprises:

the calling party UE performs self-checking whether the D2D communication is supported, and initiates a communication request to the MME under the condition that the D2D communication is supported;

the MME receives the communication request sent by the calling party UE and the information supporting D2D communication, and carries an instruction for detecting whether the D2D communication is supported when the called party UE is called;

and the called party UE receives the communication call of the MME, performs self-checking whether the D2D communication is supported or not according to the detection instruction, and sends the detection result to the MME.

4. The method of claim 1, wherein the step of the MME sending the communication data to the devices of both parties comprises:

the MME sends communication data to the eNB, and the eNB forwards the communication data to the equipment of the two communication parties; or,

the MME directly sends the communication data to the equipment of the two communication parties.

5. The method of claim 1, wherein the eNB instructs the devices of the two parties to communicate to establish the communication data bearer by modifying RRC.

6. The method of any of claims 1-5, wherein the calling party device and the called party device communicate with the MME and the eNB in four cases:

7. A method of communicating over a mobile communications network, the method comprising the steps of:

acquiring information whether the communication of D2D is supported by the equipment of both communication parties;

if the same security algorithm is possessed, communication materials are sent to the equipment of the two parties of communication, and the communication materials comprise: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

and if the owned security algorithms are different, informing the eNB to finish the communication or selecting the existing mobile communication system to communicate.

8. The method according to claim 7, wherein the step of obtaining the information whether the devices of the two communicating parties support D2D communication specifically comprises:

receiving a communication request sent by the calling party UE and information of supporting D2D communication, and carrying an instruction for detecting whether D2D communication is supported when a called party UE is called;

9. The method of claim 8, wherein the step of sending the communication data to the devices of the two parties comprises:

10. A method of communicating over a mobile communications network, the method comprising the steps of:

receiving and storing communication data sent by an MME when judging that two communication side devices have the same security algorithm, wherein the communication data comprises: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

sending the communication data to the equipment of both communication parties;

generating an RNTI and distributing the RNTI to equipment of both communication sides;

and receiving the end of the communication which is informed by the MME when judging that the security algorithms owned by the devices of the two communication parties are different, or selecting the existing mobile communication system for communication.

11. A method of communicating over a mobile communications network, the method comprising the steps of:

receiving communication data sent by the MME when judging that the two communication devices have the same security algorithm, wherein the communication data comprises: information whether the devices of the two parties of communication can carry out D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties of communication, and key material of D2D communication;

establishing communication data bearer according to the instruction of the eNB;

receiving an RNTI (radio network temporary identifier) distributed by the eNB;

initiating communication to the called party UE by using the selected security algorithm and a key obtained according to the key material;

12. A method of communicating over a mobile communications network, the method comprising the steps of:

sending information to the MME whether D2D communication is supported;

establishing communication data bearer according to the instruction of the eNB;

receiving an RNTI (radio network temporary identifier) distributed by the eNB;

responding to the communication initiated by the calling party UE by using the selected security algorithm and a key obtained according to the key material;

13. An apparatus for communicating over a mobile communications network, the apparatus comprising:

a D2D communication information obtaining unit, configured to obtain information whether the devices of the two communication parties support D2D communication;

and a communication material sending unit, configured to send the communication material to the devices of both parties if the devices of both parties have the same security algorithm, and notify the eNB to end the communication or select an existing mobile communication system to communicate if the devices of both parties have different security algorithms.

14. An apparatus for communicating over a mobile communications network, the apparatus comprising;

a communication data receiving unit, configured to receive communication data sent by the MME when it is determined that the two communication devices have the same security algorithm;

an RNTI distribution unit for generating RNTI and distributing the RNTI to both communication party equipment;

and the communication data receiving unit is also used for receiving the end of the communication notified by the MME when judging that the security algorithms owned by the two communication devices are different, or selecting the existing mobile communication system for communication.

15. An apparatus for communicating over a mobile communications network, the apparatus comprising:

a communication data receiving unit, configured to receive, when the MME determines that the two communication devices have the same security algorithm, communication data sent by the MME or the eNB, or receive, when the MME determines that the security algorithms that the two communication devices have are different, an end of the current communication notified by the MME when the MME determines that the security algorithms that the two communication devices have are different, or select an existing mobile communication system for communication;

an RNTI receiving unit configured to receive an RNTI distributed by an eNB;

16. An apparatus for communicating over a mobile communications network, the apparatus comprising:

a D2D communication information transmitting unit for transmitting information whether D2D communication is supported to MME according to the detection result of the D2D detecting unit;

a communication data receiving unit, configured to receive communication data sent by an MME or an eNB when the MME determines that two communication devices have the same security algorithm;

an RNTI receiving unit configured to receive an RNTI distributed by an eNB;

a communication unit, configured to respond to communication initiated by the calling party UE with the selected security algorithm according to the communication material received by the communication material receiving unit and a key obtained according to the key material;

17. A system for communicating over a mobile communications network, the system comprising:

the MME is configured to obtain information whether the two communication devices support D2D communication, determine whether the two communication devices support the same security algorithm, and send communication data to the two communication devices if the two communication devices possess the same security algorithm, where the communication data includes: information on whether the devices of the two parties can perform D2D communication, a security algorithm of the existing mobile communication technology supported by the devices of the two parties, and key material;

the eNB is used for receiving and storing communication data sent by the MME when the two communication party devices are judged to have the same security algorithm, sending the communication data to the two communication party devices, indicating the two communication party devices to establish communication data bearer, generating RNTI and distributing the RNTI to the two communication party devices, wherein the RNTI is used for D2D communication;

the calling party UE is used for sending a communication request to the MME, wherein the communication request contains information about whether D2D communication is supported or not, receiving communication data sent by the MME when the MME judges that the two communication party devices have the same security algorithm, establishing communication data bearer according to the instruction of the eNB, receiving the RNTI distributed by the eNB, and initiating communication to the called party UE by using the selected security algorithm and the key obtained according to the key material;

the called party UE is used for receiving the communication call of the MME, sending information whether the D2D communication is supported or not to the MME, receiving communication data sent by the MME when the MME judges that the two communication party devices have the same security algorithm, establishing communication data bearer according to the instruction of the eNB, receiving the RNTI distributed by the eNB, and responding to the communication initiated by the calling party UE by using the selected security algorithm and the key obtained according to the key material;

and the MME is also used for informing the eNB to finish the communication or selecting the existing mobile communication system to communicate if the owned security algorithms are different.

18. The system of claim 17, wherein the calling and called party devices communicate with an MME and an eNB in four cases: