CN102869011A

CN102869011A - PWS (Public Warning System) secret key updating method, network side equipment and terminal in wireless communication system

Info

Publication number: CN102869011A
Application number: CN2011101868198A
Authority: CN
Inventors: 李阳
Original assignee: ZTE Corp
Current assignee: Guangdong Weide Information Technology Co Ltd
Priority date: 2011-07-05
Filing date: 2011-07-05
Publication date: 2013-01-09
Anticipated expiration: 2031-07-05
Also published as: WO2013004103A1; CN102869011B

Abstract

The invention discloses a PWS (Public Warning System) secret key updating method, network side equipment and a terminal in a wireless communication system. The updating method comprises the steps executed by the network side equipment as follows: issuing two PWS secret keys and identification information of the two PWS secret keys to the terminal in the initial accessing process, wherein one key is a currently used PWS secret key, and the other one is a PWS secret key used next; issuing secret key indicating information at least including the identification information on the PWS secret key currently used by the network side equipment; and after receiving a message carrying the secret key updating indicating information and sent by the terminal, issuing the PWS secret key requested by the terminal to the terminal. According to the invention, the PWS secret key can be updated only in the existing procedure without additionally adding new signaling procedure and without triggering the signaling procedure independently.

Description

PWS (public warning System) secret key updating method, network side equipment and terminal in wireless communication system

Technical Field

The present invention relates to the field of communications, and in particular, to a PWS key updating method in a wireless communication system, a network side device, and a terminal.

Background

In order to enable users to timely and accurately receive alerts, warnings, and critical information regarding disasters and other emergencies, the 3GPP (3rd Generation Partnership Project) defines PWS (Public Warning System) services. In the event of a disaster such as an earthquake, tsunami, hurricane, and field fire, the business may enable the public to take appropriate action to avoid serious injury or death to themselves and their families, or to suffer significant property damage.

Different communication networks defined by 3GPP, such as GSM (Global System for mobile communications), UMTS (Universal mobile telecommunications System ), and LTE (Long term evolution), all support PWS services, and specify that PWS services are sent using CBS (cell broadcast Service). The architecture is shown in fig. 1, and the functions of each network element are described as follows:

cell Broadcast Entity (CBE): not in the communication network defined by 3 GPP. The CBE is responsible for formatting CBS (Cell Broadcast Service), including dividing CBS messages into different pages;

cell Broadcast Center (CBC): which is part of the core network, may be connected to a plurality of CBEs. The CBC is responsible for the management of CBS messages, including: determining the time when the CBS message starts to be broadcast; determining the time when the CBS message stops broadcasting, and instructing each BSC (Base Station Controller)/RNC (Radio Network Controller) to stop broadcasting the CBS message; determining a time interval at which the CBS message is repeatedly broadcast; determine the cell broadcast channel on which the CBS message is broadcast, etc. For a GSM network, the CBC is connected with a BSC located in a wireless access network, and an interface is IuBC; for the UMTS system, the CBC is connected to the RNC located in the radio access network via the IuBC interface; for the LTE system, the CBC is connected to an MME (Mobility Management Entity) of the core network, and the interface is S1 BC. The CBC configures and encapsulates the received alarm message sent by the CBE, and sends the alarm message to a BSC (GSM system), an RNC (UMTS system) and an MME (LTE system) of an affected area, and the BSC/RNC/MME forwards the alarm message to base stations of various systems (the GSM system is BTS (base Transceiver Station), the UMTS system is NodeB (node B), and the LTE system is eNB (evolved node B)), and the base stations broadcast the alarm message to users.

The CBS services as defined so far are all transmitted on a broadcast channel. And currently, the broadcast channel has no security protection measures. An attacker can tamper with the alert message or, upon receiving the alert message, replay it in another unaffected location, thereby causing unnecessary panic and confusion in the public.

To prevent this, 3GPP decides to secure the PWS, i.e. introduces a signature algorithm and a key management scheme by using a digital signature field and a timestamp method. The terminal receives the broadcast alarm message, firstly authenticates the alarm message, and only after the authentication is successful, the terminal is ensured to be a valid alarm message.

For any signature-based authentication scheme, the verifier needs to obtain the key of the signer, i.e. for the UE, the signer. Since the key is usually a public key, the network needs to set a valid life cycle for each key in order to ensure the freshness and security of the key. During the life cycle, the key can be used normally; before the key expires, the network needs to update the key and successfully enable the new key to ensure that the key is valid. However, in the current 3GPP specification, there is still no definition of how PWS keys are updated.

Disclosure of Invention

The invention aims to provide a PWS key updating method, network side equipment and a terminal in a wireless communication system, so as to overcome the defect that the PWS key updating process is not defined in the existing standard.

In order to solve the above problem, the present invention provides a method for updating a public warning system key in a wireless communication system, comprising:

the method comprises the following steps that a network side device issues two Public Warning System (PWS) keys and identification information of the two PWS keys to a terminal in an initial access process, wherein one is the currently used PWS key, and the other is the next used PWS key;

the network side equipment issues key indication information, which at least comprises: identification information of a PWS key currently used by the network side equipment;

after receiving the message carrying the key updating indication information sent by the terminal, the network side device issues the PWS key requested by the terminal to the terminal.

Further, the air conditioner is provided with a fan,

if the network side device learns that the next used PWS key is updated, the key indication information sent next time further includes: identification information of the updated next used PWS key.

Further, the air conditioner is provided with a fan,

the network side equipment is any one of a Mobility Management Entity (MME), a Base Station Controller (BSC) and a Radio Network Controller (RNC);

and the two PWS keys and the identification information of the two PWS keys, which are sent to the terminal by the network side equipment, are synchronized to the network side equipment by a Cell Broadcast Center (CBC) or a Cell Broadcast Entity (CBE) in the network.

Further, the air conditioner is provided with a fan,

the network side device issues the two PWS keys and the identification information of the two PWS keys to the terminal in the initial access process, which specifically includes:

after receiving the attach request message sent by the terminal, the network side device replies an attach accept message to the terminal, wherein the attach accept message carries the two PWS keys and the identification information of the two PWS keys; or,

and in the attachment process of the terminal, the network side equipment sends a layer three message carrying the two PWS keys and the identification information of the two PWS keys to the terminal.

Further, the air conditioner is provided with a fan,

the issuing of the key indication information by the network side equipment specifically includes:

the network side equipment sends a Tracking Area Update (TAU) response message to the terminal after receiving the TAU request message sent by the terminal, or the network side equipment sends a broadcast message to the terminal; the key indication information is carried in a message sent by the network side equipment;

after receiving the message carrying the key update indication information sent by the terminal, the network side device issues the PWS key requested by the terminal to the terminal, and the method specifically includes:

after receiving a TAU request message sent by the terminal and carrying an instruction for requesting to send a PWS key needing to be updated, the network side equipment sends a TAU response message to the terminal, wherein the TAU response message carries the PWS key requested by the terminal and the identification information of the key.

The invention also provides a method for updating the public warning system key in the wireless communication system, which comprises the following steps:

the terminal receives and stores two Public Warning System (PWS) keys and identification information of the two PWS keys issued by network side equipment in an initial access process; one of which is the currently used PWS key and the other of which is the next PWS key to be used;

and if the terminal judges that at least one of the two PWS keys stored locally needs to be updated according to the key indication information issued by the network side equipment, the terminal sends a message carrying the key update indication information to the network side equipment and correspondingly updates the PWS key stored locally after receiving the PWS key issued by the network side equipment.

Further, the method further comprises:

the key indication information comprises the identification information of the PWS key currently used by the network side equipment;

the terminal judges that at least one of the two PWS keys stored locally needs to be updated according to the key indication information issued by the network side device, and the method specifically comprises the following steps:

the terminal judges that the identification information of the PWS key currently used by the network side equipment is different from the identification information of the PWS key currently used and is the same as the identification information of the PWS key next used, the terminal updates the PWS key next used and stored locally to the PWS key currently used and judges that the PWS key next used and stored locally needs to be updated;

the sending of the message carrying the key update indication information to the network side device specifically includes:

and sending a message for requesting to issue the next used PWS key to the network side equipment.

Further, the air conditioner is provided with a fan,

the key indication information comprises: the identification information of the PWS key currently used by the network side equipment and the identification information of the PWS key used next;

the terminal judges that the identification information of the two PWS keys stored locally is different from the identification information carried in the key indication information, and judges that the two PWS keys stored locally need to be updated;

and sending a message for requesting to issue a PWS key currently used by the network side equipment and a PWS key used next to the network side equipment.

Further, the air conditioner is provided with a fan,

the terminal judges that the identification information of the PWS key currently used by the network side equipment is the same as the identification information of the PWS key currently used and stored locally, and the next used PWS key of the network side equipment is different from the identification information of the next used PWS key stored by the terminal, and judges that the next used PWS key stored locally needs to be updated;

Further, the air conditioner is provided with a fan,

sending a message carrying key update indication information to the network side device, specifically including:

and sending a Tracking Area Update (TAU) request message to the network side equipment, wherein the TAU request message carries the key update indication information.

Correspondingly, the invention also provides a network side device, comprising:

the key sending module is used for issuing two Public Warning System (PWS) keys and identification information of the two PWS keys to the terminal in the initial access process, wherein one PWS key is currently used, and the other PWS key is used next;

the key indication sending module is used for sending key indication information, and at least comprises: identification information of a PWS key currently used by the network side equipment;

and the updating module is used for sending the PWS key requested by the terminal to the terminal after receiving the message which is sent by the terminal and carries the key updating indication information.

Further, the air conditioner is provided with a fan,

the key indication sending module is further configured to, when learning that the next PWS key to be used is updated, further include, in the key indication information sent next time: identification information of the updated next used PWS key.

Further, the air conditioner is provided with a fan,

the key sending module is used for issuing the two PWS keys and the identification information of the two PWS keys to the terminal in the initial access process, and specifically comprises the following steps:

the key sending module is used for replying an attachment acceptance message to the terminal after receiving the attachment request message sent by the terminal, wherein the attachment acceptance message carries the two PWS keys and the identification information of the two PWS keys; or,

and the layer three message carrying the two PWS keys and the identification information of the two PWS keys is sent to the terminal in the attachment process of the terminal.

Further, the air conditioner is provided with a fan,

the key indication sending module is used for issuing key indication information, and specifically comprises:

the key indication sending module is used for sending a Tracking Area Update (TAU) response message to the terminal after receiving a TAU request message sent by the terminal, or sending a broadcast message to the terminal; wherein, the key indication information is carried in the transmitted message;

the updating module is configured to, after receiving a message carrying key update indication information sent by the terminal, issue the PWS key requested by the terminal to the terminal, and specifically includes:

and the updating module is used for sending a TAU response message to the terminal after receiving a TAU request message which is sent by the terminal and carries an instruction for requesting to send a PWS key needing to be updated, wherein the TAU response message carries the PWS key requested by the terminal and the identification information of the key.

The present invention also provides a terminal, including:

the receiving module is used for receiving and storing two Public Warning System (PWS) keys and identification information of the two PWS keys issued by the network side equipment in the initial access process; one of which is the currently used PWS key and the other of which is the next PWS key to be used;

the updating module is used for sending a message carrying the key updating indication information to the network side equipment when judging that at least one of the two PWS keys stored in the receiving module needs to be updated according to the key indication information issued by the network side equipment, and correspondingly updating the PWS key stored in the receiving module after receiving the PWS key issued by the network side equipment.

Further, the air conditioner is provided with a fan,

the updating module is configured to determine that at least one of the two PWS keys stored in the receiving module needs to be updated according to key indication information issued by the network side device, and specifically includes:

the updating module is configured to update the next used PWS key stored in the receiving module to the currently used PWS key and determine that the next used PWS key stored in the receiving module needs to be updated when determining that the identification information of the PWS key currently used by the network-side device is different from the identification information of the currently used PWS key stored in the receiving module and is the same as the identification information of the next used PWS key stored in the receiving module;

the update module is configured to send a message carrying key update indication information to the network side device, and specifically includes:

and the updating module is used for sending a message for requesting to send down the next used PWS key to the network side equipment.

Further, the air conditioner is provided with a fan,

the updating module is configured to determine that the identification information of the two PWS keys stored in the receiving module is different from the identification information carried in the key indication information, and determine that the two PWS keys stored in the receiving module need to be updated;

the updating module is used for sending a message for requesting to send down the PWS key currently used by the network side equipment and the next used PWS key to the network side equipment.

Further, the air conditioner is provided with a fan,

the updating module is configured to determine that identification information of a PWS key currently used by the network-side device is the same as identification information of a PWS key currently used and stored in the receiving module, and that a next PWS key to be used by the network-side device is different from identification information of a next PWS key to be used and stored in the receiving module, and determine that a next PWS key to be used and stored in the receiving module needs to be updated;

Further, the air conditioner is provided with a fan,

the update module is configured to send a Tracking Area Update (TAU) request message to the network side device, where the TAU request message carries the key update indication information.

The invention can complete the update of the PWS key only in the current process without adding a new signaling process or independently triggering the signaling process.

Drawings

FIG. 1 is a network architecture of a PWS in a 3GPP network in the prior art;

FIG. 2 is a schematic flow chart of a PWS key initially issued by a network to a terminal in application example 1;

FIG. 3 is a schematic diagram of a network in application example 2 periodically issuing a PWS key id to a terminal;

FIG. 4 is a schematic diagram of the terminal needing to update the next time key of the PWS in application example 3;

FIG. 5 is a schematic diagram of the terminal needing to update two keys of the PWS in application example 4;

FIG. 6 is a schematic diagram of a terminal needing to update a current key of a PWS in application example 5;

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention more apparent, embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that the embodiments and features of the embodiments in the present application may be arbitrarily combined with each other without conflict.

In this embodiment, a method for updating a PWS key in a wireless communication system includes:

the network side equipment issues two PWS keys and identification information of the two PWS keys to UE in an initial access process, wherein one PWS key is designated as a currently used key, and the other PWS key is designated as a next used key; among them, the key referred to herein includes: a public key or a symmetric key; the two PWS keys are issued to the UE by the MME through an attach accept (attach accept) message or through other layer three messages after the attach is completed.

The network side equipment issues key indication information, which at least comprises: and identification information of the PWS key currently used by the network side equipment. When the network side device learns that the next PWS key to be used is updated, the key indication information may further include identification information of the updated next PWS key to be used.

After receiving the message carrying the key updating indication information sent by the UE, the network side equipment issues the PWS key requested by the UE to the UE.

Accordingly, a method for updating a PWS key in a wireless communication system, comprising:

the UE stores the two PWS keys and the identification information of the two PWS keys which are received and issued by the network side equipment;

and the UE judges that at least one of the two PWS keys stored locally needs to be updated according to the received key indication information issued by the network side equipment, and then sends a message carrying the key update indication information to the network side equipment to request the network side equipment to issue the PWS key needing to be updated. Wherein the request may be made during the next normal TAU (Track Area Update). The request may be by way of: and carrying an indication for requesting to issue the PWS key to be updated in a TAU request message sent to the network side equipment. And after receiving the PWS key issued by the network side equipment, correspondingly updating the PWS key stored locally.

In this embodiment, a network side device includes:

Preferably, the amount of the organic solvent is less than the predetermined amount,

In this embodiment, a terminal includes:

The invention is described below with reference to a few application examples of the invention.

Application example 1

As shown in fig. 2, this application example shows a process of the network issuing the PWS key to the terminal for the first time. The process shows a flow chart in an LTE network, which is similar to a GSM/UMTS network, and directly issues two PWS keys, a currently used key currentkey and corresponding identification information (namely key id), and a next used key next key and corresponding key id in an initial access process. The specific steps are as follows:

1) the CBC issues two PWS keys to the MME, one current key and the corresponding key id of the currently used key, and the next key and the corresponding key id of the next used key; of course, the PWS key may also be issued by the CBE.

2) After receiving the two PWS keys issued by the CBC, the MME stores the two PWS keys and sends a response message to the CBC;

3) the UE sends a normal attach request message to the MME;

4) the MME sends an attach accept message to the UE, where the message may carry the two PWS keys, or the MME may send the two PWS keys to the UE through other layer three messages after the attach process is finished.

Application example 2

As shown in fig. 3, this application example shows a process in which the network periodically issues the identification information of the PWS key to the terminal. The process is given in the LTE network, and the network side device may issue the identification information of the PWS key periodically through the TAU response message or the broadcast message. For GSM/UMTS networks, delivery may be via RAU or broadcast messages. The steps are as follows:

1) the UE sends a TAU request message to the MME;

2) MME sends TAU response message to UE, the message carries the identification information (current key id) of the PWS key currently used by the current network, and also can carry the identification information (next key id) of the next PWS key to be used by the current network;

of course, the current key id and the next key id may also be carried in other broadcast messages issued by the MME instead of the TAU response message;

3) after receiving the current key id issued by the MME, if the UE judges that the current key id is the same as the identification information of the PWS key currently used and stored by the UE, the UE does not need to perform subsequent updating; if the current key id is judged to be different from the stored identification information of the PWS key currently used, initiating an updating process, wherein the specific process can refer to a subsequent application example;

4) if the message received by the UE also carries a next key id parameter, if the UE judges that the next key id is the same as the stored identification information of the next used PWS key, the UE does not need to perform subsequent updating; and if the next key id is judged to be different from the stored identification information of the next used PWS key, initiating an updating process, wherein the specific process can refer to a subsequent application example.

Application example 3

As shown in fig. 4, this application example shows the process by which the terminal needs to update the PWS key currently used. This application example is the normal rekeying process, namely: and the PWS key used currently is invalid, the PWS key used next is used for replacing the PWS key used currently, and the regenerated PWS key used next is issued to the UE. The steps are as follows:

1) the CBC sends a key updating message to the MME, wherein the message carries a next PWS key to be used by the current network;

2) after receiving the key updating message, the MME stores the locally stored next used key as the current PWS key, stores the PWS key carried in the message as the next used PWS key, and sends a key updating response message to the CBC;

3) the UE sends a TAU request message to the MME;

4) the MME sends a TAU response message to the UE, wherein the message carries locally stored identification information of a currently used PWS key, namely current key id is original next key id, and the PWS key which is just received is stored in the MME as the next key;

5) after receiving the TAU response message, the UE compares the identification information carried in the message with each locally stored identification information, judges that the received identification information is the same as the identification information of the next locally stored used PWS key, and stores the next locally stored used PWS key as the currently used PWS key;

6) the UE carries a next key request indication in a next normal TAU request message, and is used for indicating a network to increase a next key parameter in a response;

7) the MME sends a TAU response message to the UE, wherein the TAU response message carries a next key and comprises a next key and a next key id;

8) and after receiving the response, the UE updates the next used PWS key stored locally according to the next key carried in the response.

Application example 4

As shown in fig. 5, this application example shows a process in which the terminal updates both keying materials of the PWS at the same time. The application example is a process of simultaneously updating current key and next key triggered by a network side, and belongs to an abnormal flow. The steps are as follows:

1) the CBC sends a key updating message to the MME, wherein the message carries the PWS key currently used by the current network and the next PWS key to be used;

2) the MME updates the next used PWS key and the current used PWS key which are stored locally according to the received key updating message and sends a key updating response message to the CBC;

3) the UE sends a TAU request message to the MME;

4) the MME sends a TAU response message to the UE, wherein the message carries locally stored identification information of a PWS key which is currently used, namely, a current key id is a newly received current key id, and the current key id is different from two key ids which are originally stored in the UE;

5) after receiving the TAU response message, the UE determines that the received identification information is different from the two locally stored identification information by comparing the identification information carried in the message with the identification information of each locally stored key, and then determines to request a new current key and a new key in the next TAU process;

6) the UE carries a next key request indication and a current key request indication in a next normal TAU request message, and indicates the network to add current key and next key parameters in a response;

7) MME sends TAU response message to UE, the message carries current key and next key, including current key and current key id and next key id;

9) and after receiving the response, the UE updates the current PWS key and the next PWS key which are stored locally and used currently according to the current key and the next key carried in the response.

Application example 5

As shown in fig. 6, this application example shows the process by which the terminal needs to update the PWS key currently used. The application example is an abnormal flow, which is the situation that the current key is not updated and the key is updated next time. In the scene, when the network periodically issues the key id to the terminal, the current key id and the next key id are issued at the same time. This scenario can improve the key update efficiency to some extent. The steps are as follows:

8) the MME updates the next used PWS key and the current used PWS key which are stored locally according to the received key updating message, and sends a key updating response message to the CBC;

2) the MME judges that the received PWS key currently used is the same as the PWS key stored locally, updating is not needed, the newly received next PWS key is different from the PWS key stored locally and used next, and the received next PWS key is used for replacing the PWS key stored locally and used next;

3) the UE sends a TAU request message to the MME;

4) MME sends TAU response message to UE, the message carries current key id and next key id;

5) after receiving the TAU response message, the UE judges that the next key id is updated by comparing with the locally stored key id, and the next key id is different from the locally stored key id. At this time, the UE discards the next key and retains the currentkey. And request a new next key in the next TAU process;

6) the UE instructs the network to add the nextkey parameter in the response in the next normal TAU request message. The TAU request message carries a next key request indication parameter;

7) the MME sends a TAU response message to the UE, wherein the message carries a next key and comprises a next key and a next key id;

The foregoing is merely exemplary of the preferred applications of the present invention. The scheme of the invention is not limited to PWS key updating of an LTE system, a UMTS system and a GSM/GERAN system, and the related mode can be applied to other wireless communication systems.

It will be understood by those skilled in the art that all or part of the steps of the above methods may be implemented by instructing the relevant hardware through a program, and the program may be stored in a computer readable storage medium, such as a read-only memory, a magnetic or optical disk, and the like. Alternatively, all or part of the steps of the above application examples may be implemented using one or more integrated circuits. Accordingly, each module/unit in the above application example may be implemented in the form of hardware, and may also be implemented in the form of a software functional module. The present invention is not limited to any specific form of combination of hardware and software.

The above description is only an example of the preferred application of the present invention, and is not intended to limit the scope of the present invention. While the invention has been described with reference to exemplary embodiments, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention.

Claims

1. A method for updating a public warning system key in a wireless communication system, comprising:

2. The method of claim 1, wherein:

3. The method of claim 1 or 2, wherein:

4. The method of claim 1, wherein:

5. The method of claim 1 or 2, wherein:

6. A method for updating a public warning system key in a wireless communication system, comprising:

7. The method of claim 6, further comprising:

8. The method of claim 6, wherein:

9. The method of claim 6, wherein:

10. The method of any one of claims 6 to 9, wherein:

11. A network-side device, comprising:

12. The network-side device of claim 11, wherein:

13. The network-side device of claim 11, wherein:

14. The network-side device according to claim 11 or 12, characterized in that:

15. A terminal, comprising:

16. The terminal of claim 15, wherein:

17. The terminal of claim 15, wherein:

18. The terminal of claim 15, wherein:

19. A terminal as claimed in any one of claims 15 to 18, wherein: