WO2018045638A1 - 一种建立集群通信的方法及系统 - Google Patents

一种建立集群通信的方法及系统 Download PDF

Info

Publication number
WO2018045638A1
WO2018045638A1 PCT/CN2016/107984 CN2016107984W WO2018045638A1 WO 2018045638 A1 WO2018045638 A1 WO 2018045638A1 CN 2016107984 W CN2016107984 W CN 2016107984W WO 2018045638 A1 WO2018045638 A1 WO 2018045638A1
Authority
WO
WIPO (PCT)
Prior art keywords
cluster
base station
station subsystem
key
scheduling server
Prior art date
Application number
PCT/CN2016/107984
Other languages
English (en)
French (fr)
Inventor
钟焰涛
傅文治
蒋罗
Original Assignee
宇龙计算机通信科技(深圳)有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 宇龙计算机通信科技(深圳)有限公司 filed Critical 宇龙计算机通信科技(深圳)有限公司
Publication of WO2018045638A1 publication Critical patent/WO2018045638A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/06—Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]

Definitions

  • the embodiments of the present invention relate to the technical field of communications, and in particular, to a method and system for establishing a cluster communication.
  • the trunking communication system is a dedicated communication system, and its use areas include command, dispatch, public security, and emergency rescue.
  • the call encryption method of the method is generally: all the calling terminals of the calling and the called parties obtain the session key of the encrypted call through the base station subsystem BBS to the Key Distribution Sever (KDS) in the process of establishing the encrypted call; All the called terminals of the called party send an encrypted call request to the BBS to establish an encrypted call. After entering the encrypted call, all the members of the calling and called terminals use the same session key to encrypt the transmitted voice frame during the call. The speech frame is decrypted.
  • KDS Key Distribution Sever
  • the above solution has two problems: First, it relies heavily on the key distribution server. The KDS calculation and communication burden is very large. Once the KDS fails, the entire system cannot run. Second, when a terminal exits a cluster, the cluster The key cannot be updated in time, and the forward confidentiality cannot be satisfied. That is, the exit group should not be able to continue decrypting the messages in the group.
  • the purpose of the embodiments of the present invention is to provide a method and system for establishing cluster communication, which aims to solve the problem of how to reduce the communication burden of the key distribution server.
  • the embodiment of the present invention adopts the following technical solutions:
  • a method of establishing a cluster communication comprising:
  • the calling terminal initiates the cluster encryption communication, and selects an encryption key, and sends the encryption key to the cluster scheduling server, so that the cluster scheduling server sends the encryption key to the called terminal;
  • the calling terminal establishes an encrypted call with the called terminal and enters an encrypted communication.
  • the calling terminal initiates a cluster encrypted communication, including:
  • the calling terminal sends a request to the base station subsystem to initiate an encrypted cluster call
  • the calling terminal sends a service request message to the base station subsystem
  • the calling terminal establishes a service connection with the base station subsystem.
  • the calling terminal establishes an encrypted call with the called terminal, including:
  • the cluster scheduling server sends a call connection request to the base station subsystem, and sends the encryption key to the base station subsystem;
  • the called terminal sends a key request to the base station subsystem, and receives an encryption key returned by the base station subsystem;
  • the called terminal sends a service request to the base station subsystem, and establishes a service with the base station subsystem.
  • the method further includes:
  • the cluster scheduling server sends a key update request to the calling terminal, so that the calling terminal reselects a key and selects the selected key Sent to the cluster scheduling server;
  • the cluster scheduling server sends the selected key to all called terminals in the cluster communication.
  • a method of establishing a cluster communication comprising:
  • the cluster scheduling server receives the encryption key sent by the calling terminal
  • the cluster scheduling server sends a call connection request to the base station subsystem, and sends the encryption key to the base station subsystem, so that the base station subsystem sends a start encrypted cluster call to the called terminal. And establishing a service with the called terminal.
  • the method further includes:
  • the cluster scheduling server sends a key update request to the calling terminal, so that the calling terminal reselects a key and selects the selected key Sent to the cluster scheduling server;
  • the cluster scheduling server sends the selected key to all called terminals in the cluster communication.
  • a third aspect is a system for establishing a trunking communication, the system comprising a calling terminal; the calling terminal is configured to:
  • the calling terminal is further configured to:
  • the system further includes the cluster scheduling server, the base station subsystem, and the called terminal;
  • the cluster scheduling server is configured to send a call connection request to the base station subsystem, and send the encryption key to the base station subsystem;
  • the base station subsystem is configured to send a startup encrypted cluster call to the called terminal;
  • the called terminal is configured to send a key request to the base station subsystem, and receive an encryption key returned by the base station subsystem; send a service request to the base station subsystem, and establish with the base station subsystem business.
  • the cluster scheduling server is further configured to: after the calling terminal establishes an encrypted call with the called terminal, and enters an encrypted communication, when the called terminal exits the cluster, the cluster scheduling server Sending a key update request to the calling terminal, so that the calling terminal reselects a key, and sends the selected key to the cluster scheduling server; The key is sent to all called terminals that are in the cluster communication.
  • An embodiment of the present invention provides a method and system for establishing a cluster communication, where a calling terminal initiates a cluster encrypted communication, and selects an encryption key, and sends the encryption key to a cluster scheduling server, so that the cluster scheduling server will The encryption key is sent to the called terminal; the calling terminal establishes an encrypted call with the called terminal, and enters the encrypted communication, does not need KDS, and the terminal that initiates the cluster encrypted communication selects the key, thereby avoiding serious dependence.
  • KDS the calculation and communication burden of the KDS is reduced, and the entire system cannot be operated when the KDS fails.
  • FIG. 1 is a schematic flowchart of a method for establishing a cluster communication according to an embodiment of the present invention
  • FIG. 2 is a schematic flowchart of a method for establishing a trunk communication by a calling terminal according to an embodiment of the present invention
  • FIG. 3 is a schematic flowchart of a method for a called terminal to establish a cluster communication according to an embodiment of the present invention
  • FIG. 4 is a schematic flowchart diagram of another method for establishing trunk communication according to an embodiment of the present invention.
  • FIG. 5 is a schematic flowchart diagram of another method for establishing trunk communication according to an embodiment of the present invention.
  • FIG. 6 is a schematic flowchart diagram of another method for establishing cluster communication according to an embodiment of the present invention.
  • FIG. 7 is a schematic structural diagram of a system for establishing cluster communication according to an embodiment of the present invention.
  • FIG. 1 is a schematic flowchart diagram of a method for establishing cluster communication according to an embodiment of the present invention.
  • the method for establishing a cluster communication includes:
  • Step 101 The calling terminal initiates a cluster encryption communication, and selects an encryption key, and sends the encryption key to the cluster scheduling server, so that the cluster scheduling server sends the encryption key to the called terminal.
  • the manner in which the calling terminal establishes a communication service is as follows:
  • the calling terminal initiates a cluster encrypted communication, including:
  • the calling terminal sends a request to the base station subsystem to initiate an encrypted cluster call
  • the calling terminal sends a service request message to the base station subsystem
  • the calling terminal establishes a service connection with the base station subsystem.
  • FIG. 2 is a schematic flowchart of a method for establishing a cluster communication by a calling terminal according to an embodiment of the present invention.
  • the method for the calling terminal to establish a cluster communication includes:
  • Step 201 The calling terminal sends a start cluster call to a base station system (BSS).
  • BSS base station system
  • Step 202 The calling terminal sends a service request message to the base station subsystem.
  • Step 203 The base station subsystem returns a service connection message to the calling terminal.
  • Step 204 The calling terminal sends a service connection completion message to the base station subsystem.
  • Step 205 The calling terminal sends a key to a PTT Dispatching Serve (PDS).
  • PTT Dispatching Serve PDS
  • Step 206 The base station subsystem completes establishment of the PDS encrypted call.
  • Step 102 The calling terminal establishes an encrypted call with the called terminal, and enters an encrypted communication.
  • the calling terminal establishes an encrypted call with the called terminal, including:
  • the cluster scheduling server sends a call connection request to the base station subsystem, and sends the encryption key to the base station subsystem;
  • the called terminal sends a key request to the base station subsystem, and receives an encryption key returned by the base station subsystem;
  • the called terminal sends a service request to the base station subsystem, and establishes a service with the base station subsystem.
  • FIG. 3 is a schematic flowchart diagram of a method for establishing a cluster communication by a called terminal according to an embodiment of the present invention.
  • the method for the calling terminal to establish a cluster communication includes:
  • Step 301 The PDS sends a call connection request to the base station subsystem.
  • Step 302 The PDS sends a key to the base station subsystem.
  • Step 303 The base station subsystem sends a start encrypted cluster call to the called terminal.
  • Step 304 The called terminal sends a key request to the base station subsystem.
  • Step 305 The base station subsystem sends a key to the called terminal.
  • Step 306 The called terminal sends a service request to the base station subsystem.
  • Step 307 The base station subsystem sends a service connection to the called terminal.
  • Step 308 The called terminal sends a service establishment completion to the base station subsystem.
  • Step 309 The base station subsystem sends a call setup completion to the PDS.
  • An embodiment of the present invention provides a method for establishing a cluster communication, in which a calling terminal initiates a cluster encrypted communication, and selects an encryption key, and sends the encryption key to a cluster scheduling server, so that the cluster scheduling server will
  • the encryption key is sent to the called terminal; the calling terminal establishes an encrypted call with the called terminal, and enters the encrypted communication, does not need KDS, and the terminal that initiates the cluster encrypted communication selects the key, thereby avoiding serious dependence on the secret.
  • the key distribution server KDS reduces the computational and communication burden of the KDS and avoids the inability of the entire system to operate when the KDS fails.
  • FIG. 4 is a schematic flowchart diagram of another method for establishing cluster communication according to an embodiment of the present invention.
  • the method for establishing cluster communication includes:
  • Step 401 The calling terminal initiates a cluster encryption communication, and selects an encryption key, and sends the encryption key to the cluster scheduling server, so that the cluster scheduling server sends the encryption key to the called terminal.
  • Step 402 The calling terminal establishes an encrypted call with the called terminal, and enters an encrypted communication.
  • Step 403 When the called terminal exits the cluster, the cluster scheduling server sends a key update request to the calling terminal, so that the calling terminal reselects a key, and after the selected The key is sent to the cluster scheduling server;
  • Step 404 The cluster scheduling server sends the selected key to all called terminals in the cluster communication.
  • a method for establishing a cluster communication is provided by the embodiment of the present invention.
  • the cluster scheduling server sends a key update request to the calling terminal, so that the calling terminal is restarted. Selecting a key and transmitting the selected key to the cluster scheduling server, the cluster scheduling server sending the selected key to all called terminals in the cluster communication, when When the called user exits the cluster, the cluster key is updated to ensure forward confidentiality, that is, the exit group cannot continue to decrypt the messages in the group.
  • FIG. 5 is a schematic flowchart diagram of another method for establishing cluster communication according to an embodiment of the present invention.
  • the method for establishing a cluster communication includes:
  • Step 501 The cluster scheduling server receives an encryption key sent by the calling terminal.
  • Step 502 The cluster scheduling server sends a call connection request to the base station subsystem, and sends the encryption key to the base station subsystem, so that the base station subsystem sends a start encryption to the called terminal.
  • the cluster calls and establishes a service with the called terminal.
  • An embodiment of the present invention provides a method for establishing a cluster communication, where a cluster scheduling server receives an encryption key sent by a calling terminal, and the cluster scheduling server sends a call connection request to the base station subsystem, and sends the encryption key. Giving the base station subsystem, so that the base station subsystem sends a start encrypted trunk call to the called terminal, and establishes a service with the called terminal, does not need KDS, and is selected by a terminal that initiates cluster encrypted communication. The key avoids relying heavily on the key distribution server KDS, reducing the computational and communication burden of the KDS, and avoiding the inability of the entire system to operate when the KDS fails.
  • FIG. 6 is a schematic flowchart diagram of another method for establishing cluster communication according to an embodiment of the present invention.
  • the method for establishing cluster communication includes:
  • Step 601 The cluster scheduling server receives an encryption key sent by the calling terminal.
  • Step 602 The cluster scheduling server sends a call connection request to the base station subsystem, and sends the encryption key to the base station subsystem, so that the base station subsystem sends a start encryption to the called terminal.
  • the cluster calls and establishes a service with the called terminal.
  • Step 603 When the called terminal exits the cluster, the cluster scheduling server sends a key update request to the calling terminal, so that the calling terminal reselects a key, and after the selected The key is sent to the cluster scheduling server;
  • Step 604 The cluster scheduling server sends the selected key to all called terminals in the cluster communication.
  • a method for establishing a cluster communication is provided by the embodiment of the present invention.
  • the cluster scheduling server sends a key update request to the calling terminal, so that the calling terminal is restarted. Selecting a key and transmitting the selected key to the cluster scheduling server, the cluster scheduling server sending the selected key to all called terminals in the cluster communication, when When the called user exits the cluster, the cluster key is updated to ensure forward confidentiality, that is, the exit group cannot continue to decrypt the messages in the group.
  • FIG. 7 is a schematic structural diagram of a system for establishing cluster communication according to an embodiment of the present invention.
  • the system for establishing cluster communication includes a calling terminal 701; the calling terminal 701 is configured to:
  • the calling terminal 701 is further configured to:
  • the system further includes the cluster scheduling server 702, the base station subsystem 703, and the called terminal 704;
  • the cluster scheduling server 702 is configured to send a call connection request to the base station subsystem 703, and send the encryption key to the base station subsystem 703;
  • the base station subsystem 703 is configured to send a start encrypted cluster call to the called terminal 704.
  • the called terminal 704 is configured to send a key request to the base station subsystem 703, and receive an encryption key returned by the base station subsystem 703; send a service request to the base station subsystem 703, and The base station subsystem 703 establishes a service.
  • the cluster scheduling server 702 is further configured to: after the calling terminal 701 establishes an encrypted call with the called terminal 704, and enters the encrypted communication, when the called terminal 704 exits the cluster, the The cluster scheduling server 702 sends a key update request to the calling terminal 701 to cause the calling terminal 701 to reselect a key and send the selected key to the cluster scheduling server 702. Sending the selected key to all called terminals 704 in the cluster communication.
  • An embodiment of the present invention provides a system for establishing a cluster communication, where a calling terminal initiates a cluster encrypted communication, and selects an encryption key, and sends the encryption key to a cluster scheduling server, so that the cluster scheduling server will The encryption key is sent to the called terminal; the calling terminal establishes an encrypted call with the called terminal, and enters the encrypted communication, does not need KDS, and the terminal that initiates the cluster encrypted communication selects the key, thereby avoiding serious dependence on the secret.
  • the key distribution server KDS reduces the computational and communication burden of the KDS and avoids the inability of the entire system to operate when the KDS fails.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Multimedia (AREA)
  • Computer Security & Cryptography (AREA)
  • Telephonic Communication Services (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明公开了一种建立集群通信的方法及系统。该方法包括：主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信，不需要KDS，由发起集群加密通信的终端选定密钥，避免严重依赖于密钥分发服务器KDS，减少KDS的计算和通信负担，避免KDS失效时整个系统无法运行的情况。

Description

一种建立集群通信的方法及系统
本申请要求于2016年9月8日提交中国专利局，申请号为201610811151.4、发明名称为“一种建立集群通信的方法及系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明实施例涉及通信的技术领域，尤其涉及一种建立集群通信的方法及系统。
背景技术
集群通信系统是一种专用通信系统，使用领域包括指挥、调度、公安、紧急救援等。为了解决集群通话的语音加密，提升集群通信系统的安全性，现有技术提出一种集群呼叫语音的方法。该方法的呼叫加密方法一般为：主被叫所有成员终端在加密呼叫建立过程中分别通过基站子系统BBS向密钥分配服务器(Key Distribution Sever，KDS)获取本次加密通话的会话密钥；主被叫所有成员终端分别向BBS发送进入加密通话请求，建立加密呼叫；进入加密通话后，主被叫所有成员终端在通话过程中都使用同一会话密钥对发送的语音帧进行加密，对接收的语音帧进行解密。
上述的方案有两个问题：第一，严重依赖于密钥分发服务器，KDS计算和通信负担非常大，一旦KDS失效，整个系统无法运行；第二，当有终端退出某个集群时，集群的密钥不能及时更新，无法满足前向保密性，即退出群组者应该不能够继续解密群组内的消息。
发明内容
本发明实施例的目的在于提出一种建立集群通信的方法及系统，旨在解决如何减少密钥分发服务器的通信负担的问题。
为达此目的，本发明实施例采用以下技术方案：
第一方面，一种建立集群通信的方法，所述方法包括：
主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；
所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信。
优选地，所述主叫终端发起集群加密通信，包括：
所述主叫终端向基站子系统发送启动加密集群呼叫的请求；
所述主叫终端向所述基站子系统发送业务请求消息；
所述主叫终端接收所述基站子系统返回的业务连接消息；
所述主叫终端和所述基站子系统建立业务连接。
优选地，所述主叫终端与所述被叫终端建立加密呼叫，包括：
所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统；
所述基站子系统向所述被叫终端发送启动加密集群呼叫；
所述被叫终端向所述基站子系统发送密钥请求，并接收所述基站子系统返回的加密密钥；
所述被叫终端向所述基站子系统发送业务请求，并与所述基站子系统建立业务。
优选地，所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信之后，还包括：
在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；
所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
第二方面，一种建立集群通信的方法，所述方法包括：
集群调度服务器接收主叫终端发送的加密密钥；
所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统，以使得所述基站子系统向所述被叫终端发送启动加密集群呼叫，并与所述被叫终端建立业务。
优选地，所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统之后，还包括：
在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；
所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
第三方面，一种建立集群通信的系统，所述系统包括主叫终端；所述主叫终端用于：
发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；
与所述被叫终端建立加密呼叫，并进入加密通信。
优选地，所述主叫终端还用于：
向基站子系统发送启动加密集群呼叫的请求；
向所述基站子系统发送业务请求消息；
接收所述基站子系统返回的业务连接消息；
和所述基站子系统建立业务连接。
优选地，所述系统还包括所述集群调度服务器、所述基站子系统和所述被叫终端；
所述集群调度服务器，用于向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统；
所述基站子系统，用于向所述被叫终端发送启动加密集群呼叫；
所述被叫终端，用于向所述基站子系统发送密钥请求，并接收所述基站子系统返回的加密密钥；向所述基站子系统发送业务请求，并与所述基站子系统建立业务。
优选地，所述集群调度服务器，还用于：在所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信之后，在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
本发明实施例提供一种建立集群通信的方法及系统，主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信，不需要KDS，由发起集群加密通信的终端选定密钥，避免严重依赖于密钥分发服务器KDS，减少KDS的计算和通信负担，避免KDS失效时整个系统无法运行的情况。
 附图说明
图1是本发明实施例提供的一种建立集群通信的方法的流程示意图；
图2是本发明实施例提供的一种主叫终端建立集群通信的方法的流程示意图；
图3是本发明实施例提供的一种被叫终端建立集群通信的方法的流程示意图；
图4是本发明实施例提供的另一种建立集群通信的方法的流程示意图；
图5是本发明实施例提供的另一种建立集群通信的方法的流程示意图；
图6是本发明实施例提供的另一种建立集群通信的方法的流程示意图；
图7是本发明实施例提供的一种建立集群通信的系统的结构示意图。
具体实施方式
下面结合附图和实施例对本发明实施例作进一步的详细说明。可以理解的是，此处所描述的具体实施例仅仅用于解释本发明实施例，而非对本发明实施例的限定。另外还需要说明的是，为了便于描述，附图中仅示出了与本发明实施例相关的部分而非全部结构。
参考图1，图1是本发明实施例提供的一种建立集群通信的方法的流程示意图。
如图1所示，所述建立集群通信的方法包括：
步骤101，主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；
具体的，所述主叫终端建立通信业务的方式如下：
优选地，所述主叫终端发起集群加密通信，包括：
所述主叫终端向基站子系统发送启动加密集群呼叫的请求；
所述主叫终端向所述基站子系统发送业务请求消息；
所述主叫终端接收所述基站子系统返回的业务连接消息；
所述主叫终端和所述基站子系统建立业务连接。
具体的，如图2所示，图2是本发明实施例提供的一种主叫终端建立集群通信的方法的流程示意图。
如图2所示，所述主叫终端建立集群通信的方法包括：
步骤201，主叫终端向基站子系统（Base Station System，BSS）发送启动集群呼叫；
步骤202，所述主叫终端向所述基站子系统发送业务请求消息；
步骤203，所述基站子系统向所述主叫终端返回业务连接消息；
步骤204，所述主叫终端向所述基站子系统发送业务连接完成消息；
步骤205，所述主叫终端向集群调度服务器（PTT Dispatching Serve，PDS）发送密钥；
步骤206，所述基站子系统与所述PDS加密呼叫建立完成。
步骤102，所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信。
优选地，所述主叫终端与所述被叫终端建立加密呼叫，包括：
所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统；
所述基站子系统向所述被叫终端发送启动加密集群呼叫；
所述被叫终端向所述基站子系统发送密钥请求，并接收所述基站子系统返回的加密密钥；
所述被叫终端向所述基站子系统发送业务请求，并与所述基站子系统建立业务。
具体的，如图3所示，图3是本发明实施例提供的一种被叫终端建立集群通信的方法的流程示意图。
如图3所示，所述主叫终端建立集群通信的方法包括：
步骤301，PDS向基站子系统发送呼叫连接请求；
步骤302，PDS向所述基站子系统发送密钥；
步骤303，所述基站子系统向被叫终端发送启动加密集群呼叫；
步骤304，所述被叫终端向所述基站子系统发送密钥请求；
步骤305，所述基站子系统向所述被叫终端发送密钥；
步骤306，所述被叫终端向所述基站子系统发送业务请求；
步骤307，所述基站子系统向所述被叫终端发送业务连接；
步骤308，所述被叫终端向所述基站子系统发送业务建立完成；
步骤309，所述基站子系统向所述PDS发送呼叫建立完成。
本发明实施例提供一种建立集群通信的方法，主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信，不需要KDS，由发起集群加密通信的终端选定密钥，避免严重依赖于密钥分发服务器KDS，减少KDS的计算和通信负担，避免KDS失效时整个系统无法运行的情况。
参考图4，图4是本发明实施例提供的另一种建立集群通信的方法的流程示意图。
如图4所示，所述建立集群通信的方法包括：
步骤401，主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；
步骤402，所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信；
步骤403，在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；
步骤404，所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
本发明实施例提供的一种建立集群通信的方法，在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器，所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端，当有被叫用户退出集群时，集群密钥会更新，保证了前向保密性，即退出群组者不能够继续解密群组内的消息。
参考图5，图5是本发明实施例提供的另一种建立集群通信的方法的流程示意图。
如图5所示，所述建立集群通信的方法包括：
步骤501，集群调度服务器接收主叫终端发送的加密密钥；
步骤502，所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统，以使得所述基站子系统向所述被叫终端发送启动加密集群呼叫，并与所述被叫终端建立业务。
本发明实施例提供一种建立集群通信的方法，集群调度服务器接收主叫终端发送的加密密钥，所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统，以使得所述基站子系统向所述被叫终端发送启动加密集群呼叫，并与所述被叫终端建立业务，不需要KDS，由发起集群加密通信的终端选定密钥，避免严重依赖于密钥分发服务器KDS，减少KDS的计算和通信负担，避免KDS失效时整个系统无法运行的情况。
参考图6，图6是本发明实施例提供的另一种建立集群通信的方法的流程示意图。
如图6所示，所述建立集群通信的方法包括：
步骤601，集群调度服务器接收主叫终端发送的加密密钥；
步骤602，所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统，以使得所述基站子系统向所述被叫终端发送启动加密集群呼叫，并与所述被叫终端建立业务。
步骤603，在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；
步骤604，所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
本发明实施例提供的一种建立集群通信的方法，在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器，所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端，当有被叫用户退出集群时，集群密钥会更新，保证了前向保密性，即退出群组者不能够继续解密群组内的消息。
参考图7，图7是本发明实施例提供的一种建立集群通信的系统的结构示意图。
如图7所示，所述建立集群通信的系统包括主叫终端701；所述主叫终端701用于：
发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；
与所述被叫终端建立加密呼叫，并进入加密通信。
优选地，所述主叫终端701还用于：
向基站子系统发送启动加密集群呼叫的请求；
向所述基站子系统发送业务请求消息；
接收所述基站子系统返回的业务连接消息；
和所述基站子系统建立业务连接。
优选地，所述系统还包括所述集群调度服务器702、所述基站子系统703和所述被叫终端704；
所述集群调度服务器702，用于向所述基站子系统703发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统703；
所述基站子系统703，用于向所述被叫终端704发送启动加密集群呼叫；
所述被叫终端704，用于向所述基站子系统703发送密钥请求，并接收所述基站子系统703返回的加密密钥；向所述基站子系统703发送业务请求，并与所述基站子系统703建立业务。
优选地，所述集群调度服务器702，还用于：在所述主叫终端701与所述被叫终端704建立加密呼叫，并进入加密通信之后，在所述被叫终端704退出集群时，所述集群调度服务器702将密钥更新请求发送给所述主叫终端701，以使得所述主叫终端701重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器702；将所述选定后的密钥发送给正在集群通信中的所有被叫终端704。
本发明实施例提供一种建立集群通信的系统，主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信，不需要KDS，由发起集群加密通信的终端选定密钥，避免严重依赖于密钥分发服务器KDS，减少KDS的计算和通信负担，避免KDS失效时整个系统无法运行的情况。
以上结合具体实施例描述了本发明实施例的技术原理。这些描述只是为了解释本发明实施例的原理，而不能以任何方式解释为对本发明实施例保护范围的限制。基于此处的解释，本领域的技术人员不需要付出创造性的劳动即可联想到本发明实施例的其它具体实施方式，这些方式都将落入本发明实施例的保护范围之内。

Claims (10)

  1. 一种建立集群通信的方法，其特征在于，所述方法包括：
    主叫终端发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；
    所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信。
  2. 根据权利要求1所述的方法，其特征在于，所述主叫终端发起集群加密通信，包括：
    所述主叫终端向基站子系统发送启动加密集群呼叫的请求；
    所述主叫终端向所述基站子系统发送业务请求消息；
    所述主叫终端接收所述基站子系统返回的业务连接消息；
    所述主叫终端和所述基站子系统建立业务连接。
  3. 根据权利要求1所述的方法，其特征在于，所述主叫终端与所述被叫终端建立加密呼叫，包括：
    所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统；
    所述基站子系统向所述被叫终端发送启动加密集群呼叫；
    所述被叫终端向所述基站子系统发送密钥请求，并接收所述基站子系统返回的加密密钥；
    所述被叫终端向所述基站子系统发送业务请求，并与所述基站子系统建立业务。
  4. 根据权利要求1至3任意一项所述的方法，其特征在于，所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信之后，还包括：
    在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；
    所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
  5. 一种建立集群通信的方法，其特征在于，所述方法包括：
    集群调度服务器接收主叫终端发送的加密密钥；
    所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统，以使得所述基站子系统向所述被叫终端发送启动加密集群呼叫，并与所述被叫终端建立业务。
  6. 根据权利要求5所述的方法，其特征在于，所述集群调度服务器向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统之后，还包括：
    在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；
    所述集群调度服务器将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
  7. 一种建立集群通信的系统，其特征在于，所述系统包括主叫终端；所述主叫终端用于：
    发起集群加密通信，并选定加密密钥，将所述加密密钥发送给集群调度服务器，以使得所述集群调度服务器将所述加密密钥发送给被叫终端；
    与所述被叫终端建立加密呼叫，并进入加密通信。
  8. 根据权利要求7所述的系统，其特征在于，所述主叫终端还用于：
    向基站子系统发送启动加密集群呼叫的请求；
    向所述基站子系统发送业务请求消息；
    接收所述基站子系统返回的业务连接消息；
    和所述基站子系统建立业务连接。
  9. 根据权利要求7所述的系统，其特征在于，所述系统还包括所述集群调度服务器、所述基站子系统和所述被叫终端；
    所述集群调度服务器，用于向所述基站子系统发送呼叫连接请求，并将所述加密密钥发送给所述基站子系统；
    所述基站子系统，用于向所述被叫终端发送启动加密集群呼叫；
    所述被叫终端，用于向所述基站子系统发送密钥请求，并接收所述基站子系统返回的加密密钥；向所述基站子系统发送业务请求，并与所述基站子系统建立业务。
  10. 根据权利要求7至9任意一项所述的系统，其特征在于，所述集群调度服务器，还用于：在所述主叫终端与所述被叫终端建立加密呼叫，并进入加密通信之后，在所述被叫终端退出集群时，所述集群调度服务器将密钥更新请求发送给所述主叫终端，以使得所述主叫终端重新选定一个密钥，并将选定后的密钥发送给所述集群调度服务器；将所述选定后的密钥发送给正在集群通信中的所有被叫终端。
PCT/CN2016/107984 2016-09-08 2016-11-30 一种建立集群通信的方法及系统 WO2018045638A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610811151.4 2016-09-08
CN201610811151.4A CN106211091B (zh) 2016-09-08 2016-09-08 一种建立集群通信的方法及系统

Publications (1)

Publication Number Publication Date
WO2018045638A1 true WO2018045638A1 (zh) 2018-03-15

Family

ID=58067737

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/107984 WO2018045638A1 (zh) 2016-09-08 2016-11-30 一种建立集群通信的方法及系统

Country Status (2)

Country Link
CN (1) CN106211091B (zh)
WO (1) WO2018045638A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108174344B (zh) * 2017-12-25 2020-05-08 成都三零瑞通移动通信有限公司 一种集群通信中gis位置信息传输加密方法及装置

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1909689A (zh) * 2005-08-04 2007-02-07 中兴通讯股份有限公司 一种集群系统中实现单呼的方法
CN101442742A (zh) * 2008-12-12 2009-05-27 华为技术有限公司 一种实现移动集群组呼端到端加密的方法、系统及设备
CN101902734A (zh) * 2010-08-19 2010-12-01 优能通信科技（杭州）有限公司 数字集群通信系统端到端自同步话音加密传输实现方法
CN103596136A (zh) * 2012-08-15 2014-02-19 北京信威通信技术股份有限公司 一种单基站模式下集群组呼端到端加密的方法
CN103634744A (zh) * 2012-08-22 2014-03-12 北京信威通信技术股份有限公司 一种集群组呼端到端加密的实现方法
WO2014066007A1 (en) * 2012-10-22 2014-05-01 Motorola Solutions, Inc. Mobile repeater system based ad hoc trunked sites

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101651944B (zh) * 2009-06-16 2012-01-11 中兴通讯股份有限公司 集群系统和加密通信方法
CN102843675A (zh) * 2011-06-24 2012-12-26 中兴通讯股份有限公司 一种集群呼叫语音加密的方法、终端和系统
CN104010276B (zh) * 2013-02-27 2019-02-15 中兴通讯股份有限公司 一种宽带集群系统的组密钥分层管理方法、系统和终端
CN104427496B (zh) * 2013-08-29 2018-06-26 成都鼎桥通信技术有限公司 Td-lte集群通信系统加密传输方法、装置和系统
CN105451195B (zh) * 2014-07-25 2018-11-30 成都鼎桥通信技术有限公司 端到端集群密钥分发方法和核心网设备

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1909689A (zh) * 2005-08-04 2007-02-07 中兴通讯股份有限公司 一种集群系统中实现单呼的方法
CN101442742A (zh) * 2008-12-12 2009-05-27 华为技术有限公司 一种实现移动集群组呼端到端加密的方法、系统及设备
CN101902734A (zh) * 2010-08-19 2010-12-01 优能通信科技（杭州）有限公司 数字集群通信系统端到端自同步话音加密传输实现方法
CN103596136A (zh) * 2012-08-15 2014-02-19 北京信威通信技术股份有限公司 一种单基站模式下集群组呼端到端加密的方法
CN103634744A (zh) * 2012-08-22 2014-03-12 北京信威通信技术股份有限公司 一种集群组呼端到端加密的实现方法
WO2014066007A1 (en) * 2012-10-22 2014-05-01 Motorola Solutions, Inc. Mobile repeater system based ad hoc trunked sites

Also Published As

Publication number Publication date
CN106211091B (zh) 2020-04-24
CN106211091A (zh) 2016-12-07

Similar Documents

Publication Publication Date Title
WO2018230920A1 (ko) 패킷 전송 제어 방법 및 장치
WO2016021981A1 (en) System and method of counter management and security key update for device-to-device group communication
WO2015065063A1 (en) Method and apparatus to identity verification using asymmetric keys in wireless direct communication network
WO2013005947A2 (en) Apparatus, method and system for creating and maintaining multicast data encryption key in machine to machine communication system
WO2014059607A1 (zh) 群组区域管理方法、设备及系统
WO2014063455A1 (zh) 即时通信方法和系统
WO2011142568A2 (en) Method and system for positioning mobile station in handover procedure
WO2011153714A1 (zh) 支持多imsi的方法、装置和系统
WO2014051402A1 (en) A method and apparatus for setting up an x2 connection through a gateway
WO2017161883A1 (zh) 一种数据传输处理的方法、装置以及终端
WO2015072788A1 (en) Method and apparatus for managing security key in a near fieldd2d communication system
WO2013170448A1 (zh) 用户设备的非连续接收配置方法、基站及系统
WO2016192587A1 (zh) 一种无线通信方法及装置
WO2014051379A1 (en) Method and apparatus for performing a handover in a wireless communication system
WO2018000674A1 (zh) 网络连接方法、网络连接装置和终端
WO2019027237A1 (en) METHOD AND SYSTEM FOR PROVIDING MISSION CRITICAL SERVICE (MCX) IN A WIRELESS COMMUNICATION NETWORK
WO2016041135A1 (zh) 增强型广播组播业务的处理网元及其广播的方法
WO2022086000A1 (ko) 무선액세스 노드장치 및 그 장치에서 수행되는 인터페이스 방법
WO2014104853A1 (en) Method for synchronizing encryption information between scell and ue
EP3571807A1 (en) Method for providing end-to-end security over signaling plane in mission critical data communication system
WO2018045638A1 (zh) 一种建立集群通信的方法及系统
WO2012163028A1 (zh) 一种用户设备的处理方法、移动性管理实体的处理方法、用户设备、移动性管理实体及通信系统
WO2012039585A2 (en) Method for determining relocation process and method for determining handover process
WO2017008195A1 (zh) 一种业务管理方法及其装置
WO2011094923A1 (zh) 承载建立方法、承载建立目标实体及承载建立源实体

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16915572

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16915572

Country of ref document: EP

Kind code of ref document: A1