WO2018095018A1

WO2018095018A1 - Terminal abnormal process protection method and apparatus, and computer storage medium

Info

Publication number: WO2018095018A1
Application number: PCT/CN2017/088306
Authority: WO
Inventors: 柯何杨
Original assignee: 深圳市中兴微电子技术有限公司
Priority date: 2016-11-22
Filing date: 2017-06-14
Publication date: 2018-05-31
Also published as: CN108377494A; CN108377494B

Abstract

Disclosed in the embodiments of the present invention is a terminal abnormal process protection method, comprising: pre-setting a timer and a timer duration; receiving a secure mode command message sent by a network side and, on the basis of the secure mode command message, entering a secure start-up process and starting the timer, and performing integrity protection verification of the secure mode command message; on the basis of the verification results, determining that the secure mode did not successfully start, and then continuing to wait for the network side to send a secure mode command message; and, if the timer expires during the waiting process, then triggering the terminal to actively initiate a connection release request. Also disclosed in the embodiments of the present invention are a terminal abnormal process protection apparatus, and a computer storage medium.

Description

Terminal abnormal flow protection method, device and computer storage medium

Cross-reference to related applications

The present application is filed on the basis of the Chinese Patent Application No. PCT Application No. No. No. No. No. No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No No

Technical field

The present invention relates to security protection technologies in the field of mobile communications, and in particular, to a terminal abnormal process protection method and apparatus, and a computer storage medium.

Background technique

In the mobile communication system, the Evolved Universal Terrestrial Radio Access Network (E-UTRAN) on the network side of the Long Term Evolution (LTE) system is mainly composed of an evolved base station (eNB, Evolved NodeB) and The Mobility Management Entity (MME) of the core network device is configured, and the user equipment (UE, User Equipment) performs data and signaling interaction with the eNB and the MME through the wireless air interface, and provides data and signaling for the interaction. Integrity and encryption.

In the LTE system architecture, the protocol layer is divided into a non-access stratum (NAS, Non Access Stratum) and an access stratum (AS, Access Stratum). Accordingly, the security protection mechanism in the LTE system is also divided into NAS security and AS. Safety. Typically, the AS security process is based on the NAS security process.

In the AS initial security mode command, the eNB on the E-UTRAN side sends a security mode command message to the UE through the air interface, where the security mode command message carries parameters such as a local preset AS security algorithm. And the security algorithm includes complete a security protection algorithm and an encryption algorithm; after receiving the security mode command message, the UE side requests the underlying Packet Data Convergence Protocol (PDCP) to perform integrity protection verification on the security mode command message. If the verification succeeds, the UE The eNB sends a Security Mode Complete message, and performs integrity protection on the security mode complete message, and performs integrity protection and encryption on subsequent messages and data interacting with the eNB, indicating that the AS security mode is activated. If the verification fails, the UE sends a Security Mode Failure message to the eNB, and does not use encryption and integrity protection for subsequent messages and data interacting with the eNB, indicating that the AS's security activation process fails.

During the foregoing AS initial security mode command, the network side may immediately send a downlink message to the UE when the security mode command message is sent, as long as the security mode failure message of the UE is not received, the downlink of the subsequent transmission is required. Messages are integrity protected and encrypted. In addition, it is considered that the terminal may send a security mode failure message to the network side when the security is not successfully started, and the network side is also preparing to send the encrypted downlink message to the terminal. In this case, since the terminal does not start security, there is no need to perform integrity protection check and decryption on the downlink message. Therefore, the error of integrity protection failure does not occur, but the message obtained after decoding is garbled, so that the terminal cannot recognize the terminal. . At this time, the downlink message that cannot be decrypted and identified is directly discarded by the terminal, and the discarding of the network side command may affect the entire service processing flow; in particular, after the network side sends the command to release the connection, it is known that the UE successfully receives the release message, The air interface resource is released accordingly, but the UE does not know that the air interface resource has been released, and the UE needs to continue to wait for other messages on the network side after the release message sent by the network side is directly discarded because it cannot be resolved. At this time, unless the end user or the service directly intervenes, the network side will not send any more messages, causing the terminal process to hang.

Summary of the invention

In view of this, the embodiment of the present invention is to provide a terminal abnormal process protection method, device, and computer storage medium, which can effectively solve the problem that occurs in the prior art in the case of a fail-safe failure. The phenomenon that the terminal process hangs.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

The embodiment of the present invention provides a method for protecting an abnormality of a terminal, which is preset with a timer and a duration of the timer. The method further includes:

Receiving a security mode command message sent by the network side, entering a secure boot process based on the security mode command message, and starting the timer, and performing integrity protection check on the security mode command message;

If it is determined that the security mode is not successfully started according to the verification result, continue to wait for the network side to send the security mode command message;

If the timer expires during the waiting process, the terminal is triggered to initiate a connection release request.

In an embodiment, the method further includes: if the security mode is successfully started within a duration of the timer, turning off the timer, and sending a security mode complete message to the network side.

In an embodiment, when waiting for the network side to send the security mode command message, the terminal further receives at least one downlink message sent by the network side.

In an embodiment, when the downlink message is an encrypted message, the terminal directly discards the downlink message, and continues to wait for the network side to send the security mode command message until the timer expires.

In an embodiment, when the downlink message is an unencrypted message, the terminal processes the downlink message according to a preset process, and after processing the downlink message, does not close the timer, and continues to wait. The network side sends the security mode command message until the timer expires.

In an embodiment, the timer has a duration of 12 s.

The embodiment of the present invention further provides a terminal abnormal flow protection device, where the device includes: a preset module, a check module, a waiting module, and an execution module;

The preset module is configured to preset a timer and a duration of the timer;

The verification module is configured to receive a security mode command message sent by the network side, enter a security startup process based on the security mode command message, and start the timer, and perform integrity protection on the security mode command message. Test

The waiting module is configured to determine, according to the verification result obtained by the verification module, that the security mode is not successfully started, and then wait for the network side to send the security mode command message;

The execution module is configured to trigger the terminal to initiate a connection release request if the timer expires during the waiting process.

In an embodiment, the execution module is further configured to: within the duration of the timer, if the security mode is successfully initiated, the timer is turned off, and a security mode complete message is sent to the network side.

In an embodiment, when the downlink message is an encrypted message, the executing module is configured to directly discard the downlink message;

The waiting module is configured to wait for the network to send the security mode command message after the execution module discards the downlink message until the timer expires.

In an embodiment, when the downlink message is an unencrypted message, the executing module is configured to process the downlink message according to a preset process, and after processing the downlink message, does not close the timer. ;

The waiting module is further configured to continue to wait for the network side to send the security mode command message until the timer expires.

In an embodiment, the timer has a duration of 12 s.

The embodiment of the invention further provides a computer storage medium, wherein the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the terminal abnormal flow protection method according to the embodiment of the invention.

The terminal abnormal flow protection method and device and the computer storage medium provided by the embodiment of the present invention pre-set a timer and a duration of the timer; receive a security mode command message sent by the network side, and enter a secure start based on the security mode command message. a process, and starting the timer, and performing an integrity protection check on the security mode command message; determining, according to the verification result, that the security mode is not successfully started, continuing to wait for the network side to send the security mode command message; If the timer expires during the process, the terminal is triggered to initiate a connection release request. By adopting the technical solution of the embodiment of the present invention, by adopting time protection measures for the security startup process, the phenomenon of long-term suspension of the terminal process occurring under the failure of the security startup failure is effectively avoided without affecting the actual business process, and the problem is not improved. The user experience also meets the needs of wireless access.

DRAWINGS

1 is a schematic flowchart of an implementation process of a terminal abnormal process protection method according to an embodiment of the present invention;

2 is a schematic diagram of a security startup process with timer protection according to an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a device for abnormality protection of a terminal according to an embodiment of the present invention.

detailed description

The embodiments of the present invention are described in detail with reference to the accompanying drawings.

In the embodiment of the present invention, the terminal may include, but is not limited to, a mobile device such as a smart phone, a tablet, a palmtop computer, or the like that can access the LTE network.

As shown in FIG. 1 , an implementation process of a terminal abnormal process protection method in the embodiment of the present invention includes the following steps:

Step 101: Set a timer and a duration of the timer in advance.

In this embodiment, if the duration of the timer is set to be too long, the terminal may be in a suspended state for a long time; if the duration of the timer is set too short, the terminal may be advanced. The connection is ended, so the duration of the timer cannot be set too long and cannot be set too short.

In an actual application, an experience value may be determined according to an actual application scenario, for example, the duration of the timer is set to 12 s. Within the 12s, it can be ensured that most of the services can be automatically re-initiated. Even if the service cannot be re-initiated within the time limit, the terminal can ensure that the terminal can release the connection autonomously after 12s. Therefore, compared to the terminal process has been in a suspended state, setting the duration of the timer to 12s is also acceptable to the user. Of course, the duration of the timer is not limited to 12s.

Step 102: Receive a security mode command message sent by the network, enter a secure startup process based on the security mode command message, and start the timer, and perform integrity protection check on the security mode command message.

Here, how to perform integrity protection check on the security mode command message belongs to the prior art, and details are not described herein again.

Step 103: Determine, according to the verification result, that the security mode is not successfully started, and continue to wait for the network side to send the security mode command message.

Here, in the range of the duration of the timer, if the integrity check of the security mode command message is passed, the security mode of the AS is activated, and the current AS security mode is successfully started. At this time, the terminal does not have to wait for the network side to continue to send the security mode command message, but can directly close the timer and send a security mode complete message to the network side.

If the integrity protection check of the security mode command message fails, the AS security mode activation fails, and the current AS security mode is not successfully started. Correspondingly, the terminal sends a message that the security mode fails to the network side, and after sending the message that the security mode fails, continues to wait for the network side to send the security mode command message until the timer expires.

Step 104: The timer expires during the waiting process, and the terminal is triggered to initiate a connection release request.

Specifically, in general, after receiving the message that the security mode failed by the terminal is received, the terminal continues to wait for the network side to send the security mode command message, and hopes to start the security mode again. In the process of waiting for the network side to send the security mode command message, if the terminal can successfully start the security mode after receiving the security mode command message again, the timer is closed, and the security mode completion message is sent to the network side; After receiving the security mode command message, the security mode cannot be successfully initiated. After returning the security mode failure message to the network side, the terminal continues to wait for the network side to resend the security mode command message, and so on, until the timer expires.

Here, when waiting for the network side to send the security mode command message, the terminal further receives another at least one downlink message sent by the network side, where the downlink message is, for example, a normal radio resource control (RRC) connection. Reconfigure the message.

If the downlink message is an encrypted message, the terminal cannot decrypt and identify the downlink message because the security mode is not successfully started. Therefore, the terminal directly discards the downlink message and continues to wait for the network side to send. The security mode command message until the timer expires;

If the downlink message is an unencrypted message, the terminal processes the downlink message according to a preset process, and after the downlink message is normally processed, does not close the timer, but continues to wait for the network side to send the security. Mode command message until the timer expires.

It should be noted that, in the process that the terminal waits for the network side to send the security mode command message, the network side may send a release command without encryption to terminate the connection; the terminal may also initiate the service under the control of the service or the user. Connect the released command. In both cases, the effect of the terminal connection release can be achieved, and the timer can be directly turned off without waiting for the timer to time out.

In the embodiment of the present invention, when the security startup fails, the timer is used to monitor whether the security is successfully started. If the terminal fails to start the security successfully, the terminal itself cannot successfully start the security. The instruction to initiate the connection release prevents the terminal process from being in an idle waiting state to protect the abnormal process of the terminal.

The specific implementation process of the terminal abnormal process protection method in the embodiment of the present invention is further described in detail below.

FIG. 2 is a schematic diagram of a safe boot process with timer protection according to an embodiment of the present invention. As shown in FIG. 2, the method includes the following steps:

Step 201: Receive a network side message.

Here, the terminal is initially in a connected state, and the network side message is an encrypted message; the duration of the timer and the timer is set in advance, wherein the duration of the timer is an empirical value obtained according to the actual application scenario, where The duration of the timer is set to 12s.

Step 202: Determine whether the received network side message is a security mode command message, and if yes, go to step 203, otherwise, go to step 208.

Step 203: Start a timer and request the NAS layer to calculate a new security key.

Step 204: Perform an integrity protection check on the security mode command message. If the check passes, go to step 205. Otherwise, go to step 207.

Here, the integrity protection check is performed on the security mode command message according to the new security key calculated in step 203 and the locally preset AS security algorithm carried in the security mode command message sent by the network side. The AS security algorithm includes an integrity protection algorithm and an encryption algorithm. How to perform integrity protection verification on the security mode command message belongs to the prior art, and details are not described herein again.

Step 205: The terminal starts and applies AS security.

Here, after the terminal successfully starts security, it also needs to send a security mode complete message to the network side to indicate that the AS security mode is activated at this time.

Step 206: If the timer is running, the timer is turned off, and the current processing flow is ended.

Step 207: Enter the state of the waiting instruction until the timer expires, and end the current processing flow. If, in the waiting process, if the terminal can continue to receive the network side message, the process jumps to step 201, if the terminal high-level command is received. Then, go to step 210.

Here, the command of the upper layer of the terminal may include any one of an instruction to release a connection, a shutdown indication, or an uplink data transmission, and the embodiment of the present invention is not specifically limited herein.

Step 208: Determine whether the received network side message can be identified. If it cannot be identified, go to step 209. Otherwise, go to step 211.

Generally, the encrypted network side message needs to be decrypted. Only after successful decryption can the network side message be correctly identified. Since the terminal does not start security, the encrypted network side message may be garbled after decryption. Identification. For the network side message that can be identified, the terminal processes the network side message according to the normal process, and does not turn off the timer after the network side message is normally processed.

Step 209: Discard the network side message directly, and jump to step 207.

Step 210: Receive an instruction from the upper layer of the terminal, and jump to step 211.

Step 211: Determine whether the connection can be released, and if yes, go to step 212, otherwise, go to step 207.

Here, the network side may send a release command without encryption to terminate the connection; or the terminal actively initiates a connection release request under the control of the service or the user.

Step 212: Close the timer and end the current processing flow.

In order to implement the foregoing method, the embodiment of the present invention further provides a terminal abnormal process protection device. As shown in FIG. 3, the device includes a preset module 301, a check module 302, a wait module 303, and an execution module 304.

The preset module 301 is configured to preset a timer and a duration of the timer;

The verification module 302 is configured to receive a security mode command message sent by the network, enter a secure startup process based on the security mode command message, and start the timer, and perform integrity protection on the security mode command message. check;

The waiting module 303 is configured to determine, according to the verification result obtained by the verification module 302, that the security mode is not successfully started, and then wait for the network side to send the security mode command message;

The executing module 304 is configured to trigger the terminal to initiate a connection release request if the timer expires during the waiting for the waiting module 303.

As an implementation manner, the duration of the timer may be 12s, of course, not limited to 12s.

Here, the execution module 304 is further configured to: within the duration of the timer, if the security mode is successfully initiated, the timer is turned off, and a security mode complete message is sent to the network side.

Here, when waiting for the network side to send the security mode command message, the terminal further receives at least one downlink message sent by the network side.

The execution module 304 is configured to directly discard the downlink message, and the waiting module 303 is configured to wait for the execution module 304 to discard the downlink message and wait for the downlink message to be discarded. Sending, by the network side, the security mode command message until the timer expires;

When the downlink message is an unencrypted message, the executing module 304 is configured to process the downlink message according to a preset process, and after the downlink message is processed, does not close the timer;

The waiting module 303 is further configured to continue to wait for the network side to send the security mode command message until the timer expires.

In an actual application, the preset module 301, the verification module 302, the waiting module 303, and the implementation The row module 304 can be composed of a central processing unit (CPU), a microprocessor (MPU, a Micro Processor Unit), a digital signal processor (DSP), or a field programmable gate located on the terminal. Array (FPGA, Field Programmable Gate Array) and other implementations.

The embodiment of the present invention sets a timer and a duration of the timer in advance; receives a security mode command message sent by the network side, enters a secure boot process based on the security mode command message, and starts the timer, and The security mode command message performs an integrity protection check; if it is determined that the security mode is not successfully started according to the verification result, the network side continues to wait for the network side to send the security mode command message; if the timer expires during the waiting process, the terminal is triggered to initiate The connection is released. In this way, by taking time protection measures for the security startup process, the phenomenon that the terminal process hangs in the case of the security startup failure is effectively avoided without affecting the actual business process, which not only improves the user experience, but also satisfies The need for wireless access.

When the computer executable instruction is executed by the processor, executing: receiving a security mode command message sent by the network side, entering a secure boot process based on the security mode command message, and starting the timer, and starting the security mode The command message performs an integrity protection check; if it is determined that the security mode is not successfully started according to the check result, the system continues to wait for the network side to send the security mode command message; if the timer expires during the waiting process, the terminal is triggered to initiate the connection release. Request.

As an embodiment, when the computer executable instruction is executed by the processor, executing: within the duration of the timer, if the security mode is successfully started, the timer is turned off, and the security mode is sent to the network side. Complete the message.

As an embodiment, when the computer executable instructions are executed by the processor, execute: when When the downlink message is an encrypted message, the downlink message is directly discarded, and the network side continues to wait for the network side to send the security mode command message until the timer expires.

As an embodiment, when the computer executable instruction is executed by the processor, when the downlink message is an unencrypted message, the downlink message is processed according to a preset process, and after the downlink message is processed, The timer is not turned off, and the network side continues to wait for the security mode command message to be sent until the timer expires.

Those skilled in the art will appreciate that embodiments of the invention may be provided as a method, apparatus, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on the computer or other programmable device to produce the computer The implemented processing, such as instructions executed on a computer or other programmable device, provides steps for implementing the functions specified in one or more blocks of the flowchart or in a block or blocks of the flowchart.

The above is only the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in Within the scope of protection of the present invention.

Industrial applicability

The technical solution of the embodiment of the present invention not only improves the user's long-term suspension of the terminal process when the security startup fails, but also takes the time protection measures for the security startup process without affecting the actual service process. The experience also meets the needs of wireless access.

Claims

A terminal abnormal process protection method, which presets a timer and a duration of the timer; the method further includes:

Receiving a security mode command message sent by the network side, entering a secure boot process based on the security mode command message, and starting the timer, and performing integrity protection check on the security mode command message;

If it is determined that the security mode is not successfully started according to the verification result, continue to wait for the network side to send the security mode command message;

If the timer expires during the waiting process, the terminal is triggered to initiate a connection release request.
The method according to claim 1, wherein the method further comprises: closing the timer and transmitting a security mode complete message to the network side if the security mode is successfully initiated within a duration of the timer .
The method according to claim 1, wherein the terminal further receives at least one downlink message sent by the network side while waiting for the network side to send the security mode command message.
The method according to claim 3, wherein when the downlink message is an encrypted message, the terminal directly discards the downlink message, and continues to wait for the network side to send the security mode command message until the timing Timed out.
The method according to claim 3, wherein, when the downlink message is an unencrypted message, the terminal processes the downlink message according to a preset process, and after processing the downlink message, does not close the The timer continues to wait for the network side to send the security mode command message until the timer expires.
The method according to any one of claims 1 to 5, wherein the timer has a duration of 12 s.
A terminal abnormal flow protection device, the device comprising: a preset module, a check module, a waiting module and an execution module; wherein

The preset module is configured to preset a timer and a duration of the timer;

The verification module is configured to receive a security mode command message sent by the network side, enter a security startup process based on the security mode command message, and start the timer, and perform integrity protection on the security mode command message. Test

The waiting module is configured to determine, according to the verification result obtained by the verification module, that the security mode is not successfully started, and then wait for the network side to send the security mode command message;

The execution module is configured to trigger the terminal to initiate a connection release request if the timer expires during the waiting process.
The apparatus according to claim 7, wherein the execution module is further configured to: within the duration of the timer, if the security mode is successfully initiated, the timer is turned off, and the security mode is sent to the network side. Complete the message.
The apparatus according to claim 7, wherein the terminal further receives at least one downlink message sent by the network side while waiting for the network side to send the security mode command message.
The apparatus according to claim 9, wherein the execution module is configured to directly discard the downlink message when the downlink message is an encrypted message;

The waiting module is configured to wait for the network to send the security mode command message after the execution module discards the downlink message until the timer expires.
The device according to claim 9, wherein, when the downlink message is an unencrypted message, the executing module is configured to process the downlink message according to a preset process, and after processing the downlink message, Turn off the timer;

The waiting module is further configured to continue to wait for the network side to send the security mode command message until the timer expires.
The apparatus according to any one of claims 7 to 11, wherein the timer has a duration of 12 s.
A computer storage medium storing computer executable in the computer storage medium And a computer executable instruction for performing the terminal abnormal flow protection method according to any one of claims 1 to 6.