WO2020073961A1 - 一种定位服务密钥分发方法及其装置 - Google Patents

一种定位服务密钥分发方法及其装置 Download PDF

Info

Publication number
WO2020073961A1
WO2020073961A1 PCT/CN2019/110395 CN2019110395W WO2020073961A1 WO 2020073961 A1 WO2020073961 A1 WO 2020073961A1 CN 2019110395 W CN2019110395 W CN 2019110395W WO 2020073961 A1 WO2020073961 A1 WO 2020073961A1
Authority
WO
WIPO (PCT)
Prior art keywords
location service
target terminal
contracted
key
service authority
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2019/110395
Other languages
English (en)
French (fr)
Inventor
毕晓宇
全海洋
艾明
徐晖
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Academy of Telecommunications Technology CATT
Original Assignee
China Academy of Telecommunications Technology CATT
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Academy of Telecommunications Technology CATT filed Critical China Academy of Telecommunications Technology CATT
Publication of WO2020073961A1 publication Critical patent/WO2020073961A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/52—Network services specially adapted for the location of the user terminal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02—Services making use of location information
    • H04W4/029—Location-based management or tracking services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/18—Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Definitions

  • the present application relates to the field of wireless communication technology, and in particular, to a method and device for distributing a positioning service key.
  • LCS Location Services
  • 3GPP Third Generation Partnership Project
  • UE User Equipment, terminal also called user equipment
  • UE User Equipment
  • the location information obtained through LCS includes geographic location information, speed, city location, and service quality.
  • the UE may receive auxiliary data broadcasted by the network side, and use the auxiliary data to perform positioning calculation by itself. These auxiliary data may be encrypted by one or more encryption keys.
  • the distribution process of the encryption key of the above auxiliary data is: Evolved E-SMLC (Evolved Serving Mobile Location Center) to Mobility Management Entity, MME (Mobility Management Entity, Mobility management entity) sends a key data message carrying one or more keys, the key is used to decrypt the broadcast auxiliary data, where a validity period, a set of applicable tracking areas and Type of key; MME receives and stores the key; UE sends an attach request message or TAU (Tracking Area Update) request message to eNodeB (base station), which includes an instruction to request the key; the base station receives the attach request message or The TAU request message is forwarded to the MME; after receiving the attach request message or TAU request message, the MME returns an attach accept message or TAU accept message to the base station.
  • Evolved E-SMLC Evolved Serving Mobile Location Center
  • MME Mobility Management Entity, Mobility management entity
  • the UE After the UE receives the Attach Accept message or the TAU Accept message, once the validity period of the key has started and the UE is currently in the applicable tracking area, the UE can start using the key to decrypt the broadcast auxiliary data. When entering a tracking area that does not apply to the key, the UE stops using the key.
  • An embodiment of the present application provides a positioning service key distribution method and device thereof, for distributing keys according to the positioning service authority of a terminal.
  • a method for distributing a location service key including: a management network element located in a core network receives a first request message from a target terminal; the management network element determines whether the location service authority contracted by the target terminal It is allowed to obtain the key; if the management network element determines that the location service authority contracted by the target terminal allows the key to be obtained, a first response message is sent to the target terminal, and the first response message carries the target terminal subscription
  • the location service authority allows the obtained key, which is used to decrypt the broadcast network auxiliary data.
  • the first response message is sent to the target terminal, so that the management network element can determine whether it is allowed to obtain the secret key according to the terminal's contract information
  • the key only distributes the key corresponding to the terminal location service right to the terminal when the key is allowed to be obtained.
  • the first request message carries key acquisition instruction information, and the key acquisition instruction information is used to request acquisition of a key for decrypting broadcast network assistance data.
  • the first request message is an attachment request message
  • the first response message is an attachment acceptance message
  • the first request message is a tracking area update request message
  • the first response message is a tracking area update Accept the message.
  • the management network element determining whether the location service right contracted by the target terminal allows obtaining a key includes: the management network element sends a location service right confirmation request message to the user subscription information server, and the location service right
  • the confirmation request message is used to request the user subscription information server to determine whether the location service authority contracted by the target terminal allows obtaining a key; the management network element receives a location service authority confirmation response message sent by the user subscription information server;
  • the management network element determines whether the positioning service authority contracted by the target terminal allows obtaining a key according to the positioning service authority confirmation response message; wherein, if the positioning service authority confirmation response message carries the positioning service authority contracted by the target terminal If the indication information for obtaining the key is allowed and / or the location service authority contracted by the target terminal is carried, the management network element determines that the terminal is allowed to obtain the key.
  • the management network element sends a location service authority confirmation request message to the user subscription information server, where the location service authority confirmation request message is used to request the user subscription information server to determine the user stored in the user subscription information server
  • the location service right contracted by the target terminal and determining whether the location service right contracted by the target terminal permits obtaining the key; if the management network element determines that the location service permission contracted by the target terminal permits obtaining the key, then according to the The location service right confirmation response message carried in the location service right subscribes to the location service right subscribed by the target terminal, and obtains the key corresponding to the location service right subscribed by the target terminal from the key stored in the management network element.
  • the management network element sends a positioning service authority confirmation request message to the user subscription information server, and the positioning service authority confirmation request message carries the positioning service authority stored in the management network element and contracted by the target terminal, the The location service permission confirmation request message is used to request the user subscription information server to determine whether the location service permission contracted by the target terminal allows obtaining a key according to the location service permission contracted by the target terminal; if the management network element determines the The location service authority contracted by the target terminal allows obtaining a key, then the location service authority contracted by the target terminal stored by the management network element is acquired according to the information of the target terminal, and obtained according to the location service authority contracted by the target terminal A key corresponding to the location service authority stored by the management network element.
  • the first request message is an attachment request message
  • the positioning service authority confirmation request message is an access authentication request message sent by the management network element according to the attachment request message
  • the positioning service authority confirmation response The message is an access authentication response message
  • the management network element determining whether the positioning service authority contracted by the target terminal allows obtaining a key includes: the management network element acquiring the target terminal subscription stored by the management network element according to the information of the target terminal The location service authority of the target terminal, and determine whether the location service authority contracted by the target terminal allows access to the key; if it is determined that the location service authority contracted by the target terminal allows access to the key, the location service permission contracted by the target terminal is obtained A key corresponding to the location service authority stored by the management network element.
  • the method further includes: before receiving the first request message, the management network element receives a request message for adding a terminal location service right from a user subscription information server, where the location service right request message carries a request The location service authority of the added terminal; or, after receiving the first request message, the management network element sends a request message to update the location service authority to the user subscription information server, and receives the updated location sent by the user subscription information server A response message for service authority, the response message carrying an updated terminal location service authority.
  • the management network element determining whether the positioning service authority contracted by the target terminal allows obtaining a key includes: the management network element determining whether the first request message carries positioning service contract authentication information; if the The first request message carries location service contract authentication information, and then determines the location service authority contracted by the target terminal, and the location service authority contracted by the target terminal allows obtaining a key.
  • the location service contract authentication information is the target terminal if the management network element determines that the location service right contracted by the target terminal allows access to a key when the target terminal initially accesses distributed.
  • the management network element determining whether the location service right contracted by the target terminal allows obtaining a key includes: the management network element sending a location service right information acquisition request message to the location server, wherein, the The location service authority information acquisition request message is used by the location server to acquire the location service authority contracted by the target terminal stored by the location server according to the information of the target terminal, and determine whether the location service authority contracted by the target terminal is allowed Obtain a key; the management network element receives a positioning service authority confirmation response message sent by the positioning server, and determines whether the positioning service authority contracted by the target terminal allows obtaining a key according to the positioning service authority confirmation response message; wherein If the positioning server determines that the positioning service authority contracted by the target terminal allows obtaining a key, the positioning service authority confirmation response message sent by the positioning server carries the positioning service authority contracted by the target terminal to allow obtaining the key Instructions and / or carry the item The location service right contracted by the terminal; if the location server determines that the location service right contracted by the target terminal allows obtaining a key, the
  • the management network element determining whether the location service right contracted by the target terminal allows obtaining a key includes: the management network element sends a location service right information acquisition request message to a user subscription information server, so that the The user subscription information server sends a location service permission information acquisition request message to the business entity and receives a location service permission information acquisition response sent by the business entity, wherein the location service permission information acquisition request message is used by the business entity according to Acquiring information of the target terminal to obtain the location service right subscribed by the target terminal stored by the business entity, and determining whether the location service right subscribed by the target terminal allows obtaining a key; the management network element receives the user subscription information Obtaining the response message of the location service authority information sent by the server, and determining whether the location service authority contracted by the target terminal allows obtaining a key according to the response message of the location service authority information acquisition; wherein, if the business entity determines the target terminal Contracted location service permissions If the key is allowed to be obtained, the location service permission information acquisition response message sent by the business entity
  • the management network element determining whether the location service authority contracted by the target terminal allows obtaining a key includes: the management network element sends a location service authority information acquisition request message to the location server to enable the The location server sends a location service permission information acquisition request message to the business entity and receives a location service permission information acquisition response sent by the business entity, wherein the location service permission information acquisition request message is used by the business entity according to the target
  • the information of the terminal acquires the location service right contracted by the target terminal stored by the business entity, and determines whether the location service right contracted by the target terminal allows obtaining a key
  • the management network element receives the location sent by the location server Obtaining a response message of service authority information, and determining whether the positioning service authority contracted by the target terminal allows obtaining a key according to the response message of the positioning service authority information acquisition; wherein, if the business entity determines the positioning service contracted by the target terminal Permission to obtain the key, then the The location service authority information acquisition response message sent by the business entity carries the indication information that the location service authority contracted
  • the management network element determining whether the location service authority contracted by the target terminal allows obtaining a key includes: the management network element sends a location service authority information acquisition request message to a business entity, wherein the location service The authority information acquisition request message is used by the business entity to acquire the location service authority contracted by the target terminal stored by the business entity according to the information of the target terminal, and determine whether the location service authority contracted by the target terminal allows access to the secret The key; the management network element receives a positioning service authority confirmation response message sent by the business entity, and determines whether the positioning service authority contracted by the target terminal is allowed to obtain a key according to the positioning service authority confirmation response message; wherein, if The business entity determines that the location service authority contracted by the target terminal allows obtaining a key, and then the location service authority information acquisition response message sent by the business entity carries the location service authority contracted by the target terminal to allow obtaining the key And / or carry the target terminal to sign a contract Location service authority; if the business entity determines that the location service authority contracted by the target terminal permits
  • the different positioning service rights stored in the management network element allow the obtained key to be configured by the positioning server.
  • the management network element is AMF or MME.
  • a management network element including: a receiving module for receiving a first request message from a target terminal; a determining module for determining whether the positioning service authority contracted by the target terminal allows obtaining a key; The determining module is further configured to send a first response message to the target terminal if it is determined that the positioning service authority contracted by the target terminal allows obtaining a key, and the first response message carries the positioning contracted by the target terminal.
  • the service authority allows the obtained key, which is used to decrypt the broadcasted network auxiliary data.
  • the first request message carries key acquisition instruction information, and the key acquisition instruction information is used to request acquisition of a key for decrypting broadcast network assistance data.
  • the first request message is an attachment request message
  • the first response message is an attachment acceptance message
  • the first request message is a tracking area update request message
  • the first response message is a tracking area update Accept the message.
  • the determining module is specifically configured to send a positioning service authority confirmation request message to the user subscription information server, and the positioning service authority confirmation request message is used to request the user subscription information server to determine the target terminal's contract Whether the location service authority allows to obtain the key;
  • the receiving module is further configured to: receive a location service authority confirmation response message sent by the user subscription information server; determine the target terminal's contract based on the location service authority confirmation response message Whether the location service permission allows obtaining the key; wherein, if the location service permission confirmation response message carries the indication information that the location service permission contracted by the target terminal allows access to the key and / or the location service permission contracted by the target terminal , The management network element determines that the terminal is allowed to obtain a key.
  • the management network element sends a location service authority confirmation request message to the user subscription information server, where the location service authority confirmation request message is used to request the user subscription information server to determine the user stored in the user subscription information server
  • the location service right contracted by the target terminal and determining whether the location service right contracted by the target terminal permits obtaining the key; if the management network element determines that the location service permission contracted by the target terminal permits obtaining the key, then according to the The location service right confirmation response message carried in the location service right subscribes to the location service right subscribed by the target terminal, and obtains the key corresponding to the location service right subscribed by the target terminal from the key stored in the management network element.
  • the management network element sends a positioning service authority confirmation request message to the user subscription information server, and the positioning service authority confirmation request message carries the positioning service authority stored in the management network element and contracted by the target terminal, the The location service permission confirmation request message is used to request the user subscription information server to determine whether the location service permission contracted by the target terminal allows obtaining a key according to the location service permission contracted by the target terminal; if the management network element determines the The location service authority contracted by the target terminal allows obtaining a key, then the location service authority contracted by the target terminal stored by the management network element is acquired according to the information of the target terminal, and obtained according to the location service authority contracted by the target terminal A key corresponding to the location service authority stored by the management network element.
  • the first request message is an attachment request message
  • the positioning service authority confirmation request message is an access authentication request message sent by the management network element according to the attachment request message
  • the positioning service authority confirmation response The message is an access authentication response message
  • the determination module is specifically configured to: obtain the location service right contracted by the target terminal stored by the management network element according to the information of the target terminal, and determine whether the location service right contracted by the target terminal is allowed to be obtained A key; if it is determined that the location service right contracted by the target terminal allows obtaining a key, then a key corresponding to the location service right stored by the management network element is obtained according to the location service right contracted by the target terminal.
  • the management network element is further configured to: before receiving the first request message, receive a request message from a user subscription information server to add a terminal location service right, where the location service right request message carries a request to add The location service authority of the terminal; or, after receiving the first request message, send a request message for updating the location service authority to the user subscription information server, and receive a response message for updating the location service authority sent by the user subscription information server, The response message carries the updated terminal positioning service authority.
  • the determination module is specifically configured to: determine whether the first request message carries positioning service contract authentication information; if the first request message carries positioning service contract authentication information, determine whether the target terminal has contracted The location service authority and the location service authority contracted by the target terminal allow obtaining a key.
  • the determining module is specifically configured to send a positioning service authority information acquisition request message to the positioning server, wherein the positioning service authority information acquisition request message is used by the positioning server according to the target terminal ’s Obtaining the location service authority contracted by the target terminal stored in the location server and determining whether the location service authority contracted by the target terminal allows obtaining a key; the receiving module is further configured to receive The location service permission confirmation response message of the server, and according to the location service permission confirmation response message, determine whether the location service permission contracted by the target terminal allows obtaining a key; wherein, if the location server determines that the location service permission contracted by the target terminal permits If the key is obtained, the positioning service permission confirmation response message sent by the positioning server carries the location service permission contracted by the target terminal and allows the key to be obtained, and / or carries the location service permission contracted by the target terminal ; If the positioning server determines If the location service authority contracted by the target terminal allows obtaining a key, the management network element further obtains the location contracted by the target terminal from the key stored in the management network
  • the determination module is specifically configured to: send a location service authority information acquisition request message to a user subscription information server, so that the user subscription information server sends a location service authority information acquisition request message to a business entity, and receive A location service permission information acquisition response sent by the business entity, wherein the location service permission information acquisition request message is used by the business entity to acquire the location contracted by the target terminal stored by the business entity based on the target terminal information Service authority, and determine whether the positioning service authority contracted by the target terminal allows obtaining a key; the receiving module is further configured to: receive a positioning service authority information acquisition response message sent by the user subscription information server, and according to the The location service authority information acquisition response message determines whether the location service authority contracted by the target terminal allows obtaining a key; wherein, if the business entity determines that the location service authority contracted by the target terminal allows access to a key, the business entity The positioning service sent The service permission information acquisition response message carries the location service permission that the target terminal has contracted to allow obtaining the key indication information and / or the location service permission that the
  • the determination module is specifically configured to: send a positioning service authority information acquisition request message to the positioning server, so that the positioning server sends a positioning service authority information acquisition request message to a business entity, and receive the service A location service authority information acquisition response sent by an entity, wherein the location service authority information acquisition request message is used by the business entity to acquire the location service authority contracted by the target terminal stored by the business entity based on the information of the target terminal And determine whether the location service authority contracted by the target terminal allows obtaining a key; the receiving module is further used to:
  • the location service authority information acquisition response message sent by the business entity carries the indication information that the location service permission contracted by the target terminal allows obtaining the key and / or Or carrying the location service right contracted by the target terminal; if the business entity determines that the location service right contracted by the target terminal allows obtaining a key, the management network element further obtains a response message according to the received location service permission information Obtain the key corresponding to the location service right contracted by the target terminal from the key stored in the management network element.
  • the determination module is specifically configured to send a location service authority information acquisition request message to a business entity, wherein the location service authority information acquisition request message is used by the business entity to acquire information based on the target terminal The location service authority contracted by the target terminal stored by the business entity, and determining whether the location service authority contracted by the target terminal allows obtaining a key;
  • the receiving module is further configured to: receive the location sent by the business entity A service authority confirmation response message, and determining whether the positioning service authority contracted by the target terminal is allowed to obtain a key according to the positioning service authority confirmation response message; wherein, if the business entity determines that the positioning service authority contracted by the target terminal is allowed Obtain the key, and the location service authority information acquisition response message sent by the business entity carries the location service authority contracted by the target terminal and allows the key to be obtained, and / or the location service contracted by the target terminal Authority; if the business entity determines the target If the location service authority contracted by the terminal allows obtaining a key, the management network element further obtains the location service authority contracted by the target terminal from
  • a communication device including: a processor, a memory, and a transceiver; the transceiver is used to receive or send information under the control of the processor; and the processor is used to read the The computer instructions in the memory execute the method described in the first aspect.
  • a computer-readable storage medium that stores computer-executable instructions for causing the computer to perform the method described in the first aspect.
  • FIG. 1 is a schematic diagram of an architecture of a positioning service system applicable to embodiments of the present application
  • FIG. 2 is a schematic diagram of an architecture of a positioning system in a 5G network provided by an embodiment of this application;
  • FIG. 3 is a schematic diagram of a positioning system architecture in a 4G network provided by an embodiment of this application;
  • FIG. 4 is a schematic diagram of a process for changing a location service authority provided by an embodiment of this application.
  • 5 to 9 are schematic diagrams of message interaction for location service authority key distribution provided by embodiments of the present application.
  • FIG. 10 is a schematic structural diagram of a management network element provided by an embodiment of the present application.
  • FIG. 11 is a schematic structural diagram of a communication device provided by an embodiment of the present application.
  • the term “plurality” refers to two or more, and other quantifiers are similar.
  • FIG. 1 is a schematic diagram of an architecture of a positioning system applicable to an embodiment of the present application.
  • the figure exemplarily lists some network elements in the positioning system related to the embodiment of the present application, including a management network element 103 located in a core network and a user subscription.
  • Information server 104 and positioning server 105 are included in the management network element 103.
  • the management network element 103 can perform management functions such as mobility management
  • the user subscription information server 104 can store user subscription information
  • the positioning server 105 can provide positioning services.
  • the positioning server 105 may store the positioning service authority of the terminal 101 and the key corresponding to the positioning service authority; in other embodiments, the user subscription information server 104 may store the positioning of the terminal 101 Service authority, and determine the corresponding location service authority according to the contract information of the terminal 101. In other embodiments, the management network element 103 may store the location service right of the terminal 101 and the key corresponding to the location service right.
  • the terminal 101 initiates a request message for obtaining a key to the base station 102, and the base station 102 sends the received request message for obtaining a key to the management network of the core network to which the terminal 101 belongs.
  • the management network element 103 can determine whether the terminal 101 is allowed to obtain the key and obtain the key corresponding to the location service authority of the terminal when it is determined that the key is allowed to be obtained, and This key is sent to the terminal 101.
  • the management network element 103 performs information interaction with the user subscription information server 104 to determine whether the terminal 101 is allowed to obtain a key and obtain a key corresponding to the terminal's location service authority if the terminal 101 is allowed to obtain the key.
  • the management network element 103 and the positioning server 105 perform information interaction to determine whether the terminal 101 is allowed to obtain a key and obtain a key corresponding to the terminal's positioning service authority if the terminal 101 is allowed to obtain the key.
  • the key is used to decrypt the broadcasted network service data.
  • the business entity 106 may store the location service authority of the terminal 101.
  • the management network element 103 may perform information interaction with the service entity 106 through the user subscription information server 104 or positioning server 105 to determine whether the terminal 101 is allowed to obtain the key and the terminal is allowed to obtain the key. In this case, the location service authority of the terminal 101 is obtained, and the corresponding key is determined and sent to the terminal 101 based on the authority.
  • the above-mentioned business entity 106 stores the location service authority of the terminal 101.
  • the business entity 106 can determine whether the terminal 101 is allowed to obtain a key according to the contracted service information of the terminal 101 and the location service authority of the terminal 101 when the key is allowed to be obtained.
  • the business entity 106 is an organization or unit outside the communication system, such as a relevant official agency such as the Geographic Information Surveying and Mapping Bureau, which is not limited in this application.
  • the management network element 103 involved in FIG. 1 may be a Mobility Management Entity (Mobility Management Entity) in a 4G network positioning system, or an AMF (Access and Mobility Management Function) in a 5G network positioning system.
  • the user subscription information server 104 can be the home subscription server HSS (Home Subscriber Server, home subscription server) in the 4G network positioning system, or the unified data management UDM (Unified Data) in the 5G network positioning system. Management, unified data management); the positioning server 105 can be an evolved E-SMLC (Evolved Serving Mobile Location Center) in a 4G network positioning system, or an LMF (Location Management Function) in a 5G network positioning system , Location management function).
  • E-SMLC Evolution Serving Mobile Location Center
  • LMF Location Management Function
  • FIG. 2 is a schematic diagram of an architecture of a positioning system in a 4G network to which an embodiment of the present application is applied.
  • the figure exemplarily lists some network elements related to the embodiment of the present application.
  • the base station (eNodeB) 204 receives the request message sent by the terminal (UE) 205 to obtain the key through LTE-Uu, and forwards the request message to the MME 202 to which the UE belongs; the MME 202 receives it through S1 After receiving the request message for obtaining the key, exchange information through SLs and E-SMLC 203 to obtain key information, and through S6a and HSS 201 to exchange information to obtain whether the UE is allowed to obtain the key and the case where the key is allowed to be obtained Corresponding location service authority.
  • FIG. 3 is a schematic diagram of a positioning system architecture in a 5G network to which the embodiments of the present application are applicable.
  • the figure exemplarily lists some network elements related to the embodiments of the present application.
  • the NG-RAN (Next Generation Radio Access Networks, radio access network) node 304 receives a request message sent by the UE (terminal) 305 to obtain a key, and sends the request through N2 The message is forwarded to the AMF 302 to which the UE belongs; or, the AMF 302 directly receives the request message sent by the UE to obtain the key through N1.
  • the NG-RAN Next Generation Radio Access Networks, radio access network
  • the AMF 302 exchanges information with the LMF 303 through NLs to obtain key information, and exchanges information with the UDM 303 through N8 to obtain whether the UE is allowed to obtain the key and the corresponding location service authority when the key is allowed to be obtained.
  • N1, N2, and NLs in the above embodiments represent communication ports used to support information transmission between devices and devices, devices and network elements, and between network elements and network elements in 5G networks. This application The embodiment does not limit this.
  • the interaction between 5G network functions can use a service-based interaction method, that is, the message interaction between network functions is implemented according to the method of service invocation, that is, the service-based interface method can be supported in the location service information interaction .
  • FIG. 4 it is a flowchart of a positioning service key distribution method provided by an embodiment of the present application. As shown in the figure, the process includes:
  • S401 The management network element located in the core network receives the first request message from the target terminal.
  • the management network element located in the core network is a control plane network element, which can be a network element with mobility management function, for example, it can be an MME in a 4G network positioning system or a 5G positioning network system.
  • AMF the network auxiliary data is configured in the management network element.
  • the first request message may be an attachment request message or a tracking area update request message.
  • the terminal carries key acquisition instruction information in the attachment request message or tracking area update request message, and the key acquisition instruction information is used to request acquisition of network assistance data for decrypting broadcast.
  • the management network element determines whether the location service right contracted by the target terminal allows obtaining a key, and if it is determined that the location service right contracted by the target terminal allows access to the key, then sends a first response message to the target terminal.
  • the location service right is the location service right, which can indicate whether it is allowed to obtain a key, which is used to decrypt the broadcast network auxiliary data.
  • the key allowed by the location service authority may include one or more keys, and more specifically, may include one or more keys corresponding to the tracking area.
  • a kind of authority is: the terminal is allowed to obtain the key A in the tracking area A, so as to decrypt the broadcasted network auxiliary data.
  • the key may be a key used in a specific area (such as a tracking area), and is called a key corresponding to the tracking area.
  • the terminal has contracted a certain location service, and the authority of the location service is to allow a certain area (tracking area) to obtain the key used in the area, so that the first response message can be carried in the area
  • the first response message sent to the target terminal is an attachment acceptance message; if the first request message received by the management network element is a tracking area update request message , The first response message sent to the target terminal is a tracking area update acceptance message.
  • the first response message may carry a key corresponding to the location service right contracted by the target terminal, and the key is used for the target terminal Decrypt broadcast network auxiliary data.
  • Each key can correspond to the configuration validity period, applicable tracking area set and key type.
  • the tracking area set includes at least one tracking area.
  • the key type may be permanent or temporary. If it is a temporary key, the key configuration has a validity period.
  • the management network element can determine whether it is allowed to obtain a key according to the terminal's contract information, and only distribute the key corresponding to the terminal location service right to the terminal when the key is allowed to be obtained.
  • the management network element stores keys that are allowed by different location service permissions.
  • the management network element sends a location service determination request to the user subscription information server.
  • the permission confirmation request message is used to request the user subscription information server to determine whether the location service permission contracted by the target terminal allows obtaining the key;
  • the management network element receives the location service permission confirmation response message sent by the user subscription information server, and confirms the response message according to the location service permission confirmation Determine whether the location service authority contracted by the target terminal allows access to the key; where, if the location service authority confirmation response message carries the location service permission contracted by the target terminal to obtain the instruction information for obtaining the key and / or the location service permission contracted by the target terminal .
  • the above is used to request the user to subscribe to the information server to determine whether the location service authority contracted by the target terminal allows to obtain the key and its response.
  • the location service authority is used to determine the request message and the location service authority respectively. Confirmation response message refers to.
  • the location service authority information contracted by the terminal is stored in the user subscription information server, that is, the user subscription information server determines the location service authority contracted by the target terminal, and determines whether the location service authority contracted by the target terminal allows obtaining a key. If the user subscription information server determines that the location service authority contracted by the target terminal allows access to the key, the location service authority contracted by the target terminal is acquired and the location service permission confirmation response message of the target terminal carries instructions indicating that the target terminal contracted location service permission permits access to the key And / or carry the location service authority of the target terminal; after the location authority confirmation response message received by the management network element, the location service authority contracted by the target terminal carried in the location service authority confirmation response message is taken from the key stored in the management network element Obtain the key corresponding to the location service right contracted by the target terminal.
  • the management network element receives the keys allowed by the different positioning service rights sent by the positioning server, and stores the received keys allowed by the different positioning service rights sent by the positioning server; the user subscription information
  • the server receives the positioning service right contracted by the target terminal sent by the positioning server, and stores the received positioning service right contracted by the target terminal.
  • the location service authority information contracted by the terminal is stored in the management network element, the management network element determines the location service authority contracted by the target terminal or the location service authority information contracted by the target terminal, and the determined location service contracted by the target terminal is determined
  • the authority is carried in the location service authority confirmation request message and sent to the user subscription information server; the user subscription information server determines whether the location service authority of the target terminal is allowed to obtain the key according to the location service authority contracted by the target terminal determined by the management network element.
  • the management network element determines that the location service authority contracted by the target terminal permits obtaining the key, the location service authority contracted by the target terminal stored by the management network element is obtained according to the information of the target terminal, and the management network element is acquired according to the location service authority contracted by the target terminal The stored key corresponding to the location service authority.
  • the information of the target terminal may include one or more of the target terminal's identifier, the target terminal's address information, the target terminal's contract information (such as the target's location service authority), etc., which is not limited in this application.
  • the information of the target terminal is used by the service entity or the network element located in the core network to determine the location service right of the target terminal or the indication information of the location service right of the target terminal according to the information.
  • the positioning service confirmation request message is an access authentication request message sent by the management network element according to the attachment request message
  • the positioning service confirmation message is an access authentication response message
  • the management network element stores keys that are allowed by different location service permissions and location service permissions contracted by different terminals; the management network element determines whether the location service permissions contracted by the target terminal are allowed Obtaining the key includes: the management network element obtains the location service authority contracted by the target terminal stored by the management network element according to the information of the target terminal, and determines whether the location service authority contracted by the target terminal allows obtaining the key; If the service authority allows to obtain the key, the key corresponding to the location service authority stored in the management network element is obtained according to the location service authority contracted by the target terminal.
  • the management network element before receiving the first request message, receives a request message from a user subscription information server to add a terminal location service right, which carries location service rights contracted by different terminals; or, the management network element receives the first request message After that, a request message for updating the location service authority is sent to the user subscription information server, and a response message for updating the location service authority sent by the user subscription information server is received, and the response message carries the location service authority contracted by different terminals.
  • the management network element determines whether the first request message carries positioning service contract authentication information; if the first request message carries positioning service contract authentication information, the positioning service contracted by the target terminal is determined The authority and the location service authority contracted by the target terminal allow obtaining the key. Wherein, the location service contract authentication information is assigned to the target terminal when the target terminal is initially accessed, and the management network element determines that the location service permission of the target terminal contract is allowed to obtain the key.
  • the location service permission information contracted by the terminal is stored in the location server, and the keys obtained by different location service permissions are stored in the management network element.
  • the management network The yuan determines whether the location service authority contracted by the target terminal allows obtaining a key, including: the management network element sends a location service authority information acquisition request message to the location server, where the location service authority information acquisition request message is used by the location server according to the target terminal information Obtain the location service authority contracted by the target terminal stored by the location server, and determine whether the location service authority contracted by the target terminal allows obtaining a key; the management network element receives the location service permission confirmation response message sent by the location server and confirms the response according to the location service permission The message determines whether the location service right contracted by the target terminal allows obtaining the key; if the location server determines that the location service right contracted by the target terminal allows access to the key, the location service permission confirmation response message sent by the location server carries the target The location service permission of the terminal contract allows
  • the management network element stores keys that are allowed to be obtained by different location service permissions, and the business entity stores location service permission information contracted by the terminal.
  • the management network element determines Whether the location service authority contracted by the target terminal allows obtaining the key includes: the management network element sends a location service authority information acquisition request message to the user subscription information server, so that the user subscription information server sends the location service authority information acquisition request message to the business entity, And receive the location service permission information acquisition response sent by the business entity, wherein the location service permission information acquisition request message is used by the business entity to acquire the location service permission of the target terminal contracted by the business entity according to the information of the target terminal, and determine the target terminal contract Whether the location service permission allows to obtain the key; the management network element receives the location service permission information acquisition response message sent by the user subscription information server, and determines whether the location service permission contracted by the target terminal is permitted according to the location service permission information acquisition response message The key may be obtained; wherein, if the business entity determines
  • the management network element determining whether the location service authority contracted by the target terminal allows obtaining the key may include: the management network element sends a location service authority information acquisition request message to the location server, so that the location server sends the location service authority to the business entity An information acquisition request message, and receiving a location service authority information acquisition response sent by a business entity, wherein the location service authority information acquisition request message is used by the business entity to acquire the location service authority contracted by the target terminal stored by the business entity based on the target terminal information, and Determine whether the location service authority contracted by the target terminal allows obtaining the key; the management network element receives the location service authority information acquisition response message sent by the location server, and determines whether the location service authority contracted by the target terminal is allowed to be acquired according to the location service authority information acquisition response message Key; where, if the business entity determines that the location service authority contracted by the target terminal allows access to the key, the location service authority information sent by the business entity obtains the location service right contracted by the target terminal in the response message Allowed to obtain the instruction information of the key and
  • the business entity directly interacts with the management network element.
  • the management network element determines whether the positioning service authority contracted by the target terminal allows obtaining a key, including: The business entity sends a location service permission information acquisition request message, where the location service permission information acquisition request message is used by the business entity to acquire the location service permission of the target terminal contracted by the business entity based on the information of the target terminal and determine the location service contracted by the target terminal Whether the permission allows the key to be obtained; the management network element receives the location service permission confirmation response message sent by the business entity, and determines whether the location service permission contracted by the target terminal allows obtaining the key according to the location service permission confirmation response message; wherein, if the business entity determines If the location service authority contracted by the target terminal permits obtaining the key, the location service authority information acquisition response message sent by the business entity carries the location service permission contracted by the target terminal and allows the user to obtain the key instruction information and / or the location service contracted by the target terminal If the business entity determines
  • the following uses a positioning service system of a 5G network as an example to specifically describe the flow of a method for distributing a positioning service key provided by an embodiment of the present application by means of message interaction.
  • FIG. 5 it is a schematic diagram of message interaction in a positioning service key distribution process provided by an embodiment of the present application.
  • the UDM stores the location service authority contracted by the UE.
  • the process includes:
  • the AMF receives the keys allowed by the different positioning service permissions sent by the LMF.
  • the LMF sends in advance different positioning service permission permission to obtain keys to the LMF for storage.
  • a new UE accesses the core network to which the LMF belongs, or the corresponding key change is caused by the UE location service permission change, it will trigger S501 causes the LMF to send the key corresponding to the location service right contracted by the new UE or the key corresponding to the changed location service right of the UE to the LMF for storage.
  • the UE sends an attach request message or a TAU request message to the NG-RAN; the attach request message or the TAU request message can be sent as part of normal mobility management, or a TAU request message can be sent specifically to request the key to be acquired, and the UE attaches
  • the request message or the TAU request message carries instruction information for requesting to obtain decrypted broadcast network auxiliary data.
  • the NG-RAN receives the attach request message or TAU request message sent by the UE and forwards it to the AMF.
  • the AMF sends a location service permission confirmation request message to the UDM according to the received attachment request message or TAU request message, where the request message carries the location service permission information of the UE's contract.
  • the UDM returns a location service permission determination response message to the AMF according to the received location service permission confirmation request message, where the response message includes at least indication information for determining whether the location service permission contracted by the UE permits obtaining the key and permission to obtain the key In this case, the location service authority contracted by the UE.
  • the AMF sends an attachment acceptance message or a TAU acceptance message to the NG-RAN according to the received positioning service authorization determination response message; the AMF includes one or more current tracking areas applicable to the UE in the attachment acceptance message or the TAU acceptance message Key. Among them, each key configuration valid period applicable to the UE, tracking area set and key type.
  • the NG-RAN forwards the received attachment acceptance message or TAU acceptance message to the UE.
  • the UE can start to decrypt the broadcast using the received key Network-assisted data.
  • the UE stops using the key.
  • the UE stops using and deletes the key.
  • keys obtained by different location service rights and location service rights contracted by the UE are stored in the LMF.
  • the LMF sends the keys obtained by different location service permissions to the AMF, and the AMF saves the keys obtained by the different location service permissions; the LMF sends the location service permissions to the UDM, and then the UDM will receive The location service authority is saved; the other steps are the same as the process shown in Figure 5.
  • keys obtained by different location service permissions and location service permissions contracted by the UE are stored in the LMF.
  • the LMF sends the keys obtained by different location service rights and the location service rights contracted by the UE to the AMF.
  • the AMF can directly determine the location service rights contracted by the UE according to the attachment request message or the TUA request message sent by the UE. And whether the location service authority contracted by the UE allows access to the key. If it is determined to be allowed, the location service authority contracted by the UE and the corresponding key are further determined, that is, there is no need to interact with the UDM, and the other steps are the same as the process shown in FIG. 5 .
  • keys obtained by different location service permissions and location service permissions contracted by the UE are stored in the LMF.
  • the LMF sends the keys allowed by different location service rights and the location service rights contracted by the UE to the AMF.
  • the AMF sends a request message to the UDM by means of a request flow for access authentication data, and the request message carries the location service authority contracted by the UE determined by the AMF, and is used to request whether the location service of the UE is allowed to obtain a key;
  • the UDM receives the request message sent by the AMF and returns a response request message to the AMF, where the response request message includes at least indication information about whether the location service of the UE obtains the key.
  • the other steps are the same as the flow shown in FIG. 5.
  • keys obtained by different location service permissions and location service permissions contracted by the UE are stored in the LMF.
  • the LMF sends the keys allowed by different location service permissions to the AMF.
  • the AMF sends a location service permission request message to the LMF. The message is used to instruct the LMF to determine the location service permission contracted by the UE and determine whether the location service permission contracted by the UE permits obtaining the key.
  • the LMF sends a response to the location service authority message to the AMF according to the received location service authority request message, and the message carries indication information about whether the location service authority contracted by the UE is allowed to obtain the key, If it is determined that obtaining the key is allowed, the location service right contracted by the UE is also carried.
  • the other steps are the same as the flow shown in FIG. 5.
  • the above embodiments take the positioning service system of the 5G network as an example during the execution of S501 to S508.
  • the network elements in the positioning service system of the 4G network have changed, and the LMF in the positioning service system of the 5G network can be changed.
  • E-SMLC UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the UE when the UE accesses for the first time, and the AMF determines that the location service right subscribed by the UE allows access to the key, the UE is assigned location service contract authentication information.
  • the location service contract authentication information is stored in the UE and AMF.
  • the AMF can directly determine that the UE has passed the location service subscription authorization through the location service subscription authentication information.
  • FIG. 6 it is a schematic diagram of message interaction in a positioning service key distribution process provided by an embodiment of the present application.
  • the process includes:
  • the AMF receives the location service authority sent by the LMF and the keys allowed by different location service authorities.
  • the LMF sends the location service permission and different location service permission permission to obtain the key to the LMF for storage.
  • S601 will be triggered to cause the LMF to send the location service right signed by the new UE or the location service right after the UE change and their corresponding keys to the LMF for storage.
  • the UE sends a TAU request message to the NG-RAN; the TAU request message carries instruction information for requesting to obtain network auxiliary data decryption and location service contract authentication information of the UE.
  • the NG-RAN receives the TAU request message sent by the UE and forwards it to the AMF.
  • the AMF determines the location service authority contracted by the UE and whether the location service authority contracted by the UE allows obtaining the key according to the location service contract authentication information of the UE carried in the received TAU request message; and sends a TAU acceptance to the NG-RAN Message, AMF includes one or more keys applicable to the current tracking area of the UE in the TAU acceptance message. Among them, each key configuration valid period applicable to the UE, tracking area set and key type.
  • the NG-RAN forwards the received TAU acceptance message to the UE.
  • the UE can start decrypting the broadcasted network assistance data using the received key .
  • the UE stops using the key.
  • the UE stops using and deletes the key.
  • the above embodiments take the positioning service system of the 5G network as an example in the execution of S601 to S606.
  • the network elements in the positioning service system of the 4G network have changed, and the LMF in the positioning service system of the 5G network can be changed.
  • E-SMLC UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the location service authority contracted by the UE is stored in the UDM as part of the UE contract information, and the AMF can add insert (subscriber data) or update location request (Update location service permission request message) Obtain the location service permission contracted by the UE, so that the AMF can directly determine the location service permission contracted by the UE after receiving the key request message sent by the UE.
  • FIG. 7 it is a schematic diagram of message interaction in a positioning service key distribution process provided by an embodiment of the present application.
  • the process includes:
  • the AMF receives the keys allowed by the different positioning service permissions sent by the LMF.
  • the LMF sends in advance different positioning service permission permission to obtain keys to the LMF for storage.
  • a new UE accesses the core network to which the LMF belongs, or the corresponding key change is caused by the UE location service permission change, it will trigger S701 causes the LMF to send the key corresponding to the location service right contracted by the new UE or the key corresponding to the changed location service right of the UE to the LMF for storage.
  • the AMF sends a location service permission request message to the UDM to request the location service permission contracted by the UE.
  • the UDM sends a response to the AMF to add a location service permission message according to the received location service permission request message, and the message carries the location service permission contracted by the UE.
  • the AMF sends a location service permission update request message to the UDM to request the location service permission contracted by the UE.
  • the UDM sends a response to the location update service permission message to the AMF according to the received location update service permission request message, where the message carries the location service permission contracted by the UE.
  • S702-S703 and S706-S707 are two parallel process steps, both of which are used to obtain the location service authority contracted by the UE. That is, if S702 and S703 have been executed before S704, there is no need to execute S706 and S707. The same is true.
  • the above embodiments take the location service system of the 5G network as an example during the execution of S701 to S710.
  • the network elements in the location service system of the 4G network have changed, and the LMF in the location service system of the 5G network can be changed.
  • E-SMLC UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the storage and control of UE location service contract data is performed by a business entity, and the location service key distribution is completed through interaction with UDM.
  • FIG. 8 it is a schematic diagram of message interaction in a positioning service key distribution process provided by an embodiment of the present application.
  • the process includes:
  • the AMF After receiving the attach request message or the TAU request message, the AMF sends a location service permission update request message to the UDM to confirm the location service permission contracted by the UE.
  • the UDM sends a location service permission request message to the business entity to confirm the location service permission contracted by the UE .
  • the service entity sends a response to the location service permission message to the UDM according to the received location service permission request message, the message carries information to confirm whether the UE is allowed to obtain the key, and if it is confirmed that the UE allows the key to be obtained, then It also carries information about the location service authority of the UE.
  • the UDM sends a response update location service permission message to the AMF according to the received response location service permission message.
  • the message carries information to confirm whether the UE is allowed to obtain the key. It carries information about the UE's location service authority.
  • the above embodiments take the positioning service system of the 5G network as an example during the execution of S801 to S810.
  • the network elements in the positioning service system of the 4G network have changed, and the LMF in the positioning service system of the 5G network can be changed.
  • E-SMLC UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the storage and control of UE positioning service contract data is performed by a business entity, and the positioning service key distribution is completed through interaction with the LMF.
  • FIG. 9 it is a schematic diagram of message interaction in a positioning service key distribution process provided by an embodiment of the present application.
  • the process includes:
  • the AMF After receiving the attachment request message or the TAU request message, the AMF sends a location service permission request message to the LMF to confirm the location service permission contracted by the UE.
  • the LMF After receiving the location service permission request message sent by the AMF, the LMF forwards the UE location service subscription data to the business entity, so the LMF forwards it to the business entity to confirm the location service permission contracted by the UE.
  • the service entity sends a response to the location service permission message to the LMF according to the received location service permission request message, the message carries information to confirm whether the UE is allowed to obtain the key, and if it is confirmed that the UE allows the key to be obtained, then It also carries information about the location service authority of the UE.
  • the LMF sends the received response location service permission message to the AMF.
  • the AMF directly interacts with the business entity. After executing S901-S903, the AMF directly sends a location service permission request message to the business entity; after receiving the location service permission request message sent by the AMF, the business entity obtains the location service permission contracted by the UE and stored by the business entity according to the UE information.
  • the location service authority contracted by the UE Determine whether the location service authority contracted by the UE allows obtaining the key, and return a location service authority response message to the AMF; if the business entity determines that the location service authority contracted by the UE allows the key to be obtained, the location service authority response message carries the UE location service
  • the permission allows obtaining the indication information of the key and / or the location service permission contracted by the UE.
  • the above embodiments take the positioning service system of the 5G network as an example in the execution of S901 to S910.
  • the network elements in the positioning service system of the 4G network have changed, and the LMF in the positioning service system of the 5G network can be changed.
  • E-SMLC UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the embodiments of the present application also provide a management network element, which can implement the process shown in FIG. 4.
  • the management network element may include: a receiving module 1001 and a determining module 1002.
  • the receiving module 1001 is configured to receive the first request message from the target terminal.
  • the determining module 1002 is configured to determine whether the location service right contracted by the target terminal allows obtaining a key.
  • the determining module 1002 is further configured to send a first response message to the target terminal if it is determined that the location service authority contracted by the target terminal allows obtaining the key, and the first response message carries the key allowed by the location service authority contracted by the target terminal, The key is used to decrypt the broadcast network auxiliary data.
  • the first request message carries key acquisition instruction information, and the key acquisition instruction information is used to request acquisition of a key for decrypting broadcasted network assistance data.
  • the first request message is an attachment request message, and the first response message is an attachment acceptance message; or, the first request message is a tracking area update request message, and the first response message is a tracking area acceptance message.
  • the determining module is specifically configured to send a positioning service authority confirmation request message to the user subscription information server, and the positioning service authority confirmation request message is used to request the user subscription information server to determine the target terminal's contract Whether the location service authority allows to obtain the key;
  • the receiving module is further configured to: receive a location service authority confirmation response message sent by the user subscription information server; determine the target terminal's contract based on the location service authority confirmation response message Whether the location service permission allows obtaining the key; wherein, if the location service permission confirmation response message carries the indication information that the location service permission contracted by the target terminal allows access to the key and / or the location service permission contracted by the target terminal , The management network element determines that the terminal is allowed to obtain a key.
  • the management network element sends a location service authority confirmation request message to the user subscription information server, where the location service authority confirmation request message is used to request the user subscription information server to determine the user stored in the user subscription information server
  • the location service right contracted by the target terminal and determining whether the location service right contracted by the target terminal permits obtaining the key; if the management network element determines that the location service permission contracted by the target terminal permits obtaining the key, then according to the The location service right confirmation response message carried in the location service right subscribes to the location service right subscribed by the target terminal, and obtains the key corresponding to the location service right subscribed by the target terminal from the key stored in the management network element.
  • the management network element sends a positioning service authority confirmation request message to the user subscription information server, and the positioning service authority confirmation request message carries the positioning service authority stored in the management network element and contracted by the target terminal, the The location service permission confirmation request message is used to request the user subscription information server to determine whether the location service permission contracted by the target terminal allows obtaining a key according to the location service permission contracted by the target terminal; if the management network element determines the The location service authority contracted by the target terminal allows obtaining a key, then the location service authority contracted by the target terminal stored by the management network element is acquired according to the information of the target terminal, and obtained according to the location service authority contracted by the target terminal A key corresponding to the location service authority stored by the management network element.
  • the first request message is an attachment request message
  • the positioning service authority confirmation request message is an access authentication request message sent by the management network element according to the attachment request message
  • the positioning service authority confirmation response The message is an access authentication response message
  • the determination module is specifically configured to: obtain the location service right contracted by the target terminal stored by the management network element according to the information of the target terminal, and determine whether the location service right contracted by the target terminal is allowed to be obtained A key; if it is determined that the location service right contracted by the target terminal allows obtaining a key, then a key corresponding to the location service right stored by the management network element is obtained according to the location service right contracted by the target terminal.
  • the management network element is further configured to: before receiving the first request message, receive a request message from a user subscription information server to add a terminal location service right, where the location service right request message carries a request to add The location service authority of the terminal; or, after receiving the first request message, send a request message for updating the location service authority to the user subscription information server, and receive a response message for updating the location service authority sent by the user subscription information server, The response message carries the updated terminal positioning service authority.
  • the determination module is specifically configured to: determine whether the first request message carries positioning service contract authentication information; if the first request message carries positioning service contract authentication information, determine whether the target terminal has contracted The location service authority and the location service authority contracted by the target terminal allow obtaining a key.
  • the location service contract authentication information is the target terminal if the management network element determines that the location service right contracted by the target terminal allows access to a key when the target terminal initially accesses distributed.
  • the determining module is specifically configured to send a positioning service authority information acquisition request message to the positioning server, wherein the positioning service authority information acquisition request message is used by the positioning server according to the target terminal ’s Obtaining the location service authority contracted by the target terminal stored in the location server and determining whether the location service authority contracted by the target terminal allows obtaining a key; the receiving module is further configured to receive The location service permission confirmation response message of the server, and according to the location service permission confirmation response message, determine whether the location service permission contracted by the target terminal allows obtaining a key; wherein, if the location server determines that the location service permission contracted by the target terminal permits If the key is obtained, the positioning service permission confirmation response message sent by the positioning server carries the location service permission contracted by the target terminal and allows the key to be obtained, and / or carries the location service permission contracted by the target terminal ;
  • the management network element further obtains the key from the key stored in the management network element according to the received positioning service authority confirmation response message. The key corresponding to the location service right contracted by the target terminal.
  • the determination module is specifically configured to: send a location service authority information acquisition request message to a user subscription information server, so that the user subscription information server sends a location service authority information acquisition request message to a business entity, and receive A location service permission information acquisition response sent by the business entity, wherein the location service permission information acquisition request message is used by the business entity to acquire the location contracted by the target terminal stored by the business entity based on the target terminal information Service authority, and determine whether the positioning service authority contracted by the target terminal allows obtaining a key; the receiving module is further configured to: receive a positioning service authority information acquisition response message sent by the user subscription information server, and according to the The location service authority information acquisition response message determines whether the location service authority contracted by the target terminal allows obtaining a key; wherein, if the business entity determines that the location service authority contracted by the target terminal allows access to a key, the business entity The positioning service sent The permission information acquisition response message carries the location service permission that the target terminal has contracted to allow obtaining the key indication information and / or the location service permission that the target
  • the determination module is specifically configured to: send a positioning service authority information acquisition request message to the positioning server, so that the positioning server sends a positioning service authority information acquisition request message to a business entity, and receive the service A location service authority information acquisition response sent by an entity, wherein the location service authority information acquisition request message is used by the business entity to acquire the location service authority contracted by the target terminal stored by the business entity based on the information of the target terminal And determine whether the location service authority contracted by the target terminal allows obtaining a key; the receiving module is further used to:
  • the location service authority information acquisition response message sent by the business entity carries the indication information that the location service permission contracted by the target terminal allows obtaining the key and / or Or carrying the location service right contracted by the target terminal; if the business entity determines that the location service right contracted by the target terminal allows obtaining a key, the management network element further obtains a response message according to the received location service permission information Obtain the key corresponding to the location service right contracted by the target terminal from the key stored in the management network element.
  • the determination module is specifically configured to send a location service authority information acquisition request message to a business entity, wherein the location service authority information acquisition request message is used by the business entity to acquire information based on the target terminal The location service authority contracted by the target terminal stored by the business entity, and determining whether the location service authority contracted by the target terminal allows obtaining a key;
  • the receiving module is further configured to: receive the location sent by the business entity A service authority confirmation response message, and determining whether the positioning service authority contracted by the target terminal is allowed to obtain a key according to the positioning service authority confirmation response message; wherein, if the business entity determines that the positioning service authority contracted by the target terminal is allowed Obtain the key, and the location service authority information acquisition response message sent by the business entity carries the location service authority contracted by the target terminal and allows the key to be obtained, and / or the location service contracted by the target terminal Authority; if the business entity determines that the target ends If the location service authority contracted by the terminal allows obtaining a key, the management network element further obtains the location service authority contracted by the target
  • the different positioning service rights stored in the management network element allow the obtained key to be configured by the positioning server.
  • the management network element is AMF or MME.
  • embodiments of the present application also provide a communication device, which can implement the function of managing a network element in the process shown in FIG. 10.
  • the communication device may include: a processor 1101, a memory 1102, a transceiver 1103, and a bus interface 1104.
  • the processor 1101 is responsible for managing the bus architecture and general processing, and the memory 1102 may store data used by the processor 1101 in performing operations.
  • the transceiver 1103 is used to receive and transmit data under the control of the processor 1101.
  • the bus architecture may include any number of interconnected buses and bridges, specifically, one or more processors represented by the processor 1101 and various circuits of the memory represented by the memory 1102 are linked together.
  • the bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, etc., which are well known in the art, and therefore, they will not be further described in this article.
  • the bus interface provides an interface.
  • the processor 1101 is responsible for managing the bus architecture and general processing, and the memory 1102 may store data used by the processor 1101 in performing operations.
  • the process disclosed in the embodiments of the present application may be applied to the processor 1101 or implemented by the processor 1101.
  • each step of the signal processing flow may be completed by an integrated logic circuit of hardware in the processor 1101 or instructions in the form of software.
  • the processor 1101 may be a general-purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, and may implement or execute the embodiments of the present application The disclosed methods, steps and logic block diagrams.
  • the general-purpose processor may be a microprocessor or any conventional processor.
  • the steps of the method disclosed in conjunction with the embodiments of the present application may be directly embodied and executed by a hardware processor, or may be executed and completed by a combination of hardware and software modules in the processor.
  • the software module may be located in a mature storage medium in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an electrically erasable programmable memory, and a register.
  • the storage medium is located in the memory 1102, and the processor 1101 reads the information in the memory 1102 and completes the steps of the signal processing flow in combination with its hardware.
  • the processor 1101 is configured to read computer instructions in the memory 1102 and execute the function of managing network elements in the process shown in FIG.
  • embodiments of the present application also provide a computer-readable storage medium.
  • the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to cause the computer to execute the process executed in FIG. 4.
  • These computer program instructions may also be stored in a computer readable memory that can guide a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, the instructions The device implements the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and / or block diagrams.
  • These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operating steps are performed on the computer or other programmable device to produce computer-implemented processing, which is executed on the computer or other programmable device
  • the instructions provide steps for implementing the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and / or block diagrams.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Databases & Information Systems (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本申请公开了一种定位服务密钥分发方法及其装置。该方法包括：位于核心网的管理网元接收来自于目标终端的第一请求消息；管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥；若管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则向所述目标终端发送第一响应消息，所述第一响应消息携带与所述目标终端签约的定位服务权限允许获得的密钥，所述密钥用于解密广播的网络辅助数据。

Description

一种定位服务密钥分发方法及其装置
相关申请的交叉引用
本申请要求在2018年10月10日提交中国专利局、申请号为201811176764.0、申请名称为“一种定位服务密钥分发方法及其装置”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及无线通信技术领域，尤其涉及一种定位服务密钥分发方法及其装置。
背景技术
LCS(Location Services，定位服务)技术可以实现位置服务的开发和应用，还可以用于计费、合法监听、紧急呼叫等业务。在3GPP(Third Generation Partnership Project,第三代合作计划)网络中，通过LCS技术可以实现对用户进行定位。目前在3GPP标准中可用的定位方法有GPS(Global Positioning System,全球定位系统)定位、卫星增强的系统定位、网络辅助的定位方法，基于UE(User Equipment，终端也称用户设备)的信息的定位方法，通过传感器的定位方法等。
通过LCS获得的位置信息包含地理位置信息、速度、城市位置以及服务质量等。其中对于一些定位方法，UE可接收网络侧广播的辅助数据，并使用所述辅助数据自行进行定位计算，这些辅助数据可以被一个或多个加密密钥进行加密。
以第四代网络定位系统为例，上述辅助数据的加密密钥的分发流程为：演进的E-SMLC(Evolved Serving Mobile Location Center,服务移动位置中心)向移动性管理实体MME(Mobility Management Entity,移动性管理实体)发送携带一个或多个密钥的密钥数据消息，该密钥用于对广播的辅助数据进行解 密，其中对应于每个密钥可设置有效期、一组适用的跟踪区域和密钥的类型；MME接收并存储密钥；UE向eNodeB(基站)发送附着请求消息或TAU(Tracking Area Update,跟踪区域更新)请求消息，其中包括请求密钥的指示；基站接收附着请求消息或TAU请求消息并将其转发给MME；MME接收附着请求消息或TAU请求消息后，向基站返回附着接受消息或TAU接受消息。UE接收到附着接受消息或TAU接受消息后，一旦密钥的有效期已经开始并且UE当前处于适用的跟踪区域中，UE可以开始使用密钥来解密广播的辅助数据。当进入不适用于密钥的跟踪区域时，UE停止使用密钥。
但在实际过程中并不是所有附着在网络中的UE都有权限使用密钥，因此会导致网络不知道是否需要为接入的UE分发密钥，或导致未签约定位服务的UE接收到密钥。
发明内容
本申请实施例提供一种定位服务密钥分发方法及其装置，用以根据终端的定位服务权限分发密钥。
第一方面，提供一种定位服务密钥分发方法，包括：位于核心网的管理网元接收来自于目标终端的第一请求消息；所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥；若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端签约的定位服务权限允许获得的密钥，所述密钥用于解密广播的网络辅助数据。
在本申请的上述实施例中，若确定目标终端签约的定位服务权限允许获得密钥，则向目标终端发送第一响应消息，这样管理网元可根据终端的签约信息进行判断其是否允许获得密钥，在允许获得密钥的情况下才对终端分发终端定位服务权限对应的密钥。
可选地，所述第一请求消息携带密钥获取指示信息，所述密钥获取指示信息用于请求获取用于解密广播的网络辅助数据的密钥。
可选地，所述第一请求消息为附着请求消息，所述第一响应消息附着接受消息；或者，所述第一请求消息为跟踪区域更新请求消息，所述第一响应消息为跟踪区域更新接受消息。
可选地，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述目标终端签约的定位服务权限是否允许获得密钥；所述管理网元接收所述用户签约信息服务器发送的定位服务权限确认响应消息；所述管理网元根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述定位服务权限确认响应消息携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限，则所述管理网元确定所述终端允许获得密钥。
可选地，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述用户签约信息服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述定位服务权限确认响应消息携带的目标终端签约的定位服务权限，从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息携带所述管理网元存储的所述目标终端签约的定位服务权限，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器根据所述目标终端签约的定位服务权限确定所述目标终端签约的定位服务权限是否允许获得密钥；若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
可选地，所述第一请求消息为附着请求消息，所述定位服务权限确认请求消息为所述管理网元根据所述附着请求消息发送的接入认证请求消息，所述定位服务权限确认响应消息为接入认证响应消息。
可选地，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：所述管理网元根据目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；若确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
可选地，所述方法还包括：所述管理网元接收所述第一请求消息之前，接收来自用户签约信息服务器的添加终端定位服务权限的请求消息，所述定位服务权限的请求消息携带请求添加的终端的定位服务权限；或者，所述管理网元接收所述第一请求消息之后，向用户签约信息服务器发送更新定位服务权限的请求消息，并接收所述用户签约信息服务器发送的更新定位服务权限的响应消息，所述响应消息携带更新的终端定位服务权限。
可选地，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：所述管理网元确定所述第一请求消息是否携带定位服务签约认证信息；若所述第一请求消息携带定位服务签约认证信息，则确定所述目标终端签约的定位服务权限，以及所述目标终端签约的定位服务权限允许获得密钥。
可选地，所述定位服务签约认证信息是所述目标终端初始接入时，由所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥的情况下，为所述目标终端分配的。
可选地，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：所述管理网元向所述定位服务器发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述定位服务器根据所述目标终端的信息获取所述定位服务器存储的所述目标终端签约的 定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；所述管理网元接收所述定位服务器发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则所述定位服务器发送的所述定位服务权限确认响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限确认响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：所述管理网元向用户签约信息服务器发送定位服务权限信息获取请求消息，以使所述用户签约信息服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述管理网元接收所述用户签约信息服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元确定所述目标终端签约的定位服务权限是否允许 获得密钥，包括：所述管理网元向所述定位服务器发送定位服务权限信息获取请求消息，以使所述定位服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述管理网元接收所述定位服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：所述管理网元向业务实体发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述管理网元接收所述业务实体发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信 息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元存储的不同定位服务权限允许获得的密钥由所述定位服务器配置。
可选地，所述管理网元为AMF或MME。
第二方面，提供一种管理网元，包括：接收模块，用于接收来自于目标终端的第一请求消息；确定模块，用于确定所述目标终端签约的定位服务权限是否允许获得密钥；所述确定模块，还用于若确定所述目标终端签约的定位服务权限允许获得密钥，则向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端签约的定位服务权限允许获得的密钥，所述密钥用于解密广播的网络辅助数据。
可选地，所述第一请求消息携带密钥获取指示信息，所述密钥获取指示信息用于请求获取用于解密广播的网络辅助数据的密钥。
可选地，所述第一请求消息为附着请求消息，所述第一响应消息附着接受消息；或者，所述第一请求消息为跟踪区域更新请求消息，所述第一响应消息为跟踪区域更新接受消息。
可选地，所述确定模块，具体用于：向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述目标终端签约的定位服务权限是否允许获得密钥；所述接收模块，进一步用于：接收所述用户签约信息服务器发送的定位服务权限确认响应消息；根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述定位服务权限确认响应消息携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限，则所述管理网元确定所述终端允许获得密钥。
可选地，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器 确定所述用户签约信息服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述定位服务权限确认响应消息携带的目标终端签约的定位服务权限，从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息携带所述管理网元存储的所述目标终端签约的定位服务权限，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器根据所述目标终端签约的定位服务权限确定所述目标终端签约的定位服务权限是否允许获得密钥；若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
可选地，所述第一请求消息为附着请求消息，所述定位服务权限确认请求消息为所述管理网元根据所述附着请求消息发送的接入认证请求消息，所述定位服务权限确认响应消息为接入认证响应消息。
可选地，所述确定模块，具体用于：根据目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；若确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
可选地，所述管理网元，还用于：接收所述第一请求消息之前，接收来自用户签约信息服务器的添加终端定位服务权限的请求消息，所述定位服务权限的请求消息携带请求添加的终端的定位服务权限；或者，接收所述第一请求消息之后，向用户签约信息服务器发送更新定位服务权限的请求消息，并接收所述用户签约信息服务器发送的更新定位服务权限的响应消息，所述响应消息携带更新的终端定位服务权限。
可选地，所述确定模块，具体用于：确定所述第一请求消息是否携带定位服务签约认证信息；若所述第一请求消息携带定位服务签约认证信息，则确定所述目标终端签约的定位服务权限，以及所述目标终端签约的定位服务权限允许获得密钥。
可选地，所述确定模块，具体用于：向所述定位服务器发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述定位服务器根据所述目标终端的信息获取所述定位服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；所述接收模块，进一步用于：接收所述定位服务器发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则所述定位服务器发送的所述定位服务权限确认响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限确认响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述确定模块，具体用于：向用户签约信息服务器发送定位服务权限信息获取请求消息，以使所述用户签约信息服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述接收模块，进一步用于：接收所述用户签约信息服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的 所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述确定模块，具体用于：向所述定位服务器发送定位服务权限信息获取请求消息，以使所述定位服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述接收模块，进一步用于：
接收所述定位服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述确定模块，具体用于：向业务实体发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述接收模块，进一步用于：接收所述业务实体发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定 位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
第三方面，提供一种通信装置，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行第一方面中所述的方法。
第四方面，提供一种计算机可读存储介质，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行第一方面中所述的方法。
附图说明
图1为本申请实施例适用的定位服系统架构示意图；
图2为本申请实施例提供的5G网络中的定位系统架构示意图；
图3为本申请实施例提供的4G网络中的定位系统架构示意图；
图4为本申请实施例提供的定位服务权限变更流程示意图；
图5～图9分别为本申请实施例提供的定位服务权限密钥分发的消息交互示意图；
图10为本申请实施例提供的一种管理网元的结构示意图；
图11为本申请实施例提供的通信装置的结构示意图。
具体实施方式
以下，对本申请实施例中的部分用语进行解释说明，以便于本领域技术人员理解。
(1)本申请实施例中，名词“网络”和“系统”经常交替使用，但本领域的技术人员可以理解其含义。
(2)本申请实施例中术语“多个”是指两个或两个以上，其它量词与之类似。
(3)“和/或”，描述关联对象的关联关系，表示可以存在三种关系，例如，A和/或B，可以表示：单独存在A，同时存在A和B，单独存在B这三种情况。字符“/”一般表示前后关联对象是一种“或”的关系。
(4)“第一”用于区别类似的对象，而不必用于描述特定的顺序或先后次序。
下面结合附图对本申请实施例进行详细描述。
参见图1为本申请实施例适用的定位系统架构示意图，图中示例性地列举了与本申请实施例相关的定位系统中的部分网元，包括位于核心网中的管理网元103、用户签约信息服务器104和定位服务器105。其中，管理网元103可以执行移动性管理等管理功能，用户签约信息服务器104可以存储用户签约信息，定位服务器105可以提供定位服务。
基于图1所示的系统架构，本申请实施例可以实现定位服务相关的密钥分发。其中，可选地，在一些实施例中，定位服务器105可存储终端101的定位服务权限以及定位服务权限对应的密钥；在另一些实施例中，用户签约信息服务器104可存储终端101的定位服务权限，并根据终端101的签约信息确定其对应的定位服务权限。在其它实施例中，管理网元103可存储终端101的定位服务权限以及定位服务权限对应的密钥。
本申请实施例提供的密钥分发过程中，终端101向基站102发起获取密钥的请求消息，基站102将接收到的获取密钥的请求消息发送给终端101所归属的位于核心网的管理网元103；管理网元103接收到获取密钥的请求消息后可自行判断终端101是否允许获取密钥以及在判定允许获取密钥情况下获取该终端的定位服务权限所对应的密钥，并将该密钥发送给终端101。在另外的实施例中，管理网元103与用户签约信息服务器104进行信息交互进而判 断终端101是否允许获取密钥以及在判定允许获取密钥情况下获取该终端的定位服务权限对应的密钥。在其它例子中，管理网元103与定位服务器105进行信息交互进而判断终端101是否允许获取密钥以及在判定允许获取密钥情况下获取该终端的定位服务权限对应的密钥。其中，所述密钥用于解密广播的网络服务数据。
可选地，在另外的一些实施例中，业务实体106可存储终端101的定位服务权限。管理网元103在接收到获取密钥的请求消息后，可通过用户签约信息服务器104或定位服务器105与业务实体106进行信息交互以确定终端101是否允许获得密钥以及在终端允许获得密钥的情况下获得终端101的定位服务权限，并基于此权限确定对应的密钥发送给终端101。
上述业务实体106中存储有终端101的定位服务权限，业务实体106可根据终端101的签约服务信息判断该终端101是否允许获取密钥以及允许获取密钥的情况下该终端101的定位服务权限。具体地，该业务实体106为通信系统之外的机构或者单位，比如地理信息测绘局等相关官方机构，本申请对此不作限定。
图1中涉及的管理网元103可以是4G网络定位系统中的移动性管理实体MME)(Mobility Management Entity,移动性管理实体，也可以5G网络定位系统中的AMF(Access and Mobility Management Function，接入和移动管理功能)；用户签约信息服务器104可以是4G网络定位系统中的归属签约服务器HSS(Home Subscriber Server,归属签约服务器)，也可以是5G网络定位系统中的统一数据管理UDM(Unified Data Management，统一数据管理)；定位服务器105可以是4G网络定位系统中的演进的E-SMLC(Evolved Serving Mobile Location Center,服务移动位置中心)，也可以是5G网络定位系统中的LMF(Location Management Function，位置管理功能)。当然，上述网元的名称仅为示例，在其它网络，比如5G的演进网络中，上述各网元的名称将根据相关网络的网元命名规则进行命名，本申请实施例对此不做限制。
下面分别列举了4G网络定位系统的架构和5G网络定位系统的架构。
如图2所示为本申请实施例适用的4G网络中的定位系统架构示意图，该图中示例性地列举了与本申请实施例相关的部分网元。如图所示，基站(eNodeB)204通过LTE-Uu接收终端(UE)205发送的用以获取密钥的请求消息，并将该请求消息转发给UE所归属的MME 202；MME 202通过S1接收到获取密钥的请求消息后，通过SLs与E-SMLC 203进行信息交互获取密钥信息，通过S6a与HSS 201进行信息交互，以获取该UE是否允许获得密钥以及允许获得密钥的情况下对应的定位服务权限。
需要说明的是，上述实施例中的LTE-Uu、S1、SLs等英文缩写表示4G网络中用以支持在设备与设备、设备与网元、网元与网元之间信息传输的通信协议，本申请实施例对此不作限定。
如图3所示为本申请实施例适用的5G网络中的定位系统架构示意图。该图中示例性地列举了与本申请实施例相关的部分网元。如图所示，如图所示，NG-RAN(Next Generation Radio Access Networks，无线接入网)节点304接收UE(终端)305发送的用以获取密钥的请求消息，并通过N2将该请求消息转发给UE所归属的AMF 302；或者，AMF 302通过N1直接接收UE发送的用以获取密钥的请求消息。AMF 302通过NLs与LMF 303进行信息交互获取密钥信息，通过N8与UDM 303进行信息交互，以获取该UE是否允许获得密钥以及允许获得密钥的情况下对应的定位服务权限。
需要说明的是，上述实施例中的N1、N2、NLs等英文缩写表示5G网络中用以支持在设备与设备、设备与网元、网元与网元之间信息传输的通信端口，本申请实施例对此不作限定。
需要说明的是，5G网络功能之间的交互可以采用基于服务化的交互方式，即网络功能之间的消息交互按照服务调用的方式实现，即在定位服务信息交互中可支持基于服务的接口方式。
如图4所示，为本申请实施例提供的一种定位服务密钥分发方法的流程图。如图所示，该流程包括：
S401：位于核心网的管理网元接收来自于目标终端的第一请求消息。
其中，位于核心网的管理网元为控制面网元，可以是具有移动性管理功能的网元，举例来说，可以是4G网络定位系统的中的MME，也可以是5G定位网络系统中的AMF，该管理网元中配置网络辅助数据。
可选地，上述第一请求消息可以是附着请求消息也可以是跟踪区域更新请求消息。
可选地，终端在附着请求消息或跟踪区域更新请求消息中携带密钥获取指示信息，所述密钥获取指示信息用于请求获取用于解密广播的网络辅助数据。
S402：管理网元确定目标终端签约的定位服务权限是否允许获得密钥，若确定目标终端签约的定位服务权限允许获得密钥，则向目标终端发送第一响应消息。
其中，定位服务权限即为定位服务的权限，能够表明是否允许获得密钥，该密钥用于解密广播的网络辅助数据。定位服务权限允许获得的密钥可包括一个或多个密钥，更具体地，可包括一个或多个跟踪区域对应的密钥。比如一种权限为：终端在跟踪区域A被允许获得密钥A，以用于解密广播的网络辅助数据。所述密钥可以是特定区域(比如跟踪区)内使用的密钥，称为该跟踪区域对应的密钥。一个跟踪区域对应的密钥可以是一个或多个，不同跟踪区域对应的密钥可能不同。不同的密钥可以用于解密不同类型的网络辅助数据。例如：终端签约了某项定位服务，该定位服务的权限是允许在某个区域(跟踪区域)获得在该区域中使用的密钥，这样，在第一响应消息中可携带可在该区域中使用的密钥，从而使得该终端能够对广播的网络辅助数据进行解密，进而使用该网络辅助数据进行定位。
可选地，若管理网元接收的第一请求消息为附着请求消息，则向目标终端发送的第一响应消息为附着接受消息；若管理网元接收的第一请求消息为跟踪区域更新请求消息，则向目标终端发送的第一响应消息为跟踪区域更新接受消息。
可选地，若管理网元确定目标终端签约的定位服务权限允许获得密钥， 则可在第一响应消息中携带与目标终端签约的定位服务权限对应的密钥，该密钥用于目标终端解密广播的网络辅助数据。
每个密钥可对应配置有效期、适用的跟踪区域集和密钥类型。其中，跟踪区域集中至少包括一个跟踪区域。所述密钥类型可以是永久性，也可以是临时性，若是临时性的密钥，则该密钥配置存在有效期。
通过以上流程可以看出，管理网元可根据终端的签约信息进行判断其是否允许获得密钥，在允许获得密钥的情况下才对终端分发终端定位服务权限对应的密钥。
基于图4所示的流程，在一些实施例中，管理网元存储有不同定位服务权限允许获得的密钥，此种情况下，管理网元向用户签约信息服务器发送定位服务确定请求，定位服务权限确认请求消息用于请求用户签约信息服务器确定目标终端签约的定位服务权限是否允许获得密钥；管理网元接收用户签约信息服务器发送的定位服务权限确认响应消息，并根据定位服务权限确认响应消息确定目标终端签约的定位服务权限是否允许获得密钥；其中，若定位服务权限确认响应消息携带目标终端签约的定位服务权限是否允许获得密钥的指示信息和/或携带目标终端签约的定位服务权限。
需要说明的是，上述用于请求用户签约信息服务器确定目标终端签约的定位服务权限是否允许获得密钥以及其响应，本申请实施例中示例性地分别用定位服务权限确定请求消息和定位服务权限确认响应消息指代。
可选地，终端签约的定位服务权限信息存储在用户签约信息服务器，即用户签约信息服务器确定目标终端签约的定位服务权限，以及确定目标终端签约的定位服务权限是否允许获得密钥。若用户签约信息服务器确定目标终端签约的定位服务权限允许获得密钥，则获取目标终端签约的定位服务权限并在定位服务权限确认响应消息携带目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带目标终端的定位服务权限；管理网元接收到的定位权限确认响应消息后，根据定位服务权限确认响应消息携带的目标终端签约 的定位服务权限，从管理网元存储的密钥中获取目标终端签约的定位服务权限对应的密钥。
可选地，在上述实施例中，管理网元接收定位服务器发送的不同定位服务权限允许获得的密钥，并存储接收到的定位服务器发送的不同定位服务权限允许获得的密钥；用户签约信息服务器接收定位服务器发送的目标终端签约的定位服务权限，并存储接收到的目标终端签约的定位服务权限。
可选地，终端签约的定位服务权限信息存储在管理网元中，管理网元确定目标终端签约的定位服务权限或目标终端签约的定位服务权限信息，并将确定出的目标终端签约的定位服务权限携带在定位服务权限确认请求消息中发送给用户签约信息服务器；用户签约信息服务器根据管理网元确定出的目标终端签约的定位服务权限确定该目标终端的定位服务权限是否允许获得密钥。若管理网元确定目标终端签约的定位服务权限允许获得密钥，则根据目标终端的信息获取管理网元存储的目标终端签约的定位服务权限，并根据目标终端签约的定位服务权限获取管理网元存储的与定位服务权限对应的密钥。
其中，所述目标终端的信息可以包括目标终端的标识，目标终端的地址信息，目标终端的签约信息(比如目标的定位服务权限)等中的一种或多种，本申请对此不作限定。该目标终端的信息用于业务实体或位于核心网的网元根据该信息确定出该目标终端的定位服务权限或该目标终端的定位服务权限的指示信息。
上述实施例中，若第一请求消息为附着请求消息，则定位服务确认请求消息为管理网元根据附着请求消息发送的接入认证请求消息，定位服务确认消息为接入认证响应消息。
基于图4所示的流程，在一些实施例中，管理网元存储有不同定位服务权限允许获得的密钥以及不同终端签约的定位服务权限；管理网元确定目标终端签约的定位服务权限是否允许获得密钥，包括：管理网元根据目标终端的信息获取管理网元存储的目标终端签约的定位服务权限，并确定目标终端签约的定位服务权限是否允许获得密钥；若确定目标终端签约的定位服务权 限允许获得密钥，则根据目标终端签约的定位服务权限获取管理网元存储的与定位服务权限对应的密钥。
可选地，管理网元接收第一请求消息之前，接收来自用户签约信息服务器的添加终端定位服务权限的请求消息，其中携带不同终端签约的定位服务权限；或者，管理网元接收第一请求消息之后，向用户签约信息服务器发送更新定位服务权限的请求消息，并接收用户签约信息服务器发送的更新定位服务权限的响应消息，响应消息携带不同终端签约的定位服务权限。
基于图4所示的流程，在一些实施例中，管理网元确定第一请求消息是否携带定位服务签约认证信息；若第一请求消息携带定位服务签约认证信息，则确定目标终端签约的定位服务权限，以及该目标终端签约的定位服务权限允许获得密钥。其中，定位服务签约认证信息是目标终端初始接入时，由管理网元确定目标终端签约的定位服务权限允许获得密钥的情况下，为目标终端分配的。
基于图4所示的流程，在一些实施例中，终端签约的定位服务权限信息存储在定位服务器中，不同定位服务权限允许获得的密钥存储在管理网元中，在此情况下，管理网元确定目标终端签约的定位服务权限是否允许获得密钥，包括：管理网元向定位服务器发送定位服务权限信息获取请求消息，其中，定位服务权限信息获取请求消息用于定位服务器根据目标终端的信息获取定位服务器存储的目标终端签约的定位服务权限，并确定目标终端签约的定位服务权限是否允许获得密钥；管理网元接收定位服务器发送的定位服务权限确认响应消息，并根据定位服务权限确认响应消息确定目标终端签约的定位服务权限是否允许获得密钥；其中，若定位服务器确定目标终端签约的定位服务权限允许获得密钥，则定位服务器发送的定位服务权限确认响应消息中携带目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带目标终端签约的定位服务权限；若定位服务器确定目标终端签约的定位服务权限允许获得密钥，则还包括管理网元根据接收的定位服务权限确认响应消息从管理网元存储的密钥中获取目标终端签约的定位服务权限对应的密钥。
基于图4所示的流程，在一些实施例中，管理网元存储有不同定位服务权限允许获得的密钥，业务实体存储有终端签约的定位服务权限信息，在此情况下，管理网元确定目标终端签约的定位服务权限是否允许获得密钥，包括：管理网元向用户签约信息服务器发送定位服务权限信息获取请求消息，以使用户签约信息服务器向业务实体发送定位服务权限信息获取请求消息，并接收业务实体发送的定位服务权限信息获取响应，其中，定位服务权限信息获取请求消息用于业务实体根据目标终端的信息获取业务实体存储的目标终端签约的定位服务权限，并确定目标终端签约的定位服务权限是否允许获取密钥；管理网元接收用户签约信息服务器发送的定位服务权限信息获取响应消息，并根据定位服务权限信息获取响应消息确定目标终端签约的定位服务权限是否允许获得密钥；其中，若业务实体确定目标终端签约的定位服务权限允许获得密钥，则业务实体发送的定位服务权限信息获取响应消息中携带目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带目标终端签约的定位服务权限；若业务实体确定目标终端签约的定位服务权限允许获得密钥，则还包括管理网元根据接收的定位服务权限信息获取响应消息从管理网元存储的密钥中获取目标终端签约的定位服务权限对应的密钥。
可选地，管理网元确定目标终端签约的定位服务权限是否允许获得密钥，可以包括：管理网元向定位服务器发送定位服务权限信息获取请求消息，以使定位服务器向业务实体发送定位服务权限信息获取请求消息，并接收业务实体发送的定位服务权限信息获取响应，其中，定位服务权限信息获取请求消息用于业务实体根据目标终端的信息获取业务实体存储的目标终端签约的定位服务权限，并确定目标终端签约的定位服务权限是否允许获取密钥；管理网元接收定位服务器发送的定位服务权限信息获取响应消息，并根据定位服务权限信息获取响应消息确定目标终端签约的定位服务权限是否允许获得密钥；其中，若业务实体确定目标终端签约的定位服务权限允许获得密钥，则业务实体发送的定位服务权限信息获取响应消息中携带目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带目标终端签约的定位服务权限； 若业务实体确定目标终端签约的定位服务权限允许获得密钥，则还包括管理网元根据接收的定位服务权限信息获取响应消息从管理网元存储的密钥中获取目标终端签约的定位服务权限对应的密钥。
基于图4所示的流程，在一些实施例中业务实体与管理网元直接交互，在此情况下，管理网元确定目标终端签约的定位服务权限是否允许获得密钥，包括：管理网元向业务实体发送定位服务权限信息获取请求消息，其中，定位服务权限信息获取请求消息用于业务实体根据目标终端的信息获取业务实体存储的目标终端签约的定位服务权限，并确定目标终端签约的定位服务权限是否允许获取密钥；管理网元接收业务实体发送的定位服务权限确认响应消息，并根据定位服务权限确认响应消息确定目标终端签约的定位服务权限是否允许获得密钥；其中，若业务实体确定目标终端签约的定位服务权限允许获得密钥，则业务实体发送的定位服务权限信息获取响应消息中携带目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带目标终端签约的定位服务权限；若业务实体确定目标终端签约的定位服务权限允许获得密钥，则还包括管理网元根据接收的定位服务权限信息获取响应消息从管理网元存储的密钥中获取目标终端签约的定位服务权限对应的密钥。
下面以5G网络的定位服务系统为例，以消息交互的方式具体描述本申请实施例提供的定位服务密钥分发方法的流程。
如图5所示，为本申请实施例提供的一种定位服务密钥分发流程的消息交互示意图。在此实施例中，UDM存储有UE签约的定位服务权限。
如图所示，该流程包括：
S501，AMF接收LMF发送的不同定位服务权限允许获得的密钥。
具体地，LMF预先将不同定位服务权限允许获得密钥发送给LMF保存，当有新的UE接入LMF所归属的核心网，或UE定位服务权限变更导致对应密钥变更等情况，将会触发S501使得LMF将新UE签约的定位服务权限对应的密钥或UE变更后的定位服务权限对应的密钥发送给LMF保存。
S502，UE向NG-RAN发送附着请求消息或TAU请求消息；附着请求消 息或TAU请求消息可以作为正常移动性管理的一部分被发送，也可以专门发送TAU请求消息以请求获取密钥，UE的附着请求消息或TAU请求消息中携带了用于请求获取解密广播的网络辅助数据的指示信息。
S503，NG-RAN接收UE发送的附着请求消息或TAU请求消息并将其转发给AMF。
S504，AMF根据接收到的附着请求消息或TAU请求消息，向UDM发送定位服务权限确认请求消息，该请求消息中携带了UE的签约的定位服务权限信息。
S505，UDM根据接收到的定位服务权限确认请求消息，向AMF返回定位服务权限确定响应消息，该响应消息中至少包括确定UE签约的定位服务权限是否允许获得密钥的指示信息以及允许获得密钥情况下该UE签约的定位服务权限。
S506，AMF根据接收到的定位服务权限确定响应消息向NG-RAN发送附着接受消息或TAU接受消息；AMF在附着接受消息或TAU接受消息中包括适用于该UE的当前跟踪区域的一个或多个密钥。其中，每个适用于该UE的密钥配置有效期，跟踪区域集和密钥类型。
S507，NG-RAN将接收到的附着接受消息或TAU接受消息转发给UE。
在S507之后，UE接收到来自NG-RAN的附着接受消息或TAU接受消息后，一旦密钥的有效期已经开始并且UE当前处于适用的跟踪区域中，UE可以开始使用接收到的密钥来解密广播的网络辅助数据。当进入不适用于密钥的跟踪区域时，UE停止使用密钥。当密钥的有效期已过期时，UE停止使用并删除密钥。
S508，当有效期到期时，AMF将删除密钥的所有信息。
基于图5所示的定位服务密钥分发流程图，在一种情况下，不同定位服务权限允许获得的密钥以及UE签约的定位服务权限存储在LMF中。在S501中，LMF将不同定位服务权限允许获得的密钥发送给AMF，进而AMF将接收到的不同定位服务权限允许获得的密钥保存；LMF将定位服务权限发送给 UDM，进而UDM将接收到的定位服务权限保存；其它步骤与图5所示流程相同。
基于图5所示的定位服务密钥分发流程的消息交互示意图，在一种情况下，不同定位服务权限允许获得的密钥以及UE签约的定位服务权限存储在LMF中。在S501中，LMF将不同定位服务权限允许获得的密钥以及UE签约的定位服务权限发送给AMF，AMF可直接根据UE发送的附着请求消息或TUA请求消息，确定该UE签约的定位服务权限，以及该UE签约的定位服务权限是否允许获取密钥，若确定允许，则进一步确定该UE签约的定位服务权限以及对应的密钥，即无需与UDM进行交互，其它步骤与图5所示流程相同。
基于图5所示的定位服务密钥分发流程的消息交互示意图，在一种情况下，不同定位服务权限允许获得的密钥以及UE签约的定位服务权限存储在LMF中。在S501中，LMF将不同定位服务权限允许获得的密钥以及UE签约的定位服务权限发送给AMF。在S504中，AMF借助接入认证数据的请求流程向UDM发送请求消息，该请求消息携带了AMF确定出的UE签约的定位服务权限，用于请求该UE的定位服务是否允许获得密钥；在S505中，UDM接收AMF发送的请求消息并向AMF返回响应请求消息，该响应请求消息至少包括该UE的定位服务是否获得密钥的指示信息。其它步骤与图5所示流程相同。
基于图5所示的定位服务密钥分发流程的消息交互示意图，在一种情况下，不同定位服务权限允许获得的密钥以及UE签约的定位服务权限存储在LMF中。在S501中，LMF将不同定位服务权限允许获得的密钥发送给AMF。在S504中，AMF向LMF发送定位服务权限请求消息，该消息用于指示LMF确定UE签约的定位服务权限以及确定UE签约的定位服务权限是否允许获得密钥，若确定允许获得密钥，则进一步获取UE签约的定位服务权限；在S505中，LMF根据接收到的定位服务权限请求消息向AMF发送响应定位服务权限消息，该消息中携带UE签约的定位服务权限是否允许获得密钥的指示信息， 若确定允许获得密钥，则还携带了UE签约的定位服务权限。其它步骤与图5所示的流程相同。
需要说明的是，上述实施例在执行S501～S508中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
在一种情况下，以5G网络定位服务系统为例，UE在首次接入时，AMF确定该UE签约的定位服务权限允许获得密钥的情况下，为该UE分配定位服务签约认证信息，该定位服务签约认证信息保存在UE和AMF中。当UE再次通过TAU请求消息向网络请求密钥时，AMF可直接通过该定位服务签约认证信息确定该UE通过了定位服务的签约授权。如图6所示，为本申请实施例提供的一种定位服务密钥分发流程的消息交互示意图。
如图所示，该流程包括：
S601，AMF接收LMF发送的定位服务权限以及不同定位服务权限允许获得的密钥。
具体地，LMF预先将定位服务权限以及不同定位服务权限允许获得密钥发送给LMF保存，当有新的UE接入LMF所归属的核心网，或UE定位服务权限变更导致对应密钥变更等情况，将会触发S601使得LMF将新UE签约的定位服务权限或UE变更后的定位服务权限以及它们对应的密钥发送给LMF保存。
S602，UE向NG-RAN发送TAU请求消息；TAU请求消息中携带了用于请求获取用于解密网络辅助数据的指示信息以及该UE的定位服务签约认证信息。
S603，NG-RAN接收UE发送的TAU请求消息并将其转发给AMF。
S604，AMF根据接收到的TAU请求消息中携带的UE的定位服务签约认证信息确定该UE签约的定位服务权限以及该UE签约的定位服务权限是否允 许获得密钥；并向NG-RAN发送TAU接受消息，AMF在TAU接受消息中包括适用于该UE的当前跟踪区域的一个或多个密钥。其中，每个适用于该UE的密钥配置有效期，跟踪区域集和密钥类型。
S605，NG-RAN将接收到的TAU接受消息转发给UE。
在S605之后，UE接收到来自NG-RAN的TAU接受消息后，一旦密钥的有效期已经开始并且UE当前处于适用的跟踪区域中，UE可以开始使用接收到的密钥来解密广播的网络辅助数据。当进入不适用于密钥的跟踪区域时，UE停止使用密钥。当密钥的有效期已过期时，UE停止使用并删除密钥。
S606，当有效期到期时，AMF将删除密钥的所有信息。
需要说明的是，上述实施例在执行S601～S606中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
在一种情况下，以5G网络定位服务系统为例，UE签约的定位服务权限作为UE签约信息的一部分保存在UDM中，AMF可以通过添加insert subscriber data(定位服务权限请求消息)或update location request(更新定位服务权限请求消息)获取UE签约的定位服务权限，使得AMF在接收到UE发送的密钥请求消息后可直接确定该UE签约的定位服务权限。如图7所示，为本申请实施例提供的一种定位服务密钥分发流程的消息交互示意图。
如图所示，该流程包括：
S701，AMF接收LMF发送的不同定位服务权限允许获得的密钥。
具体地，LMF预先将不同定位服务权限允许获得密钥发送给LMF保存，当有新的UE接入LMF所归属的核心网，或UE定位服务权限变更导致对应密钥变更等情况，将会触发S701使得LMF将新UE签约的定位服务权限对应的密钥或UE变更后的定位服务权限对应的密钥发送给LMF保存。
S702，AMF向UDM发送添加定位服务权限请求消息，用以请求UE签 约的定位服务权限。
S703，UDM根据接收的添加定位服务权限请求消息向AMF发送响应添加定位服务权限消息，该消息中携带了UE签约的定位服务权限。
S704～S705与S502～S503所执行的流程相同，在此不再赘述。
S706，AMF向UDM发送更新定位服务权限请求消息，用以请求UE签约的定位服务权限。
S707，UDM根据接收的更新定位服务权限请求消息向AMF发送响应更新定位服务权限消息，该消息中携带了UE签约的定位服务权限。
S708～S710与S506～S508所执行的流程相同，在此不再赘述。
在上述流程中，S702～S703与S706～S707为两个并行的流程步骤，皆用于获取UE签约的定位服务权限，即若在S704之前已执行S702与S703，则无需执行S706与S707，反之亦然。
需要说明的是，上述实施例在执行S701～S710中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
在一种情况下，以5G网络定位服务系统为例，UE定位服务签约数据的存储和控制由业务实体完成，通过与UDM的交互完成定位服务密钥分发。如图8所示，为本申请实施例提供的一种定位服务密钥分发流程的消息交互示意图。
如图所示，该流程包括：
S801～S803与S501～S503所执行的流程相同，在此不再赘述。
S804，AMF接收到附着请求消息或TAU请求消息后，向UDM发送更新定位服务权限请求消息，用以确认UE签约的定位服务权限。
S805，UDM接收到AMF发送的更新定位服务权限请求消息后，由于UE定位服务签约数据的存储在业务实体中，故UDM向业务实体发送定位服务权 限请求消息，用以确认UE签约的定位服务权限。
S806，业务实体根据接收到的定位服务权限请求消息，向UDM发送响应定位服务权限消息，该消息中携带了用以确认UE是否允许获得密钥的信息，若确认该UE允许获得密钥，则还携带了该UE定位服务权限的信息。
S807，UDM根据接收到的响应定位服务权限消息向AMF发送响应更新定位服务权限消息，该消息中携带了用以确认UE是否允许获得密钥的信息，若确认该UE允许获得密钥，则还携带了该UE定位服务权限的信息。
S808～S810与S506～S508所执行的流程相同，在此不再赘述。
需要说明的是，上述实施例在执行S801～S810中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
在一种情况下，以5G网络定位服务系统为例，UE定位服务签约数据的存储和控制由业务实体完成，通过与LMF的交互完成定位服务密钥分发。如图9所示，为本申请实施例提供的一种定位服务密钥分发流程的消息交互示意图。
如图所示，该流程包括：
S901～S903与S501～S503所执行的流程相同，在此不再赘述。
S904，AMF接收到附着请求消息或TAU请求消息后，向LMF发送定位服务权限请求消息，用以确认UE签约的定位服务权限。
S905，LMF接收到AMF发送的定位服务权限请求消息后，由于UE定位服务签约数据的存储在业务实体中，故LMF将其转发给业务实体，用以确认UE签约的定位服务权限。
S906，业务实体根据接收到的定位服务权限请求消息，向LMF发送响应定位服务权限消息，该消息中携带了用以确认UE是否允许获得密钥的信息，若确认该UE允许获得密钥，则还携带了该UE定位服务权限的信息。
S907，LMF将接收到的响应定位服务权限消息发送给AMF。
S908～S910与S506～S508所执行的流程相同，在此不再赘述。
基于图9所示的定位服务密钥分发流程的消息交互示意图，在一种情况下，AMF直接与业务实体交互。在执行S901～S903之后，AMF直接向业务实体发送定位服务权限请求消息；业务实体在接收到AMF发送的定位服务权限请求消息后，根据UE的信息获取业务实体存储的UE签约的定位服务权限，确定UE签约的定位服务权限是否允许获得密钥，并向AMF返回定位服务权限响应消息；若业务实体确定UE签约的定位服务权限允许获得密钥，则该定位服务权限响应消息中携带UE定位服务权限允许获得密钥的指示信息和/或UE签约的定位服务权限。其它步骤与图9所示的流程相同。
需要说明的是，上述实施例在执行S901～S910中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
基于相同的技术构思，本申请实施例还提供了一种管理网元，该管理网元可实现图4所示的流程。
参见图10，为本申请实施例提供的管理网元的结构示意图，该管理网元可包括：接收模块1001和确定模块1002。
接收模块1001，用于接收来自于目标终端的第一请求消息。
确定模块1002，用于确定目标终端签约的定位服务权限是否允许获得密钥。
确定模块1002，还用于若确定目标终端签约的定位服务权限允许获得密钥，则向目标终端发送第一响应消息，第一响应消息携带与目标终端签约的定位服务权限允许获得的密钥，密钥用于解密广播的网络辅助数据。
可选地，第一请求消息携带密钥获取指示信息，密钥获取指示信息用于 请求获取用于解密广播的网络辅助数据的密钥。
可选地，第一请求消息为附着请求消息，第一响应消息附着接受消息；或者，第一请求消息为跟踪区域更新请求消息，第一响应消息为跟踪区域接受消息。
可选地，所述确定模块，具体用于：向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述目标终端签约的定位服务权限是否允许获得密钥；所述接收模块，进一步用于：接收所述用户签约信息服务器发送的定位服务权限确认响应消息；根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述定位服务权限确认响应消息携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限，则所述管理网元确定所述终端允许获得密钥。
可选地，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述用户签约信息服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述定位服务权限确认响应消息携带的目标终端签约的定位服务权限，从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息携带所述管理网元存储的所述目标终端签约的定位服务权限，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器根据所述目标终端签约的定位服务权限确定所述目标终端签约的定位服务权限是否允许获得密钥；若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并根据所述目标终端签约 的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
可选地，所述第一请求消息为附着请求消息，所述定位服务权限确认请求消息为所述管理网元根据所述附着请求消息发送的接入认证请求消息，所述定位服务权限确认响应消息为接入认证响应消息。
可选地，所述确定模块，具体用于：根据目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；若确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
可选地，所述管理网元，还用于：接收所述第一请求消息之前，接收来自用户签约信息服务器的添加终端定位服务权限的请求消息，所述定位服务权限的请求消息携带请求添加的终端的定位服务权限；或者，接收所述第一请求消息之后，向用户签约信息服务器发送更新定位服务权限的请求消息，并接收所述用户签约信息服务器发送的更新定位服务权限的响应消息，所述响应消息携带更新的终端定位服务权限。
可选地，所述确定模块，具体用于：确定所述第一请求消息是否携带定位服务签约认证信息；若所述第一请求消息携带定位服务签约认证信息，则确定所述目标终端签约的定位服务权限，以及所述目标终端签约的定位服务权限允许获得密钥。
可选地，所述定位服务签约认证信息是所述目标终端初始接入时，由所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥的情况下，为所述目标终端分配的。
可选地，所述确定模块，具体用于：向所述定位服务器发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述定位服务器根据所述目标终端的信息获取所述定位服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；所述接收模块，进一步用于：接收所述定位服务器发送的定位服 务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则所述定位服务器发送的所述定位服务权限确认响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
若所述定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限确认响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述确定模块，具体用于：向用户签约信息服务器发送定位服务权限信息获取请求消息，以使所述用户签约信息服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述接收模块，进一步用于：接收所述用户签约信息服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述确定模块，具体用于：向所述定位服务器发送定位服务权限信息获取请求消息，以使所述定位服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标 终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述接收模块，进一步用于：
接收所述定位服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述确定模块，具体用于：向业务实体发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；所述接收模块，进一步用于：接收所述业务实体发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
可选地，所述管理网元存储的不同定位服务权限允许获得的密钥由所述定位服务器配置。
可选地，所述管理网元为AMF或MME。
基于相同的技术构思，本申请实施例还提供了一种通信装置，该通信装置可实现图10所示流程中管理网元的功能。
参见图11，为本申请实施例提供的通信装置的结构示意图，如图所示，该通信装置可包括：处理器1101、存储器1102、收发机1103以及总线接口1104。
处理器1101负责管理总线架构和通常的处理，存储器1102可以存储处理器1101在执行操作时所使用的数据。收发机1103用于在处理器1101的控制下接收和发送数据。
总线架构可以包括任意数量的互联的总线和桥，具体由处理器1101代表的一个或多个处理器和存储器1102代表的存储器的各种电路链接在一起。总线架构还可以将诸如外围设备、稳压器和功率管理电路等之类的各种其他电路链接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口提供接口。处理器1101负责管理总线架构和通常的处理，存储器1102可以存储处理器1101在执行操作时所使用的数据。
本申请实施例揭示的流程，可以应用于处理器1101中，或者由处理器1101实现。在实现过程中，信号处理流程的各步骤可以通过处理器1101中的硬件的集成逻辑电路或者软件形式的指令完成。处理器1101可以是通用处理器、数字信号处理器、专用集成电路、现场可编程门阵列或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件，可以实现或者执行本申请实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者任何常规的处理器等。结合本申请实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器1102，处理器1101读取存储器1102中的信息，结合其硬件完成信号处理流程的步骤。
具体地，处理器1101，用于读取存储器1102中的计算机指令并执行图10所示的流程中管理网元的功能。
基于相同的技术构思，本申请实施例还提供了一种计算机可读存储介质。计算机可读存储介质存储有计算机可执行指令，计算机可执行指令用于使计算机执行图4中所执行的流程。
本申请是参照根据本申请实施例的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。
尽管已描述了本申请的优选实施例，但本领域内的技术人员一旦得知了基本创造性概念，则可对这些实施例作出另外的变更和修改。所以，所附权利要求意欲解释为包括优选实施例以及落入本申请范围的所有变更和修改。
显然，本领域的技术人员可以对本申请进行各种改动和变型而不脱离本申请的精神和范围。这样，倘若本申请的这些修改和变型属于本申请权利要求及其等同技术的范围之内，则本申请也意图包含这些改动和变型在内。

Claims (33)

  1. 一种定位服务密钥分发方法，其特征在于，包括：
    位于核心网的管理网元接收来自于目标终端的第一请求消息；
    所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥；
    若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端签约的定位服务权限允许获得的密钥，所述密钥用于解密广播的网络辅助数据。
  2. 如权利要求1所述的方法，其特征在于，所述第一请求消息携带密钥获取指示信息，所述密钥获取指示信息用于请求获取用于解密广播的网络辅助数据的密钥。
  3. 如权利要求1所述的方法，其特征在于，所述第一请求消息为附着请求消息，所述第一响应消息附着接受消息；或者，
    所述第一请求消息为跟踪区域更新请求消息，所述第一响应消息为跟踪区域更新接受消息。
  4. 如权利要求1所述的方法，其特征在于，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：
    所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述目标终端签约的定位服务权限是否允许获得密钥；
    所述管理网元接收所述用户签约信息服务器发送的定位服务权限确认响应消息；
    所述管理网元根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述定位服务权限确认响应消息携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限，则所述管理网元确定所述终端允许获 得密钥。
  5. 如权利要求4所述的方法，其特征在于，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述用户签约信息服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；
    若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述定位服务权限确认响应消息携带的目标终端签约的定位服务权限，从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  6. 如权利要求4所述的方法，其特征在于，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息携带所述管理网元存储的所述目标终端签约的定位服务权限，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器根据所述目标终端签约的定位服务权限确定所述目标终端签约的定位服务权限是否允许获得密钥；
    若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
  7. 如权利要求4所述的方法，其特征在于，所述第一请求消息为附着请求消息，所述定位服务权限确认请求消息为所述管理网元根据所述附着请求消息发送的接入认证请求消息，所述定位服务权限确认响应消息为接入认证响应消息。
  8. 如权利要求1所述的方法，其特征在于，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：
    所述管理网元根据目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许 获得密钥；
    若确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
  9. 如权利要求8所述的方法，其特征在于，还包括：
    所述管理网元接收所述第一请求消息之前，接收来自用户签约信息服务器的添加终端定位服务权限的请求消息，所述定位服务权限的请求消息携带请求添加的终端的定位服务权限；或者，
    所述管理网元接收所述第一请求消息之后，向用户签约信息服务器发送更新定位服务权限的请求消息，并接收所述用户签约信息服务器发送的更新定位服务权限的响应消息，所述响应消息携带更新的终端定位服务权限。
  10. 如权利要求1所述的方法，其特征在于，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：
    所述管理网元确定所述第一请求消息是否携带定位服务签约认证信息；
    若所述第一请求消息携带定位服务签约认证信息，则确定所述目标终端签约的定位服务权限，以及所述目标终端签约的定位服务权限允许获得密钥。
  11. 如权利要求10所述的方法，其特征在于，所述定位服务签约认证信息是所述目标终端初始接入时，由所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥的情况下，为所述目标终端分配的。
  12. 如权利要求1所述的方法，其特征在于，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：
    所述管理网元向所述定位服务器发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述定位服务器根据所述目标终端的信息获取所述定位服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；
    所述管理网元接收所述定位服务器发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权 限是否允许获得密钥；其中，若定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则所述定位服务器发送的所述定位服务权限确认响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限确认响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  13. 如权利要求1所述的方法，其特征在于，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：
    所述管理网元向用户签约信息服务器发送定位服务权限信息获取请求消息，以使所述用户签约信息服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；
    所述管理网元接收所述用户签约信息服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；
    其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  14. 如权利要求1所述的方法，其特征在于，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：
    所述管理网元向所述定位服务器发送定位服务权限信息获取请求消息，以使所述定位服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；
    所述管理网元接收所述定位服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；
    其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  15. 如权利要求1所述的方法，其特征在于，所述管理网元确定所述目标终端签约的定位服务权限是否允许获得密钥，包括：
    所述管理网元向业务实体发送定位服务权限信息获取请求消息，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；
    所述管理网元接收所述业务实体发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；
    其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所 述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  16. 如权利要求1-15中任一项所述的方法，其特征在于，所述管理网元存储的不同定位服务权限允许获得的密钥由所述定位服务器配置。
  17. 如权利要求1-15中任一项所述的方法，其特征在于，所述管理网元为AMF或MME。
  18. 一种管理网元，其特征在于，包括：
    接收模块，用于接收来自于目标终端的第一请求消息；
    确定模块，用于确定所述目标终端签约的定位服务权限是否允许获得密钥；
    所述确定模块，还用于若确定所述目标终端签约的定位服务权限允许获得密钥，则向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端签约的定位服务权限允许获得的密钥，所述密钥用于解密广播的网络辅助数据。
  19. 如权利要求18所述的管理网元，其特征在于，所述第一请求消息携带密钥获取指示信息，所述密钥获取指示信息用于请求获取用于解密广播的网络辅助数据的密钥。
  20. 如权利要求18所述的管理网元，其特征在于，所述第一请求消息为附着请求消息，所述第一响应消息附着接受消息；或者，
    所述第一请求消息为跟踪区域更新请求消息，所述第一响应消息为跟踪区域更新接受消息。
  21. 如权利要求18所述的管理网元，其特征在于，所述确定模块，具体用于：
    向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务 权限确认请求消息用于请求所述用户签约信息服务器确定所述目标终端签约的定位服务权限是否允许获得密钥；
    所述接收模块，进一步用于：
    接收所述用户签约信息服务器发送的定位服务权限确认响应消息；
    根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若所述定位服务权限确认响应消息携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限，则所述管理网元确定所述终端允许获得密钥。
  22. 如权利要求21所述的管理网元，其特征在于，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器确定所述用户签约信息服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；
    若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述定位服务权限确认响应消息携带的目标终端签约的定位服务权限，从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  23. 如权利要求21所述的管理网元，其特征在于，所述管理网元向用户签约信息服务器发送定位服务权限确认请求消息，所述定位服务权限确认请求消息携带所述管理网元存储的所述目标终端签约的定位服务权限，所述定位服务权限确认请求消息用于请求所述用户签约信息服务器根据所述目标终端签约的定位服务权限确定所述目标终端签约的定位服务权限是否允许获得密钥；
    若所述管理网元确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
  24. 如权利要求21或23所述的管理网元，其特征在于，所述第一请求消息为附着请求消息，所述定位服务权限确认请求消息为所述管理网元根据所述附着请求消息发送的接入认证请求消息，所述定位服务权限确认响应消息为接入认证响应消息。
  25. 如权利要求18所述的管理网元，其特征在于，所述确定模块，具体用于：
    根据目标终端的信息获取所述管理网元存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；
    若确定所述目标终端签约的定位服务权限允许获得密钥，则根据所述目标终端签约的定位服务权限获取所述管理网元存储的与所述定位服务权限对应的密钥。
  26. 如权利要求25所述的管理网元，其特征在于，所述管理网元，还用于：
    接收所述第一请求消息之前，接收来自用户签约信息服务器的添加终端定位服务权限的请求消息，所述定位服务权限的请求消息携带请求添加的终端的定位服务权限；或者，
    接收所述第一请求消息之后，向用户签约信息服务器发送更新定位服务权限的请求消息，并接收所述用户签约信息服务器发送的更新定位服务权限的响应消息，所述响应消息携带更新的终端定位服务权限。
  27. 如权利要求18所述的管理网元，其特征在于，所述确定模块，具体用于：
    确定所述第一请求消息是否携带定位服务签约认证信息；
    若所述第一请求消息携带定位服务签约认证信息，则确定所述目标终端签约的定位服务权限，以及所述目标终端签约的定位服务权限允许获得密钥。
  28. 如权利要求18所述的管理网元，其特征在于，所述确定模块，具体用于：
    向所述定位服务器发送定位服务权限信息获取请求消息，其中，所述定 位服务权限信息获取请求消息用于所述定位服务器根据所述目标终端的信息获取所述定位服务器存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获得密钥；
    所述接收模块，进一步用于：
    接收所述定位服务器发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；其中，若定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则所述定位服务器发送的所述定位服务权限确认响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述定位服务器确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限确认响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  29. 如权利要求18所述的管理网元，其特征在于，所述确定模块，具体用于：
    向用户签约信息服务器发送定位服务权限信息获取请求消息，以使所述用户签约信息服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；
    所述接收模块，进一步用于：
    接收所述用户签约信息服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；
    其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所 述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  30. 如权利要求18所述的管理网元，其特征在于，所述确定模块，具体用于：
    向所述定位服务器发送定位服务权限信息获取请求消息，以使所述定位服务器向业务实体发送定位服务权限信息获取请求消息，并接收所述业务实体发送的定位服务权限信息获取响应，其中，所述定位服务权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；
    所述接收模块，进一步用于：
    接收所述定位服务器发送的定位服务权限信息获取响应消息，并根据所述定位服务权限信息获取响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；
    其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  31. 如权利要求18所述的管理网元，其特征在于，所述确定模块，具体用于：
    向业务实体发送定位服务权限信息获取请求消息，其中，所述定位服务 权限信息获取请求消息用于所述业务实体根据所述目标终端的信息获取所述业务实体存储的所述目标终端签约的定位服务权限，并确定所述目标终端签约的定位服务权限是否允许获取密钥；
    所述接收模块，进一步用于：
    接收所述业务实体发送的定位服务权限确认响应消息，并根据所述定位服务权限确认响应消息确定所述目标终端签约的定位服务权限是否允许获得密钥；
    其中，若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则所述业务实体发送的所述定位服务权限信息获取响应消息中携带所述目标终端签约的定位服务权限允许获得密钥的指示信息和/或携带所述目标终端签约的定位服务权限；
    若所述业务实体确定所述目标终端签约的定位服务权限允许获得密钥，则还包括所述管理网元根据接收的定位服务权限信息获取响应消息从所述管理网元存储的密钥中获取所述目标终端签约的定位服务权限对应的密钥。
  32. 一种通信装置，其特征在于，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如权利要求1至17中任一项所述的方法。
  33. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如权利要求1至17中任一项所述的方法。
PCT/CN2019/110395 2018-10-10 2019-10-10 一种定位服务密钥分发方法及其装置 Ceased WO2020073961A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811176764.0 2018-10-10
CN201811176764.0A CN111031486B (zh) 2018-10-10 2018-10-10 一种定位服务密钥分发方法及其装置

Publications (1)

Publication Number Publication Date
WO2020073961A1 true WO2020073961A1 (zh) 2020-04-16

Family

ID=70164184

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/110395 Ceased WO2020073961A1 (zh) 2018-10-10 2019-10-10 一种定位服务密钥分发方法及其装置

Country Status (2)

Country Link
CN (1) CN111031486B (zh)
WO (1) WO2020073961A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111726800A (zh) * 2019-03-04 2020-09-29 华为技术有限公司 用于保护辅助信息的方法和装置
CN114521013B (zh) * 2020-11-20 2024-07-23 深圳市中兴微电子技术有限公司 终端定位方法、系统、存储介质和电子装置
CN116406510A (zh) * 2023-02-10 2023-07-07 北京小米移动软件有限公司 信息处理方法及装置、通信设备及存储介质

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105103577A (zh) * 2014-01-28 2015-11-25 华为技术有限公司 一种加密数据的装置和方法
CN108141754A (zh) * 2015-09-15 2018-06-08 高通股份有限公司 用于涉及移动性管理实体重定位的移动性过程的装置和方法

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9838365B2 (en) * 2007-07-10 2017-12-05 Qualcomm Incorporated Peer to peer identifiers
US20090209259A1 (en) * 2008-02-15 2009-08-20 Alec Brusilovsky System and method for performing handovers, or key management while performing handovers in a wireless communication system
WO2013184701A1 (en) * 2012-06-05 2013-12-12 Arun Raghupathy Systems and methods for location positioning of user device
CN102833747B (zh) * 2012-09-17 2015-02-25 北京交通大学 分离机制移动性管理系统实现接入认证的密钥分发方法
WO2015042871A1 (en) * 2013-09-27 2015-04-02 Nokia Corporation Methods and apparatus of key pairing for d2d devices under different d2d areas
WO2016205991A1 (zh) * 2015-06-23 2016-12-29 华为技术有限公司 免授权传输的方法、用户设备、接入网设备和核心网设备
CN107094127B (zh) * 2016-02-18 2020-02-28 电信科学技术研究院 安全信息的处理方法及装置、获取方法及装置
CN108702786B (zh) * 2016-03-25 2020-09-08 华为技术有限公司 一种通信方法、装置和系统
SG10201606165SA (en) * 2016-07-26 2018-02-27 Huawei Int Pte Ltd A key generation and distribution method based on identity-based cryptography

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105103577A (zh) * 2014-01-28 2015-11-25 华为技术有限公司 一种加密数据的装置和方法
CN108141754A (zh) * 2015-09-15 2018-06-08 高通股份有限公司 用于涉及移动性管理实体重定位的移动性过程的装置和方法

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
QUALCOMM INCORPORATED: "Ciphering of Broadcast Assistance Data", 3GPP TSG-SA WG3 MEETING #89 S3-173296, 1 December 2017 (2017-12-01), XP051380544 *
QUALCOMM INCORPORATED: "Distribution of Ciphering Keys for Broadcast of Positioning Assistance Data", 3GPP TSG-RAN WG2 MEETING #101 R2-1803390, 2 March 2018 (2018-03-02), XP051400488 *

Also Published As

Publication number Publication date
CN111031486A (zh) 2020-04-17
CN111031486B (zh) 2021-05-11

Similar Documents

Publication Publication Date Title
CN116193441B (zh) 一种通信方法、通信装置和通信系统
CN1691826B (zh) 移动终端的定位设备和方法
US7996016B2 (en) Location system
US9131463B2 (en) Method for positioning target terminal while protecting privacy of user thereof
CN107852607B (zh) 用于验证对设备使用特征集合的授权的方法和装置
WO2020073817A1 (zh) 一种定位服务权限变更方法、装置及系统
WO2021031053A1 (zh) 一种通信方法、装置及系统
JP7811670B2 (ja) 通信システムにおいてサイドリンク測位／測距プロセスを実行するための方法及びネットワークシステム
CN115152285A (zh) 用于在通信系统中执行直连链路定位/测距过程的方法和网络系统
CN114786121B (zh) 一种定位方法、装置、系统及存储介质
CN113259930A (zh) 调用的请求、查询、授权处理方法、设备及装置、介质
WO2008092392A1 (en) A method, apparatus and system for providing location service
CN111031486B (zh) 一种定位服务密钥分发方法及其装置
CN110505674A (zh) 一种接入类型选择方法、设备及存储介质
CN109155734B (zh) 基于身份标识密码技术的密钥生成和分发方法
WO2022062889A1 (zh) 一种切片管理方法、装置及通信设备
CN113938879A (zh) 一种通信方法及通信装置
US20100014674A1 (en) Systems and methods for authorization and data transmission for multicast broadcast services
WO2025031192A1 (zh) 一种通信方法及装置
EP4648376A1 (en) Communication methods and apparatuses, device, chip and storage medium
WO2016086625A1 (zh) 授权更新的通知方法及装置
WO2023134504A1 (zh) 一种通信方法、lmf及发送单元
KR20140039674A (ko) 이동 통신 시스템에서 단말의 보안 관리 방법 및 장치
EP4606143B1 (en) Key management for applications
CN118827081B (zh) 一种密钥发放方法、装置、通信设备和存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19870551

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19870551

Country of ref document: EP

Kind code of ref document: A1