WO2020258292A1

WO2020258292A1 - Wireless communication method, terminal device, access network device and core network device

Info

Publication number: WO2020258292A1
Application number: PCT/CN2019/093857
Authority: WO
Inventors: 王淑坤
Original assignee: Oppo广东移动通信有限公司
Priority date: 2019-06-28
Filing date: 2019-06-28
Publication date: 2020-12-30
Also published as: CN113348682B; CN113348682A

Abstract

A wireless communication method, a terminal device, an access network device and a core network device, the method comprising: a terminal device receiving a first message sent by a network device, the first message comprising encrypted first configuration information, and the first configuration information comprising a mobility control parameter.

Description

Wireless communication method, terminal equipment, access network equipment and core network equipment

Technical field

The embodiments of the present application relate to the communication field, and specifically relate to a wireless communication method, terminal equipment, access network equipment, and core network equipment.

Background technique

In Long Term Evolution (LTE), network devices can directly configure mobility control parameters for terminal devices in Idle, Suspend, or inactive states for terminal devices Cell selection or cell reselection.

However, in the New Radio (NR) system, if the network device directly configures the mobility control parameter for the terminal device, the terminal device will ignore the parameter, which affects the subsequent behavior of the terminal device and thus the user experience.

Summary of the invention

The embodiments of the present application provide a wireless communication method, terminal equipment, access network equipment, and core network equipment, which can implement encrypted transmission of mobility control parameters.

In a first aspect, a wireless communication method is provided, including: a terminal device receives a first message sent by a network device, the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameter.

In a second aspect, a wireless communication method is provided, including: an access network device sends a first message to a terminal device, the first message includes encrypted first configuration information, and the first configuration information includes mobility Control parameters.

In a third aspect, a wireless communication method is provided, including: a core network device receives first configuration information sent by an access network device, where the first configuration information includes mobility control parameters; The access network device sends a third message, and the third message includes the encrypted first configuration information.

In a fourth aspect, a terminal device is provided, which is used to execute the foregoing first aspect or the method in any possible implementation manner of the first aspect. Specifically, the terminal device includes a unit for executing the foregoing first aspect or any possible implementation of the first aspect.

In a fifth aspect, an access network device is provided, which is used to execute the foregoing second aspect or any possible implementation method of the second aspect. Specifically, the network device includes a unit for executing the foregoing second aspect or the method in any possible implementation manner of the second aspect.

In a sixth aspect, a core network device is provided, which is used to execute the foregoing third aspect or any possible implementation method of the third aspect. Specifically, the network device includes a unit for executing the foregoing third aspect or the method in any possible implementation manner of the third aspect.

In a seventh aspect, a terminal device is provided. The terminal device includes a processor and a memory. The memory is used to store a computer program, and the processor is used to call and run the computer program stored in the memory to execute the method in the above-mentioned first aspect or each of its implementation modes.

In an eighth aspect, an access network device is provided, and the access network device includes a processor and a memory. The memory is used to store a computer program, and the processor is used to call and run the computer program stored in the memory to execute the method in the above-mentioned second aspect or each of its implementation modes.

In a ninth aspect, a core network device is provided. The core network device includes a processor and a memory. The memory is used to store a computer program, and the processor is used to call and run the computer program stored in the memory to execute the method in the third aspect or its implementation manners.

In a tenth aspect, a chip is provided for implementing any one of the above-mentioned first to third aspects or the method in each of its implementation manners.

Specifically, the chip includes: a processor, configured to call and run a computer program from the memory, so that the device installed with the chip executes any one of the above-mentioned first aspect to the third aspect or each of its implementation modes method.

In an eleventh aspect, a computer-readable storage medium is provided for storing a computer program that enables a computer to execute any one of the above-mentioned first to third aspects or the method in each implementation manner thereof.

In a twelfth aspect, a computer program product is provided, including computer program instructions that cause a computer to execute any one of the above-mentioned first to third aspects or the method in each implementation manner thereof.

In a thirteenth aspect, a computer program is provided, which when running on a computer, causes the computer to execute any one of the above-mentioned first to second aspects or the method in each of its implementation modes.

Based on the above technical solution, the terminal device can receive the encrypted mobility control parameter, and further the terminal device can decrypt the encrypted mobility control parameter to obtain the mobility control parameter, so that subsequent actions can be performed according to the mobility control parameter, For example, performing cell handover or cell reselection according to the mobility control parameter can improve the security and reliability of configuration information transmission, and can prevent the terminal device from ignoring the configuration information and affecting user experience.

Description of the drawings

Fig. 1 is a schematic diagram of an application scenario provided by an embodiment of the present application.

Figure 2 is a schematic flow chart of small data transmission.

FIG. 3 is a schematic flowchart of a wireless communication method provided by an embodiment of the present application.

FIG. 4 is a schematic flowchart of another wireless communication method provided by an embodiment of the present application.

FIG. 5 is a schematic flowchart of still another wireless communication method provided by an embodiment of the present application.

Fig. 6 is a schematic interaction diagram of a wireless communication method provided by an embodiment of the present application.

FIG. 7 is a schematic block diagram of a terminal device provided by an embodiment of the present application.

Fig. 8 is a schematic block diagram of an access network device provided by an embodiment of the present application.

FIG. 9 is a schematic block diagram of a core network device provided by an embodiment of the present application.

FIG. 10 is a schematic block diagram of a communication device according to another embodiment of the present application.

FIG. 11 is a schematic block diagram of a chip provided by an embodiment of the present application.

Fig. 12 is a schematic block diagram of a communication system according to an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are a part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

The technical solutions of the embodiments of this application can be applied to various communication systems, such as: Global System of Mobile Communication (GSM) system, Code Division Multiple Access (CDMA) system, and Wideband Code Division Multiple Access (Wideband Code Division Multiple Access, WCDMA) system, General Packet Radio Service (GPRS), Long Term Evolution (LTE) system, LTE Frequency Division Duplex (FDD) system, LTE Time Division Duplex (TDD), Universal Mobile Telecommunication System (UMTS), Worldwide Interoperability for Microwave Access (WiMAX) communication system or 5G system, etc.

Exemplarily, the communication system 100 applied in the embodiment of the present application is shown in FIG. 1. The communication system 100 may include a network device 110, and the network device 110 may be a device that communicates with a terminal device 120 (or called a communication terminal or terminal). The network device 110 may provide communication coverage for a specific geographic area, and may communicate with terminal devices located in the coverage area. Optionally, the network device 110 may be a base station (Base Transceiver Station, BTS) in a GSM system or a CDMA system, a base station (NodeB, NB) in a WCDMA system, or an evolved base station in an LTE system (Evolutional Node B, eNB or eNodeB), or the wireless controller in the Cloud Radio Access Network (CRAN), or the network equipment can be a mobile switching center, a relay station, an access point, a vehicle-mounted device, Wearable devices, hubs, switches, bridges, routers, network-side devices in 5G networks, or network devices in the future evolution of the Public Land Mobile Network (PLMN), etc.

The communication system 100 also includes at least one terminal device 120 located within the coverage area of the network device 110. The "terminal equipment" used here includes but is not limited to connection via wired lines, such as via public switched telephone networks (PSTN), digital subscriber lines (Digital Subscriber Line, DSL), digital cables, and direct cable connections ; And/or another data connection/network; and/or via a wireless interface, such as for cellular networks, wireless local area networks (WLAN), digital TV networks such as DVB-H networks, satellite networks, AM- FM broadcast transmitter; and/or another terminal device that is set to receive/send communication signals; and/or Internet of Things (IoT) equipment. A terminal device set to communicate through a wireless interface may be referred to as a "wireless communication terminal", a "wireless terminal" or a "mobile terminal". Examples of mobile terminals include, but are not limited to, satellites or cellular phones; Personal Communications System (PCS) terminals that can combine cellular radio phones with data processing, fax, and data communication capabilities; can include radio phones, pagers, Internet/intranet PDA with internet access, web browser, memo pad, calendar, and/or Global Positioning System (GPS) receiver; and conventional laptop and/or palmtop receivers or others including radio phone transceivers Electronic device. Terminal equipment can refer to access terminals, user equipment (UE), user units, user stations, mobile stations, mobile stations, remote stations, remote terminals, mobile equipment, user terminals, terminals, wireless communication equipment, user agents, or User device. The access terminal can be a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a wireless local loop (Wireless Local Loop, WLL) station, a personal digital processing (Personal Digital Assistant, PDA), with wireless communication Functional handheld devices, computing devices or other processing devices connected to wireless modems, in-vehicle devices, wearable devices, terminal devices in 5G networks, or terminal devices in the future evolution of PLMN, etc.

Optionally, direct terminal connection (Device to Device, D2D) communication may be performed between the terminal devices 120.

Optionally, the 5G system or 5G network may also be referred to as a New Radio (NR) system or NR network.

Figure 1 exemplarily shows one network device and two terminal devices. Optionally, the communication system 100 may include multiple network devices and the coverage of each network device may include other numbers of terminal devices. The embodiment does not limit this.

Optionally, the communication system 100 may also include other network entities such as a network controller and a mobility management entity, which are not limited in the embodiment of the present application.

It should be understood that the devices with communication functions in the network/system in the embodiments of the present application may be referred to as communication devices. Taking the communication system 100 shown in FIG. 1 as an example, the communication device may include a network device 110 and a terminal device 120 with communication functions, and the network device 110 and the terminal device 120 may be the specific devices described above, which will not be repeated here. The communication device may also include other devices in the communication system 100, such as other network entities such as a network controller and a mobility management entity, which are not limited in this embodiment of the application.

It should be understood that the terms "system" and "network" in this article are often used interchangeably in this article. The term "and/or" in this article is only an association relationship describing associated objects, which means that there can be three relationships, for example, A and/or B, which can mean: A alone exists, A and B exist at the same time, exist alone B these three situations. In addition, the character "/" in this text generally indicates that the associated objects before and after are in an "or" relationship.

In Long Term Evolution (LTE), early data transmission (Early Data Transmission, EDT) is introduced, that is, small data transmission. In the process of small data transmission, the terminal device may always remain in the idle state or the suspend state or Inactive state, complete the transmission of uplink and/or downlink small data packets.

Figure 2 is a schematic flow chart of small data transmission on the control plane. As shown in Figure 2, the following steps may be included:

In S201, the UE sends a small data transmission request to the eNB;

Specifically, the UE may send a radio resource control (Radio Resource Control, RRC) early transmission request (RRCEarlyDataRequest) to the eNB. Optionally, the RRCEarlyDataRequest may include the identity of the UE, such as a temporary mobile subscriber identity (Temporary Mobile Subscription Identifier, S-TMSI), establishment cause (establishmentCause), NAS-specific information.

Optionally, before S201, the UE may also send a random access preamble (Random Access Preamble) to the eNB, and the eNB may also send a random access response (Random Access Response) to the UE.

In S202, the eNB sends an initial UE message (intial UE message), that is, a non-access stratum (Non-Access Stratum, NAS) message, to a mobility management entity (Mobility Management Entity, MME);

In S203, the core network side changes the bearer (Modify Bearer), specifically, changes the bearer between the MME and the Serving Gateway (S-GW).

In S204, MME sends uplink data to S-GW;

In S205, the S-GW sends downlink data to the MME;

In S206a, the MME sends a downlink NAS to the eNB;

In S206b, the MME sends a connection establishment indication (CONNECTION ESTABLISHMENT INDICATION) to the eNB;

In S207, the eNB sends a small data complete message to the UE;

Specifically, the small data complete message is an RRC early transmission complete (RRCEarlyDataComplete) message.

The RRCEarlyDataComplete may include the mobility control parameters of the UE. The RRCEarlyDataComplete is transmitted in a common control channel (CCCH). Therefore, the configuration information transmitted on the CCCH is unencrypted.

In the NR system, consider adopting the small data transmission scheme in the LTE system. In this case, the MME can be the Access and Mobility Management Function (AMF), and the S-GW can be the session management function ( Session Management Function, SMF), the S1AP interface in the LTE system, and the S1-U interface are replaced with N2 and N3 interfaces respectively.

However, in the NR system, the UE usually ignores the configuration information transmitted without encryption, which affects the subsequent behavior of the UE based on the configuration information.

In view of this, the embodiment of the present application provides a wireless communication method. The mobility control parameters of the terminal device can be encrypted on the core network side, and then sent to the terminal device through the access network, so that the terminal device receives the configuration information It is the encrypted configuration information, which can realize the safe and reliable transmission of the configuration information.

FIG. 3 is a schematic flowchart of a wireless communication method provided by an embodiment of this application. The method 300 may be executed by the terminal device in the communication system shown in FIG. 1. As shown in FIG. 3, the method 300 may include at least part of the following content:

S310: The terminal device receives a first message sent by the network device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.

Optionally, in the embodiment of the present application, the first message may be any downlink message or downlink signaling exchanged between the terminal device and the network device, for example, the first message may be a downlink RRC message, or It can also be a message or signaling during random access, or a message or signaling during small data transmission.

Further, in some embodiments, the method 300 may further include:

The terminal device decrypts the encrypted first configuration information to obtain the first configuration information.

Therefore, in the embodiments of the present application, the terminal device can receive the encrypted mobility control parameter, and the terminal device can decrypt the encrypted mobility control parameter to obtain the mobility control parameter, so that the subsequent execution can be performed according to the mobility control parameter. The behavior of, for example, cell handover or cell reselection according to the mobility control parameter.

Optionally, in the embodiment of the present application, the first configuration information may be encrypted by the core network device. For example, the NAS of the core network device may encrypt the first configuration information. Further, the core network device may transfer the encrypted first configuration information to the terminal device through the access network device.

Optionally, as an embodiment, the first message includes a non-access stratum NAS protocol data unit (Protocol Data Unit, PDU), and the NAS PDU is obtained by the core network device encrypting the downlink NAS message, The first configuration information is encapsulated in the downlink NAS message.

Specifically, the core network device may obtain the first configuration information from the access network device, and may further encapsulate the first configuration information in a downlink NAS message, and then the NAS of the core network device may perform the downlink The NAS message is encrypted. Optionally, the core network device may also perform integrity protection processing on the downlink NAS message to obtain the NAS PDU. The foregoing processing process is equivalent to encrypting and integrity protecting the first configuration information For processing, the NAS PDU may be further sent to the access network device, and the access network device may carry the NAS PDU in the first message and send it to the terminal device.

After receiving the first message, the terminal device may decrypt the NAS PDU in the first message to obtain the first configuration information. Specifically, the access layer (Access Status, AS) of the terminal device obtains the NAS PDU in the first message, and the AS of the terminal device sends the NAS PDU to the NAS of the terminal device, The NAS of the terminal device decrypts the NAS PDU to obtain the first configuration information, and the NAS of the terminal device transmits the decrypted first configuration information to the AS layer of the terminal device, and further The AS of the terminal device may perform subsequent actions according to the first configuration information, for example, perform cell selection or cell reselection.

Optionally, in some embodiments, if the core network device also performs integrity protection processing on the downlink NAS message, the NAS of the terminal device may also perform integrity protection verification on the decrypted NAS PDU , To obtain complete and accurate first configuration information, and improve the reliability of configuration information transmission.

Therefore, according to the wireless communication method of the embodiment of the present application, the configuration information transmitted in plain text at the AS layer can be encrypted by the NAS layer, and the encrypted configuration information can be further transmitted, thereby improving the security and reliability of configuration information transmission. , And can prevent the terminal device from ignoring this configuration information, affecting user experience.

Optionally, in some embodiments, the first configuration information includes at least one of the following:

Idle state mobility control parameters (idleModeMobilityControlInfo), redirection configuration parameters and configuration information for cell selection or reselection.

Optionally, in some embodiments, the redirection configuration parameters may include at least one of the following:

Absolute Radio Frequency Channel Number (ARFCN), carrier frequency.

For example, the ARFCN can be the ARFCN value of various networks. For example, ARFCN of 3G network, or ARFCN of 4G network, etc. The carrier frequency may be the carrier frequency of the cell in various networks, for example, the carrier frequency of the cell of CDMA2000, the carrier frequency of the cell of the LTE network, etc.

Optionally, in some embodiments, before S310, the method further includes:

The terminal device sends a second message to the network device, where the second message is used to request transmission of small data.

That is, the encrypted transmission of the mobility control parameter can be applied in a small data transmission scenario, of course, can also be applied in other scenarios, such as a random access scenario, which is not limited in the embodiment of the present application.

Optionally, as an embodiment, the second message is a radio resource control RRC data early transmission request message, which may correspond to the RRCEarlyDataComplete message in FIG. 2, and the first message is an RRC data early transmission complete message, which may correspond to RRCEarlyDataRequest message in Figure 2.

Optionally, in some embodiments, the second message is carried in a two-step random access message A (MsgA), and the first message is carried in a two-step random access message B (MsgB), That is, MsgB implements conflict resolution and RRCEarlyDataComplete at the same time, or the first message is carried in the next downlink message of message B, that is, MsgB implements conflict resolution, and the next downlink message of MsgB implements RRCEarlyDataComplete. Wherein, the MsgA may include message 1 (Msg1) and message 3 (Msg3) in the four-step random access process, and the MsgB may include message 2 (Msg2) and message 4 (Msg4) in the four-step random access process. ).

Optionally, in some embodiments, the second message is carried in message 3 (Msg3) of four-step random access, and the first message is carried in message 4 (Msg4) of four-step random access.

3, the wireless communication method according to the embodiment of the present application is described in detail from the perspective of the terminal device, and the wireless communication method according to another embodiment of the present application is described in detail below in conjunction with FIG. 4 from the perspective of the access network device. method. It should be understood that the description on the side of the access network device and the description on the side of the terminal device correspond to each other, and similar descriptions can be referred to above. To avoid repetition, details are not repeated here.

4 is a schematic flowchart of a wireless communication method 400 according to another embodiment of the present application. The method 400 may be executed by an access network device, such as a base station, in the communication system shown in FIG. 1, as shown in FIG. 4. , The method 400 includes the following contents:

S410: The access network device sends a first message to the terminal device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.

Optionally, in some embodiments, before S410, the method 400 further includes:

The access network device receives a second message sent by the terminal device, where the second message is used to request transmission of small data.

Optionally, in some embodiments, before the S410, the method 400 further includes:

Sending, by the access network device, the first configuration information to the core network device;

The access network device receives a third message sent by the core network device, where the third message includes the encrypted first configuration information.

In the embodiment of the present application, after the access network device receives the second message from the terminal device, it can send the first configuration information to the core network device. Further, the core network device can configure the first configuration information. The information is encrypted, and then the encrypted first configuration information is carried in a third message and sent to the access network device.

Optionally, as an embodiment, the access network device sending the first configuration information to the core network device includes:

The access network device sends the first configuration information to the core network device in the form of a container.

Optionally, in some embodiments, after the access network device receives the second message from the terminal device, if the access network device determines to release the UE, the access network device may report to all The core network device sends the first configuration information. After receiving the first configuration information, the core network device may determine to release the UE. Further, the core network device may encapsulate the first configuration information in the container in a downlink NAS message, and then the NAS of the core network device The downlink NAS message can be encrypted, and optionally, integrity protection processing can also be performed, which is equivalent to performing encryption and integrity protection processing on the first configuration information to obtain the NAS PDU, and the core network device The NAS PDU may be sent to the access network device, and the access network device may carry the NAS PDU in the first message and send it to the terminal device.

Optionally, in some embodiments, the core network device may be an AMF, or may also be other core network devices, which is not limited in the embodiments of the present application.

Optionally, in some embodiments, the second message is a radio resource control RRC data early transmission request message, and the first message is an RRC data early transmission complete message.

Optionally, in some embodiments, the second message is carried in message A of two-step random access, and the first message is carried in message B of two-step random access or is carried in message B. In the next downstream message.

Optionally, in some embodiments, the second message is carried in message 3 of four-step random access, and the first message is carried in message 4 of four-step random access.

The above describes the wireless image method of this application in detail from the perspectives of terminal equipment and access network equipment in conjunction with Figures 3 to 4, and the following describes the wireless communication of this application from the perspective of core network equipment in conjunction with Figure 5 It should be understood that the description on the core network device side and the description on the access network device side correspond to each other. Similar descriptions can be referred to above. To avoid repetition, details are not repeated here.

FIG. 5 is a schematic flowchart of a wireless communication method 500 according to still another embodiment of the present application. The method 500 may be executed by a core network device, such as a base station, in the communication system shown in FIG. 1, as shown in FIG. 5. The method 500 includes the following contents:

S510: The core network device receives first configuration information sent by the access network device, where the first configuration information includes mobility control parameters.

S520: The core network device sends a third message to the access network device, where the third message includes the encrypted first configuration information.

Optionally, in some embodiments, the core network device receiving the first configuration information sent by the access network device includes:

The core network device receives the first configuration information sent by the access network device in the form of a container.

Optionally, in some embodiments, the core network device sending a third message to the access network device includes:

The core network device encapsulates the first configuration information in the container in a downlink non-access stratum NAS message;

The NAS layer of the core network device encrypts the downlink NAS message to obtain a NAS protocol data unit PDU, and the third message is the NAS PDU;

The NAS layer of the core network device sends the NAS PDU to the access network device.

Optionally, in some embodiments, the method 500 further includes:

The NAS layer of the core network device performs integrity protection processing on the encrypted downlink NAS message.

Idle state mobility control parameters, redirection configuration parameters and configuration information for cell selection or reselection.

In the following, with reference to FIG. 6, without loss of generality, the terminal device is the UE, the access network device is the access network device (gNB) in the NR system, and the core network device is the AMF in the NR system as an example. From the perspective of device interaction, the wireless communication method according to the embodiment of the present application is described. As shown in FIG. 6, the method may include the following steps:

S601: The AS of the UE sends a first message to the gNB.

S602. The gNB sends first configuration information to the AMF. For example, the first configuration information may be sent to the AMF as a container.

In S603, the configuration information in the container received by the AMF is encapsulated in a downlink NAS message, and the NAS layer of the AMF performs encryption and integrity protection processing on the downlink NAS information to obtain a NAS PDU.

In S604, the AMF sends the NAS PDU to the gNB.

In S605, the base station sends a first message to the AS layer of the UE, and the first message includes the NAS PDU.

Further, in S606, the AS layer of the UE obtains the NAS PDU from the first message, and sends the NAS PDU to the NAS layer of the UE.

In S607, the NAS layer of the UE performs decryption and integrity protection verification on the NAS PDU to obtain the first configuration information.

In S608, the NAS layer of the UE sends the first configuration information to the AS layer of the UE.

Further, in 609, the AS layer of the UE may perform subsequent actions according to the first configuration information, such as cell selection or cell reselection.

The foregoing describes in detail the method embodiments of this application from the perspectives of terminal equipment and access network equipment in conjunction with Figures 3 to 6, respectively. The following describes the device embodiments of this application in detail with reference to Figures 7 to 12, and it should be understood , The device embodiment and the method embodiment correspond to each other, and the similar description can refer to the method embodiment

FIG. 7 shows a schematic block diagram of a terminal device 700 according to an embodiment of the present application. As shown in Fig. 4, the terminal device 700 includes:

The communication module 710 is configured to receive a first message sent by a network device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.

Optionally, in some embodiments, the communication module 710 is also used to

Before receiving the first message, send a second message to the network device, where the second message is used to request transmission of small data.

Optionally, in some embodiments, the terminal device further includes

The processing module is configured to decrypt the encrypted first configuration information to obtain the first configuration information.

Optionally, in some embodiments, the first message includes a non-access stratum NAS protocol data unit PDU, and the NAS PDU is obtained by the core network device encrypting the downlink NAS message, and the first configuration The information is encapsulated in the downlink NAS message.

Optionally, in some embodiments, the processing module is used to:

Acquiring the NAS PDU in the first message at the access layer AS of the terminal device;

Sending the NAS PDU to the NAS of the terminal device in the AS of the terminal device;

Decrypt the NAS PDU on the NAS of the terminal device to obtain the first configuration information;

The NAS of the terminal device transmits the first configuration information to the AS layer of the terminal device.

Optionally, in some embodiments, the downlink NAS message is also subjected to integrity protection processing, and the processing module is further configured to:

Perform integrity protection verification on the decrypted NAS PDU on the NAS of the terminal device.

Optionally, in some embodiments, the terminal device further includes:

The processing module is configured to perform cell reselection and/or cell selection according to the first configuration information.

Therefore, in the embodiments of the present application, the configuration information transmitted in plain text at the AS layer can be encrypted by the NAS layer, and the encrypted configuration information can be further transmitted, thereby improving the security and reliability of configuration information transmission and avoiding The terminal device ignores this configuration information and affects user experience.

It should be understood that the terminal device 700 according to the embodiment of the present application may correspond to the terminal device or the UE in the method embodiment of the present application, and the above-mentioned and other operations and/or functions of each unit in the terminal device 700 are respectively intended to implement FIGS. 3 to The corresponding process of the terminal device in the method embodiment shown in FIG. 6 is not repeated here for brevity.

Fig. 8 is a schematic block diagram of an access network device according to an embodiment of the present application. The access network device 800 shown in FIG. 8 includes:

The communication module 810 is configured to send a first message to the terminal device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.

Optionally, in some embodiments, the communication module 810 is further configured to:

Before sending the first message, receiving a second message sent by the terminal device, where the second message is used to request transmission of small data.

Before sending the first message, sending the first configuration information to the core network device;

Receiving a third message sent by the core network device, where the third message includes the encrypted first configuration information.

Optionally, in some embodiments, the communication module 810 is specifically configured to:

Sending the first configuration information to the core network device in the form of a container.

Optionally, in some embodiments, the third message is a non-access stratum NAS protocol data unit PDU, and the NAS PDU is obtained by the core network device performing encryption and integrity protection processing on the downlink NAS message, The first configuration information is encapsulated in the downlink NAS message.

Optionally, in some embodiments, the first message includes the NAS PDU.

It should be understood that the access network device 800 according to the embodiment of the present application may correspond to the access network device in the method embodiment of the present application, and the foregoing and other operations and/or functions of each unit in the access network device 800 are respectively for The corresponding flow of the access network device in the method embodiments shown in FIG. 3 to FIG. 6 is implemented. For brevity, details are not described herein again.

Fig. 9 is a schematic block diagram of a core network device according to an embodiment of the present application. The core network equipment 900 of FIG. 9 includes:

The communication module 910 is configured to receive first configuration information sent by an access network device, where the first configuration information includes mobility control parameters;

Send a third message to the access network device, where the third message includes the encrypted first configuration information.

Optionally, in some embodiments, the communication module 910 is specifically configured to:

Receiving the first configuration information sent by the access network device in the form of a container.

Optionally, in some embodiments, the communication module 910 is further configured to:

Encapsulating the first configuration information in the container in a downlink non-access stratum NAS message;

The core network device 900 further includes:

A processing module, configured to encrypt the downlink NAS message at the NAS layer of the core network device to obtain a NAS protocol data unit PDU, and the third message is the NAS PDU;

The communication module 910 is also used for:

Send the NAS PDU to the access network device at the NAS layer of the core network device.

Optionally, in some embodiments, the processing module is further configured to:

Perform integrity protection processing on the encrypted downlink NAS message at the NAS layer of the core network device.

It should be understood that the core network device 900 according to the embodiment of the present application may correspond to the core network device or the AMF in the method embodiment of the present application, and the foregoing and other operations and/or functions of the various units in the core network device 900 are respectively intended to achieve The corresponding processes of the core network equipment in the method embodiments shown in FIG. 3 to FIG. 6 are not repeated here for brevity.

FIG. 10 is a schematic structural diagram of a communication device 600 according to an embodiment of the present application. The communication device 600 shown in FIG. 10 includes a processor 610, and the processor 610 can call and run a computer program from the memory to implement the method in the embodiment of the present application.

Optionally, as shown in FIG. 10, the communication device 600 may further include a memory 620. The processor 610 may call and run a computer program from the memory 620 to implement the method in the embodiment of the present application.

The memory 620 may be a separate device independent of the processor 610, or may be integrated in the processor 610.

Optionally, as shown in FIG. 6, the communication device 600 may further include a transceiver 630, and the processor 610 may control the transceiver 630 to communicate with other devices. Specifically, it may send information or data to other devices, or receive other devices. Information or data sent by the device.

The transceiver 630 may include a transmitter and a receiver. The transceiver 630 may further include an antenna, and the number of antennas may be one or more.

Optionally, the communication device 600 may specifically be a network device in an embodiment of the present application, and the communication device 600 may implement the corresponding process implemented by the network device in each method of the embodiment of the present application. For brevity, details are not repeated here. .

Optionally, the communication device 600 may specifically be a mobile terminal/terminal device of an embodiment of the application, and the communication device 600 may implement the corresponding processes implemented by the mobile terminal/terminal device in each method of the embodiment of the application. For the sake of brevity , I won’t repeat it here.

FIG. 11 is a schematic structural diagram of a chip of an embodiment of the present application. The chip 1100 shown in FIG. 11 includes a processor 1110, and the processor 1110 can call and run a computer program from a memory to implement the method in the embodiment of the present application.

Optionally, as shown in FIG. 11, the chip 1100 may further include a memory 1120. The processor 1110 may call and run a computer program from the memory 1120 to implement the method in the embodiment of the present application.

The memory 1120 may be a separate device independent of the processor 1110, or may be integrated in the processor 1110.

Optionally, the chip 1100 may further include an input interface 1130. The processor 1110 can control the input interface 1130 to communicate with other devices or chips, and specifically, can obtain information or data sent by other devices or chips.

Optionally, the chip 1100 may further include an output interface 1140. The processor 1110 can control the output interface 1140 to communicate with other devices or chips, and specifically, can output information or data to other devices or chips.

Optionally, the chip can be applied to the network device in the embodiment of the present application, and the chip can implement the corresponding process implemented by the network device in the various methods of the embodiment of the present application. For brevity, details are not described herein again.

Optionally, the chip can be applied to the mobile terminal/terminal device in the embodiment of the present application, and the chip can implement the corresponding process implemented by the mobile terminal/terminal device in each method of the embodiment of the present application. For brevity, here is No longer.

It should be understood that the chip mentioned in the embodiment of the present application may also be referred to as a system-level chip, a system-on-chip, a system-on-chip, or a system-on-chip, etc.

FIG. 12 is a schematic block diagram of a communication system 1200 according to an embodiment of the present application. As shown in FIG. 12, the communication system 1200 includes a terminal device 1210, an access network device 1220, and a core network device 1230.

Wherein, the terminal device 1210 can be used to implement the corresponding function implemented by the terminal device in the above method, and the access network device 1220 can be used to implement the corresponding function implemented by the access network device in the above method, the core network The device 1230 may be used to implement the corresponding functions implemented by the core network device in the foregoing method. For brevity, details are not described herein again.

It should be understood that the processor of the embodiment of the present application may be an integrated circuit chip with signal processing capability. In the implementation process, the steps of the foregoing method embodiments can be completed by hardware integrated logic circuits in the processor or instructions in the form of software. The aforementioned processor may be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (ASIC), a ready-made programmable gate array (Field Programmable Gate Array, FPGA) or other Programming logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like. The steps of the method disclosed in the embodiments of the present application may be directly embodied as being executed and completed by a hardware decoding processor, or executed and completed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory, or electrically erasable programmable memory, registers. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

It can be understood that the memory in the embodiment of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory. Among them, the non-volatile memory can be read-only memory (Read-Only Memory, ROM), programmable read-only memory (Programmable ROM, PROM), erasable programmable read-only memory (Erasable PROM, EPROM), and electrically available Erase programmable read-only memory (Electrically EPROM, EEPROM) or flash memory. The volatile memory may be a random access memory (Random Access Memory, RAM), which is used as an external cache. By way of exemplary but not restrictive description, many forms of RAM are available, such as static random access memory (Static RAM, SRAM), dynamic random access memory (Dynamic RAM, DRAM), synchronous dynamic random access memory (Synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (Double Data Rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (Enhanced SDRAM, ESDRAM), synchronous connection dynamic random access memory (Synchlink DRAM, SLDRAM) ) And Direct Rambus RAM (DR RAM). It should be noted that the memories of the systems and methods described herein are intended to include, but are not limited to, these and any other suitable types of memories.

It should be understood that the foregoing memory is exemplary but not restrictive. For example, the memory in the embodiment of the present application may also be static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), Synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous connection Dynamic random access memory (synch link DRAM, SLDRAM) and direct memory bus random access memory (Direct Rambus RAM, DR RAM), etc. That is to say, the memory in the embodiment of the present application is intended to include but not limited to these and any other suitable types of memory.

The embodiment of the present application also provides a computer-readable storage medium for storing computer programs.

Optionally, the computer-readable storage medium may be applied to the network device in the embodiment of the present application, and the computer program causes the computer to execute the corresponding process implemented by the network device in each method of the embodiment of the present application. For brevity, here No longer.

Optionally, the computer-readable storage medium can be applied to the mobile terminal/terminal device in the embodiment of the present application, and the computer program enables the computer to execute the corresponding process implemented by the mobile terminal/terminal device in each method of the embodiment of the present application For the sake of brevity, I won’t repeat it here.

The embodiments of the present application also provide a computer program product, including computer program instructions.

Optionally, the computer program product may be applied to the network device in the embodiment of the present application, and the computer program instructions cause the computer to execute the corresponding process implemented by the network device in each method of the embodiment of the present application. For the sake of brevity, it is not here. Repeat it again.

Optionally, the computer program product can be applied to the mobile terminal/terminal device in the embodiment of the present application, and the computer program instructions cause the computer to execute the corresponding process implemented by the mobile terminal/terminal device in each method of the embodiment of the present application, For brevity, I won't repeat them here.

The embodiment of the present application also provides a computer program.

Optionally, the computer program can be applied to the network device in the embodiment of the present application. When the computer program runs on the computer, the computer is caused to execute the corresponding process implemented by the network device in each method of the embodiment of the present application. For the sake of brevity , I won’t repeat it here.

Optionally, the computer program can be applied to the mobile terminal/terminal device in the embodiment of the present application. When the computer program runs on the computer, the computer executes each method in the embodiment of the present application. For the sake of brevity, the corresponding process will not be repeated here.

A person of ordinary skill in the art may be aware that the units and algorithm steps of the examples described in combination with the embodiments disclosed herein can be implemented by electronic hardware or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraint conditions of the technical solution. Professionals and technicians can use different methods for each specific application to implement the described functions, but such implementation should not be considered beyond the scope of this application.

Those skilled in the art can clearly understand that, for the convenience and conciseness of description, the specific working process of the above-described system, device, and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed system, device, and method may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, for example, multiple units or components can be combined or It can be integrated into another system, or some features can be ignored or not implemented. In addition, the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.

In addition, the functional units in each embodiment of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units may be integrated into one unit.

If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium. Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (Read-Only Memory,) ROM, random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other media that can store program code .

The above are only specific implementations of this application, but the protection scope of this application is not limited to this. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed in this application. Should be covered within the scope of protection of this application. Therefore, the protection scope of this application shall be subject to the protection scope of the claims.

Claims

A wireless communication method, characterized in that it comprises:

The terminal device receives a first message sent by the network device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.
The method according to claim 1, wherein before the terminal device receives the first message sent by the network device, the method further comprises:

The terminal device sends a second message to the network device, where the second message is used to request transmission of small data.
The method according to claim 1 or 2, wherein the method further comprises:

The terminal device decrypts the encrypted first configuration information to obtain the first configuration information.
The method according to claim 3, wherein the first message includes a non-access stratum NAS protocol data unit PDU, and the NAS PDU is obtained by a core network device encrypting a downlink NAS message, and the The first configuration information is encapsulated in the downlink NAS message.
The method according to claim 4, wherein the terminal device decrypts the encrypted first configuration information to obtain the first configuration information, comprising:

Acquiring the NAS PDU in the first message by the access layer AS of the terminal device;

The AS of the terminal device sends the NAS PDU to the NAS of the terminal device;

The NAS of the terminal device decrypts the NAS PDU to obtain the first configuration information;

The NAS of the terminal device transfers the first configuration information to the AS layer of the terminal device.
The method according to claim 5, wherein the downlink NAS message is also subjected to integrity protection processing, and the method further comprises:

The NAS of the terminal device performs integrity protection verification on the decrypted NAS PDU.
The method according to any one of claims 2 to 6, wherein the second message is a radio resource control RRC data early transmission request message, and the first message is an RRC data early transmission complete message.
The method according to any one of claims 2 to 7, wherein the second message is carried in a two-step random access message A, and the first message is carried in a two-step random access message In B or carried in the next downlink message of the message B.
The method according to any one of claims 2 to 7, wherein the second message is carried in the message 3 of four-step random access, and the first message is carried in the message of four-step random access. 4 in.
The method according to any one of claims 1 to 9, wherein the first configuration information includes at least one of the following:

Idle state mobility control parameters, redirection configuration parameters and configuration information for cell selection or reselection.
The method according to any one of claims 1 to 10, wherein the method further comprises:

The terminal device performs cell reselection and/or cell selection according to the first configuration information.
A wireless communication method, characterized in that it comprises:

The access network device sends a first message to the terminal device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.
The method according to claim 12, characterized in that, before the access network device sends the first message to the terminal device, the method further comprises:

The access network device receives a second message sent by the terminal device, where the second message is used to request transmission of small data.
The method according to claim 12 or 13, wherein, before the access network device sends the first message to the terminal device, the method further comprises:

Sending, by the access network device, the first configuration information to the core network device;

The access network device receives a third message sent by the core network device, where the third message includes the encrypted first configuration information.
The method according to claim 14, wherein the sending of the first configuration information to the core network device by the access network device comprises:

The access network device sends the first configuration information to the core network device in the form of a container.
The method according to claim 15, wherein the third message is a non-access stratum NAS protocol data unit PDU, and the NAS PDU is for the core network device to perform encryption and integrity protection processing on the downlink NAS message Obtained, the first configuration information is encapsulated in the downlink NAS message.
The method according to claim 16, wherein the first message includes the NAS PDU.
The method according to any one of claims 13 to 17, wherein the second message is a radio resource control RRC data early transmission request message, and the first message is an RRC data early transmission complete message.
The method according to any one of claims 13 to 18, wherein the second message is carried in a two-step random access message A, and the first message is carried in a two-step random access message In B or carried in the next downlink message of the message B.
The method according to any one of claims 13 to 18, wherein the second message is carried in the message 3 of four-step random access, and the first message is carried in the message of four-step random access. 4 in.
A wireless communication method, characterized in that it comprises:

The core network device receives first configuration information sent by the access network device, where the first configuration information includes mobility control parameters;

The core network device sends a third message to the access network device, where the third message includes the encrypted first configuration information.
The method according to claim 21, wherein the core network device receiving the first configuration information sent by the access network device comprises:

The core network device receives the first configuration information sent by the access network device in the form of a container.
The method according to claim 21 or 22, wherein the core network device sending a third message to the access network device comprises:

The core network device encapsulates the first configuration information in the container in a downlink non-access stratum NAS message;

The NAS layer of the core network device encrypts the downlink NAS message to obtain a NAS protocol data unit PDU, and the third message is the NAS PDU;

The NAS layer of the core network device sends the NAS PDU to the access network device.
The method of claim 23, wherein the method further comprises:

The NAS layer of the core network device performs integrity protection processing on the encrypted downlink NAS message.
The method according to any one of claims 21 to 24, wherein the first configuration information includes at least one of the following:

Idle state mobility control parameters, redirection configuration parameters and configuration information for cell selection or reselection.
A terminal device, characterized in that it comprises:

The communication module is configured to receive a first message sent by a network device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.
The terminal device according to claim 26, wherein the communication module is also used for

Before receiving the first message, send a second message to the network device, where the second message is used to request transmission of small data.
The terminal device according to claim 26 or 27, wherein the terminal device further comprises

The processing module is configured to decrypt the encrypted first configuration information to obtain the first configuration information.
The terminal device according to claim 28, wherein the first message includes a non-access stratum NAS protocol data unit PDU, and the NAS PDU is obtained by a core network device encrypting a downlink NAS message, so The first configuration information is encapsulated in the downlink NAS message.
The terminal device according to claim 29, wherein the processing module is configured to:

Acquiring the NAS PDU in the first message at the access layer AS of the terminal device;

Sending the NAS PDU to the NAS of the terminal device in the AS of the terminal device;

Decrypt the NAS PDU on the NAS of the terminal device to obtain the first configuration information;

The NAS of the terminal device transmits the first configuration information to the AS layer of the terminal device.
The terminal device according to claim 30, wherein the downlink NAS message is further processed for integrity protection, and the processing module is further configured to:

Perform integrity protection verification on the decrypted NAS PDU on the NAS of the terminal device.
The terminal device according to any one of claims 27 to 31, wherein the second message is a radio resource control RRC data early transmission request message, and the first message is an RRC data early transmission complete message.
The terminal device according to any one of claims 27 to 32, wherein the second message is carried in a two-step random access message A, and the first message is carried in a two-step random access message A. The message B may be carried in the next downlink message of the message B.
The terminal device according to any one of claims 27 to 32, wherein the second message is carried in the message 3 of four-step random access, and the first message is carried in the four-step random access message. Message 4.
The terminal device according to any one of claims 26 to 34, wherein the first configuration information includes at least one of the following:

Idle state mobility control parameters, redirection configuration parameters and configuration information for cell selection or reselection.
The terminal device according to any one of claims 26 to 35, wherein the terminal device further comprises:

The processing module is configured to perform cell reselection and/or cell selection according to the first configuration information.
An access network equipment, characterized by comprising:

The communication module is configured to send a first message to the terminal device, where the first message includes encrypted first configuration information, and the first configuration information includes mobility control parameters.
The access network device according to claim 37, wherein the communication module is further configured to:

Before sending the first message, receiving a second message sent by the terminal device, where the second message is used to request transmission of small data.
The access network device according to claim 37 or 38, wherein the communication module is further configured to:

Before sending the first message, sending the first configuration information to the core network device;

Receiving a third message sent by the core network device, where the third message includes the encrypted first configuration information.
The access network device according to claim 39, wherein the communication module is specifically configured to:

Sending the first configuration information to the core network device in the form of a container.
The access network device according to claim 40, wherein the third message is a non-access stratum NAS protocol data unit PDU, and the NAS PDU is for the core network device to encrypt and complete a downlink NAS message The first configuration information is encapsulated in the downlink NAS message obtained by the sexual protection processing.
The access network device according to claim 41, wherein the first message includes the NAS PDU.
The access network device according to any one of claims 38 to 42, wherein the second message is a radio resource control RRC data early transmission request message, and the first message is an RRC data early transmission complete message .
The access network device according to any one of claims 38 to 43, wherein the second message is carried in a two-step random access message A, and the first message is carried in a two-step random access message. In the incoming message B or carried in the next downlink message of the message B.
The access network device according to any one of claims 48 to 43, wherein the second message is carried in message 3 of four-step random access, and the first message is carried in four-step random access. Into the message 4.
A core network device, characterized in that it comprises:

A communication module, configured to receive first configuration information sent by an access network device, where the first configuration information includes mobility control parameters;

Send a third message to the access network device, where the third message includes the encrypted first configuration information.
The core network device according to claim 46, wherein the communication module is specifically configured to:

Receiving the first configuration information sent by the access network device in the form of a container.
The core network device according to claim 46 or 47, wherein the communication module is further configured to:

Encapsulating the first configuration information in the container in a downlink non-access stratum NAS message;

The core network equipment further includes:

A processing module, configured to encrypt the downlink NAS message at the NAS layer of the core network device to obtain a NAS protocol data unit PDU, and the third message is the NAS PDU;

The communication module is also used for:

Send the NAS PDU to the access network device at the NAS layer of the core network device.
The core network device according to claim 48, wherein the processing module is further configured to:

Perform integrity protection processing on the encrypted downlink NAS message at the NAS layer of the core network device.
The core network device according to any one of claims 46 to 49, wherein the first configuration information includes at least one of the following:

Idle state mobility control parameters, redirection configuration parameters and configuration information for cell selection or reselection.
A terminal device, characterized by comprising: a processor and a memory, the memory is used to store a computer program, the processor is used to call and run the computer program stored in the memory, and execute any of claims 1 to 11 The method described in one item.
An access network device, characterized by comprising: a processor and a memory, the memory is used to store a computer program, the processor is used to call and run the computer program stored in the memory, and execute as claimed in claims 12 to 20 The method of any one of.
A core network device, characterized by comprising: a processor and a memory, the memory is used to store a computer program, the processor is used to call and run the computer program stored in the memory, and execute as claimed in claims 21 to 25 Any one of the methods.
A chip, characterized by comprising: a processor, configured to call and run a computer program from a memory, so that a device installed with the chip executes the method according to any one of claims 1 to 11, or The method according to any one of claims 12 to 20, or the method according to any one of claims 21 to 25.
A computer-readable storage medium, characterized in that it is used to store a computer program that enables a computer to execute the method according to any one of claims 1 to 11, or any one of claims 12 to 20 The method of claim 1, or the method of any one of claims 21 to 25.
A computer program product, characterized by comprising computer program instructions that cause a computer to execute the method according to any one of claims 1 to 11, or the method according to any one of claims 12 to 20 The method, or the method according to any one of claims 21 to 25.
A computer program, characterized in that the computer program causes the computer to execute the method according to any one of claims 1 to 11, or the method according to any one of claims 12 to 20, or The method of any one of claims 21-25.