WO2024092827A1 - 一种测距方法及其装置 - Google Patents

一种测距方法及其装置 Download PDF

Info

Publication number
WO2024092827A1
WO2024092827A1 PCT/CN2022/130135 CN2022130135W WO2024092827A1 WO 2024092827 A1 WO2024092827 A1 WO 2024092827A1 CN 2022130135 W CN2022130135 W CN 2022130135W WO 2024092827 A1 WO2024092827 A1 WO 2024092827A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal device
ranging
sidelink
service
sidelink positioning
Prior art date
Application number
PCT/CN2022/130135
Other languages
English (en)
French (fr)
Inventor
陆伟
Original Assignee
北京小米移动软件有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 北京小米移动软件有限公司 filed Critical 北京小米移动软件有限公司
Priority to CN202280004838.0A priority Critical patent/CN118303042A/zh
Priority to PCT/CN2022/130135 priority patent/WO2024092827A1/zh
Publication of WO2024092827A1 publication Critical patent/WO2024092827A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02—Services making use of location information
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup

Definitions

  • the present application relates to the field of communication technology, and in particular to a distance measurement method and device thereof.
  • Ranging or sidelink (SL) positioning service refers to determining the distance between two terminal devices (also called user equipment, User Equipment, UE) and/or the direction from one UE to another UE through a direct communication connection.
  • the fifth generation mobile communication technology (5th Generation Mobile Communication Technology, 5G) system is able to provide services such as ranging or SL positioning.
  • the sidelink client UE can call the ranging or SL positioning service to obtain the result of the ranging or SL positioning service between the above two UEs. However, during the transmission of the results of the ranging or SL positioning service, the privacy of the UE is not protected.
  • the embodiments of the present application provide a ranging method and apparatus thereof, which can protect the privacy security of a terminal device in the process of transmitting the results of ranging or sidelink positioning services through a transmission link, thereby improving the security of ranging or sidelink positioning services.
  • an embodiment of the present application provides a ranging method, which is executed by a network device, and the method includes: sending first indication information to a terminal device based on service authorization information of the terminal device, wherein the first indication information is used to instruct the terminal device to enable transmission link security protection of the terminal device in participating in ranging or sidelink positioning services, and the ranging or sidelink positioning services are triggered by a sidelink client terminal device.
  • the network device may send first indication information to the terminal device based on the service authorization information of the terminal device, and the first indication information is used to instruct the terminal device to enable transmission link security protection of the terminal device in participating in ranging or sidelink positioning services, wherein the ranging or sidelink positioning service is triggered by a sidelink client terminal device, thereby protecting the privacy of the terminal device in the process of transmitting the results of the ranging or sidelink positioning service through the transmission link, thereby improving the security of the ranging or sidelink positioning service.
  • an embodiment of the present application provides another ranging method, which is executed by a terminal device, and the method includes: receiving a first indication information sent by the network device, wherein the first indication information is used to instruct the terminal device to enable transmission link security protection of the terminal device in participating in a ranging or sidelink positioning service, and the ranging or sidelink positioning service is triggered by a sidelink client terminal device.
  • a terminal device may receive a first indication message sent by the network device, wherein the first indication message is used to instruct the terminal device to enable transmission link security protection of the terminal device in participating in a ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by a sidelink client terminal device, thereby being able to protect the privacy of the terminal device in the process of transmitting the results of the ranging or sidelink positioning service via the transmission link, thereby improving the security of the ranging or sidelink positioning service.
  • an embodiment of the present application provides another ranging method, which is executed by a terminal device, and the method includes: in response to the terminal device participating in a ranging or sidelink positioning service, enabling transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the ranging or sidelink positioning service is triggered by a sidelink client terminal device.
  • the terminal device enables transmission link security protection of the terminal device in participation in ranging or sidelink positioning services in response to the terminal device participating in ranging or sidelink positioning services, wherein the ranging or sidelink positioning services are triggered by a sidelink client terminal device, thereby being able to protect the privacy of the terminal device in the process of transmitting the results of the ranging or sidelink positioning services via the transmission link, thereby improving the security of the ranging or sidelink positioning services.
  • an embodiment of the present application provides a communication device, which has some or all of the functions of the network device in the method described in the first aspect above.
  • the functions of the communication device may have some or all of the functions in the embodiments of the present application, or may have the functions of implementing any one of the embodiments of the present application separately.
  • the functions may be implemented by hardware, or may be implemented by hardware executing corresponding software.
  • the hardware or software includes one or more units or modules corresponding to the above functions.
  • the structure of the communication device may include a transceiver unit and a processing unit, and the processing unit is configured to support the communication device to perform the corresponding functions in the above method.
  • the transceiver unit is used to support communication between the communication device and other devices.
  • the communication device may also include a storage unit, which is coupled to the transceiver unit and the processing unit, and stores computer programs and data necessary for the communication device.
  • the processing unit may be a processor
  • the transceiver unit may be a transceiver or a communication interface
  • the storage unit may be a memory
  • an embodiment of the present application provides another communication device, which has some or all of the functions of the terminal device in the method example described in the second aspect above, such as the functions of the communication device may have some or all of the functions in the embodiments of the present application, or may have the functions of implementing any one of the embodiments of the present application separately.
  • the functions may be implemented by hardware, or by hardware executing corresponding software implementations.
  • the hardware or software includes one or more units or modules corresponding to the above functions.
  • the structure of the communication device may include a transceiver unit and a processing unit, and the processing unit is configured to support the communication device to perform the corresponding functions in the above method.
  • the transceiver unit is used to support communication between the communication device and other devices.
  • the communication device may also include a storage unit, which is coupled to the transceiver unit and the processing unit and stores computer programs and data necessary for the communication device.
  • the processing unit may be a processor
  • the transceiver unit may be a transceiver or a communication interface
  • the storage unit may be a memory
  • an embodiment of the present application provides another communication device, which has some or all of the functions of the terminal device in the method example described in the third aspect above, such as the functions of the communication device may have the functions of some or all of the embodiments in the present application, or may have the functions of implementing any one of the embodiments in the present application separately.
  • the functions may be implemented by hardware, or by hardware executing corresponding software implementations.
  • the hardware or software includes one or more units or modules corresponding to the above functions.
  • the structure of the communication device may include a transceiver unit and a processing unit, and the processing unit is configured to support the communication device to perform the corresponding functions in the above method.
  • the transceiver unit is used to support communication between the communication device and other devices.
  • the communication device may also include a storage unit, which is coupled to the transceiver unit and the processing unit and stores computer programs and data necessary for the communication device.
  • the processing unit may be a processor
  • the transceiver unit may be a transceiver or a communication interface
  • the storage unit may be a memory
  • an embodiment of the present application provides a communication device, which includes a processor.
  • the processor calls a computer program in a memory, the method described in the first aspect is executed.
  • an embodiment of the present application provides a communication device, which includes a processor.
  • the processor calls a computer program in a memory, the method described in the second aspect is executed.
  • an embodiment of the present application provides a communication device, which includes a processor.
  • the processor calls a computer program in a memory, the method described in the third aspect is executed.
  • an embodiment of the present application provides a communication device, which includes a processor and a memory, in which a computer program is stored; the processor executes the computer program stored in the memory so that the communication device executes the method described in the first aspect above.
  • an embodiment of the present application provides a communication device, which includes a processor and a memory, in which a computer program is stored; the processor executes the computer program stored in the memory so that the communication device executes the method described in the second aspect above.
  • an embodiment of the present application provides a communication device, which includes a processor and a memory, in which a computer program is stored; the processor executes the computer program stored in the memory so that the communication device executes the method described in the third aspect above.
  • an embodiment of the present application provides a communication device, which includes a processor and an interface circuit, wherein the interface circuit is used to receive code instructions and transmit them to the processor, and the processor is used to run the code instructions to enable the device to execute the method described in the first aspect above.
  • an embodiment of the present application provides a communication device, which includes a processor and an interface circuit, wherein the interface circuit is used to receive code instructions and transmit them to the processor, and the processor is used to run the code instructions to enable the device to execute the method described in the second aspect above.
  • an embodiment of the present application provides a communication device, which includes a processor and an interface circuit, wherein the interface circuit is used to receive code instructions and transmit them to the processor, and the processor is used to run the code instructions to enable the device to execute the method described in the third aspect above.
  • an embodiment of the present invention provides a computer-readable storage medium for storing instructions used by the above-mentioned network device, and when the instructions are executed, the network device executes the method described in the above-mentioned first aspect.
  • an embodiment of the present invention provides a readable storage medium for storing instructions for the above-mentioned terminal device, and when the instructions are executed, the terminal device executes the method described in the above-mentioned second aspect.
  • an embodiment of the present invention provides a readable storage medium for storing instructions for the above-mentioned terminal device, and when the instructions are executed, the terminal device executes the method described in the third aspect.
  • an embodiment of the present application provides a communication system, the system comprising the communication device described in the fourth aspect and the communication device described in the fifth aspect, or the system comprises the communication device described in the sixth aspect, or the system comprises the communication device described in the seventh aspect and the communication device described in the eighth aspect, or the system comprises the communication device described in the ninth aspect, or the system comprises the communication device described in the tenth aspect and the communication device described in the eleventh aspect, or the system comprises the communication device described in the twelfth aspect, or the system comprises the communication device described in the thirteenth aspect and the communication device described in the fourteenth aspect, or the system comprises the communication device described in the fifteenth aspect.
  • the present application also provides a computer program product comprising a computer program, which, when executed on a computer, enables the computer to execute the method described in the first aspect above.
  • the present application also provides a computer program product comprising a computer program, which, when executed on a computer, enables the computer to execute the method described in the second aspect above.
  • the present application also provides a computer program product comprising a computer program, which, when executed on a computer, enables the computer to execute the method described in the third aspect above.
  • the present application provides a chip system, which includes at least one processor and an interface, for supporting the network device to implement the functions involved in the first aspect, for example, determining or processing at least one of the data and information involved in the above method.
  • the chip system also includes a memory, which is used to store computer programs and data necessary for the network device.
  • the chip system can be composed of a chip, or it can include a chip and other discrete devices.
  • the present application provides a chip system, which includes at least one processor and an interface, for supporting a terminal device to implement the functions involved in the second aspect, for example, determining or processing at least one of the data and information involved in the above method.
  • the chip system also includes a memory, which is used to store computer programs and data necessary for the terminal device.
  • the chip system can be composed of a chip, or it can include a chip and other discrete devices.
  • the present application provides a chip system, which includes at least one processor and an interface, for supporting a terminal device to implement the functions involved in the third aspect, for example, determining or processing at least one of the data and information involved in the above method.
  • the chip system also includes a memory, which is used to store computer programs and data necessary for the terminal device.
  • the chip system can be composed of a chip, or it can include a chip and other discrete devices.
  • the present application provides a computer program which, when executed on a computer, enables the computer to execute the method described in the first aspect above.
  • the present application provides a computer program which, when executed on a computer, enables the computer to execute the method described in the second aspect above.
  • the present application provides a computer program which, when executed on a computer, enables the computer to execute the method described in the third aspect above.
  • FIG1 is a schematic diagram of the architecture of a communication system provided in an embodiment of the present application.
  • FIG2 is a flow chart of a distance measurement method provided in an embodiment of the present application.
  • FIG3 is a schematic diagram of a flow chart of another ranging method provided in an embodiment of the present application.
  • FIG4 is a schematic diagram of communication between a reference UE, a target UE, and a sidelink client UE;
  • FIG5 is a schematic diagram of a flow chart of another ranging method provided in an embodiment of the present application.
  • FIG6 is another schematic diagram of communication between a reference UE, a target UE, and a sidelink client UE;
  • FIG7 is a schematic diagram of a flow chart of a distance measurement method provided in an embodiment of the present application.
  • FIG8 is a flow chart of another ranging method provided in an embodiment of the present application.
  • FIG9 is a schematic diagram of a flow chart of another ranging method provided in an embodiment of the present application.
  • FIG10 is a schematic diagram of a flow chart of another ranging method provided in an embodiment of the present application.
  • FIG11 is a schematic diagram of the structure of a communication device provided in an embodiment of the present application.
  • FIG12 is a schematic diagram of the structure of another communication device provided in an embodiment of the present application.
  • FIG. 13 is a schematic diagram of the structure of a chip provided in an embodiment of the present application.
  • first, second, third, etc. may be used to describe various information in the embodiments of the present application, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other.
  • the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information.
  • the words "if” and “if” as used herein may be interpreted as "at the time of” or "when” or "in response to determining”.
  • Bottom-layer direct cellular communication protocol interface link i.e. PC5 link
  • the SL communication mode is introduced.
  • the interface between two terminal devices is the PC5 interface
  • the link between two terminal devices for direct communication through the PC5 interface is the PC5 link.
  • a terminal device communicates with another terminal device through a network device.
  • the interface between the two terminal devices is a Uu interface
  • the link between the two terminal devices for communication through the Uu interface is a Uu link.
  • Link positioning service also known as sidelink positioning service or ranging service, refers to determining the distance between two UEs and/or the direction from one UE to another UE through a direct communication connection.
  • the reference UE is a terminal device that is within the network coverage and can execute the Uu interface-based positioning procedure and/or SL positioning. In the sidelink positioning service, the reference UE can assist the terminal device that needs to be positioned to perform sidelink measurements.
  • the target UE is a terminal device whose position needs to be determined, that is, which needs to be positioned.
  • the sidelink client UE is a third-party UE other than the reference UE and the target UE, triggering a ranging/sidelink positioning service request on behalf of the application residing thereon.
  • the sidelink client UE does not have to support ranging or sidelink positioning capabilities, but a transmission link must be established between the sidelink client UE and the reference UE or between the sidelink client UE and the target UE through the PC5 interface or through the 5G Core Network (5GC) to transmit the ranging or sidelink positioning service request and results.
  • 5GC 5G Core Network
  • Figure 1 is a schematic diagram of the architecture of a communication system provided in an embodiment of the present application.
  • the communication system may include, but is not limited to, a network device and a terminal device.
  • the number and form of devices shown in Figure 1 are only used for example and do not constitute a limitation on the embodiment of the present application. In actual applications, two or more network devices and two or more terminal devices may be included.
  • the communication system shown in Figure 1 includes a network device 101 and two terminal devices 102 as an example.
  • LTE long term evolution
  • 5G fifth generation
  • NR 5G new radio
  • the network device 101 in the embodiment of the present application is an entity on the network side for transmitting or receiving signals.
  • the network device 101 may be an evolved NodeB (eNB), a transmission point (TRP), a next generation NodeB (gNB) in an NR system, a base station in other future mobile communication systems, or an access node in a wireless fidelity (WiFi) system.
  • eNB evolved NodeB
  • TRP transmission point
  • gNB next generation NodeB
  • WiFi wireless fidelity
  • the embodiment of the present application does not limit the specific technology and specific device form adopted by the network device.
  • the network device provided in the embodiment of the present application may be composed of a central unit (CU) and a distributed unit (DU), wherein the CU may also be referred to as a control unit.
  • CU central unit
  • DU distributed unit
  • the CU-DU structure may be used to split the protocol layer of a network device, such as a base station, and the functions of some protocol layers are placed in the CU for centralized control, and the functions of the remaining part or all of the protocol layers are distributed in the DU, and the DU is centrally controlled by the CU.
  • a network device such as a base station
  • the terminal device 102 in the embodiment of the present application is an entity on the user side for receiving or transmitting signals, such as a mobile phone.
  • the terminal device may also be referred to as a terminal device (terminal), a user equipment (UE), a mobile station (MS), a mobile terminal device (MT), etc.
  • the terminal device may be a car with communication function, a smart car, a mobile phone (mobile phone), a wearable device, a tablet computer (Pad), a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control (industrial control), a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in smart grid (smart grid), a wireless terminal device in transportation safety (transportation safety), a wireless terminal device in a smart city (smart city), a wireless terminal device in a smart home (smart home), etc.
  • the embodiments of the present application do not limit the specific technology and specific device form adopted by the terminal device.
  • the communication system described in the embodiment of the present application is for more clearly illustrating the technical solution of the embodiment of the present application, and does not constitute a limitation on the technical solution provided in the embodiment of the present application.
  • Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.
  • the sidelink client UE can call the ranging or SL positioning service to obtain the results of the ranging or SL positioning service between the target UE and the reference UE, and the results of the ranging or SL positioning service contain privacy-sensitive UE location information, such as the location information of the target UE and/or the location information of the reference UE. If it is transmitted without protection, the UE location information in plain text may be exposed to attackers, thereby causing the leakage of the UE's privacy information.
  • the embodiments of the present application mainly address the problem of failure to protect the privacy of terminal devices during transmission of ranging or SL positioning service results between a sidelink client UE and a reference UE/target UE (reference UE or target UE), and propose a ranging method, in which a terminal device such as a sidelink client UE, a target UE or a reference UE can enable transmission link security protection in the ranging or sidelink positioning service triggered by the sidelink client UE, thereby protecting the privacy of the terminal device during transmission of the ranging or sidelink positioning service results via the transmission link and improving the security of the ranging or sidelink positioning service.
  • a terminal device such as a sidelink client UE, a target UE or a reference UE can enable transmission link security protection in the ranging or sidelink positioning service triggered by the sidelink client UE, thereby protecting the privacy of the terminal device during transmission of the ranging or sidelink positioning service results via the transmission link and improving the security of the ranging or sidelink positioning service.
  • the network device mentioned in the embodiment of the present application can refer to the network device 101 of the communication system, and the terminal device can refer to the terminal device 102 of the communication system.
  • the network device in the embodiments of the present application is a network element function in the core network, which is a core network device.
  • the interaction between the terminal device and the network device in each embodiment of the present application is completed through the transparent transmission of the access network device, and the embodiments of the present application will not be repeated.
  • Figure 2 is a flow chart of a distance measurement method provided in an embodiment of the present application.
  • the distance measurement method is executed by a network device. As shown in Figure 2, the method may include but is not limited to the following steps:
  • S201 Send first indication information to the terminal device according to the service authorization information of the terminal device, wherein the first indication information is used to instruct the terminal device to enable transmission link security protection of the terminal device when participating in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by a sidelink client terminal device.
  • the terminal device can participate in the ranging or sidelink positioning service triggered by the sidelink client UE as a sidelink client UE, and can also participate in the ranging or sidelink positioning service triggered by the sidelink client UE as a target UE or reference UE. Accordingly, the terminal device can refer to the sidelink client UE, or can also refer to the target UE, or can also refer to the reference UE, and this application does not limit this.
  • the transmission link is used to transmit the result of ranging or sidelink positioning service.
  • the result of ranging or sidelink positioning service may include the relative distance and/or relative angle between the reference UE and the target UE, etc., which is not limited in this application.
  • the network device can authorize the terminal device to participate in at least one service and configure the security policy corresponding to each service.
  • the service authorization information of the terminal device may include at least one service authorized by the terminal device to participate and the security policy corresponding to each service.
  • the network device may authorize the terminal device to participate in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by a sidelink client terminal device, and configure a security policy corresponding to the ranging or sidelink positioning services.
  • the service authorization information of the terminal device may include the terminal device authorization to participate in the ranging or sidelink positioning services, and the security policy corresponding to the ranging or sidelink positioning services.
  • the network device may configure the security policy corresponding to the ranging or sidelink positioning service to include first indication information, wherein the first indication information may include, for example, "REQUIRED" to instruct the terminal device to enable transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the network device may send the first indication information to the terminal device when the terminal device is authorized to participate in the ranging or sidelink positioning service, so that the terminal device enables the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information.
  • the first indication information may include, for example, "REQUIRED" to instruct the terminal device to enable transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service
  • the network device may send the first indication information to the terminal device when the terminal device is authorized to participate in the ranging or sidelink positioning service, so that the terminal device enables the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information.
  • the terminal device can enable the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information sent by the network device, the privacy of the terminal devices such as the reference UE and the target UE can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the transmission link when the terminal device participates in the ranging or sidelink positioning service, thereby improving the security of the ranging or sidelink positioning service.
  • the network device can be at least one of the following network element functions: Policy Control Function (PCF); Direct Discovery Name Management Function (DDNMF); ProSe Key Management Function (PKMF); Session Management Function (SMF).
  • PCF Policy Control Function
  • DDNMF Direct Discovery Name Management Function
  • PKMF ProSe Key Management Function
  • SMF Session Management Function
  • the terminal device enables transmission link security protection of the terminal device in participating in ranging or sidelink positioning services, which may include the terminal device activating the integrity and/or confidentiality protection mechanism of the transmission link.
  • the terminal device may activate the integrity and/or confidentiality protection mechanism of the transmission link during the establishment of the transmission link according to the first indication information.
  • the network device sends a first indication message to the terminal device based on the service authorization information of the terminal device, and the first indication message is used to instruct the terminal device to enable transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the privacy security of the terminal device can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the transmission link, thereby improving the security of the ranging or sidelink positioning service.
  • Figure 3 is a flow chart of another ranging method provided in an embodiment of the present application.
  • the ranging method can be executed by a network device. As shown in Figure 3, the method may include but is not limited to the following steps:
  • S301 Sending service authorization information of the terminal device to the terminal device, the service authorization information including the terminal device's authorization to participate in ranging or sidelink positioning services, and a security policy corresponding to the ranging or sidelink positioning services, the security policy including first indication information, the first indication information being used to instruct the terminal device to enable PC5 link security protection of the terminal device in participating in ranging or sidelink positioning services, the ranging or sidelink positioning services being triggered by a sidelink client terminal device.
  • the terminal device may refer to a sidelink client UE, or may refer to a target UE, or may refer to a reference UE, which is not limited in this application.
  • the PC5 link is used to transmit the results of ranging or sidelink positioning services.
  • different terminal devices can communicate based on multiple protocol layers, such as ranging/SL positioning protocol (Ranging/Sidelink Positioning protocol) layer, vehicle-to-everything (V2X) or proximity service (ProSe) layer, namely V2X/ProSe Layer in FIG4, packet data convergence protocol (packet data convergence protocol, PDCP) layer, radio link control (radio link control, RLC) layer, media access control (media access control, referred to as MAC) layer, physical layer (physical layer, PHY), and each protocol layer corresponds to a different interface.
  • ranging/SL positioning protocol Radio Link Control
  • RLC radio link control
  • media access control media access control
  • PHY physical layer
  • the target UE and the reference UE can communicate through the SR5 link based on the ranging/SL positioning protocol layer, or communicate through the PC5 link based on the V2X/ProSe Layer.
  • the sidelink client UE and the reference UE/target UE can communicate through the PC5 link based on the V2X/ProSe Layer. This means that the sidelink client UE should have ProSe capability or V2X capability, and the result of ranging or sidelink positioning service is transmitted on the PC5 link from the reference UE or target UE to the sidelink client UE, where the result of ranging or sidelink positioning service is transmitted as the payload of the PC5 link.
  • the network device may authorize the terminal device to participate in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device, and configure the security policy corresponding to the ranging or sidelink positioning service.
  • the service authorization information of the terminal device may include the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service.
  • the network device can configure the security policy (for the control plane and the user plane) corresponding to the ranging or sidelink positioning service to include a first indication information, wherein the first indication information may include, for example, "REQUIRED", which is used to instruct the terminal device to enable the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the network device can send the service authorization information of the terminal device to the terminal device, so that the terminal device enables the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information.
  • the security policy for the control plane and the user plane
  • the network device can configure the security policy (for the control plane and the user plane) corresponding to the ranging or sidelink positioning service to include a first indication information, wherein the first indication information may include, for example, "REQUIRED", which is used to instruct the terminal device to enable the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service
  • the network device can send the service
  • the terminal device can enable the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information sent by the network device, the privacy of the terminal device such as the reference UE and the target UE can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the PC5 link when the terminal device participates in the ranging or sidelink positioning service, thereby improving the security of the ranging or sidelink positioning service.
  • the network device may be at least one of the following network element functions: a policy control function PCF; a proximity communication service name management function DDNMF; a proximity service key management function PKMF; and a session management function SMF.
  • PCF policy control function
  • DDNMF proximity communication service name management function
  • PKMF proximity service key management function
  • SMF session management function
  • the terminal device enables PC5 link security protection when the terminal device participates in ranging or sidelink positioning services, which may include the terminal device activating the integrity and/or confidentiality protection mechanism of the PC5 link.
  • the terminal device may activate the integrity and/or confidentiality protection mechanism of the PC5 link during the establishment of the PC5 link according to the first indication information.
  • the network device can send service authorization information of the terminal device to the terminal device, the service authorization information includes the terminal device's authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, the security policy includes first indication information, the first indication information is used to instruct the terminal device to enable PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by a sidelink client terminal device, thereby protecting the privacy of the terminal device in the process of transmitting the results of the ranging or sidelink positioning service through the PC5 link, thereby improving the security of the ranging or sidelink positioning service.
  • Figure 5 is a flow chart of another ranging method provided in an embodiment of the present application.
  • the ranging method can be executed by a network device. As shown in Figure 5, the method may include but is not limited to the following steps:
  • S501 Sending service authorization information of the terminal device to the terminal device, the service authorization information including authorization of the terminal device to participate in ranging or sidelink positioning services, and a security policy corresponding to the ranging or sidelink positioning services, the security policy including first indication information, the first indication information being used to instruct the terminal device to enable Uu link security protection of the terminal device in participating in ranging or sidelink positioning services, the ranging or sidelink positioning services being triggered by a sidelink client terminal device.
  • the terminal device may refer to a sidelink client UE, or may refer to a target UE, or may refer to a reference UE, and this application does not limit this.
  • the Uu link is used to transmit the results of ranging or sidelink positioning services.
  • the communication between different terminal devices and the communication between the terminal devices and the 5GC through the Radio Access Network (RAN) can be based on multiple protocol layers, such as ranging/SL positioning protocol layer, V2X/ProSe Layer, PDCP layer, RLC layer, MAC layer, and PHY layer, and each protocol layer corresponds to a different interface.
  • the target UE and the reference UE can communicate through the SR5 link based on the ranging/SL positioning protocol layer, or through the PC5 link based on the V2X/ProSe Layer.
  • the reference UE/target UE and the 5GC can communicate through the Uu link with the RAN based on the PDCP protocol, and the sidelink client UE and the 5GC can communicate through the Uu link with the RAN based on the PDCP protocol.
  • the network device may authorize the terminal device to participate in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device, and configure the security policy corresponding to the ranging or sidelink positioning service.
  • the service authorization information of the terminal device may include the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service.
  • the network device can configure the security policy (for the user plane) corresponding to the ranging or sidelink positioning service to include first indication information, wherein the first indication information may include, for example, "REQUIRED", which is used to instruct the terminal device to enable the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the network device can send the service authorization information of the terminal device to the terminal device, so that the terminal device enables the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information.
  • the terminal device can enable the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information sent by the network device, the privacy of the terminal device such as the reference UE and the target UE can be protected in the process of participating in the ranging or sidelink positioning service and transmitting the results of the ranging or sidelink positioning service through the Uu link, thereby improving the security of the ranging or sidelink positioning service.
  • the network device may be at least one of the following network element functions: a policy control function PCF; a proximity communication service name management function DDNMF; a proximity service key management function PKMF; and a session management function SMF.
  • PCF policy control function
  • DDNMF proximity communication service name management function
  • PKMF proximity service key management function
  • SMF session management function
  • the terminal device enables Uu link security protection when the terminal device participates in ranging or sidelink positioning services, which may include the terminal device activating the integrity and/or confidentiality protection mechanism of the Uu link.
  • the terminal device may activate the integrity and/or confidentiality protection mechanism of the Uu link during the establishment of the Uu link according to the first indication information.
  • an integrity and/or confidentiality protection mechanism for the results of the ranging or sidelink positioning service may be provided based on the existing network attached storage (NAS) security.
  • NAS network attached storage
  • the integrity and/or confidentiality protection mechanism of the result of the ranging or sidelink positioning service depends on the UP (user plane) security policy provided to the RAN by the 5GC (e.g., SMF) during the protocol data unit (PDU) session establishment process.
  • the network equipment such as the SMF may configure the UP (user plane) security policy of the Uu link to include the first indication information when establishing the PDU session for the ranging or sidelink positioning service triggered by the sidelink client UE.
  • the network device can send the service authorization information of the terminal device to the terminal device, the service authorization information includes the terminal device's authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, the security policy includes the first indication information, the first indication information is used to instruct the terminal device to enable the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the privacy security of the terminal device can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the Uu link, and the security of the ranging or sidelink positioning service can be improved.
  • Figure 7 is a flow chart of another ranging method provided in an embodiment of the present application.
  • the ranging method is executed by a terminal device. As shown in Figure 7, the method may include but is not limited to the following steps:
  • S701 Receive first indication information sent by a network device, where the first indication information is used to instruct a terminal device to enable transmission link security protection of the terminal device when the terminal device participates in a ranging or sidelink positioning service, where the ranging or sidelink positioning service is triggered by a sidelink client terminal device.
  • the terminal device can participate in the ranging or sidelink positioning service triggered by the sidelink client UE as a sidelink client UE, and can also participate in the ranging or sidelink positioning service triggered by the sidelink client UE as a target UE or reference UE. Accordingly, the terminal device can refer to the sidelink client UE, or can also refer to the target UE, or can also refer to the reference UE, and this application does not limit this.
  • the transmission link is used to transmit the result of ranging or sidelink positioning service.
  • the result of ranging or sidelink positioning service may include the relative distance and/or relative angle between the reference UE and the target UE, etc., which is not limited in this application.
  • the network device can authorize the terminal device to participate in at least one service and configure the security policy corresponding to each service.
  • the service authorization information of the terminal device may include at least one service authorized by the terminal device to participate and the security policy corresponding to each service.
  • the network device may authorize the terminal device to participate in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by the sidelink client terminal device, and configure a security policy corresponding to the ranging or sidelink positioning services.
  • the service authorization information of the terminal device may include the terminal device authorization to participate in the ranging or sidelink positioning services, and the security policy corresponding to the ranging or sidelink positioning services.
  • the network device may configure the security policy corresponding to the ranging or sidelink positioning service to include first indication information, wherein the first indication information may include, for example, "REQUIRED", which is used to instruct the terminal device to enable transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the network device may send the first indication information to the terminal device when the terminal device authorizes to participate in the ranging or sidelink positioning service.
  • the terminal device may receive the first indication information sent by the network device, and then enable the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information.
  • the terminal device can enable the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information sent by the network device, the privacy of the terminal device such as the reference UE and the target UE can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the transmission link when the terminal device participates in the ranging or sidelink positioning service, thereby improving the security of the ranging or sidelink positioning service.
  • the terminal device enables transmission link security protection of the terminal device in participating in ranging or sidelink positioning services, which may include the terminal device activating the integrity and/or confidentiality protection mechanism of the transmission link.
  • the terminal device may activate the integrity and/or confidentiality protection mechanism of the transmission link during the establishment of the transmission link according to the first indication information.
  • the terminal device can receive the first indication information sent by the network device, and the first indication information is used to instruct the terminal device to enable the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the privacy security of the terminal device can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the transmission link, thereby improving the security of the ranging or sidelink positioning service.
  • Figure 8 is a flow chart of another ranging method provided in an embodiment of the present application.
  • the ranging method can be executed by a terminal device. As shown in Figure 8, the method may include but is not limited to the following steps:
  • S801 Receive service authorization information of a terminal device sent by a network device, where the service authorization information includes authorization of the terminal device to participate in ranging or sidelink positioning services, and a security policy corresponding to the ranging or sidelink positioning services, where the security policy includes first indication information, and the first indication information is used to instruct the terminal device to enable PC5 link security protection of the terminal device in participating in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by a sidelink client terminal device.
  • the terminal device may refer to a sidelink client UE, or may refer to a target UE, or may refer to a reference UE, which is not limited in this application.
  • the PC5 link is used to transmit the results of ranging or sidelink positioning services.
  • different terminal devices can communicate based on multiple protocol layers, such as ranging/SL positioning protocol layer, vehicle network V2X/ProSe Layer, PDCP layer, RLC layer, MAC layer, and PHY layer, and each protocol layer corresponds to a different interface.
  • the target UE and the reference UE can communicate through the SR5 link based on the ranging/SL positioning protocol layer, or communicate through the PC5 link based on the V2X/ProSe Layer.
  • the sidelink client UE and the reference UE/target UE can communicate through the PC5 link based on the V2X/ProSe Layer.
  • the sidelink client UE should have ProSe capability or V2X capability, and the result of the ranging or sidelink positioning service is transmitted on the PC5 link from the reference UE or target UE to the sidelink client UE. Among them, the result of the ranging or sidelink positioning service is transmitted as the payload of the PC5 link.
  • the network device may authorize the terminal device to participate in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device, and configure the security policy corresponding to the ranging or sidelink positioning service.
  • the service authorization information of the terminal device may include the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service.
  • the network device can configure the security policy corresponding to the ranging or sidelink positioning service (for the control plane and the user plane) to include the first indication information, wherein the first indication information can include, for example, "REQUIRED (must)", which is used to instruct the terminal device to enable the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the network device can send the service authorization information of the terminal device to the terminal device.
  • the terminal device can receive the service authorization information sent by the network device, and then enable the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information.
  • the terminal device can enable the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information sent by the network device, the privacy of the terminal device such as the reference UE and the target UE can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the PC5 link when the terminal device participates in the ranging or sidelink positioning service, thereby improving the security of the ranging or sidelink positioning service.
  • the network device may be at least one of the following network element functions: a policy control function PCF; a proximity communication service name management function DDNMF; a proximity service key management function PKMF; and a session management function SMF.
  • PCF policy control function
  • DDNMF proximity communication service name management function
  • PKMF proximity service key management function
  • SMF session management function
  • the terminal device enables PC5 link security protection when the terminal device participates in ranging or sidelink positioning services, which may include the terminal device activating the integrity and/or confidentiality protection mechanism of the PC5 link.
  • the terminal device may activate the integrity and/or confidentiality protection mechanism of the PC5 link during the establishment of the PC5 link according to the first indication information.
  • the terminal device can receive the service authorization information of the terminal device sent by the network device, the service authorization information includes the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, the security policy includes the first indication information, the first indication information is used to instruct the terminal device to enable the PC5 link security protection of the terminal device in participating in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the privacy security of the terminal device can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the PC5 link, thereby improving the security of the ranging or sidelink positioning service.
  • Figure 9 is a flow chart of another ranging method provided in an embodiment of the present application.
  • the ranging method can be executed by a terminal device. As shown in Figure 9, the method may include but is not limited to the following steps:
  • S901 Receive service authorization information of a terminal device sent by a network device, where the service authorization information includes authorization of the terminal device to participate in ranging or sidelink positioning services, and a security policy corresponding to the ranging or sidelink positioning services, where the security policy includes first indication information, and the first indication information is used to instruct the terminal device to enable Uu link security protection of the terminal device in participating in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by a sidelink client terminal device.
  • the terminal device may refer to a sidelink client UE, or may refer to a target UE, or may refer to a reference UE, and this application does not limit this.
  • the Uu link is used to transmit the results of ranging or sidelink positioning services.
  • the communication between different terminal devices and the communication between the terminal devices and the 5GC through the RAN can be based on multiple protocol layers, such as the ranging/SL positioning protocol layer, the V2X/ProSe Layer, the PDCP layer, the RLC layer, the MAC layer, and the PHY layer, and each protocol layer corresponds to a different interface.
  • the target UE and the reference UE can communicate through the SR5 link based on the ranging/SL positioning protocol layer, or through the PC5 link based on the V2X/ProSe Layer.
  • the reference UE/target UE and the 5GC can communicate through the Uu link with the RAN based on the PDCP protocol, and the sidelink client UE and the 5GC can communicate through the Uu link with the RAN based on the PDCP protocol.
  • the network device may authorize the terminal device to participate in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device, and configure the security policy corresponding to the ranging or sidelink positioning service.
  • the service authorization information of the terminal device may include the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service.
  • the network device may configure the security policy (for the user plane) corresponding to the ranging or sidelink positioning service to include the first indication information, wherein the first indication information may include, for example, "REQUIRED", which is used to instruct the terminal device to enable the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the network device may send the service authorization information of the terminal device to the terminal device. Accordingly, the terminal device may enable the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information.
  • the terminal device can enable the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service according to the first indication information in the service authorization information sent by the network device, the privacy of the terminal device such as the reference UE and the target UE can be protected in the process of participating in the ranging or sidelink positioning service and transmitting the results of the ranging or sidelink positioning service through the Uu link, thereby improving the security of the ranging or sidelink positioning service.
  • the network device may be at least one of the following network element functions: a policy control function PCF; a proximity communication service name management function DDNMF; a proximity service key management function PKMF; and a session management function SMF.
  • PCF policy control function
  • DDNMF proximity communication service name management function
  • PKMF proximity service key management function
  • SMF session management function
  • the terminal device enables Uu link security protection when the terminal device participates in ranging or sidelink positioning services, which may include the terminal device activating the integrity and/or confidentiality protection mechanism of the Uu link.
  • the terminal device may activate the integrity and/or confidentiality protection mechanism of the Uu link during the establishment of the Uu link according to the first indication information.
  • the terminal device can receive the service authorization information of the terminal device sent by the network device; the service authorization information includes the authorization of the terminal device to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, and the security policy includes the first indication information, and the first indication information is used to instruct the terminal device to enable the Uu link security protection of the terminal device in participating in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the privacy security of the terminal device can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the Uu link, thereby improving the security of the ranging or sidelink positioning service.
  • Figure 10 is a flow chart of another ranging method provided in an embodiment of the present application.
  • the ranging method can be executed by a terminal device. As shown in Figure 10, the method may include but is not limited to the following steps:
  • S1001 In response to the terminal device participating in ranging or sidelink positioning services, enabling transmission link security protection of the terminal device in the ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by the sidelink client terminal device.
  • the terminal device can participate in the ranging or sidelink positioning service triggered by the sidelink client UE as a sidelink client UE, and can also participate in the ranging or sidelink positioning service triggered by the sidelink client UE as a target UE or reference UE. Accordingly, the terminal device can refer to the sidelink client UE, or can also refer to the target UE, or can also refer to the reference UE, and this application does not limit this.
  • the transmission link is used to transmit the result of ranging or sidelink positioning service.
  • the result of ranging or sidelink positioning service may include the relative distance and/or relative angle between the reference UE and the target UE, etc., which is not limited in this application.
  • the terminal device when the terminal device does not receive the first indication information sent by the network device, the terminal device may, in response to the terminal device participating in ranging or sidelink positioning services, automatically enable the transmission link security protection of the terminal device in the ranging or sidelink positioning services, wherein the first indication information is used to instruct the terminal device to enable the transmission link security protection of the terminal device in the ranging or sidelink positioning services.
  • the terminal device can enable transmission link security protection of the terminal device in participating in ranging or sidelink positioning services in response to the terminal device participating in ranging or sidelink positioning services, the privacy of terminal devices such as reference UE and target UE can be protected in the process of transmitting the results of the ranging or sidelink positioning services through the transmission link when the terminal device participates in ranging or sidelink positioning services, thereby improving the security of the ranging or sidelink positioning services.
  • enabling transmission link security protection for a terminal device participating in ranging or sidelink positioning services may include: activating an integrity and/or confidentiality protection mechanism for the transmission link during transmission link establishment.
  • the terminal device can always activate the integrity and/or confidentiality protection mechanism on the control plane and the user plane. Therefore, when the terminal device participates in the ranging or sidelink positioning service and transmits the result of the ranging or sidelink positioning service through the transmission link, the privacy security of the terminal device such as the reference UE and the target UE can be protected, thereby improving the security of the ranging or sidelink positioning service.
  • the transmission link can be a PC5 link, that is, when the terminal device communicates with other terminal devices through the PC5 link, since there is no need to communicate with the network device, the terminal device can, in response to the terminal device participating in ranging or sidelink positioning services, automatically enable PC5 link security protection for the terminal device in the ranging or sidelink positioning service, thereby protecting the privacy of the terminal device in the process of transmitting the results of the ranging or sidelink positioning service through the PC5 link and improving the security of the ranging or sidelink positioning service.
  • PC5 link that is, when the terminal device communicates with other terminal devices through the PC5 link, since there is no need to communicate with the network device, the terminal device can, in response to the terminal device participating in ranging or sidelink positioning services, automatically enable PC5 link security protection for the terminal device in the ranging or sidelink positioning service, thereby protecting the privacy of the terminal device in the process of transmitting the results of the ranging or sidelink positioning service through the PC5 link and improving the security of the ranging or sidelink positioning service.
  • the terminal device can enable the transmission link security protection of the terminal device in the ranging or sidelink positioning service in response to the terminal device participating in the ranging or sidelink positioning service, wherein the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the privacy security of the terminal device can be protected in the process of transmitting the results of the ranging or sidelink positioning service through the transmission link, thereby improving the security of the ranging or sidelink positioning service.
  • the methods provided by the embodiments of the present application are introduced from the perspectives of network equipment and terminal equipment, respectively.
  • the network equipment and the terminal equipment may include hardware structures and software modules, and the functions are implemented in the form of hardware structures, software modules, or hardware structures plus software modules.
  • a function in the functions may be executed in the form of hardware structures, software modules, or hardware structures plus software modules.
  • the communication device 110 shown in Figure 11 may include a transceiver unit 1101.
  • the transceiver unit 1101 may include a sending unit and/or a receiving unit, the sending unit is used to implement a sending function, the receiving unit is used to implement a receiving function, and the transceiver unit 1101 may implement a sending function and/or a receiving function.
  • the communication device 110 may be a network device, a device in a network device, or a device that can be used in conjunction with a network device.
  • the communication device 110 may be a terminal device, a device in a terminal device, or a device that can be used in conjunction with a terminal device.
  • the communication device 110 is a network device:
  • the transceiver unit 1101 is used to send first indication information to the terminal device according to the service authorization information of the terminal device, and the first indication information is used to instruct the terminal device to enable the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the terminal device enables transmission link security protection, including the terminal device activating an integrity and/or confidentiality protection mechanism of the transmission link.
  • the transceiver unit 1101 is also used to send service authorization information of the terminal device to the terminal device;
  • the service authorization information includes the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, and the security policy includes the first indication information.
  • the transmission link is at least one of a bottom layer direct cellular communication protocol interface PC5 link and a Uu link.
  • the network device is at least one of the following:
  • Session Management Function SMF Session Management Function
  • the communication device 110 is a terminal device (such as the terminal device in the method embodiments shown in the above-mentioned FIGS. 7-9 ):
  • the transceiver unit 1101 is used to receive first indication information sent by a network device, where the first indication information is used to instruct a terminal device to enable transmission link security protection of the terminal device when the terminal device participates in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by a sidelink client terminal device.
  • the terminal device enables transmission link security protection, including the terminal device activating an integrity and/or confidentiality protection mechanism of the transmission link.
  • the transceiver unit 1101 is also used to receive service authorization information of the terminal device sent by the network device; the service authorization information includes the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, and the security policy includes the first indication information.
  • the transmission link is at least one of a bottom layer direct cellular communication protocol interface PC5 link and a Uu link.
  • the communication device 110 is a terminal device (such as the terminal device in the method embodiment shown in FIG. 10 ):
  • Processing unit 1102 is used to enable transmission link security protection of the terminal device in participating in ranging or sidelink positioning services in response to the terminal device participating in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by the sidelink client terminal device.
  • enabling transmission link security protection of a terminal device in participating in ranging or sidelink positioning services including:
  • the transmission link is an underlying direct cellular communication protocol interface PC5 link.
  • FIG 12 is a schematic diagram of the structure of another communication device 120 provided in an embodiment of the present application.
  • the communication device 120 can be a network device, or a terminal device, or a chip, a chip system, or a processor that supports the network device to implement the above method, or a chip, a chip system, or a processor that supports the terminal device to implement the above method.
  • the device can be used to implement the method described in the above method embodiment, and the details can be referred to the description in the above method embodiment.
  • the communication device 120 may include one or more processors 1201.
  • the processor 1201 may be a general-purpose processor or a dedicated processor, etc.
  • it may be a baseband processor or a central processing unit.
  • the baseband processor may be used to process the communication protocol and communication data
  • the central processing unit may be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute a computer program, and process the data of the computer program.
  • the communication device 120 may further include one or more memories 1202, on which a computer program 1204 may be stored, and the processor 1201 executes the computer program 1204 so that the communication device 120 performs the method described in the above method embodiment.
  • data may also be stored in the memory 1202.
  • the communication device 120 and the memory 1202 may be provided separately or integrated together.
  • the communication device 120 may further include a transceiver 1205 and an antenna 1206.
  • the transceiver 1205 may be referred to as a transceiver unit, a transceiver, or a transceiver circuit, etc., for implementing a transceiver function.
  • the transceiver 1205 may include a receiver and a transmitter, the receiver may be referred to as a receiver or a receiving circuit, etc., for implementing a receiving function; the transmitter may be referred to as a transmitter or a transmitting circuit, etc., for implementing a transmitting function.
  • the communication device 120 may further include one or more interface circuits 1207.
  • the interface circuit 1207 is used to receive code instructions and transmit them to the processor 1201.
  • the processor 1201 runs the code instructions to enable the communication device 120 to execute the method described in the above method embodiment.
  • the communication device 120 is a network device: the transceiver 1205 is used to execute step S201 in FIG. 2 ; step S301 in FIG. 3 ; and step S501 in FIG. 5 .
  • the communication device 120 is a terminal device (such as the terminal device in the embodiments shown in Figures 7-9 above): the transceiver 1205 is used to execute step S701 in Figure 7; step S801 in Figure 8; and step S901 in Figure 9.
  • the communication device 120 is a terminal device (such as the terminal device in the embodiment shown in FIG. 10 ): the processor 1201 is used to execute step S1001 in FIG. 10 .
  • the processor 1201 may include a transceiver for implementing receiving and sending functions.
  • the transceiver may be a transceiver circuit, an interface, or an interface circuit.
  • the transceiver circuit, interface, or interface circuit for implementing the receiving and sending functions may be separate or integrated.
  • the above-mentioned transceiver circuit, interface, or interface circuit may be used for reading and writing code/data, or the above-mentioned transceiver circuit, interface, or interface circuit may be used for transmitting or delivering signals.
  • the processor 1201 may store a computer program 1203, which runs on the processor 1201 and enables the communication device 120 to perform the method described in the above method embodiment.
  • the computer program 1203 may be fixed in the processor 1201, in which case the processor 1201 may be implemented by hardware.
  • the communication device 120 may include a circuit that can implement the functions of sending or receiving or communicating in the aforementioned method embodiment.
  • the processor and transceiver described in the present application can be implemented in an integrated circuit (IC), an analog IC, a radio frequency integrated circuit RFIC, a mixed signal IC, an application specific integrated circuit (ASIC), a printed circuit board (PCB), an electronic device, etc.
  • the processor and transceiver can also be manufactured using various IC process technologies, such as complementary metal oxide semiconductor (CMOS), N-type metal oxide semiconductor (nMetal-oxide-semiconductor, NMOS), P-type metal oxide semiconductor (positive channel metal oxide semiconductor, PMOS), bipolar junction transistor (bipolar junction transistor, BJT), bipolar CMOS (BiCMOS), silicon germanium (SiGe), gallium arsenide (GaAs), etc.
  • CMOS complementary metal oxide semiconductor
  • N-type metal oxide semiconductor nMetal-oxide-semiconductor
  • PMOS bipolar junction transistor
  • BJT bipolar junction transistor
  • BiCMOS bipolar CMOS
  • SiGe silicon germanium
  • GaAs gallium arsenide
  • the communication device described in the above embodiments may be a network device or a terminal device, but the scope of the communication device described in the present application is not limited thereto, and the structure of the communication device may not be limited by FIG. 12.
  • the communication device may be an independent device or may be part of a larger device.
  • the communication device may be:
  • the IC set may also include a storage component for storing data and computer programs;
  • ASIC such as modem
  • the communication device can be a chip or a chip system
  • the communication device can be a chip or a chip system
  • the schematic diagram of the chip structure shown in Figure 13 includes a processor 1301 and an interface 1302.
  • the number of processors 1301 can be one or more, and the number of interfaces 1302 can be multiple.
  • Interface 1302 is used to send first indication information to the terminal device according to the service authorization information of the terminal device, and the first indication information is used to instruct the terminal device to enable the transmission link security protection of the terminal device in participating in the ranging or sidelink positioning service, and the ranging or sidelink positioning service is triggered by the sidelink client terminal device.
  • the terminal device enables transmission link security protection, including the terminal device activating an integrity and/or confidentiality protection mechanism of the transmission link.
  • interface 1302 is also used to send service authorization information of the terminal device to the terminal device;
  • the service authorization information includes the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, and the security policy includes the first indication information.
  • the transmission link is at least one of a bottom layer direct cellular communication protocol interface PC5 link and a Uu link.
  • the network device is at least one of the following:
  • Session Management Function SMF Session Management Function
  • Interface 1302 is used to receive first indication information sent by a network device, where the first indication information is used to instruct a terminal device to enable transmission link security protection of the terminal device when participating in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by a sidelink client terminal device.
  • the terminal device enables transmission link security protection, including the terminal device activating an integrity and/or confidentiality protection mechanism of the transmission link.
  • interface 1302 is also used to receive service authorization information of the terminal device sent by the network device; the service authorization information includes the terminal device authorization to participate in the ranging or sidelink positioning service, and the security policy corresponding to the ranging or sidelink positioning service, and the security policy includes the first indication information.
  • the transmission link is at least one of a bottom layer direct cellular communication protocol interface PC5 link and a Uu link.
  • the chip is used to implement the functions of the terminal device in the embodiment of the present application (such as the terminal device in the method embodiment shown in FIG. 10 above):
  • Processor 1301 is used to enable transmission link security protection of the terminal device in participating in ranging or sidelink positioning services in response to the terminal device participating in ranging or sidelink positioning services, where the ranging or sidelink positioning services are triggered by the sidelink client terminal device.
  • enabling transmission link security protection of a terminal device in participating in ranging or sidelink positioning services including:
  • the transmission link is an underlying direct cellular communication protocol interface PC5 link.
  • An embodiment of the present application also provides a communication system, which includes the communication device as a network device in the embodiment of Figure 12 and the communication device as a terminal device (such as the terminal device in the method embodiment shown in Figures 7-9 above), or the system includes the communication device as a terminal device in the embodiment of Figure 12 (such as the terminal device in the method embodiment shown in Figure 10 above), or the system includes the communication device as a network device in the embodiment of Figure 13 and the communication device as a terminal device (such as the terminal device in the method embodiment shown in Figures 7-9 above), or the system includes the communication device as a terminal device in the embodiment of Figure 13 (such as the terminal device in the method embodiment shown in Figure 10 above).
  • the present application also provides a readable storage medium having instructions stored thereon, which implement the functions of any of the above method embodiments when executed by a computer.
  • the present application also provides a computer program product, which implements the functions of any of the above method embodiments when executed by a computer.
  • the computer program product includes one or more computer programs.
  • the computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device.
  • the computer program can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium.
  • the computer program can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center.
  • the computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that includes one or more available media integrated.
  • the available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a magnetic tape), an optical medium (e.g., a high-density digital video disc (DVD)), or a semiconductor medium (e.g., a solid state disk (SSD)), etc.
  • a magnetic medium e.g., a floppy disk, a hard disk, a magnetic tape
  • an optical medium e.g., a high-density digital video disc (DVD)
  • DVD high-density digital video disc
  • SSD solid state disk
  • At least one in the present application can also be described as one or more, and a plurality can be two, three, four or more, which is not limited in the present application.
  • the technical features in the technical feature are distinguished by “first”, “second”, “third”, “A”, “B”, “C” and “D”, etc., and there is no order of precedence or size between the technical features described by the "first”, “second”, “third”, “A”, “B”, “C” and “D”.
  • the corresponding relationships shown in each table in the present application can be configured or predefined.
  • the values of the information in each table are only examples and can be configured as other values, which are not limited by the present application.
  • the corresponding relationships shown in some rows may not be configured.
  • appropriate deformation adjustments can be made based on the above table, such as splitting, merging, etc.
  • the names of the parameters shown in the titles in the above tables can also use other names that can be understood by the communication device, and the values or representations of the parameters can also be other values or representations that can be understood by the communication device.
  • other data structures can also be used, such as arrays, queues, containers, stacks, linear lists, pointers, linked lists, trees, graphs, structures, classes, heaps, hash tables or hash tables.
  • the predefined in the present application may be understood as defined, predefined, stored, pre-stored, pre-negotiated, pre-configured, solidified, or pre-burned.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

一种测距方法及其装置，可以应用于通信技术领域，测距方法包括：网络设备（101）根据终端设备（102）的业务授权信息，向终端设备（102）发送第一指示信息，第一指示信息用于指示终端设备（102）启用终端设备（102）在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备（102）触发的（S201），进而能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备（102）的隐私安全，提高测距或侧行链路定位服务的安全性。

Description

一种测距方法及其装置 技术领域
本申请涉及通信技术领域，尤其涉及一种测距方法及其装置。
背景技术
测距或侧行链路(sidelink，SL)定位服务是指通过直接通信连接，确定两个终端设备(也称为用户终端，UserEquipment，UE)之间的距离和/或从一个UE到另一个UE的方向。第五代移动通信技术(5th Generation Mobile Communication Technology，5G)系统能够提供测距或SL定位等服务。侧行链路客户端UE可以调用测距或SL定位服务以获得上述两个UE之间的测距或SL定位服务的结果，但是，在测距或SL定位服务的结果的传输过程中，未能保护UE的隐私。
发明内容
本申请实施例提供一种测距方法及其装置，能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
第一方面，本申请实施例提供一种测距方法，该方法由网络设备执行，该方法包括：根据终端设备的业务授权信息，向所述终端设备发送第一指示信息，所述第一指示信息用于指示所述终端设备启用所述终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
本申请实施例中，网络设备可以根据终端设备的业务授权信息，向终端设备发送第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，其中测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，从而能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
第二方面，本申请实施例提供另一种测距方法，该方法由终端设备执行，该方法包括：接收所述网络设备发送的第一指示信息，所述第一指示信息用于指示所述终端设备启用所述终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
本申请实施例中，终端设备可以接收所述网络设备发送的第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，其中测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，从而能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
第三方面，本申请实施例提供另一种测距方法，该方法由终端设备执行，该方法包括：响应于所述终端设备参与测距或侧行链路定位服务，启用所述终端设备在参与所述测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
本申请实施例中，终端设备响应于终端设备参与测距或侧行链路定位服务，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，其中测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，从而能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
第四方面，本申请实施例提供一种通信装置，该通信装置具有实现上述第一方面所述的方法中网络设备的部分或全部功能，比如通信装置的功能可具备本申请中的部分或全部实施例中的功能，也可以具备单独实施本申请中的任一个实施例的功能。所述功能可以通过硬件实现，也可以通过硬件执行相应的 软件实现。所述硬件或软件包括一个或多个与上述功能相对应的单元或模块。
在一种实现方式中，该通信装置的结构中可包括收发单元和处理单元，所述处理单元被配置为支持通信装置执行上述方法中相应的功能。所述收发单元用于支持通信装置与其他设备之间的通信。所述通信装置还可以包括存储单元，所述存储单元用于与收发单元和处理单元耦合，其保存通信装置必要的计算机程序和数据。
作为示例，处理单元可以为处理器，收发单元可以为收发器或通信接口，存储单元可以为存储器。
第五方面，本申请实施例提供另一种通信装置，该通信装置具有实现上述第二方面所述的方法示例中终端设备的部分或全部功能，比如通信装置的功能可具备本申请中的部分或全部实施例中的功能，也可以具备单独实施本申请中的任一个实施例的功能。所述功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的单元或模块。
在一种实现方式中，该通信装置的结构中可包括收发单元和处理单元，该处理单元被配置为支持通信装置执行上述方法中相应的功能。收发单元用于支持通信装置与其他设备之间的通信。所述通信装置还可以包括存储单元，所述存储单元用于与收发单元和处理单元耦合，其保存通信装置必要的计算机程序和数据。
作为示例，处理单元可以为处理器，收发单元可以为收发器或通信接口，存储单元可以为存储器。
第六方面，本申请实施例提供另一种通信装置，该通信装置具有实现上述第三方面所述的方法示例中终端设备的部分或全部功能，比如通信装置的功能可具备本申请中的部分或全部实施例中的功能，也可以具备单独实施本申请中的任一个实施例的功能。所述功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的单元或模块。
在一种实现方式中，该通信装置的结构中可包括收发单元和处理单元，该处理单元被配置为支持通信装置执行上述方法中相应的功能。收发单元用于支持通信装置与其他设备之间的通信。所述通信装置还可以包括存储单元，所述存储单元用于与收发单元和处理单元耦合，其保存通信装置必要的计算机程序和数据。
作为示例，处理单元可以为处理器，收发单元可以为收发器或通信接口，存储单元可以为存储器。
第七方面，本申请实施例提供一种通信装置，该通信装置包括处理器，当该处理器调用存储器中的计算机程序时，执行上述第一方面所述的方法。
第八方面，本申请实施例提供一种通信装置，该通信装置包括处理器，当该处理器调用存储器中的计算机程序时，执行上述第二方面所述的方法。
第九方面，本申请实施例提供一种通信装置，该通信装置包括处理器，当该处理器调用存储器中的计算机程序时，执行上述第三方面所述的方法。
第十方面，本申请实施例提供一种通信装置，该通信装置包括处理器和存储器，该存储器中存储有计算机程序；所述处理器执行该存储器所存储的计算机程序，以使该通信装置执行上述第一方面所述的方法。
第十一方面，本申请实施例提供一种通信装置，该通信装置包括处理器和存储器，该存储器中存储有计算机程序；所述处理器执行该存储器所存储的计算机程序，以使该通信装置执行上述第二方面所述的方法。
第十二方面，本申请实施例提供一种通信装置，该通信装置包括处理器和存储器，该存储器中存储 有计算机程序；所述处理器执行该存储器所存储的计算机程序，以使该通信装置执行上述第三方面所述的方法。
第十三方面，本申请实施例提供一种通信装置，该装置包括处理器和接口电路，该接口电路用于接收代码指令并传输至该处理器，该处理器用于运行所述代码指令以使该装置执行上述第一方面所述的方法。
第十四方面，本申请实施例提供一种通信装置，该装置包括处理器和接口电路，该接口电路用于接收代码指令并传输至该处理器，该处理器用于运行所述代码指令以使该装置执行上述第二方面所述的方法。
第十五方面，本申请实施例提供一种通信装置，该装置包括处理器和接口电路，该接口电路用于接收代码指令并传输至该处理器，该处理器用于运行所述代码指令以使该装置执行上述第三方面所述的方法。
第十六方面，本发明实施例提供一种计算机可读存储介质，用于储存为上述网络设备所用的指令，当所述指令被执行时，使所述网络设备执行上述第一方面所述的方法。
第十七方面，本发明实施例提供一种可读存储介质，用于储存为上述终端设备所用的指令，当所述指令被执行时，使所述终端设备执行上述第二方面所述的方法。
第十八方面，本发明实施例提供一种可读存储介质，用于储存为上述终端设备所用的指令，当所述指令被执行时，使所述终端设备执行上述第三方面所述的方法。
第十九方面，本申请实施例提供一种通信系统，该系统包括第四方面所述的通信装置以及第五方面所述的通信装置，或者，该系统包括第六方面所述的通信装置，或者，该系统包括第七方面所述的通信装置以及第八方面所述的通信装置，或者，该系统包括第九方面所述的通信装置，或者该系统包括第十方面所述的通信装置以及第十一方面所述的通信装置，或者，该系统包括第十二方面所述的通信装置，或者，该系统包括第十三方面所述的通信装置以及第十四方面所述的通信装置，或者，该系统包括第十五方面所述的通信装置。
第二十方面，本申请还提供一种包括计算机程序的计算机程序产品，当其在计算机上运行时，使得计算机执行上述第一方面所述的方法。
第二十一方面，本申请还提供一种包括计算机程序的计算机程序产品，当其在计算机上运行时，使得计算机执行上述第二方面所述的方法。
第二十二方面，本申请还提供一种包括计算机程序的计算机程序产品，当其在计算机上运行时，使得计算机执行上述第三方面所述的方法。
第二十三方面，本申请提供一种芯片系统，该芯片系统包括至少一个处理器和接口，用于支持网络设备实现第一方面所涉及的功能，例如，确定或处理上述方法中所涉及的数据和信息中的至少一种。在一种可能的设计中，所述芯片系统还包括存储器，所述存储器，用于保存网络设备必要的计算机程序和数据。该芯片系统，可以由芯片构成，也可以包括芯片和其他分立器件。
第二十四方面，本申请提供一种芯片系统，该芯片系统包括至少一个处理器和接口，用于支持终端设备实现第二方面所涉及的功能，例如，确定或处理上述方法中所涉及的数据和信息中的至少一种。在一种可能的设计中，所述芯片系统还包括存储器，所述存储器，用于保存终端设备必要的计算机程序和数据。该芯片系统，可以由芯片构成，也可以包括芯片和其他分立器件。
第二十五方面，本申请提供一种芯片系统，该芯片系统包括至少一个处理器和接口，用于支持终端设备实现第三方面所涉及的功能，例如，确定或处理上述方法中所涉及的数据和信息中的至少一种。在一种可能的设计中，所述芯片系统还包括存储器，所述存储器，用于保存终端设备必要的计算机程序和数据。该芯片系统，可以由芯片构成，也可以包括芯片和其他分立器件。
第二十六方面，本申请提供一种计算机程序，当其在计算机上运行时，使得计算机执行上述第一方面所述的方法。
第二十七方面，本申请提供一种计算机程序，当其在计算机上运行时，使得计算机执行上述第二方面所述的方法。
第二十八方面，本申请提供一种计算机程序，当其在计算机上运行时，使得计算机执行上述第三方面所述的方法。
附图说明
为了更清楚地说明本申请实施例或背景技术中的技术方案，下面将对本申请实施例或背景技术中所需要使用的附图进行说明。
图1是本申请实施例提供的一种通信系统的架构示意图；
图2是本申请实施例提供的一种测距方法的流程示意图；
图3是本申请实施例提供的另一种测距方法的流程示意图；
图4是参考UE、目标UE以及侧行链路客户端UE之间的通信示意图；
图5是本申请实施例提供的另一种测距方法的流程示意图；
图6是参考UE、目标UE以及侧行链路客户端UE之间的另一通信示意图；
图7是本申请实施例提供的一种测距方法的流程示意图；
图8是本申请实施例提供的另一种测距方法的流程示意图；
图9是本申请实施例提供的另一种测距方法的流程示意图；
图10是本申请实施例提供的另一种测距方法的流程示意图；
图11是本申请实施例提供的一种通信装置的结构示意图；
图12是本申请实施例提供的另一种通信装置的结构示意图；
图13是本申请实施例提供的一种芯片的结构示意图。
具体实施方式
这里将详细地对示例性实施例进行说明，其示例表示在附图中。下面的描述涉及附图时，除非另有表示，不同附图中的相同数字表示相同或相似的要素。以下示例性实施例中所描述的实施方式并不代表与本申请实施例相一致的所有实施方式。相反，它们仅是与如所附权利要求书中所详述的、本申请实施例的一些方面相一致的装置和方法的例子。
在本申请实施例使用的术语是仅仅出于描述特定实施例的目的，而非旨在限制本申请实施例。在本申请实施例和所附权利要求书中所使用的单数形式的“一种”和“该”也旨在包括多数形式，除非上下文清楚地表示其他含义。还应当理解，本文中使用的术语“和/或”是指并包含一个或多个相关联的列出项目的任何或所有可能组合。
应当理解，尽管在本申请实施例可能采用术语第一、第二、第三等来描述各种信息，但这些信息不应限于这些术语。这些术语仅用来将同一类型的信息彼此区分开。例如，在不脱离本申请实施例范围的 情况下，第一信息也可以被称为第二信息，类似地，第二信息也可以被称为第一信息。取决于语境，如在此所使用的词语“如果”及“若”可以被解释成为“在……时”或“当……时”或“响应于确定”。
为了便于理解，首先介绍本公开涉及的术语。
底层直连蜂窝通信协议接口链路(即PC5链路)
为了支持终端设备与终端设备之间的直接通信，引入了SL通信方式，两个终端设备间的接口为PC5接口，两个终端设备之间通过PC5接口直接进行通信的链路为PC5链路。
Uu链路
一个终端设备通过网络设备与另一个终端设备进行通信，两个终端设备之间的接口为Uu接口，两个终端设备之间通过Uu接口进行通信的链路为Uu链路。
侧行链路定位服务
链路定位服务，又称侧链定位服务或测距服务，是指通过直接通信连接，确定两个UE之间的距离和/或从一个UE到另一UE的方向。
参考终端设备(Reference UE)
参考UE为在网络覆盖范围内，并且可以执行基于Uu接口的定位程序和/或SL定位的终端设备，在侧行链路定位服务中参考UE可以辅助需要定位的终端设备进行侧行链路测量。
目标终端设备(Target UE)
目标UE为需要确定其位置，也就是需要对其进行定位的终端设备。
侧行链路客户端终端设备(SL Client UE)
侧行链路客户端UE，为参考UE和目标UE以外的第三方UE，代表驻留在其上的应用程序触发测距/侧行链路定位服务请求。其中，侧行链路客户端UE不必支持测距或侧行链路定位能力，但是侧行链路客户端UE与参考UE之间或侧行链路客户端UE与目标UE之间，必须通过PC5接口或者通过5G核心网(5G Core Network，5GC)建立传输链路，以便传输测距或侧行链路定位服务请求和结果。
为了更好的理解本申请实施例公开的一种测距方法，下面首先对本申请实施例适用的通信系统进行描述。
请参见图1，图1为本申请实施例提供的一种通信系统的架构示意图。该通信系统可包括但不限于一个网络设备和一个终端设备，图1所示的设备数量和形态仅用于举例并不构成对本申请实施例的限定，实际应用中可以包括两个或两个以上的网络设备，两个或两个以上的终端设备。图1所示的通信系统以包括一个网络设备101和两个终端设备102为例。
需要说明的是，本申请实施例的技术方案可以应用于各种通信系统。例如：长期演进(long term evolution，LTE)系统、第五代(5th generation，5G)移动通信系统、5G新空口(new radio，NR)系统，或者其他未来的新型移动通信系统等。
本申请实施例中的网络设备101是网络侧的一种用于发射或接收信号的实体。例如，网络设备101可以为演进型基站(evolved NodeB，eNB)、传输点(transmission reception point，TRP)、NR系统中的下一代基站(next generation NodeB，gNB)、其他未来移动通信系统中的基站或无线保真(wireless fidelity，WiFi)系统中的接入节点等。本申请的实施例对网络设备所采用的具体技术和具体设备形态不做限定。本申请实施例提供的网络设备可以是由集中单元(central unit，CU)与分布式单元(distributed unit，DU)组成的，其中，CU也可以称为控制单元(control unit)，采用CU-DU的结构可以将网络设 备，例如基站的协议层拆分开，部分协议层的功能放在CU集中控制，剩下部分或全部协议层的功能分布在DU中，由CU集中控制DU。
本申请实施例中的终端设备102是用户侧的一种用于接收或发射信号的实体，如手机。终端设备也可以称为终端设备(terminal)、用户设备(user equipment，UE)、移动台(mobile station，MS)、移动终端设备(mobile terminal，MT)等。终端设备可以是具备通信功能的汽车、智能汽车、手机(mobile phone)、穿戴式设备、平板电脑(Pad)、带无线收发功能的电脑、虚拟现实(virtual reality，VR)终端设备、增强现实(augmented reality，AR)终端设备、工业控制(industrial control)中的无线终端设备、无人驾驶(self-driving)中的无线终端设备、远程手术(remote medical surgery)中的无线终端设备、智能电网(smart grid)中的无线终端设备、运输安全(transportation safety)中的无线终端设备、智慧城市(smart city)中的无线终端设备、智慧家庭(smart home)中的无线终端设备等等。本申请的实施例对终端设备所采用的具体技术和具体设备形态不做限定。
可以理解的是，本申请实施例描述的通信系统是为了更加清楚的说明本申请实施例的技术方案，并不构成对于本申请实施例提供的技术方案的限定，本领域普通技术人员可知，随着系统架构的演变和新业务场景的出现，本申请实施例提供的技术方案对于类似的技术问题，同样适用。
可以理解的是，侧行链路客户端UE可以调用测距或SL定位服务以获得目标UE与参考UE之间的测距或SL定位服务的结果，而测距或SL定位服务的结果中包含隐私敏感的UE位置信息，比如目标UE的位置信息和/或参考UE的位置信息，如果不加保护地传输，则明文中的UE位置信息可能会暴露于攻击者，从而导致UE的隐私信息泄漏。
本申请实施例主要针对侧行链路客户端UE与参考UE/目标UE(参考UE或目标UE)之间传输测距或SL定位服务的结果的过程中未能保护终端设备的隐私的问题，提出一种测距方法，终端设备比如侧行链路客户端UE、目标UE或参考UE可以启用在参与侧行链路客户端UE触发的测距或侧行链路定位服务中的传输链路安全保护，从而在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
需要说明的是，本申请中任一个实施例提供的测距方法可以单独执行，或是结合其他实施例中的可能的实现方法一起被执行，还可以结合相关技术中的任一种技术方案一起被执行。其中本申请实施例中提及的网络设备可以指通信系统的网络设备101，终端设备可以指通信系统的终端设备102。
可以理解的是，本申请实施例中的网络设备为核心网中的网元功能，是核心网设备，终端设备与本申请各实施例中的网络设备的交互是通过接入网设备的透传完成的，本申请各实施例不再赘述。
下面结合附图对本申请所提供的测距方法及其装置进行详细地介绍。
请参见图2，图2是本申请实施例提供的一种测距方法的流程示意图。该测距方法由网络设备执行。如图2所示，该方法可以包括但不限于如下步骤：
S201：根据终端设备的业务授权信息，向终端设备发送第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
其中，终端设备可以作为侧行链路客户端UE参与侧行链路客户端UE触发的测距或侧行链路定位服务，也可以作为目标UE或参考UE参与侧行链路客户端UE触发的测距或侧行链路定位服务，相应的，终端设备，可以指侧行链路客户端UE，或者也可以指目标UE，或者也可以指参考UE，本申请对 此不作限定。
其中，传输链路用于传输测距或侧行链路定位服务的结果。其中，测距或侧行链路定位服务的结果，可以包括参考UE与目标UE间的相对距离、和/或相对角度等等，本申请对此不作限制。
可以理解的是，网络设备可以授权终端设备参与至少一个业务，并配置各业务对应的安全策略，相应的，终端设备的业务授权信息中可以包括终端设备授权参与的至少一个业务，以及各业务对应的安全策略。
可选地，网络设备可以授权终端设备参与测距或侧行链路定位服务，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，并配置测距或侧行链路定位服务对应的安全策略，相应的，终端设备的业务授权信息中可以包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略。
可选地，网络设备可以将测距或侧行链路定位服务对应的安全策略配置为包括第一指示信息，其中，第一指示信息比如可以包括“REQUIRED(必须)”，用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，并且网络设备可以在终端设备授权参与测距或侧行链路定位服务的情况下，向终端设备发送第一指示信息，以使终端设备根据第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护。
由于终端设备可以根据网络设备发送的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，从而终端设备在参与测距或侧行链路定位服务，通过传输链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，网络设备可以为以下至少一种网元功能：策略控制功能(Policy Control Function，PCF)；邻近通信服务名称管理功能(Direct Discovery Name Management Function，DDNMF)；邻近服务密钥管理功能(ProSeKey Management Function，PKMF)；会话管理功能(Session Management Function，SMF)。
可选地，终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，可以包括终端设备激活传输链路的完整性和/或机密性保护机制。可选地，终端设备可以根据第一指示信息，在传输链路建立期间，激活传输链路的完整性和/或机密性保护机制。由此，终端设备在参与侧行链路客户端终端设备触发的测距或侧行链路定位服务，通过传输链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
本申请实施例提供的测距方法中，网络设备根据终端设备的业务授权信息，向终端设备发送第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，其中测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，由此，能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
请参见图3，图3是本申请实施例提供的另一种测距方法的流程示意图。该测距方法可以由网络设备执行。如图3所示，该方法可以包括但不限于如下步骤：
S301：向终端设备发送终端设备的业务授权信息，业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第 一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
其中，终端设备可以指侧行链路客户端UE，或者也可以指目标UE，或者也可以指参考UE，本申请对此不作限定。
其中，PC5链路用于传输测距或侧行链路定位服务的结果。
可以理解的是，参考图4，不同终端设备之间可以基于多种协议层进行通信，比如测距/SL定位协议(Ranging/Sidelink Positioning protocol)层、车联网(vehicle-to-everything，V2X)或邻近服务(Proximity-based Service，ProSe)层即图4中的V2X/ProSe Layer、数据包汇聚协议(packet data convergence protocol，PDCP)层、无线链路控制(radio link control，RLC)层、媒体接入控制(media access control，简称MAC)层、物理层(physical layer，PHY)，每个协议层对应不同的接口。目标UE和参考UE之间可以基于测距/SL定位协议层，通过SR5链路进行通信，或者基于V2X/ProSe Layer，通过PC5链路进行通信。侧行链路客户端UE和参考UE/目标UE之间可以基于V2X/ProSe Layer，通过PC5链路进行通信。这意味着侧行链路客户端UE应该具备ProSe能力或者V2X能力，且测距或侧行链路定位服务的结果在从参考UE或目标UE到侧行链路客户端UE的PC5链路上传送。其中，测距或侧行链路定位服务的结果作为PC5链路的有效负载传输。
在本申请的实施例中，为了在通过PC5链路传输测距或侧行链路定位服务的结果的过程中，保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性，网络设备可以授权终端设备参与测距或侧行链路定位服务，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，并配置测距或侧行链路定位服务对应的安全策略，相应的，终端设备的业务授权信息中可以包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略。
其中，网络设备可以将测距或侧行链路定位服务对应的安全策略(对于控制面和用户面)配置为包括第一指示信息，其中，第一指示信息比如可以包括“REQUIRED(必须)”，用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，并且网络设备可以向终端设备发送终端设备的业务授权信息，以使终端设备根据业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护。
由于终端设备可以根据网络设备发送的业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，从而终端设备在参与测距或侧行链路定位服务，通过PC5链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，网络设备可以为以下至少一种网元功能：策略控制功能PCF；邻近通信服务名称管理功能DDNMF；邻近服务密钥管理功能PKMF；会话管理功能SMF。
可选地，终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，可以包括终端设备激活PC5链路的完整性和/或机密性保护机制。可选地，终端设备可以根据第一指示信息，在PC5链路建立期间，激活PC5链路的完整性和/或机密性保护机制。由此，终端设备在参与侧行链路客户端终端设备触发的测距或侧行链路定位服务，通过PC5链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
本申请实施例提供的测距方法中，网络设备可以向终端设备发送终端设备的业务授权信息，业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，由此，能够在通过PC5链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
请参见图5，图5是本申请实施例提供的另一种测距方法的流程示意图。该测距方法可以由网络设备执行。如图5所示，该方法可以包括但不限于如下步骤：
S501：向终端设备发送终端设备的业务授权信息，业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
其中，终端设备可以指侧行链路客户端UE，或者也可以指目标UE，或者也可以指参考UE，本申请对此不作限定。
其中，Uu链路用于传输测距或侧行链路定位服务的结果。
可以理解的是，参考图6，不同终端设备之间通信以及终端设备通过无线接入网(Radio Access Network，RAN)与5GC通信时可以基于多种协议层，比如测距/SL定位协议层、V2X/ProSe Layer、PDCP层、RLC层、MAC层、PHY层，每个协议层对应不同的接口。目标UE和参考UE之间可以基于测距/SL定位协议层，通过SR5链路进行通信，或者基于V2X/ProSe Layer，通过PC5链路进行通信。参考UE/目标UE与5GC之间，可以基于PDCP协议，通过与RAN的Uu链路进行通信，侧行链路客户端UE与5GC之间，可以基于PDCP协议，通过与RAN的Uu链路进行通信。这意味着从参考UE/目标UE传输到侧行链路客户端UE的测距或侧行链路定位服务的结果，被传送到参考UE/目标UE与网络设备之间的Uu链路和侧行链路客户端UE与网络设备之间的Uu链路。
在本申请的实施例中，为了在通过Uu链路传输测距或侧行链路定位服务的结果的过程中，保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性，网络设备可以授权终端设备参与测距或侧行链路定位服务，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，并配置测距或侧行链路定位服务对应的安全策略，相应的，终端设备的业务授权信息中可以包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略。
其中，网络设备可以将测距或侧行链路定位服务对应的安全策略(对于用户面)配置为包括第一指示信息，其中，第一指示信息比如可以包括“REQUIRED(必须)”，用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，并且网络设备可以向终端设备发送终端设备的业务授权信息，以使终端设备根据业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护。
由于终端设备可以根据网络设备发送的业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，从而终端设备在参与测距或侧行链路定位服务，通过Uu链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，网络设备可以为以下至少一种网元功能：策略控制功能PCF；邻近通信服务名称管理功能DDNMF；邻近服务密钥管理功能PKMF；会话管理功能SMF。
可选地，终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，可以包括终端设备激活Uu链路的完整性和/或机密性保护机制。可选地，终端设备可以根据第一指示信息，在Uu链路建立期间，激活Uu链路的完整性和/或机密性保护机制。由此，终端设备在参与侧行链路客户端终端设备触发的测距或侧行链路定位服务，通过Uu链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可以理解的是，如果测距或侧行链路定位服务的结果通过Uu控制面从参考UE或目标UE传输到5GC，并进一步传输到侧行链路客户端UE，可以在现有网络附属存储(Network Attached Storage，NAS)安全性的基础上，提供测距或侧行链路定位服务的结果的完整性和/或机密性保护机制。
如果测距或侧行链路定位服务的结果通过Uu用户面从参考UE或目标UE传输到5GC，并进一步传输到侧行链路客户端UE，则测距或侧行链路定位服务的结果的完整性和/或机密性保护机制取决于5GC(例如SMF)在协议数据单元(Protocol Data Unit，PDU)会话建立过程中提供给RAN的UP(用户面)安全策略。在这种情况下，网络设备例如SMF可以在为侧行链路客户端UE触发的测距或侧行链路定位服务建立PDU会话时，将Uu链路的UP(用户面)安全策略配置为包括第一指示信息。
本申请实施例提供的测距方法中，网络设备可以向终端设备发送终端设备的业务授权信息，业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。由此，能够在通过Uu链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
请参见图7，图7是本申请实施例提供的另一种测距方法的流程示意图。该测距方法由终端设备执行。如图7所示，该方法可以包括但不限于如下步骤：
S701：接收网络设备发送的第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
其中，终端设备可以作为侧行链路客户端UE参与侧行链路客户端UE触发的测距或侧行链路定位服务，也可以作为目标UE或参考UE参与侧行链路客户端UE触发的测距或侧行链路定位服务，相应的，终端设备，可以指侧行链路客户端UE，或者也可以指目标UE，或者也可以指参考UE，本申请对此不作限定。
其中，传输链路用于传输测距或侧行链路定位服务的结果。其中，测距或侧行链路定位服务的结果，可以包括参考UE与目标UE间的相对距离、和/或相对角度等等，本申请对此不作限制。
可以理解的是，网络设备可以授权终端设备参与至少一个业务，并配置各业务对应的安全策略，相应的，终端设备的业务授权信息中可以包括终端设备授权参与的至少一个业务，以及各业务对应的安全策略。
可选地，网络设备可以授权终端设备参与测距或侧行链路定位服务，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，并配置测距或侧行链路定位服务对应的安全策略，相应的，终 端设备的业务授权信息中可以包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略。
可选地，网络设备可以将测距或侧行链路定位服务对应的安全策略配置为包括第一指示信息，其中，第一指示信息比如可以包括“REQUIRED(必须)”，用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，并且网络设备可以在终端设备授权参与测距或侧行链路定位服务的情况下，向终端设备发送第一指示信息。相应的，终端设备可以接收网络设备发送的第一指示信息，进而根据第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护。
由于终端设备可以根据网络设备发送的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，从而终端设备在参与测距或侧行链路定位服务，通过传输链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，可以包括终端设备激活传输链路的完整性和/或机密性保护机制。可选地，终端设备可以根据第一指示信息，在传输链路建立期间，激活传输链路的完整性和/或机密性保护机制。由此，终端设备在参与侧行链路客户端终端设备触发的测距或侧行链路定位服务，通过传输链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
本申请实施例提供的测距方法中，终端设备可以接收网络设备发送的第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。由此，能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
请参见图8，图8是本申请实施例提供的另一种测距方法的流程示意图。该测距方法可以由终端设备执行。如图8所示，该方法可以包括但不限于如下步骤：
S801：接收网络设备发送的终端设备的业务授权信息，业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
其中，终端设备，可以指侧行链路客户端UE，或者也可以指目标UE，或者也可以指参考UE，本申请对此不作限定。
其中，PC5链路用于传输测距或侧行链路定位服务的结果。
可以理解的是，参考图4，不同终端设备之间可以基于多种协议层进行通信，比如测距/SL定位协议层、车联网V2X/ProSe Layer、PDCP层、RLC层、MAC层、PHY层，每个协议层对应不同的接口。目标UE和参考UE之间可以基于测距/SL定位协议层，通过SR5链路进行通信，或者基于V2X/ProSe Layer，通过PC5链路进行通信。侧行链路客户端UE和参考UE/目标UE之间可以基于V2X/ProSe Layer，通过PC5链路进行通信。这意味着侧行链路客户端UE应该具备ProSe能力或者V2X能力，且测距或侧行链路定位服务的结果在从参考UE或目标UE到侧行链路客户端UE的PC5链路上传送。其中，测距或侧行链路定位服务的结果作为PC5链路的有效负载传输。
在本申请的实施例中，为了在通过PC5链路传输测距或侧行链路定位服务的结果的过程中，保护 终端设备的隐私安全，提高测距或侧行链路定位服务的安全性，网络设备可以授权终端设备参与测距或侧行链路定位服务，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，并配置测距或侧行链路定位服务对应的安全策略，相应的，终端设备的业务授权信息中可以包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略。
其中，网络设备可以将测距或侧行链路定位服务对应的安全策略(对于控制面和用户面)配置为包括第一指示信息，其中，第一指示信息比如可以包括“REQUIRED(必须)”，用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，并且网络设备可以向终端设备发送终端设备的业务授权信息。相应的，终端设备可以接收网络设备发送的业务授权信息，进而根据业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护。
由于终端设备可以根据网络设备发送的业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，从而终端设备在参与测距或侧行链路定位服务，通过PC5链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，网络设备可以为以下至少一种网元功能：策略控制功能PCF；邻近通信服务名称管理功能DDNMF；邻近服务密钥管理功能PKMF；会话管理功能SMF。
可选地，终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，可以包括终端设备激活PC5链路的完整性和/或机密性保护机制。可选地，终端设备可以根据第一指示信息，在PC5链路建立期间，激活PC5链路的完整性和/或机密性保护机制。由此，终端设备在参与侧行链路客户端终端设备触发的测距或侧行链路定位服务，通过PC5链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
本申请实施例提供的测距方法中，终端设备可以接收网络设备发送的终端设备的业务授权信息，业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。由此，能够在通过PC5链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
请参见图9，图9是本申请实施例提供的另一种测距方法的流程示意图。该测距方法可以由终端设备执行。如图9所示，该方法可以包括但不限于如下步骤：
S901：接收网络设备发送的终端设备的业务授权信息，业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
其中，终端设备可以指侧行链路客户端UE，或者也可以指目标UE，或者也可以指参考UE，本申请对此不作限定。
其中，Uu链路用于传输测距或侧行链路定位服务的结果。
可以理解的是，参考图6，不同终端设备之间通信以及终端设备通过RAN与5GC通信时可以基于 多种协议层，比如测距/SL定位协议层、V2X/ProSe Layer、PDCP层、RLC层、MAC层、PHY层，每个协议层对应不同的接口。目标UE和参考UE之间可以基于测距/SL定位协议层，通过SR5链路进行通信，或者基于V2X/ProSe Layer，通过PC5链路进行通信。参考UE/目标UE与5GC之间，可以基于PDCP协议，通过与RAN的Uu链路进行通信，侧行链路客户端UE与5GC之间，可以基于PDCP协议，通过与RAN的Uu链路进行通信。这意味着从参考UE/目标UE传输到侧行链路客户端UE的测距或侧行链路定位服务的结果，被传送到参考UE/目标UE与网络设备之间的Uu链路和侧行链路客户端UE与网络设备之间的Uu链路。
在本申请的实施例中，为了在通过Uu链路传输测距或侧行链路定位服务的结果的过程中，保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性，网络设备可以授权终端设备参与测距或侧行链路定位服务，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的，并配置测距或侧行链路定位服务对应的安全策略，相应的，终端设备的业务授权信息中可以包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略。
其中，网络设备可以将测距或侧行链路定位服务对应的安全策略(对于用户面)配置为包括第一指示信息，其中，第一指示信息比如可以包括“REQUIRED(必须)”，用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，并且网络设备可以向终端设备发送终端设备的业务授权信息。相应的，终端设备可以根据业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护。
由于终端设备可以根据网络设备发送的业务授权信息中的第一指示信息，启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，从而终端设备在参与测距或侧行链路定位服务，通过Uu链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，网络设备可以为以下至少一种网元功能：策略控制功能PCF；邻近通信服务名称管理功能DDNMF；邻近服务密钥管理功能PKMF；会话管理功能SMF。
可选地，终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，可以包括终端设备激活Uu链路的完整性和/或机密性保护机制。可选地，终端设备可以根据第一指示信息，在Uu链路建立期间，激活Uu链路的完整性和/或机密性保护机制。由此，终端设备在参与侧行链路客户端终端设备触发的测距或侧行链路定位服务，通过Uu链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
本申请实施例提供的测距方法中，终端设备可以接收网络设备发送的终端设备的业务授权信息；业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的Uu链路安全保护，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。由此，能够在通过Uu链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
请参见图10，图10是本申请实施例提供的另一种测距方法的流程示意图。该测距方法可以由终端设备执行。如图10所示，该方法可以包括但不限于如下步骤：
S1001：响应于终端设备参与测距或侧行链路定位服务，启用终端设备在参与测距或侧行链路定位 服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
其中，终端设备可以作为侧行链路客户端UE参与侧行链路客户端UE触发的测距或侧行链路定位服务，也可以作为目标UE或参考UE参与侧行链路客户端UE触发的测距或侧行链路定位服务，相应的，终端设备，可以指侧行链路客户端UE，或者也可以指目标UE，或者也可以指参考UE，本申请对此不作限定。
其中，传输链路用于传输测距或侧行链路定位服务的结果。其中，测距或侧行链路定位服务的结果，可以包括参考UE与目标UE间的相对距离、和/或相对角度等等，本申请对此不作限制。
在本申请的实施例中，在终端设备没有接收到网络设备发送的第一指示信息时，终端设备可以响应于终端设备参与测距或侧行链路定位服务，自行启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，其中，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护。
由于终端设备可以响应于终端设备参与测距或侧行链路定位服务，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，从而终端设备在参与测距或侧行链路定位服务，通过传输链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，可以包括：在传输链路建立期间，激活传输链路的完整性和/或机密性保护机制。
具体的，在传输链路建立期间，终端设备可以始终激活控制面和用户面上的完整性和/或机密性保护机制。从而终端设备在参与测距或侧行链路定位服务，通过传输链路传输测距或侧行链路定位服务的结果的过程中，可以保护终端设备比如参考UE和目标UE的隐私安全，提高测距或侧行链路定位服务的安全性。
可选地，传输链路可以为PC5链路，即终端设备在通过PC5链路与其它终端设备进行通信的情况下，由于无需与网络设备通信，则终端设备可以响应于终端设备参与测距或侧行链路定位服务，自行启用终端设备在参与测距或侧行链路定位服务中的PC5链路安全保护，从而在通过PC5链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
综上，本申请实施例提供的测距方法中，终端设备可以响应于终端设备参与测距或侧行链路定位服务，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，其中该测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。由此，能够在通过传输链路传输测距或侧行链路定位服务的结果的过程中保护终端设备的隐私安全，提高测距或侧行链路定位服务的安全性。
其中，需要说明的是，“携带”和“包括”在本申请中的含义相同。本申请中的“包括”是开放性限定，即除了包括本申请中指出的内容，还可能包括本申请中未指出的，但未来可能出现的内容。
上述本申请提供的实施例中，分别从网络设备和终端设备的角度对本申请实施例提供的方法进行了介绍。为了实现上述本申请实施例提供的方法中的各功能，网络设备和终端设备可以包括硬件结构、软件模块，以硬件结构、软件模块、或硬件结构加软件模块的形式来实现上述各功能。上述各功能中的某个功能可以以硬件结构、软件模块、或者硬件结构加软件模块的方式来执行。
请参见图11，为本申请实施例提供的一种通信装置110的结构示意图。图11所示的通信装置110可包括收发单元1101。收发单元1101可包括发送单元和/或接收单元，发送单元用于实现发送功能，接 收单元用于实现接收功能，收发单元1101可以实现发送功能和/或接收功能。
通信装置110可以是网络设备，也可以是网络设备中的装置，还可以是能够与网络设备匹配使用的装置。或者，通信装置110可以是终端设备，也可以是终端设备中的装置，还可以是能够与终端设备匹配使用的装置。
通信装置110为网络设备：
收发单元1101，用于根据终端设备的业务授权信息，向终端设备发送第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
可选地，终端设备启用传输链路安全保护，包括终端设备激活传输链路的完整性和/或机密性保护机制。
可选地，收发单元1101，还用于向终端设备发送终端设备的业务授权信息；业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息。
可选地，传输链路为底层直连蜂窝通信协议接口PC5链路和Uu链路中的至少一种。
可选地，网络设备为以下至少一种：
策略控制功能PCF；
邻近通信服务名称管理功能DDNMF；
邻近服务密钥管理功能PKMF；
会话管理功能SMF。
通信装置110为终端设备(如前述图7-9所示的方法实施例中的终端设备)：
收发单元1101，用于接收网络设备发送的第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
可选地，终端设备启用传输链路安全保护，包括终端设备激活传输链路的完整性和/或机密性保护机制。
可选地，收发单元1101，还用于接收网络设备发送的终端设备的业务授权信息；业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息。
可选地，传输链路为底层直连蜂窝通信协议接口PC5链路和Uu链路中的至少一种。
通信装置110为终端设备(如前述图10所示的方法实施例中的终端设备)：
处理单元1102，用于响应于终端设备参与测距或侧行链路定位服务，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
可选地，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，包括：
在传输链路建立期间，激活传输链路的完整性和/或机密性保护机制。
可选地，传输链路为底层直连蜂窝通信协议接口PC5链路。
请参见图12，图12是本申请实施例提供的另一种通信装置120的结构示意图。通信装置120可以 是网络设备，也可以是终端设备，也可以是支持网络设备实现上述方法的芯片、芯片系统、或处理器等，也可以是支持终端设备实现上述方法的芯片、芯片系统、或处理器等。该装置可用于实现上述方法实施例中描述的方法，具体可以参见上述方法实施例中的说明。
通信装置120可以包括一个或多个处理器1201。处理器1201可以是通用处理器或者专用处理器等。例如可以是基带处理器或中央处理器。基带处理器可以用于对通信协议以及通信数据进行处理，中央处理器可以用于对通信装置(如，基站、基带芯片，终端设备、终端设备芯片，DU或CU等)进行控制，执行计算机程序，处理计算机程序的数据。
可选的，通信装置120中还可以包括一个或多个存储器1202，其上可以存有计算机程序1204，处理器1201执行所述计算机程序1204，以使得通信装置120执行上述方法实施例中描述的方法。可选的，所述存储器1202中还可以存储有数据。通信装置120和存储器1202可以单独设置，也可以集成在一起。
可选的，通信装置120还可以包括收发器1205、天线1206。收发器1205可以称为收发单元、收发机、或收发电路等，用于实现收发功能。收发器1205可以包括接收器和发送器，接收器可以称为接收机或接收电路等，用于实现接收功能；发送器可以称为发送机或发送电路等，用于实现发送功能。
可选的，通信装置120中还可以包括一个或多个接口电路1207。接口电路1207用于接收代码指令并传输至处理器1201。处理器1201运行所述代码指令以使通信装置120执行上述方法实施例中描述的方法。
通信装置120为网络设备：收发器1205用于执行图2中的步骤S201；图3中的步骤S301；图5中的步骤S501。
通信装置120为终端设备(如前述图7-9所示实施例中的终端设备)：收发器1205用于执行图7中的步骤S701；图8中的步骤S801；图9中的步骤S901。
通信装置120为终端设备(如前述图10所示实施例中的终端设备)：处理器1201用于执行图10中的步骤S1001。
在一种实现方式中，处理器1201中可以包括用于实现接收和发送功能的收发器。例如该收发器可以是收发电路，或者是接口，或者是接口电路。用于实现接收和发送功能的收发电路、接口或接口电路可以是分开的，也可以集成在一起。上述收发电路、接口或接口电路可以用于代码/数据的读写，或者，上述收发电路、接口或接口电路可以用于信号的传输或传递。
在一种实现方式中，处理器1201可以存有计算机程序1203，计算机程序1203在处理器1201上运行，可使得通信装置120执行上述方法实施例中描述的方法。计算机程序1203可能固化在处理器1201中，该种情况下，处理器1201可能由硬件实现。
在一种实现方式中，通信装置120可以包括电路，所述电路可以实现前述方法实施例中发送或接收或者通信的功能。本申请中描述的处理器和收发器可实现在集成电路(integrated circuit，IC)、模拟IC、射频集成电路RFIC、混合信号IC、专用集成电路(application specific integrated circuit，ASIC)、印刷电路板(printed circuit board，PCB)、电子设备等上。该处理器和收发器也可以用各种IC工艺技术来制造，例如互补金属氧化物半导体(complementary metal oxide semiconductor，CMOS)、N型金属氧化物半导体(nMetal-oxide-semiconductor，NMOS)、P型金属氧化物半导体(positive channel metal oxide semiconductor，PMOS)、双极结型晶体管(bipolar junction transistor，BJT)、双极CMOS(BiCMOS)、硅锗(SiGe)、砷化镓(GaAs)等。
以上实施例描述中的通信装置可以是网络设备或者终端设备，但本申请中描述的通信装置的范围并不限于此，而且通信装置的结构可以不受图12的限制。通信装置可以是独立的设备或者可以是较大设备的一部分。例如所述通信装置可以是：
(1)独立的集成电路IC，或芯片，或，芯片系统或子系统；
(2)具有一个或多个IC的集合，可选的，该IC集合也可以包括用于存储数据，计算机程序的存储部件；
(3)ASIC，例如调制解调器(Modem)；
(4)可嵌入在其他设备内的模块；
(5)接收机、终端设备、智能终端设备、蜂窝电话、无线设备、手持机、移动单元、车载设备、网络设备、云设备、人工智能设备等等；
(6)其他等等。
对于通信装置可以是芯片或芯片系统的情况，可参见图13所示的芯片的结构示意图。图13所示的芯片包括处理器1301和接口1302。其中，处理器1301的数量可以是一个或多个，接口1302的数量可以是多个。
对于芯片用于实现本申请实施例中网络设备的功能的情况：
接口1302，用于根据终端设备的业务授权信息，向终端设备发送第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
可选地，终端设备启用传输链路安全保护，包括终端设备激活传输链路的完整性和/或机密性保护机制。
可选地，接口1302，还用于向终端设备发送终端设备的业务授权信息；业务授权信息中包括终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息。
可选地，传输链路为底层直连蜂窝通信协议接口PC5链路和Uu链路中的至少一种。
可选地，网络设备为以下至少一种：
策略控制功能PCF；
邻近通信服务名称管理功能DDNMF；
邻近服务密钥管理功能PKMF；
会话管理功能SMF。
对于芯片用于实现本申请实施例中终端设备(如前述图7-9所示方法实施例中的终端设备)的功能的情况：
接口1302，用于接收网络设备发送的第一指示信息，第一指示信息用于指示终端设备启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
可选地，终端设备启用传输链路安全保护，包括终端设备激活传输链路的完整性和/或机密性保护机制。
可选地，接口1302，还用于接收网络设备发送的终端设备的业务授权信息；业务授权信息中包括 终端设备授权参与测距或侧行链路定位服务，以及测距或侧行链路定位服务对应的安全策略，安全策略中包括第一指示信息。
可选地，传输链路为底层直连蜂窝通信协议接口PC5链路和Uu链路中的至少一种。
对于芯片用于实现本申请实施例中终端设备(如前述图10所示方法实施例中的终端设备)的功能的情况：
处理器1301，用于响应于终端设备参与测距或侧行链路定位服务，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
可选地，启用终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，包括：
在传输链路建立期间，激活传输链路的完整性和/或机密性保护机制。
可选地，传输链路为底层直连蜂窝通信协议接口PC5链路。
本领域技术人员还可以了解到本申请实施例列出的各种说明性逻辑块(illustrative logical block)和步骤(step)可以通过电子硬件、电脑软件，或两者的结合进行实现。这样的功能是通过硬件还是软件来实现取决于特定的应用和整个系统的设计要求。本领域技术人员可以对于每种特定的应用，可以使用各种方法实现所述的功能，但这种实现不应被理解为超出本申请实施例保护的范围。
本申请实施例还提供一种通信系统，该系统包括前述图12实施例中作为网络设备的通信装置和作为终端设备(如前述图7-9所示方法实施例中的终端设备)的通信装置，或者，该系统包括前述图12实施例中作为终端设备(如前述图10所示方法实施例中的终端设备)的通信装置，或者，该系统包括前述图13实施例中作为网络设备的通信装置和作为终端设备(如前述图7-9所示方法实施例中的终端设备)的通信装置，或者，该系统包括前述图13实施例中作为终端设备(如前述图10所示方法实施例中的终端设备)的通信装置。
本申请还提供一种可读存储介质，其上存储有指令，该指令被计算机执行时实现上述任一方法实施例的功能。
本申请还提供一种计算机程序产品，该计算机程序产品被计算机执行时实现上述任一方法实施例的功能。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时，可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机程序。在计算机上加载和执行所述计算机程序时，全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机程序可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一个计算机可读存储介质传输，例如，所述计算机程序可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(digital subscriber line，DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质(例如，软盘、硬盘、磁带)、光介质(例如，高密度数字视频光盘(digital video disc，DVD))、或者半导体介质(例如，固态硬盘(solid state disk，SSD))等。
本领域普通技术人员可以理解：本申请中涉及的第一、第二等各种数字编号仅为描述方便进行的区分，并不用来限制本申请实施例的范围，也表示先后顺序。
本申请中的至少一个还可以描述为一个或多个，多个可以是两个、三个、四个或者更多个，本申请不做限制。在本申请实施例中，对于一种技术特征，通过“第一”、“第二”、“第三”、“A”、“B”、“C”和“D”等区分该种技术特征中的技术特征，该“第一”、“第二”、“第三”、“A”、“B”、“C”和“D”描述的技术特征间无先后顺序或者大小顺序。
本申请中各表所示的对应关系可以被配置，也可以是预定义的。各表中的信息的取值仅仅是举例，可以配置为其他值，本申请并不限定。在配置信息与各参数的对应关系时，并不一定要求必须配置各表中示意出的所有对应关系。例如，本申请中的表格中，某些行示出的对应关系也可以不配置。又例如，可以基于上述表格做适当的变形调整，例如，拆分，合并等等。上述各表中标题示出参数的名称也可以采用通信装置可理解的其他名称，其参数的取值或表示方式也可以通信装置可理解的其他取值或表示方式。上述各表在实现时，也可以采用其他的数据结构，例如可以采用数组、队列、容器、栈、线性表、指针、链表、树、图、结构体、类、堆、散列表或哈希表等。
本申请中的预定义可以理解为定义、预先定义、存储、预存储、预协商、预配置、固化、或预烧制。
本领域普通技术人员可以意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，能够以电子硬件、或者计算机软件和电子硬件的结合来实现。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，上述描述的系统、装置和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。
以上所述，仅为本申请的具体实施方式，但本申请的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本申请揭露的技术范围内，可轻易想到变化或替换，都应涵盖在本申请的保护范围之内。因此，本申请的保护范围应以所述权利要求的保护范围为准。

Claims (20)

  1. 一种测距方法，其特征在于，所述方法由网络设备执行，所述方法包括：
    根据终端设备的业务授权信息，向所述终端设备发送第一指示信息，所述第一指示信息用于指示所述终端设备启用所述终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
  2. 根据权利要求1所述的方法，其特征在于，所述终端设备启用所述传输链路安全保护，包括所述终端设备激活所述传输链路的完整性和/或机密性保护机制。
  3. 根据权利要求2所述的方法，其特征在于，所述方法还包括：
    向所述终端设备发送所述终端设备的业务授权信息；
    所述业务授权信息中包括所述终端设备授权参与所述测距或侧行链路定位服务，以及所述测距或侧行链路定位服务对应的安全策略，所述安全策略中包括所述第一指示信息。
  4. 根据权利要求1-3任一项所述的方法，其特征在于，所述传输链路为底层直连蜂窝通信协议接口PC5链路和Uu链路中的至少一种。
  5. 根据权利要求1-3任一项所述的方法，其特征在于，所述网络设备为以下至少一种：
    策略控制功能PCF；
    邻近通信服务名称管理功能DDNMF；
    邻近服务密钥管理功能PKMF；
    会话管理功能SMF。
  6. 一种测距方法，其特征在于，所述方法由终端设备执行，所述方法包括：
    接收所述网络设备发送的第一指示信息，所述第一指示信息用于指示所述终端设备启用所述终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
  7. 根据权利要求6所述的方法，其特征在于，所述终端设备启用所述传输链路安全保护，包括所述终端设备激活所述传输链路的完整性和/或机密性保护机制。
  8. 根据权利要求7所述的方法，其特征在于，所述方法还包括：
    接收所述网络设备发送的所述终端设备的业务授权信息；
    所述业务授权信息中包括所述终端设备授权参与所述测距或侧行链路定位服务，以及所述测距或侧行链路定位服务对应的安全策略，所述安全策略中包括所述第一指示信息。
  9. 根据权利要求6-8任一项所述的方法，其特征在于，所述传输链路为底层直连蜂窝通信协议接 口PC5链路和Uu链路中的至少一种。
  10. 一种测距方法，其特征在于，所述方法由终端设备执行，所述方法包括：
    响应于所述终端设备参与测距或侧行链路定位服务，启用所述终端设备在参与所述测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
  11. 根据权利要求10所述的方法，其特征在于，所述启用所述终端设备在参与所述测距或侧行链路定位服务中的传输链路安全保护，包括：
    在所述传输链路建立期间，激活所述传输链路的完整性和/或机密性保护机制。
  12. 根据权利要求10或11所述的方法，其特征在于，所述传输链路为底层直连蜂窝通信协议接口PC5链路。
  13. 一种测距装置，其特征在于，所述装置应用于网络设备，所述装置包括：
    收发单元，用于根据终端设备的业务授权信息，向所述终端设备发送第一指示信息，所述第一指示信息用于指示所述终端设备启用所述终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
  14. 一种测距装置，其特征在于，所述装置应用于终端设备，所述装置包括：
    收发单元，用于接收所述网络设备发送的第一指示信息，所述第一指示信息用于指示所述终端设备启用所述终端设备在参与测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
  15. 一种测距装置，其特征在于，所述装置应用于终端设备，所述装置包括：
    处理单元，用于响应于所述终端设备参与测距或侧行链路定位服务，启用所述终端设备在参与所述测距或侧行链路定位服务中的传输链路安全保护，所述测距或侧行链路定位服务是由侧行链路客户端终端设备触发的。
  16. 一种通信装置，其特征在于，所述装置包括处理器和存储器，所述存储器中存储有计算机程序，所述处理器执行所述存储器中存储的计算机程序，以使所述装置执行如权利要求1至5中任一项所述的方法，或者执行如权利要求6至9中任一项所述的方法，或者执行如权利要求10至12中任一项所述的方法。
  17. 一种通信装置，其特征在于，包括：处理器和接口电路；
    所述接口电路，用于接收代码指令并传输至所述处理器；
    所述处理器，用于运行所述代码指令以执行如权利要求1至5中任一项所述的方法，或者执行如权利要求6至9中任一项所述的方法，或者执行如权利要求10至12中任一项所述的方法。
  18. 一种计算机可读存储介质，用于存储有指令，当所述指令被执行时，使如权利要求1至5中任一项所述的方法被实现，或者使如权利要求6至9中任一项所述的方法被实现，或者使如权利要求10至12中任一项所述的方法被实现。
  19. 一种通信系统，其特征在于，所述通信系统包括：
    网络设备，用于执行如权利要求1至5中任一项所述的方法；
    终端设备，用于执行如权利要求6至9中任一项所述的方法。
  20. 一种通信系统，其特征在于，所述通信系统包括：
    终端设备，用于执行如权利要求10至12中任一项所述的方法。
PCT/CN2022/130135 2022-11-04 2022-11-04 一种测距方法及其装置 WO2024092827A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN202280004838.0A CN118303042A (zh) 2022-11-04 2022-11-04 一种测距方法及其装置
PCT/CN2022/130135 WO2024092827A1 (zh) 2022-11-04 2022-11-04 一种测距方法及其装置

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2022/130135 WO2024092827A1 (zh) 2022-11-04 2022-11-04 一种测距方法及其装置

Publications (1)

Publication Number Publication Date
WO2024092827A1 true WO2024092827A1 (zh) 2024-05-10

Family

ID=90929496

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/130135 WO2024092827A1 (zh) 2022-11-04 2022-11-04 一种测距方法及其装置

Country Status (2)

Country Link
CN (1) CN118303042A (zh)
WO (1) WO2024092827A1 (zh)

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008130126A1 (en) * 2007-04-18 2008-10-30 Lg Electronics Inc. Method for performing initial ranging in wireless communication system
CN101610511A (zh) * 2009-07-08 2009-12-23 中兴通讯股份有限公司 终端私密性的保护方法及装置
CN111801976A (zh) * 2018-03-02 2020-10-20 高通股份有限公司 在无线通信中的基于测距的位置服务
CN112205008A (zh) * 2020-09-03 2021-01-08 北京小米移动软件有限公司 测距的方法、通信节点、通信设备及存储介质
CN112219437A (zh) * 2020-09-04 2021-01-12 北京小米移动软件有限公司 通信方法、终端、通信节点、通信设备及存储介质
US20220317232A1 (en) * 2021-03-31 2022-10-06 Qualcomm Incorporated Interaction between positioning reference signal processing capabilities for the uu and sidelink interfaces

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008130126A1 (en) * 2007-04-18 2008-10-30 Lg Electronics Inc. Method for performing initial ranging in wireless communication system
CN101610511A (zh) * 2009-07-08 2009-12-23 中兴通讯股份有限公司 终端私密性的保护方法及装置
CN111801976A (zh) * 2018-03-02 2020-10-20 高通股份有限公司 在无线通信中的基于测距的位置服务
CN112205008A (zh) * 2020-09-03 2021-01-08 北京小米移动软件有限公司 测距的方法、通信节点、通信设备及存储介质
CN112219437A (zh) * 2020-09-04 2021-01-12 北京小米移动软件有限公司 通信方法、终端、通信节点、通信设备及存储介质
US20220317232A1 (en) * 2021-03-31 2022-10-06 Qualcomm Incorporated Interaction between positioning reference signal processing capabilities for the uu and sidelink interfaces

Also Published As

Publication number Publication date
CN118303042A (zh) 2024-07-05

Similar Documents

Publication Publication Date Title
WO2024092523A1 (zh) 侧行链路定位消息的发送方法、接收方法及其装置
WO2024065127A1 (zh) 控制中继设备信息发送的方法及其装置
WO2023206034A1 (zh) 混合自动重传请求harq反馈的处理方法及其装置
WO2023201756A1 (zh) 一种用于基于条件的移动性的信息的处理方法及装置
WO2024092827A1 (zh) 一种测距方法及其装置
WO2024065844A1 (zh) 一种路径切换能力的交互方法及其装置
WO2024065131A1 (zh) 一种多路径传输方法/装置/设备及存储介质
WO2024065121A1 (zh) 一种多路径传输方法/装置/设备及存储介质
WO2024182954A1 (zh) 感知节点发现方法及其装置
WO2024065469A1 (zh) 一种直连链路建立方法、设备及存储介质
WO2024168935A1 (zh) 一种消息验证方法及其装置
WO2024065840A1 (zh) 一种路径切换能力的交互方法及其装置
WO2024065336A1 (zh) 一种侧行链路定位方法及装置
WO2024207368A1 (zh) 一种卫星覆盖信息确定方法及其装置
WO2024065339A1 (zh) 一种网络卫星覆盖数据的授权方法、设备及存储介质
WO2023221000A1 (zh) 一种核心网中ai功能的认证授权方法及其装置
WO2024164346A1 (zh) 一种网络标识的传输方法及其装置
WO2024065335A1 (zh) 一种侧行链路定位方法及装置
WO2024145902A1 (zh) 密钥获取方法、装置、设备及芯片系统
WO2024082143A1 (zh) 一种设备业务角色的验证方法/装置/设备及存储介质
WO2024065129A1 (zh) 用于终端设备ue到ue中继场景中的目标ue确定方法及装置
WO2024065549A1 (zh) 直连通信密钥生成方法及装置
WO2023010429A1 (zh) 一种带宽部分的同步方法及其装置
WO2024098323A1 (zh) 一种通过托管网络提供本地化服务的方法及其装置
WO2023193271A1 (zh) 一种双连接中终端设备小区组的更新方法及装置

Legal Events

Date Code Title Description
WWE Wipo information: entry into national phase

Ref document number: 202280004838.0

Country of ref document: CN

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22964128

Country of ref document: EP

Kind code of ref document: A1