CN102984699B - D2D processing method of communication data, equipment and system - Google Patents
D2D processing method of communication data, equipment and system Download PDFInfo
- Publication number
- CN102984699B CN102984699B CN201210510164.XA CN201210510164A CN102984699B CN 102984699 B CN102984699 B CN 102984699B CN 201210510164 A CN201210510164 A CN 201210510164A CN 102984699 B CN102984699 B CN 102984699B
- Authority
- CN
- China
- Prior art keywords
- user terminal
- communication
- target user
- random sequence
- base station
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000004891 communication Methods 0.000 title claims abstract description 249
- 238000003672 processing method Methods 0.000 title claims abstract description 20
- 230000003993 interaction Effects 0.000 claims abstract description 74
- 238000000034 method Methods 0.000 claims abstract description 12
- 230000005540 biological transmission Effects 0.000 claims description 4
- 230000011664 signaling Effects 0.000 claims description 4
- 238000010586 diagram Methods 0.000 description 6
- 230000000694 effects Effects 0.000 description 3
- 230000007547 defect Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 1
- 230000008569 process Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 239000002699 waste material Substances 0.000 description 1
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
本发明提供一种D2D通信数据处理方法、设备和系统,其中,该方法包括:源用户终端向基站发送请求与目标用户终端进行D2D通信交互的业务请求消息,并接收基站确定源用户终端与目标用户终端之间建立D2D通信信道后返回的随机序列码,根据存储在本地SIM卡中的初始密钥和第一算法对随机序列码进行计算获取通信密钥;应用存储在本地的第二算法和通信密钥对待发送的业务数据进行加密处理,并通过D2D通信信道发送给目标用户终端。通过本发明提供的D2D通信数据处理方法、设备和系统,从而实现了对基于D2D通信模式下的业务数据进行加密处理,提高了用户使用D2D模式进行通信交互的安全性。
The present invention provides a D2D communication data processing method, device, and system, wherein the method includes: a source user terminal sends a service request message requesting D2D communication interaction with a target user terminal to a base station, and receives the base station to determine the source user terminal and target user terminal. The random sequence code returned after the D2D communication channel is established between the user terminals, according to the initial key stored in the local SIM card and the first algorithm to calculate the random sequence code to obtain the communication key; apply the second algorithm stored locally and The communication key encrypts the service data to be sent, and sends it to the target user terminal through the D2D communication channel. Through the D2D communication data processing method, device and system provided by the present invention, the encryption processing of the service data based on the D2D communication mode is realized, and the security of the user's communication interaction using the D2D mode is improved.
Description
技术领域technical field
本发明实施例涉及通信技术领域,尤其涉及一种D2D通信数据处理方法、设备和系统。Embodiments of the present invention relate to the field of communication technologies, and in particular to a D2D communication data processing method, device and system.
背景技术Background technique
端到端(Device-to-Devicc,D2D)通信是一种短距离通信技术。当用户终端向基站提出D2D通信请求,基站根据请求将用户终端的通信方式切换到D2D连接模式。D2D通信可应用于多种通信业务,特别是近距离的或同一区域内的通信,基于D2D通信模式,用户终端之间的数据可以直接进行传输而不经过基站。虽然相比于通过蜂窝小区基站提供的通信业务,D2D通信模式减轻了基站的负载压力,但是,通信数据的安全性较差。End-to-end (Device-to-Devicc, D2D) communication is a short-distance communication technology. When the user terminal submits a D2D communication request to the base station, the base station switches the communication mode of the user terminal to the D2D connection mode according to the request. D2D communication can be applied to a variety of communication services, especially short-distance or communication in the same area. Based on the D2D communication mode, data between user terminals can be directly transmitted without passing through the base station. Although compared with the communication service provided by the cell base station, the D2D communication mode reduces the load pressure of the base station, but the security of the communication data is poor.
发明内容Contents of the invention
针对现有技术的上述缺陷,本发明实施例提供一种D2D通信数据处理方法、设备和系统。In view of the above-mentioned defects in the prior art, embodiments of the present invention provide a D2D communication data processing method, device and system.
本发明一方面提供一种D2D通信数据处理方法,包括:One aspect of the present invention provides a D2D communication data processing method, including:
源用户终端向基站发送请求与目标用户终端进行D2D通信交互的业务请求消息,并接收所述基站确定所述源用户终端与所述目标用户终端之间建立D2D通信信道后返回的随机序列码;The source user terminal sends a service request message requesting D2D communication interaction with the target user terminal to the base station, and receives a random sequence code returned by the base station after determining that a D2D communication channel is established between the source user terminal and the target user terminal;
所述源用户终端根据存储在本地SIM卡中的初始密钥和第一算法对所述随机序列码进行计算获取通信密钥;The source user terminal calculates the random sequence code according to the initial key and the first algorithm stored in the local SIM card to obtain the communication key;
所述源用户终端应用存储在本地的第二算法和所述通信密钥对待发送的业务数据进行加密处理,并通过所述D2D通信信道发送给所述目标用户终端。The source user terminal applies the locally stored second algorithm and the communication key to encrypt the service data to be sent, and sends it to the target user terminal through the D2D communication channel.
本发明另一方面提供一种D2D通信数据处理方法,包括:Another aspect of the present invention provides a D2D communication data processing method, including:
目标用户终端根据基站发送的用于指示与源用户终端进行D2D通信交互的指示消息建立与所述源用户终端之间的D2D通信信道后,获取与所述D2D通信交互对应的随机序列码,其中,所述随机序列码是基站下发给所述源用户终端用于生成与D2D通信交互对应的通信密钥所用的随机序列码;After the target user terminal establishes a D2D communication channel with the source user terminal according to the instruction message sent by the base station for instructing D2D communication interaction with the source user terminal, it obtains a random sequence code corresponding to the D2D communication interaction, where , the random sequence code is a random sequence code issued by the base station to the source user terminal for generating a communication key corresponding to D2D communication interaction;
所述目标用户终端接收所述源用户终端通过所述D2D通信信道发送的、应用所述通信密钥进行加密处理的业务数据;The target user terminal receives service data sent by the source user terminal through the D2D communication channel and encrypted with the communication key;
所述目标用户终端根据存储在本地SIM卡中的初始密钥和第一算法对所述随机序列码进行计算获取所述通信密钥,并应用存储在本地的第二算法和所述通信密钥对所述业务数据进行解密处理。The target user terminal calculates the random sequence code according to the initial key and the first algorithm stored in the local SIM card to obtain the communication key, and applies the second algorithm and the communication key stored locally Decrypt the business data.
本发明又一方面提供一种用户终端,包括:Another aspect of the present invention provides a user terminal, including:
请求模块,用于向基站发送请求与目标用户终端进行D2D通信交互的业务请求消息,并接收所述基站确定所述源用户终端与所述目标用户终端之间建立D2D通信信道后返回的随机序列码;The requesting module is configured to send a service request message requesting D2D communication interaction with the target user terminal to the base station, and receive a random sequence returned by the base station after determining that a D2D communication channel is established between the source user terminal and the target user terminal code;
处理模块,用于根据存储在本地SIM卡中的初始密钥和第一算法对所述随机序列码进行计算获取通信密钥;A processing module, configured to calculate the random sequence code according to the initial key stored in the local SIM card and the first algorithm to obtain the communication key;
加密模块,用于应用存储在本地的第二算法和所述通信密钥对待发送的业务数据进行加密处理;An encryption module, configured to apply the locally stored second algorithm and the communication key to encrypt the service data to be sent;
发送模块,用于通过所述D2D通信信道将经过加密处理的业务数据发送给所述目标用户终端。A sending module, configured to send the encrypted service data to the target user terminal through the D2D communication channel.
本发明再一方面提供一种用户终端,包括:Another aspect of the present invention provides a user terminal, including:
获取模块,用于根据基站发送的用于指示与源用户终端进行D2D通信交互的指示消息建立与所述源用户终端之间的D2D通信信道后,获取与所述D2D通信交互对应的随机序列码,其中,所述随机序列码是基站下发给所述源用户终端用于生成与D2D通信交互对应的通信密钥所用的随机序列码;An acquisition module, configured to acquire a random sequence code corresponding to the D2D communication interaction after establishing a D2D communication channel with the source user terminal according to an indication message sent by the base station for indicating D2D communication interaction with the source user terminal , wherein the random sequence code is the random sequence code used by the base station to the source user terminal for generating a communication key corresponding to the D2D communication interaction;
接收模块,用于接收所述源用户终端通过所述D2D通信信道发送的、应用所述通信密钥进行加密处理的业务数据;A receiving module, configured to receive service data sent by the source user terminal through the D2D communication channel and encrypted by applying the communication key;
解密模块,用于根据存储在本地SIM卡中的初始密钥和第一算法对所述随机序列码进行计算获取所述通信密钥,并应用存储在本地的第二算法和所述通信密钥对所述业务数据进行解密处理。A decryption module, configured to calculate the random sequence code according to the initial key and the first algorithm stored in the local SIM card to obtain the communication key, and apply the second algorithm and the communication key stored locally Decrypt the business data.
本发明另一方面提供一种D2D通信数据处理系统,包括:基站、所述基站控制下的源用户终端和目标用户终端,其中,所述源用户终端为上述本发明又一方面提供的一种用户终端,所述目标用户终端为上述本发明再一方面提供的一种用户终端。Another aspect of the present invention provides a D2D communication data processing system, including: a base station, a source user terminal and a target user terminal under the control of the base station, wherein the source user terminal is the one provided by the above-mentioned another aspect of the present invention A user terminal, where the target user terminal is the user terminal provided in another aspect of the present invention.
本发明实施例提供的D2D通信数据处理方法、设备和系统,通过基站接收源用户终端发送的请求与目标用户终端进行D2D通信交互的业务请求消息,并确定源用户终端与目标用户终端之间建立D2D通信信道后,向源用户终端返回一随机序列码,源用户终端根据存储在本地SIM卡中的初始密钥和第一算法对该随机序列码进行计算获取通信密钥,并应用存储在本地的第二算法和该通信密钥对待发送的业务数据进行加密处理,并通过D2D通信信道发送给目标用户终端。从而实现了对基于D2D通信模式下的业务数据进行加密处理,提高了用户使用D2D模式进行通信交互的安全性。The D2D communication data processing method, device, and system provided by the embodiments of the present invention receive, through the base station, a service request message sent by the source user terminal requesting D2D communication interaction with the target user terminal, and determine the establishment of the connection between the source user terminal and the target user terminal. After the D2D communication channel, a random sequence code is returned to the source user terminal, and the source user terminal calculates the random sequence code according to the initial key stored in the local SIM card and the first algorithm to obtain the communication key, and applies the stored locally The second algorithm and the communication key encrypt the service data to be sent, and send it to the target user terminal through the D2D communication channel. In this way, the encryption processing of the service data based on the D2D communication mode is realized, and the security of the user's communication interaction using the D2D mode is improved.
附图说明Description of drawings
图1为本发明D2D通信数据处理方法一个实施例的流程图;FIG. 1 is a flowchart of an embodiment of a D2D communication data processing method of the present invention;
图2为本发明D2D通信数据处理方法另一实施例的流程图;FIG. 2 is a flow chart of another embodiment of the D2D communication data processing method of the present invention;
图3为本发明用户终端一个实施例的结构示意图;FIG. 3 is a schematic structural diagram of an embodiment of a user terminal according to the present invention;
图4为本发明用户终端另一实施例的结构示意图;FIG. 4 is a schematic structural diagram of another embodiment of a user terminal according to the present invention;
图5为本发明D2D通信数据处理系统一个实施例的结构示意图。FIG. 5 is a schematic structural diagram of an embodiment of a D2D communication data processing system according to the present invention.
具体实施方式detailed description
图1为本发明D2D通信数据处理方法一个实施例的流程图,如图1所示,该方法包括:Fig. 1 is a flowchart of an embodiment of the D2D communication data processing method of the present invention. As shown in Fig. 1, the method includes:
步骤100,源用户终端向基站发送请求与目标用户终端进行D2D通信交互的业务请求消息,并接收所述基站确定所述源用户终端与所述目标用户终端之间建立D2D通信信道后返回的随机序列码;Step 100, the source user terminal sends a service request message requesting D2D communication interaction with the target user terminal to the base station, and receives a random message returned by the base station after determining that the D2D communication channel between the source user terminal and the target user terminal is established. serial number;
针对现有技术中两个用户终端A和B即源用户终端和目标用户终端进行D2D通信时通信数据的安全性较差的缺陷,本实施例提出的D2D通信数据处理方法中源用户终端和目标用户终端的SIM卡中预先存储了相同的、生成D2D通信密钥所用的初始密钥和第一算法,以及在源用户终端和目标用户终端中存储了相同的加密业务数据所用的第二算法。需要说明的是,源用户终端和目标用户终端可以预先在运营商处注册D2D安全通信服务,获取上述与两者之间进行D2D安全通信对应的初始密钥和第一算法以及第二算法。值得注意的是,一个用户终端也可以根据需要与多个用户终端进行D2D安全通信服务,比如A与B和C都注册了D2D安全通信服务,A与B之间获取的初始密钥、第一算法以及第二算法,以及A与C之间获取的初始密钥、第一算法以及第二算法中的至少一个信息不相同,A与B以及A与C之间的通信交互过程类似,以一对源用户终端和目标用户终端之间进行D2D安全通信为例进行说明:若源用户终端向基站发送请求与目标用户终端进行D2D通信交互的业务请求消息,该业务请求消息中包括源用户终端标识和目标用户终端标识,基站对接收到的业务请求消息进行解析获取源用户终端标识和目标用户终端标识,然后根据源用户终端标识和目标用户终端标识查询归属位置寄存器中的终端位置信息,以便根据预设的D2D通信策略判断源用户终端与目标用户终端之间是否满足D2D通信条件,若满足,则为源用户终端与目标用户终端分配用于D2D通信交互的信道和功率,并指示源用户终端与目标用户终端建立D2D通信信道,当源用户终端与目标用户终端之间建立好D2D通信信道后向基站发送已建立响应,基站在确认源用户终端与目标用户终端之间建立好D2D通信信道后,向源用户终端发送与该D2D通信交互对应的一随机序列码。In view of the defect in the prior art that two user terminals A and B, that is, the source user terminal and the target user terminal, have poor communication data security when performing D2D communication, in the D2D communication data processing method proposed in this embodiment, the source user terminal and the target user terminal The same initial key and first algorithm used to generate the D2D communication key are pre-stored in the SIM card of the user terminal, and the same second algorithm used to encrypt service data is stored in the source user terminal and the target user terminal. It should be noted that the source user terminal and the target user terminal may pre-register for the D2D secure communication service with the operator, and obtain the above-mentioned initial key, first algorithm, and second algorithm corresponding to the D2D secure communication between the two. It is worth noting that a user terminal can also perform D2D secure communication services with multiple user terminals as needed. For example, A, B, and C have both registered for D2D secure communication services. The algorithm and the second algorithm, and at least one of the initial key, the first algorithm, and the second algorithm obtained between A and C are different, and the communication and interaction process between A and B and between A and C is similar. Take D2D secure communication between the source user terminal and the target user terminal as an example to illustrate: if the source user terminal sends a service request message to the base station requesting D2D communication interaction with the target user terminal, the service request message includes the source user terminal ID and the target user terminal identifier, the base station parses the received service request message to obtain the source user terminal identifier and the target user terminal identifier, and then queries the terminal location information in the home location register according to the source user terminal identifier and the target user terminal identifier, so as to The preset D2D communication strategy judges whether the D2D communication conditions are met between the source user terminal and the target user terminal, and if so, allocates the channel and power for D2D communication interaction between the source user terminal and the target user terminal, and instructs the source user terminal Establish a D2D communication channel with the target user terminal, when the D2D communication channel between the source user terminal and the target user terminal is established, send an established response to the base station, and the base station confirms that the D2D communication channel between the source user terminal and the target user terminal is established , sending a random sequence code corresponding to the D2D communication interaction to the source user terminal.
步骤101,所述源用户终端根据存储在本地SIM卡中的初始密钥和第一算法对所述随机序列码进行计算获取通信密钥;Step 101, the source user terminal calculates the random sequence code according to the initial key and the first algorithm stored in the local SIM card to obtain the communication key;
源用户终端接收到基站发送的与D2D通信交互对应的一随机序列码之后,根据存储在本地SIM卡中的初始密钥和第一算法对该随机序列码进行计算获取通信密钥,具体为:源用户终端将该随机序列码保存在临时存储区,然后通过与SIM卡的接口发送给SIM卡,SIM卡根据自身预先存储的初始密钥和第一算法对该随机序列码进行计算获取通信密钥,并将该通信密钥发送给源用户终端,源用户终端将该通信密钥保存在临时存储区。After receiving a random sequence code corresponding to the D2D communication interaction sent by the base station, the source user terminal calculates the random sequence code according to the initial key stored in the local SIM card and the first algorithm to obtain the communication key, specifically: The source user terminal saves the random sequence code in the temporary storage area, and then sends it to the SIM card through the interface with the SIM card, and the SIM card calculates the random sequence code according to its own pre-stored initial key and the first algorithm to obtain the communication key. key, and send the communication key to the source user terminal, and the source user terminal saves the communication key in a temporary storage area.
步骤102,所述源用户终端应用存储在本地的第二算法和所述通信密钥对待发送的业务数据进行加密处理,并通过所述D2D通信信道发送给所述目标用户终端。Step 102, the source user terminal encrypts the service data to be sent by applying the locally stored second algorithm and the communication key, and sends it to the target user terminal through the D2D communication channel.
源用户终端获取SIM卡根据初始密钥和第一算法生成的与D2D通信交互对应的通信密钥后,应用存储在本地的第二算法和该通信密钥对待发送的业务数据进行加密处理,并通过已建立的D2D通信信道将经过加密处理的业务数据发送给目标用户终端。由于基站对每次D2D通信交互生成的随机序列码不同,因此,即使在一次通信交互中通信密钥被截获,下一次的D2D通信交互会重新生成新的通信密钥,并且即使基站生成的随机序列码被截获,由于初始密钥和第一算法都保存在源用户终端的SIM卡中,安全性高,很难被破解获取通信密钥,从而保证了D2D通信数据的安全。After the source user terminal obtains the communication key corresponding to the D2D communication interaction generated by the SIM card according to the initial key and the first algorithm, it applies the locally stored second algorithm and the communication key to encrypt the service data to be sent, and Send the encrypted service data to the target user terminal through the established D2D communication channel. Since the base station generates different random sequence codes for each D2D communication interaction, even if the communication key is intercepted in one communication interaction, a new communication key will be regenerated in the next D2D communication interaction, and even if the random sequence code generated by the base station The serial code is intercepted. Since the initial key and the first algorithm are stored in the SIM card of the source user terminal, the security is high, and it is difficult to be cracked to obtain the communication key, thereby ensuring the security of the D2D communication data.
本实施例提供的D2D通信数据处理方法,通过基站接收源用户终端发送的请求与目标用户终端进行D2D通信交互的业务请求消息,并确定源用户终端与目标用户终端之间建立D2D通信信道后,向源用户终端返回一随机序列码,源用户终端根据存储在本地SIM卡中的初始密钥和第一算法对该随机序列码进行计算获取通信密钥,并应用存储在本地的第二算法和该通信密钥对待发送的业务数据进行加密处理,并通过D2D通信信道发送给目标用户终端。从而实现了对基于D2D通信模式下的业务数据进行加密处理,提高了用户使用D2D模式进行通信交互的安全性。In the D2D communication data processing method provided in this embodiment, the base station receives the service request message sent by the source user terminal requesting D2D communication interaction with the target user terminal, and after determining that the D2D communication channel is established between the source user terminal and the target user terminal, Return a random sequence code to the source user terminal, the source user terminal calculates the random sequence code according to the initial key and the first algorithm stored in the local SIM card to obtain the communication key, and applies the second algorithm and the second algorithm stored locally The communication key encrypts the service data to be sent, and sends it to the target user terminal through the D2D communication channel. In this way, the encryption processing of the service data based on the D2D communication mode is realized, and the security of the user's communication interaction using the D2D mode is improved.
基于上述实施例,进一步地,当源用户终端通过D2D通信信道传输完经过加密处理的业务数据,完成与目标用户终端之间的D2D通信交互之后,该方法还包括:Based on the above embodiments, further, after the source user terminal transmits the encrypted service data through the D2D communication channel and completes the D2D communication interaction with the target user terminal, the method further includes:
源用户终端向基站发送通信结束消息,从而基站根据通信结束消息释放用于源用户终端与目标用户终端进行D2D通信交互的信令控制资源,同时,源用户终端向目标用户终端发送该通信结束消息,从而目标用户终端释放用于该D2D通信交互的传输资源,从而提高了系统资源的利用率,避免浪费。The source user terminal sends a communication end message to the base station, so that the base station releases the signaling control resources used for the D2D communication interaction between the source user terminal and the target user terminal according to the communication end message, and at the same time, the source user terminal sends the communication end message to the target user terminal , so that the target user terminal releases the transmission resources used for the D2D communication interaction, thereby improving the utilization rate of system resources and avoiding waste.
图2为本发明D2D通信数据处理方法另一实施例的流程图,如图2所示,该方法包括:Fig. 2 is a flowchart of another embodiment of the D2D communication data processing method of the present invention. As shown in Fig. 2, the method includes:
步骤200,目标用户终端根据基站发送的用于指示与源用户终端进行D2D通信交互的指示消息建立与所述源用户终端之间的D2D通信信道后,获取与所述D2D通信交互对应的随机序列码,其中,所述随机序列码是基站下发给所述源用户终端用于生成与D2D通信交互对应的通信密钥所用的随机序列码;Step 200: After the target user terminal establishes a D2D communication channel with the source user terminal according to the instruction message sent by the base station for instructing D2D communication interaction with the source user terminal, it obtains a random sequence corresponding to the D2D communication interaction code, wherein the random sequence code is a random sequence code issued by the base station to the source user terminal for generating a communication key corresponding to D2D communication interaction;
本实施例中待进行D2D通信的源用户终端和目标用户终端分别在各自用户终端的SIM卡中存储了相同的、生成通信密钥所用的初始密钥和第一算法,以及在各自用户终端中存储了相同的加密业务数据所用的第二算法。若源用户终端向基站发送请求与目标用户终端进行D2D通信交互的业务请求消息,该业务请求消息中包括源用户终端标识和目标用户终端标识,基站对接收到的业务请求消息进行解析获取源用户终端标识和目标用户终端标识,然后根据源用户终端标识和目标用户终端标识查询归属位置寄存器中的终端位置信息,以便根据预设的D2D通信策略判断源用户终端与目标用户终端之间是否满足D2D通信条件,若满足,则为源用户终端与目标用户终端分配用于D2D通信交互的信道和功率,并指示源用户终端与目标用户终端建立D2D通信信道,从而目标用户终端根据基站发送的用于指示与源用户终端进行D2D通信交互的指示消息建立与源用户终端之间的D2D通信信道,并且目标用户终端获取与该D2D通信交互对应的随机序列码其中,该随机序列码是源用户终端生成与D2D通信交互对应的通信密钥所用的随机序列码,目标用户终端获取该随机序列码的方式不止一种,具体包括:目标用户终端接收基站发送的、与D2D通信交互对应的随机序列码,或者,目标用户终端接收源用户终端通过D2D通信信道发送的与D2D通信交互对应的随机序列码。In this embodiment, the source user terminal and the target user terminal to perform D2D communication respectively store the same initial key and first algorithm used to generate the communication key in the SIM cards of the respective user terminals, and store the same initial key and the first algorithm in the respective user terminals The second algorithm used to encrypt the same business data is stored. If the source user terminal sends a service request message to the base station requesting D2D communication interaction with the target user terminal, the service request message includes the source user terminal identifier and the target user terminal identifier, the base station parses the received service request message to obtain the source user terminal The terminal ID and the target user terminal ID, and then query the terminal location information in the home location register according to the source user terminal ID and the target user terminal ID, so as to judge whether the source user terminal and the target user terminal meet the D2D requirements according to the preset D2D communication strategy. If the communication conditions are satisfied, the source user terminal and the target user terminal are allocated channels and power for D2D communication interaction, and the source user terminal and the target user terminal are instructed to establish a D2D communication channel, so that the target user terminal transmits the information for An instruction message indicating D2D communication interaction with the source user terminal establishes a D2D communication channel with the source user terminal, and the target user terminal obtains a random sequence code corresponding to the D2D communication interaction, wherein the random sequence code is generated by the source user terminal For the random sequence code used for the communication key corresponding to the D2D communication interaction, there are more than one ways for the target user terminal to obtain the random sequence code, specifically including: the target user terminal receives the random sequence code sent by the base station and corresponds to the D2D communication interaction, Or, the target user terminal receives the random sequence code corresponding to the D2D communication interaction sent by the source user terminal through the D2D communication channel.
步骤201,所述目标用户终端接收所述源用户终端通过所述D2D通信信道发送的、应用与所述D2D通信交互对应的通信密钥进行加密处理的业务数据;Step 201, the target user terminal receives service data sent by the source user terminal through the D2D communication channel and encrypted by applying a communication key corresponding to the D2D communication interaction;
源用户终端根据自身SIM卡中存储的初始密钥和第一算法对基站发送的与D2D通信交互对应的随机序列码进行计算生成通信密钥,然后源用户终端应用该通信密钥和存储在本地的第二算法对待发送的业务数据进行加密处理,并通过已建立的D2D通信信道将经过加密处理的业务数据发送给目标用户终端,从而目标用户终端接收源用户终端应用与D2D通信交互对应的通信密钥进行加密处理的业务数据。The source user terminal calculates the random sequence code corresponding to the D2D communication interaction sent by the base station according to the initial key stored in its own SIM card and the first algorithm to generate a communication key, and then the source user terminal applies the communication key and stores it locally The second algorithm encrypts the service data to be sent, and sends the encrypted service data to the target user terminal through the established D2D communication channel, so that the target user terminal receives the communication corresponding to the interaction between the source user terminal application and the D2D communication The business data encrypted by the key.
步骤202,所述目标用户终端根据存储在本地SIM卡中的初始密钥和第一算法对所述随机序列码进行计算获取所述通信密钥,并应用存储在本地的第二算法和所述通信密钥对所述业务数据进行解密处理。Step 202, the target user terminal calculates the random sequence code according to the initial key stored in the local SIM card and the first algorithm to obtain the communication key, and applies the locally stored second algorithm and the The communication key decrypts the service data.
目标用户终端接收到源用户终端应用与D2D通信交互对应的通信密钥进行加密处理的业务数据后,根据自身SIM卡中存储的初始密钥和第一算法对已获取得随机序列码进行计算生成通信密钥,然后目标用户终端应用存储在本地的第二算法和生成的通信密钥对接收到的业务数据进行解密处理,从而获取源用户终端发送的信息。由于基站对每次D2D通信交互生成的随机序列码不同,因此,即使在一次通信交互中的通信密钥被截获,下一次的D2D通信交互会重新生成新的通信密钥,并且即使基站生成的随机序列码被截获,由于初始密钥和第一算法都保存在目标用户终端的SIM卡中,安全性高,很难被破解获取通信密钥,从而保证了D2D通信数据的安全。After receiving the service data encrypted by the source user terminal using the communication key corresponding to the D2D communication interaction, the target user terminal calculates and generates the obtained random sequence code according to the initial key stored in its own SIM card and the first algorithm. communication key, and then the target user terminal applies the second algorithm stored locally and the generated communication key to decrypt the received service data, so as to obtain the information sent by the source user terminal. Since the random sequence code generated by the base station for each D2D communication interaction is different, even if the communication key in one communication interaction is intercepted, a new communication key will be regenerated in the next D2D communication interaction, and even if the communication key generated by the base station The random sequence code is intercepted. Since the initial key and the first algorithm are stored in the SIM card of the target user terminal, the security is high, and it is difficult to be cracked to obtain the communication key, thereby ensuring the security of the D2D communication data.
本实施例提供的D2D通信数据处理方法,通过目标用户终端根据基站发送的用于指示与源用户终端进行D2D通信交互的指示消息建立D2D通信信道后,获取与D2D通信交互对应的随机序列码,其中,随机序列码是源用户终端生成与D2D通信交互对应的通信密钥所用的随机序列码,当目标用户终端接收源用户终端通过D2D通信信道发送的、应用通信密钥进行加密处理的业务数据后,根据存储在本地SIM卡中的初始密钥和第一算法对随机序列码进行计算获取通信密钥,并应用存储在本地的第二算法和通信密钥对业务数据进行解密处理。从而实现了对基于D2D通信模式下经过加密的业务数据进行解密处理,提高了用户使用D2D模式进行通信交互的安全性。In the D2D communication data processing method provided in this embodiment, after the target user terminal establishes the D2D communication channel according to the instruction message sent by the base station for instructing the D2D communication interaction with the source user terminal, the random sequence code corresponding to the D2D communication interaction is obtained, Among them, the random sequence code is the random sequence code used by the source user terminal to generate the communication key corresponding to the D2D communication interaction. Finally, calculate the random sequence code according to the initial key and the first algorithm stored in the local SIM card to obtain the communication key, and apply the second algorithm and the communication key stored locally to decrypt the service data. In this way, the encrypted service data based on the D2D communication mode can be decrypted, and the security of the user's communication interaction using the D2D mode is improved.
本领域普通技术人员可以理解:实现上述方法实施例的全部或部分步骤可以通过程序指令相关的硬件来完成,前述的程序可以存储于一计算机可读取存储介质中,该程序在执行时,执行包括上述方法实施例的步骤;而前述的存储介质包括:ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。Those of ordinary skill in the art can understand that all or part of the steps for realizing the above-mentioned method embodiments can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the It includes the steps of the above method embodiments; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other various media that can store program codes.
图3为本发明用户终端一个实施例的结构示意图,如图3所示,该用户终端包括:请求模块11、处理模块12、加密模块13和发送模块14,其中,请求模块11用于向基站发送请求与目标用户终端进行D2D通信交互的业务请求消息,并接收基站确定源用户终端与目标用户终端之间建立D2D通信信道后返回的随机序列码;处理模块12用于根据存储在本地SIM卡中的初始密钥和第一算法对随机序列码进行计算获取通信密钥;加密模块13用于应用存储在本地的第二算法和通信密钥对待发送的业务数据进行加密处理;发送模块14用于通过D2D通信信道将经过加密处理的业务数据发送给目标用户终端。FIG. 3 is a schematic structural diagram of an embodiment of a user terminal of the present invention. As shown in FIG. 3 , the user terminal includes: a request module 11, a processing module 12, an encryption module 13, and a sending module 14, wherein the request module 11 is used to send a request to the base station Send a service request message requesting D2D communication interaction with the target user terminal, and receive the random sequence code returned by the base station after determining that the D2D communication channel between the source user terminal and the target user terminal is established; the processing module 12 is used to store in the local SIM card The initial key and the first algorithm in the random sequence code are calculated to obtain the communication key; the encryption module 13 is used to encrypt the business data to be sent by applying the second algorithm and the communication key stored locally; the sending module 14 uses The encrypted service data is sent to the target user terminal through the D2D communication channel.
本实施例提供的用户终端中各模块的功能和处理流程,可以参见上述图1所示的方法实施例,其实现原理和技术效果类似,此处不再赘述。For the functions and processing flow of each module in the user terminal provided in this embodiment, refer to the method embodiment shown in FIG. 1 above. The implementation principles and technical effects are similar, and will not be repeated here.
基于上述实施例,进一步地,请求模块11还用于向基站发送通信结束消息,以使基站释放用于D2D通信交互的信令控制资源;发送模块14还用于向目标用户终端发送所述通信结束消息,以使目标用户终端释放用于D2D通信交互的传输资源。Based on the above embodiment, further, the requesting module 11 is further configured to send a communication end message to the base station, so that the base station releases the signaling control resources used for D2D communication interaction; the sending module 14 is also configured to send the communication to the target user terminal End the message, so that the target UE releases the transmission resource used for D2D communication interaction.
图4为本发明用户终端另一实施例的结构示意图,如图4所示,该用户终端包括:获取模块21、接收模块22和解密模块23,其中,获取模块21用于根据基站发送的用于指示与源用户终端进行D2D通信交互的指示消息建立与源用户终端之间的D2D通信信道后,获取与D2D通信交互对应的随机序列码,其中,随机序列码是基站下发给源用户终端用于生成与D2D通信交互对应的通信密钥所用的随机序列码;接收模块22用于接收源用户终端通过D2D通信信道发送的、应用通信密钥进行加密处理的业务数据;解密模块23用于根据存储在本地SIM卡中的初始密钥和第一算法对所述随机序列码进行计算获取通信密钥,并应用存储在本地的第二算法和通信密钥对业务数据进行解密处理。其中,获取模块21具体用于:接收基站发送的、与D2D通信交互对应的随机序列码,或者,接收源用户终端通过D2D通信信道发送的与D2D通信交互对应的随机序列码。FIG. 4 is a schematic structural diagram of another embodiment of the user terminal of the present invention. As shown in FIG. 4, the user terminal includes: an acquisition module 21, a receiving module 22, and a decryption module 23, wherein the acquisition module 21 is used to After establishing a D2D communication channel with the source user terminal with an instruction message indicating D2D communication interaction with the source user terminal, obtain a random sequence code corresponding to the D2D communication interaction, wherein the random sequence code is issued by the base station to the source user terminal The random sequence code used to generate the communication key corresponding to the D2D communication interaction; the receiving module 22 is used to receive the service data sent by the source user terminal through the D2D communication channel and encrypted with the communication key; the decryption module 23 is used to Calculate the random sequence code according to the initial key and the first algorithm stored in the local SIM card to obtain the communication key, and apply the second algorithm and the communication key stored locally to decrypt the service data. Wherein, the obtaining module 21 is specifically configured to: receive the random sequence code corresponding to the D2D communication interaction sent by the base station, or receive the random sequence code corresponding to the D2D communication interaction sent by the source user terminal through the D2D communication channel.
本实施例提供的用户终端中各模块的功能和处理流程,可以参见上述图2所示的方法实施例,其实现原理和技术效果类似,此处不再赘述。For the functions and processing flow of each module in the user terminal provided in this embodiment, refer to the method embodiment shown in FIG. 2 above. The implementation principles and technical effects are similar, and will not be repeated here.
图5为本发明D2D通信数据处理系统一个实施例的结构示意图,如图5所示,该系统包括:基站1、基站1控制下的源用户终端2和目标用户终端3,其中,源用户终端2为本发明图3所示的用户终端,目标用户终端3为本发明图4所示的用户终端,基站1为本发明所示实施例中涉及的基站。Fig. 5 is a schematic structural diagram of an embodiment of the D2D communication data processing system of the present invention. As shown in Fig. 5, the system includes: a base station 1, a source user terminal 2 and a target user terminal 3 under the control of the base station 1, wherein the source user terminal 2 is the user terminal shown in FIG. 3 of the present invention, the target user terminal 3 is the user terminal shown in FIG. 4 of the present invention, and base station 1 is the base station involved in the embodiment shown in the present invention.
本实施例提供的D2D通信数据处理系统中各模块的功能和处理流程,可以参见上述所示的方法实施例,其实现原理和技术效果类似,此处不再赘述。For the functions and processing flow of each module in the D2D communication data processing system provided in this embodiment, refer to the method embodiment shown above, and its implementation principles and technical effects are similar, and will not be repeated here.
最后应说明的是:以上实施例仅用以说明本发明的技术方案,而非对其限制;尽管参照前述实施例对本发明进行了详细的说明,本领域的普通技术人员应当理解:其依然可以对前述各实施例所记载的技术方案进行修改,或者对其中部分技术特征进行等同替换;而这些修改或者替换,并不使相应技术方案的本质脱离本发明各实施例技术方案的精神和范围。Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or equivalent replacements are made to some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.
Claims (10)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210510164.XA CN102984699B (en) | 2012-12-03 | 2012-12-03 | D2D processing method of communication data, equipment and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210510164.XA CN102984699B (en) | 2012-12-03 | 2012-12-03 | D2D processing method of communication data, equipment and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102984699A CN102984699A (en) | 2013-03-20 |
| CN102984699B true CN102984699B (en) | 2016-02-17 |
Family
ID=47858344
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210510164.XA Active CN102984699B (en) | 2012-12-03 | 2012-12-03 | D2D processing method of communication data, equipment and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102984699B (en) |
Families Citing this family (17)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104066112A (en) * | 2013-03-21 | 2014-09-24 | 中兴通讯股份有限公司 | Inter-terminal device-to-device communication method and system |
| KR102142576B1 (en) * | 2013-05-16 | 2020-08-10 | 삼성전자주식회사 | Method and apparatus for discovery of device-to-device communications |
| ES2765892T3 (en) | 2013-06-26 | 2020-06-11 | Nokia Technologies Oy | Methods and devices for generating passwords in device-to-device communications |
| CN104254144B (en) | 2013-06-27 | 2019-07-16 | 中兴通讯股份有限公司 | Mode switching method and device |
| CN104660567B (en) * | 2013-11-22 | 2017-12-15 | 中国联合网络通信集团有限公司 | D2D terminal access authentication method, D2D terminal and server |
| CN104812070B (en) * | 2014-01-29 | 2020-03-27 | 北京三星通信技术研究有限公司 | Method and equipment for maintaining and releasing UE (user Equipment) resources |
| EP3905748A1 (en) * | 2014-01-30 | 2021-11-03 | Nokia Technologies Oy | Device to device discovery resource allocation |
| MX375518B (en) * | 2014-03-19 | 2025-03-06 | Huawei Tech Co Ltd | Semi-persistent scheduling (sps) method and apparatus |
| CN110602793B (en) | 2014-05-16 | 2024-01-05 | 太阳专利信托公司 | D2D communication method, communication device and integrated circuit |
| WO2016000306A1 (en) | 2014-06-30 | 2016-01-07 | 华为技术有限公司 | Method for transmitting prose information, terminal and communication device |
| CN105592434A (en) * | 2014-10-23 | 2016-05-18 | 中兴通讯股份有限公司 | Method and device for managing D2D (Device to Device) communication group |
| CN106162618A (en) * | 2015-04-23 | 2016-11-23 | 中兴通讯股份有限公司 | Authentication method, device and the system of a kind of D2D business multicast |
| CN107592626A (en) * | 2016-07-08 | 2018-01-16 | 中兴通讯股份有限公司 | Channel access method, apparatus and system |
| CN108521641A (en) * | 2018-03-29 | 2018-09-11 | 维沃移动通信有限公司 | A kind of D2D communications generate the methods, devices and systems of key |
| CN108966185B (en) * | 2018-08-16 | 2021-10-26 | Oppo(重庆)智能科技有限公司 | Resource release method, terminal and computer readable storage medium |
| CN113972998A (en) * | 2020-07-25 | 2022-01-25 | 华为技术有限公司 | Method and device for updating pre-shared key PSK |
| CN112512023A (en) * | 2020-12-04 | 2021-03-16 | 中国联合网络通信集团有限公司 | Communication method, device and system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101248593A (en) * | 2005-12-05 | 2008-08-20 | 中兴通讯股份有限公司 | Random access detection conflict post-processing method for improving user access rate |
| CN102413450A (en) * | 2010-09-21 | 2012-04-11 | 中兴通讯股份有限公司 | Access control method of machine type communication terminal and system thereof |
| CN102638893A (en) * | 2012-03-31 | 2012-08-15 | 南京邮电大学 | Base-station (BS)-combined direct-through terminal optimized resource allocation method in direct-through cellular system |
| CN102711100A (en) * | 2012-04-24 | 2012-10-03 | 中国联合网络通信集团有限公司 | Voice encryption and decryption processing method as well as base station and network system |
| CN102769868A (en) * | 2012-07-23 | 2012-11-07 | 西安电子科技大学 | TD-SCDMA network-based radio resource scheduling method for M2M services |
-
2012
- 2012-12-03 CN CN201210510164.XA patent/CN102984699B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101248593A (en) * | 2005-12-05 | 2008-08-20 | 中兴通讯股份有限公司 | Random access detection conflict post-processing method for improving user access rate |
| CN102413450A (en) * | 2010-09-21 | 2012-04-11 | 中兴通讯股份有限公司 | Access control method of machine type communication terminal and system thereof |
| CN102638893A (en) * | 2012-03-31 | 2012-08-15 | 南京邮电大学 | Base-station (BS)-combined direct-through terminal optimized resource allocation method in direct-through cellular system |
| CN102711100A (en) * | 2012-04-24 | 2012-10-03 | 中国联合网络通信集团有限公司 | Voice encryption and decryption processing method as well as base station and network system |
| CN102769868A (en) * | 2012-07-23 | 2012-11-07 | 西安电子科技大学 | TD-SCDMA network-based radio resource scheduling method for M2M services |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102984699A (en) | 2013-03-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102984699B (en) | D2D processing method of communication data, equipment and system | |
| CN111669276B (en) | Network verification method, device and system | |
| CN104010299B (en) | Mobile communication session privacy Enhancement Method based on safety of physical layer | |
| CN105264816B (en) | Method and apparatus for performing discovery for device-to-device communication | |
| EP3065334A1 (en) | Key configuration method, system and apparatus | |
| CN103581899B (en) | A data transmission method, device, system and related equipment | |
| US20110320802A1 (en) | Authentication method, key distribution method and authentication and key distribution method | |
| CN102215474A (en) | Method and device for carrying out authentication on communication equipment | |
| CN109428875A (en) | Service-based architecture-based discovery method and device | |
| WO2016201732A1 (en) | Virtual sim card parameter management method, mobile terminal, and server | |
| CN102595399A (en) | Key derivation method, device and system | |
| CN104660567B (en) | D2D terminal access authentication method, D2D terminal and server | |
| KR20140041226A (en) | Method and apparatus for managing a security for a group communication in a mobile communication system | |
| CN103796151B (en) | The method and system that ad content is pushed | |
| CN110601825B (en) | Ciphertext processing method and device, storage medium and electronic device | |
| CN110784865A (en) | Network distribution method and terminal of Internet of things equipment, Internet of things equipment and network distribution system | |
| CN109150507A (en) | A kind of device credential distribution method and system, user equipment and management entity | |
| CN114726520B (en) | A method and device for determining a key | |
| CN103415010A (en) | D2D network authentication method and system | |
| WO2016062075A1 (en) | Method and device for managing device-to-device (d2d) communication group | |
| CN114173328B (en) | Key exchange method and device and electronic equipment | |
| CN102123361B (en) | Method and device for realizing encrypted message communication | |
| CN113163399B (en) | Communication method and device for terminal and server | |
| WO2015139370A1 (en) | Method of establishing small data secure transmission connection for mtc device group, and hss and system | |
| CN109155903B (en) | Method and device for determining SIM card information |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |