Key generation method and apparatus

1 . A key generation method, comprising:

determining, by a communication apparatus, that a master base station or a secondary base station serves as an integrated access and backhaul (IAB) donor, wherein the master base station and the secondary base station are connected to an IAB node, wherein the communication apparatus is the IAB node or a component of the IAB node; and

performing at least one of following:

in response to that the communication apparatus determines that the master base station serves as the IAB donor, generating, by the communication apparatus and based on a master base station key, an IAB key for a secure tunnel between the IAB node and the IAB donor; or

in response to that the communication apparatus determines that the secondary base station serves as the IAB donor, generating, by the communication apparatus and based on a secondary base station key, the IAB key for the secure tunnel between the IAB node and the IAB donor.

2 . The method according to claim 1 , wherein the determining, by the communication apparatus, that the master base station or the secondary base station serves as an IAB donor comprises:

receiving, by the communication apparatus, fourth indication information from the master base station; and

determining, by the communication apparatus based on the fourth indication information, that the master base station serves as the IAB donor.

3 . The method according to claim 2 , wherein the fourth indication information is carried in a Radio Resource Control (RRC) reconfiguration message from the master base station.

4 . The method according to claim 1 , wherein the determining, by the communication apparatus, that the master base station or the secondary base station serves as an IAB donor comprises:

receiving, by the communication apparatus, fifth indication information from the secondary base station; and

determining, by the communication apparatus based on the fifth indication information, that the secondary base station serves as the IAB donor.

5 . The method according to claim 1 , further comprising:

establishing, by the communication apparatus based on the IAB key, the secure tunnel between the IAB node and the IAB donor.

6 . The method according to claim 1 , wherein the master base station key is for performing security protection on communication between the master base station and the IAB node.

7 . The method according to claim 1 , wherein the secondary base station key is for performing security protection on communication between the secondary base station and the IAB node.

8 . The method according to claim 1 , wherein both the master base station and the secondary base station are 5th generation 5G base stations.

9 . The method according to claim 1 , wherein the master base station key is generated in a process in which the IAB node registers with a network through the master base station.

10 . The method according to claim 1 , wherein, the secondary base station key is generated by the communication apparatus based on the master base station key.

11 . A communication apparatus, comprising:

at least one processor, configured to execute instructions to cause the communication apparatus to perform operations comprising:

determining that a master base station or a secondary base station serves as an integrated access and backhaul (IAB) donor, wherein the master base station and the secondary base station are connected to an IAB node, wherein the communication apparatus is the IAB node or a component of the IAB node; and

performing at least one of following:

in response to determining that the master base station serves as the IAB donor, generating, based on a master base station key, an IAB key for a secure tunnel between the IAB node and the IAB donor; or

in response to determining that the secondary base station serves as the IAB donor, generating, based on a secondary base station key, the IAB key for the secure tunnel between the IAB node and the IAB donor.

12 . The communication apparatus according to claim 11 , wherein the determining that the master base station or the secondary base station serves as an IAB donor comprises:

receiving fourth indication information from the master base station; and

determining, based on the fourth indication information, that the master base station serves as the IAB donor.

13 . The communication apparatus according to claim 12 , wherein the fourth indication information is carried in a Radio Resource Control (RRC) reconfiguration message from the master base station.

14 . The communication apparatus according to claim 11 , wherein the determining that the master base station or the secondary base station serves as an IAB donor comprises:

receiving fifth indication information from the secondary base station; and

determining, based on the fifth indication information, that the secondary base station serves as the IAB donor.

15 . The communication apparatus according to claim 11 , wherein the operations further comprise:

establishing, based on the IAB key, the secure tunnel between the IAB node and the IAB donor.

16 . The communication apparatus according to claim 11 , wherein the master base station key is for performing security protection on communication between the master base station and the IAB node.

17 . The communication apparatus according to claim 11 , wherein the secondary base station key is for performing security protection on communication between the secondary base station and the IAB node.

18 . The communication apparatus according to claim 11 , wherein both the master base station and the secondary base station are 5th generation 5G base stations.

19 . One or more non-transitory computer-readable media storing computer instructions, that when executed by one or more processors, cause an integrated access and backhaul (IAB) node or a component in the IAB node to perform operations comprising:

determining that a master base station or a secondary base station serves as an IAB donor, wherein the master base station and the secondary base station are connected to the IAB node; and

performing at least one of following:

in response to determining that the master base station serves as the IAB donor, generating, based on a master base station key, an IAB key for a secure tunnel between the IAB node and the IAB donor; or

in response to determining that the secondary base station serves as the IAB donor, generating, based on a secondary base station key, the IAB key for the secure tunnel between the IAB node and the IAB donor.

20 . The one or more non-transitory computer-readable media according to claim 19 , wherein the determining that the master base station or the secondary base station serves as an IAB donor comprises:

receiving fourth indication information from the master base station; and

determining, based on the fourth indication information, that the master base station serves as the IAB donor.

21 . The one or more non-transitory computer-readable media according to claim 20 , wherein the fourth indication information is carried in a Radio Resource Control (RRC) reconfiguration message from the master base station.

22 . The one or more non-transitory computer-readable media according to claim 19 , wherein the determining that the master base station or the secondary base station serves as an IAB donor comprises:

receiving fifth indication information from the secondary base station; and

determining, based on the fifth indication information, that the secondary base station serves as the LAB donor.