Communication method and apparatus
This application provides a communication method and apparatus, and relates to the field of communication technologies. The method may include: A network device performs integrity protection on system information by using a first private key, and sends the system information, where the system information includes a first public key corresponding to the first private key and/or an index of the first public key. Correspondingly, a terminal device receives the system information from the network device, and if determining that the first public key is valid, the terminal device verifies integrity of the system information by using the first public key. According to this method, on one hand, the terminal device can effectively identify validity of the system information. On the other hand, because the system information includes the first public key and/or the index of the first public key, flexible update of an asymmetric key can be implemented.
1. A communication apparatus, wherein the communication apparatus comprises:
a processor, the processor is coupled to a memory, and the memory is configured to store instructions, and when the instructions are run by the processor, the communication apparatus is enabled to perform:
receiving first system information from a first network device, wherein the first system information comprises at least one of:
a first public key; and
an index of the first public key;
responsive to determining that the first public key is valid, verifying integrity of the first system information by using the first public key, and
responsive to the integrity verification on the first system information fails, recording a failure report, wherein the failure report comprises information about (1) a first cell, (2) location information, and (3) an exception cause.
2. The communication apparatus according to claim 1 , wherein integrity protection is performed on the first system information based on a first private key corresponding to the first public key.
3. The communication apparatus according to claim 1 , wherein the determining that the first public key is valid comprises:
receiving public key information, wherein the public key information comprises at least one public key; and
responsive to the at least one public key comprising the first public key, determining that the first public key is valid.
4. The communication apparatus according to claim 3 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
receiving indication information, wherein the indication information is used to indicate a valid area to which the public key information is applicable.
5. The communication apparatus according to claim 4 , wherein the indication information comprises an identifier of the valid area to which the public key information is applicable; and
the identifier of the valid area comprises at least one of the following:
a public land mobile network identifier;
a radio access network notification area identifier;
a tracking area identity;
a cell identifier; and
a private network identifier.
6. The communication apparatus according to claim 4 , wherein
the indication information is used to indicate that the valid area to which the public key information is applicable is a tracking area list of a terminal device; or
the indication information is used to indicate that the valid area to which the public key information is applicable is a radio access network notification area of the terminal device.
7. The communication apparatus according to claim 1 , wherein the determining that the first public key is valid comprises:
receiving public key information, wherein the public key information comprises at least one public key and an index of the at least one public key; and
responsive to the at least one public key comprising the first public key, and the index of the at least one public key comprising the index of the first public key, determining that the first public key is valid.
8. The communication apparatus according to claim 1 , wherein
the exception cause comprises at least one of the following:
integrity verification on the first system information fails,
the first cell is a fake cell, and
the first network device is a fake network device.
9. The communication apparatus according to claim 8 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
performing reselection from the first cell to a second cell; and
sending the failure report to a second network device to which the second cell belongs.
10. The communication apparatus according to claim 9 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
before the sending the failure report to the second network device,
determining that verification on second system information sent by the second network device succeeds.
11. A communication apparatus, wherein the communication apparatus comprises:
a processor, the processor is coupled to a memory, and the memory is configured to store instructions, and when the instructions are run by the processor, the communication apparatus is enabled to perform:
performing integrity protection on first system information by using a first private key;
sending the first system information, wherein the first system information comprises a first public key corresponding to at least one of: the first private key and an index of the first public key; and
receiving a failure report sent by the terminal device, wherein the failure report comprises (1) information about a third cell, (2) location information of the terminal device, and (3) an exception cause.
12. The communication apparatus according to claim 11 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
receiving private key information from a core network device, wherein the private key information comprises at least one private key and at least one public key corresponding to the at least one private key, and the first private key is one of the at least one private key.
13. The communication apparatus according to claim 12 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
sending public key information to a terminal device, wherein the public key information comprises the at least one public key.
14. The communication apparatus according to claim 13 , wherein
the exception cause comprises at least one of the following: integrity verification on the first system information fails, the third cell is a fake cell, and a third network device to which the third cell belongs is a fake network device.
15. The communication apparatus according to claim 11 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
receiving private key information from a core network device, wherein the private key information comprises at least one private key and an index of the at least one private key, the first private key is one of the at least one private key, and an index of the first private key is the same as the index of the first public key.
16. The communication apparatus according to claim 15 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
receiving at least one public key from the core network device, wherein the at least one public key is in a one-to-one correspondence with the at least one private key; and
sending public key information to a terminal device, wherein the public key information comprises the at least one public key and an index of the at least one public key.
17. The communication apparatus according to claim 16 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
receiving indication information from the core network device, wherein the indication information is used to indicate a valid area to which the public key information is applicable.
18. The communication apparatus according to claim 17 , wherein when the instructions are run by the processor, the communication apparatus is further enabled to perform:
sending the indication information to the terminal device, wherein the indication information is used to indicate the valid area to which the public key information is applicable.
19. The communication apparatus according to claim 17 , wherein the indication information comprises an identifier of the valid area to which the public key information is applicable; and
the identifier of the valid area comprises at least one of the following:
a public land mobile network identifier;
a radio access network notification area identifier;
a tracking area identity;
a cell identifier; and
a private network identifier.
20. The communication apparatus according to claim 17 , wherein
the indication information is used to indicate that the valid area to which the public key information is applicable is a tracking area list of the terminal device; or
the indication information is used to indicate that the valid area to which the public key information is applicable is a radio access network notification area of the terminal device.