Communication method, apparatus, and device
View Patent ↗This application provides example communication methods, apparatuses, and devices, which may be applied to the internet of vehicles. In an example communication method, a first device obtains service data, and performs security processing on the service data. The first device sends service data and indication information to a second device. The indication information indicates a security mechanism used to perform the security processing on the service data or indicates a protocol layer used to perform the security processing on the service data.
1 . An apparatus, comprising at least one processor and at least one memory, wherein the at least one memory stores program instructions for execution by the at least one processor to:
obtain first service data;
perform security processing on the first service data to obtain second service data; and
send the second service data and indication information to a second device, wherein the indication information indicates a security mechanism used to perform the security processing on the first service data or indicates a protocol layer used to perform the security processing on the first service data,
wherein the indication information indicates a first security mechanism used for the security processing, or indicates a second security mechanism used for the security processing, or indicates a first security mechanism and a second security mechanism that are used for the security processing,
or the indication information indicates to perform the security processing on the first service data at an application layer, at a security layer, or at an application layer and a security layer,
wherein when the security mechanism used for the security processing is the first security mechanism, content of the security processing comprises no encryption and no signature, signature only and no encryption, or signature and encryption.
2 . The apparatus according to claim 1 , wherein the program instructions are for execution by the at least one processor to:
send identification information to the second device, wherein the identification information identifies a service type of the second service data.
3 . The apparatus according to claim 1 , wherein the program instructions are for execution by the at least one processor to:
send identification information to the second device, wherein the identification information is an application identifier.
4 . The apparatus according to claim 1 , wherein the indication information further indicates content of the security processing.
5 . The apparatus according to claim 4 , wherein the indication information is a character string of N bits, wherein first K bits of the character string indicate the security mechanism used for the security processing, last (N−K) bits of the character string indicate the content of the security processing, N is a positive integer, and K is a positive integer less than N.
6 . The apparatus according to claim 1 , wherein the first security mechanism is a V2X-based security mechanism, and the second security mechanism is a security mechanism that is set for a service type.
7 . The apparatus according to claim 1 , wherein when the security mechanism used for the security processing is the second security mechanism, content of the security processing comprises a first part and a second part associated with the first part, wherein:
the first part comprises supporting security authentication, supporting no security authentication, supporting security authentication but requiring no encrypted communication, or supporting security authentication and requiring encrypted communication; and the second part comprises asymmetric encryption, symmetric encryption, exclusive OR bidirectional authentication, exclusive OR unidirectional authentication, or symmetric encryption and unidirectional authentication.
8 . The apparatus according to claim 1 , wherein the program instructions are for execution by the at least one processor to:
send a data frame to the second device, wherein the data frame comprises a frame header and a payload, the indication information is carried in the frame header, and the second service data is carried in the payload.
9 . The apparatus according to claim 8 , wherein the frame header comprises an extension field and extension field indication information; and when the indication information is carried in the extension field, the extension field indication information indicates that the data frame carries the indication information.
10 . The apparatus according to claim 8 , wherein the frame header further comprises association indication information, and the association indication information indicates whether the indication information is associated with the second service data in the payload.
11 . A apparatus, comprising at least one processor and at least one memory, wherein the at least one memory stores program instructions for execution by, and the at least one processor to: receive service data and indication information from a first device; and perform security processing on the service data based on the indication information, wherein:
the indication information indicates a security mechanism used to perform the security processing
on the service data or indicates a protocol layer used to perform the security processing on the service data,
wherein the indication information indicates a first security mechanism used for the security processing, or indicates a second security mechanism used for the security processing, or indicates a first security mechanism and a second security mechanism that are used for the security processing;
or the indication information indicates to perform the security processing on the service data at an application layer, at a security layer, or at an application layer and a security layer,
wherein when the security mechanism used for the security processing is the first security mechanism, content of the security processing comprises no encryption and no signature, signature only and no encryption, or signature and encryption.
12 . The apparatus according to claim 11 , wherein the program instructions are for execution by the at least one processor to:
receive identification information from the first device, wherein the identification information identifies a service type of the service data.
13 . The apparatus according to claim 11 , wherein the program instructions are for execution by the at least one processor to:
receive identification information from the first device, wherein the identification information is an application identifier.
14 . The apparatus according to claim 11 , wherein the indication information further indicates content of the security processing.
15 . The apparatus according to claim 11 , wherein the first security mechanism is a V2X-based security mechanism, and the second security mechanism is a security mechanism that is set for a service type.
16 . The apparatus according to claim 11 , wherein when the security mechanism used for the security processing is the second security mechanism, content of the security processing comprises a first part and a second part associated with the first part, wherein:
the first part comprises supporting security authentication, supporting no security authentication, supporting security authentication but requiring no encrypted communication, or supporting security authentication and requiring encrypted communication; and the second part comprises asymmetric encryption, symmetric encryption, exclusive OR bidirectional authentication, exclusive OR unidirectional authentication, or symmetric encryption and unidirectional authentication.
17 . The apparatus according to claim 11 , wherein the program instructions are for execution by the at least one processor to: receive a data frame from the first device, wherein the data frame comprises a frame header and a payload, the indication information is carried in the frame header, and the service data is carried in the payload.
18 . The apparatus according to claim 17 , wherein the frame header comprises an extension field and extension field indication information; and when the indication information is carried in the extension field, the extension field indication information indicates that the data frame carries the indication information.
19 . The apparatus according to claim 17 , wherein the frame header further comprises association indication information, and the association indication information indicates whether the indication information is associated with the service data in the payload.
20 . A method, comprising:
obtaining, by a first device, first service data;
performing security processing on the first service data to obtain second service data;
and sending, by the first device, the second service data and indication information to a second device, wherein the indication information indicates a security mechanism used to perform the security processing on the first service data or indicates a protocol layer used to perform the security processing on the first service data,
wherein the indication information indicates a first security mechanism used for the security processing, or indicates a second security mechanism used for the security processing, or indicates a first security mechanism and a second security mechanism that are used for the security processing;
or the indication information indicates to perform the security processing on the first service data at an application layer, at a security layer, or at an application layer and a security layer,
wherein when the security mechanism used for the security processing is the first security mechanism, content of the security processing comprises no encryption and no signature, signature only and no encryption, or signature and encryption.
21 . The method according to claim 20 , wherein the method further comprises:
sending, by the first device, identification information to the second device, wherein the identification information identifies a service type of the second service data.
22 . The method according to claim 20 , wherein the method further comprises:
sending, by the first device, identification information to the second device, wherein the identification information is an application identifier.
23 . The method according to claim 20 , wherein the indication information further indicates content of the security processing.
24 . The method according to claim 20 , wherein the first security mechanism is a V2X-based security mechanism, and the second security mechanism is a security mechanism that is set for a service type.
25 . The method according to claim 20 , wherein when the security mechanism used for the security processing is the second security mechanism, content of the security processing comprises a first part and a second part associated with the first part, wherein:
the first part comprises supporting security authentication, supporting no security authentication, supporting security authentication but requiring no encrypted communication, or supporting security authentication and requiring encrypted communication; and the second part comprises asymmetric encryption, symmetric encryption, exclusive OR bidirectional authentication, exclusive OR unidirectional authentication, or symmetric encryption and unidirectional authentication.
26 . The method according to claim 20 , wherein the sending, by the first device, the second service data and indication information to a second device comprises: sending, by the first device, a data frame to the second device, wherein the data frame comprises a frame header and a payload, the indication information is carried in the frame header, and the second service data is carried in the payload.
27 . A method, comprising:
receiving, by a second device, service data and indication information from a first device; and performing, by the second device, security processing on the service data based on the indication information, wherein:
the indication information indicates a security mechanism used to perform the security processing on the service data or indicates a protocol layer used to perform the security processing on the service data,
wherein the indication information indicates a first security mechanism used for the security processing, or indicates a second security mechanism used for the security processing, or indicates a first security mechanism and a second security mechanism that are used for the security processing; or the indication information indicates to perform the security processing on the service data at an application layer, at a security layer, or at an application layer and a security layer,
wherein when the security mechanism used for the security processing is the first security mechanism, content of the security processing comprises no encryption and no signature, signature only and no encryption, or signature and encryption.
28 . The method according to claim 27 , wherein the method further comprises:
receiving, by the second device, identification information from the first device, wherein the identification information identifies a service type of the service data.
29 . The method according to claim 27 , wherein the method further comprises:
receiving, by the second device, identification information from the first device, wherein the identification information is an application identifier.
30 . The method according to claim 27 , wherein the first security mechanism is a V2X-based security mechanism, and the second security mechanism is a security mechanism that is set for a service type.
31 . The method according to claim 27 , wherein when the security mechanism used for the security processing is the second security mechanism, content of the security processing comprises a first part and a second part associated with the first part, wherein:
the first part comprises supporting security authentication, supporting no security authentication, supporting security authentication but requiring no encrypted communication, or supporting security authentication and requiring encrypted communication; and the second part comprises asymmetric encryption, symmetric encryption, exclusive OR bidirectional authentication, exclusive OR unidirectional authentication, or symmetric encryption and unidirectional authentication.
32 . The method according to claim 27 , wherein the receiving, by a second device, service data and indication information from a first device comprises:
receiving, by the second device, a data frame from the first device, wherein the data frame comprises a frame header and a payload, the indication information is carried in the frame header, and the service data is carried in the payload.