Configuration method, ProSe key management functional entity, terminal, system, and storage medium

1. A security configuration method for Device to Device (D2D) communication, comprising:

receiving, by a Proximity-based Service (ProSe) key management function device, first information indicating security capability of a User Equipment (UE) from the UE; wherein the first information comprises a security algorithm set supported by the UE; and

judging, by the ProSe key management function device, whether the security algorithm set supported by the UE comprises a group security algorithm to be sent according to the security capability information of the UE;

When the security algorithm set supported by the UE does not comprise the group security algorithm, determining, by the ProSe key management function device, not to feed back a security configuration response message or to feed back a security configuration response message including a security configuration failure indication that does not include the group security key to the UE.

2. The method according to claim 1 , wherein

when the security algorithm set supported by the UE comprises the group security algorithm, determining that the security configuration response message fed back to the UE comprises the group security algorithm.

3. The method according to claim 1 , wherein:

when the security algorithm set supported by the UE comprises the group security algorithm, the security configuration response message fed back to the UE comprises the group security algorithm.

4. A security configuration method for Device to Device (D2D) communication, comprising:

sending first information indicating security capability of a User Equipment (UE) to a Proximity-based Service (ProSe) key management function device, the first information being configured to provide a basis for the ProSe key management function device to judge whether a security algorithm set supported by the UE comprises a group security algorithm to be sent and to determine not to feed back a security configuration response message or to feed back a security configuration response message including a security configuration failure indication that does not include the group security key to the UE when the security algorithm set supported by the UE does not comprise the group security algorithm; wherein the first information comprises the security algorithm set supported by the UE; and

receiving the security configuration response message fed back by the ProSe key management function device on the basis of the first information;

receiving the security configuration response message comprising the group security algorithm within a specified time; and if the security configuration response message is not received within the specified time, determining that security configuration fails.

5. The method according to claim 4 , wherein

when the security algorithm set supported by the UE comprises the group security algorithm to be sent by the ProSe key management function device, the security configuration response message comprises the group security algorithm; and

when the security algorithm set supported by the UE does not comprise the group security algorithm to be sent by the ProSe key management function device, the security configuration response message comprises the security configuration failure indication without sending the group security key.

6. The method according to claim 4 , wherein

sending the first information indicating the security capability of the UE to the ProSe key management function device is implemented by:

sending a security configuration request message to the ProSe key management function device, the security configuration request message containing the first information indicating the security capability of the UE.

7. A Proximity-based Service (ProSe) key management function device, comprising:

a processor; and

a memory for storing instructions executable by the processor;

wherein the processor is configured to: receive first information indicating security capability of a User Equipment (UE) from the UE; wherein the first information comprises a security algorithm set supported by the UE; and

judge whether the security algorithm set supported by the UE comprises a group security algorithm to be sent according to the security capability information of the UE;

When the security algorithm set supported by the UE does not comprise the group security algorithm, determine not to feed back a security configuration response message or to feed back a security configuration response message including a security configuration failure indication that does not include the group security key to the UE.

8. The ProSe key management function device according to claim 7 , wherein the processor is further configured to:

when the security algorithm set supported by the UE comprises the group security algorithm, determine that the security configuration response message fed back to the UE comprises the group security algorithm.

9. The ProSe key management function device according to claim 7 , wherein

the processor is further configured to:

when the security algorithm set supported by the UE comprises the group security algorithm, determine that the security configuration response message fed back to the UE comprises the group security algorithm.

10. The ProSe key management function device according to claim 7 , wherein

the processor is configured to receive a security configuration request message sent by the UE; and

the security configuration request message contains the first information indicating the security capability of the UE.

11. A User Equipment (UE), comprising:

a processor; and

a memory for storing instructions executable by the processor;

wherein the processor is configured to send first information indicating security capability of the UE to a Proximity-based Service (ProSe) key management function device, the first information being configured to provide a basis for the ProSe key management function device to judge whether a security algorithm set supported by the UE comprises a group security algorithm to be sent and to determine not to feed back a security configuration response message or to feed back a security configuration response message including a security configuration failure indication that does not include the group security key to the UE when the security algorithm set supported by the UE does not comprise the group security algorithm; wherein the first information comprises the security algorithm set supported by the UE; and

receive the security configuration response message fed back by the ProSe key management function device on the basis of the first information;

wherein the processor is further configured to receive the security configuration response message comprising the group security algorithm within a specified time; and if the security configuration response message is not received within the specified time, determine that security configuration fails.

12. The UE according to claim 11 , wherein

when the security algorithm set supported by the UE comprises the group security algorithm to be sent by the ProSe key management function device, the security configuration response message comprises the group security algorithm; and

when the security algorithm set supported by the UE does not comprise the group security algorithm to be sent by the ProSe key management function device, the security configuration response message comprises the security configuration failure indication without sending the group security key.

13. The UE according to claim 11 , wherein

the processor is configured to send a security configuration request message to the ProSe key management function device, the security configuration request message containing the first information indicating the security capability of the UE.