Communication method, apparatus, and system for verifying identity of user equipment by network device
A communication method and apparatus are provided. The method includes: Second user equipment sends a second message, first user equipment sends a first message to a network device in response to the second message, to request to perform identity verification on the second user equipment, and the network device verifies whether an identity of the second user equipment is valid, and sends, to the first user equipment, a verification result indicating whether the identity of the second user equipment is valid. Alternatively, the first user equipment sends a third message for request the second user equipment to reply with information used for remote identification, and the second user equipment replies with a fourth message, where the fourth message includes the information used for remote identification on the second user equipment, and the third message and the fourth message are encrypted by using corresponding keys.
1. A communication method, comprising:
receiving, by a network device, a first message from first user equipment, wherein the first message requests to perform identity verification on second user equipment;
verifying, by the network device, whether an identity of the second user equipment is valid; and
sending, by the network device, a verification result to the first user equipment, wherein the verification result indicates whether the identity of the second user equipment is valid,
wherein the second user equipment comprises at least one of:
an unmanned aerial vehicle (UAV), or
a controller configured to wirelessly control the UAV.
2. The method according to claim 1 , wherein
the first message comprises a first credential for verifying the first user equipment;
before the verifying, by the network device, whether the identity of the second user equipment is valid, the method further comprises:
verifying, by the network device, validity of the first user equipment based on the first credential; and
the verifying, by the network device, whether the identity of the second user equipment is valid comprises:
in response to verifying that the first user equipment is valid, verifying, by the network device based on the first message, whether the identity of the second user equipment is valid.
3. The method according to claim 2 , wherein
the method further comprises:
in response to authentication between the network device and the first user equipment being successful, generating, by the network device, a second credential for the first user equipment; and
the verifying, by the network device, validity of the first user equipment comprises:
determining, by the network device, validity of the first user equipment based on the first credential and the second credential.
4. The method according to claim 1 , wherein
the first message comprises identification information of the second user equipment, and the identification information of the second user equipment is a temporary identifier; and
the verifying, by the network device, whether the identity of the second user equipment is valid comprises:
determining, by the network device, a permanent identifier of the second user equipment based on the temporary identifier of the second user equipment; and
verifying, by the network device based on the permanent identifier of the second user equipment, whether the second user equipment is authenticated or authorized.
5. The method according to claim 1 , wherein
the first message comprises first information for remote identification of the second user equipment;
the method further comprises:
receiving, by the network device from the second user equipment, second information for remote identification on the second user equipment; and
the verifying, by the network device, whether the identity of the second user equipment is valid comprises:
determining, by the network device, whether the second information is consistent with the first information.
6. The method according to claim 1 , wherein
the network device is an unmanned aerial system traffic management (UTM) or unmanned aerial system service supplier (USS) function.
7. A communication method, comprising:
receiving, by an apparatus, a second message from second user equipment;
sending, by the apparatus, a first message to a network device in response to the second message, wherein the first message requests to perform identity verification on the second user equipment;
receiving, by the apparatus, a verification result from the network device; and
in response to the verification result indicates that an identity of the second user equipment is valid, processing, by the apparatus, the second message,
wherein
before the sending the first message to the network device, the method further comprises:
determining, by the apparatus based on the second message, whether a distance between the apparatus and the second user equipment is within a preset distance range; and
the sending, by the apparatus, the first message to the network device comprises:
in response to the distance between the apparatus and the second user equipment being within the preset distance range, sending, by the apparatus, the first message to the network device.
8. The method according to claim 7 , wherein
the second user equipment comprises at least one of:
an unmanned aerial vehicle (UAV), or
a controller configured to wirelessly control the UAV, and
the network device is an unmanned aerial system traffic management (UTM) or unmanned aerial system service supplier (USS) function.
9. The method according to claim 7 , wherein
the second message comprises at least one of:
identification information of the second user equipment, or
information for remote identification on the second user equipment; and
the first message comprises at least one of:
the identification information of the second user equipment,
a first credential for verifying the first user equipment, or
the information for remote identification on the second user equipment.
10. The method according to claim 7 , wherein the apparatus is first user equipment or a chip in the first user equipment.
11. A network device, comprising:
at least one processor; and
at least one memory storing instructions, wherein the instructions, when executed by the at least one processor, cause the network device to perform operations comprising:
receiving a first message from first user equipment, wherein the first message requests to perform identity verification on second user equipment;
verifying whether an identity of the second user equipment is valid; and
sending a verification result to the first user equipment, wherein the verification result indicates whether the identity of the second user equipment is valid,
wherein the second user equipment comprises at least one of:
an unmanned aerial vehicle (UAV), or
a controller configured to wirelessly control the UAV.
12. The network device according to claim 11 , wherein
the first message comprises a first credential for verifying the first user equipment;
before the verifying whether the identity of the second user equipment is valid, the operations further comprise:
verifying validity of the first user equipment based on the first credential; and
the verifying whether the identity of the second user equipment is valid comprises:
in response to verifying that the first user equipment is valid, verifying, based on the first message, whether the identity of the second user equipment is valid.
13. The network device according to claim 12 , wherein
the operations further comprise:
in response to authentication between the network device and the first user equipment being successful, generating a second credential for the first user equipment; and
the verifying validity of the first user equipment comprises:
determining validity of the first user equipment based on the first credential and the second credential.
14. The network device according to claim 11 , wherein
the first message comprises identification information of the second user equipment, and the identification information of the second user equipment is a temporary identifier; and
the verifying whether the identity of the second user equipment is valid comprises:
determining a permanent identifier of the second user equipment based on the temporary identifier of the second user equipment; and
verifying, based on the permanent identifier of the second user equipment, whether the second user equipment is authenticated or authorized.
15. The network device according to claim 11 , wherein
the first message comprises first information for remote identification of the second user equipment;
the operations further comprise:
receiving, from the second user equipment, second information for remote identification on the second user equipment; and
the verifying whether the identity of the second user equipment is valid comprises:
determining whether the second information is consistent with the first information.
16. An apparatus, comprising:
at least one processor; and
at least one memory storing instructions, wherein the instructions, when executed by the at least one processor, cause the apparatus to:
receive a second message from second user equipment;
determine, based on the second message, whether a distance between the apparatus and the second user equipment is within a preset distance range;
in response to the distance between the apparatus and the second user equipment being within the preset distance range, send a first message to a network device in response to the second message, wherein the first message requests to perform identity verification on the second user equipment;
receive a verification result from the network device; and
process the second message in response to the verification result indicates that an identity of the second user equipment is valid.
17. The network device according to claim 16 , wherein
the second message comprises at least one of:
identification information of the second user equipment, or
information for remote identification on the second user equipment; and
the first message comprises at least one of:
the identification information of the second user equipment,
a first credential for verifying the first user equipment, or
the information for remote identification on the second user equipment.