Information processing method, key material obtaining method, and device
An information processing method, a key material obtaining method, and a device are provided. The information processing method includes: a first network function receives capability indication information sent by a first terminal, where the capability indication information indicates that the first terminal does not have a secure storage function; the first network function performs at least one of the following based on the capability indication information: the first network function sends a key material of the first terminal, or the first network function sends first information to a second terminal, where the first information is used for determining a first association relationship between the first terminal and the second terminal; and the key material of the first terminal includes security information required by the first terminal for communication.
1 . A method for information processing, comprising:
receiving, by a first network function, capability indication information sent by a first terminal, wherein the capability indication information indicates that the first terminal does not have a secure storage function;
performing, by the first network function, the following based on the capability indication information:
sending a key material of the first terminal; and
sending first information to a second terminal, wherein the first information is used for determining a first association relationship between the first terminal and the second terminal; and
starting a first timer, wherein a timing period of the first timer is a validity period of the security information of the first terminal; and after the validity period expires, the security information of the first terminal is invalid,
wherein the key material of the first terminal comprises security information required by the first terminal for communication and a validity period, wherein the validity period is a validity period of the security information,
wherein the first information comprises:
a first identifier, wherein the first identifier is a device identifier or a user identifier of the first terminal; and
association information, wherein the association information is information for determining the first association relationship.
2 . The method according to claim 1 , wherein before sending, by the first network function, the key material of the first terminal, the method further comprises:
deriving, by the first network function, the key material of the first terminal based on a key material of the second terminal, wherein the key material of the second terminal comprises security information required by the second terminal for communication.
3 . The method according to claim 1 , wherein when the first terminal is not installed with at least one of the following, the first terminal does not have a secure storage function:
a universal integrated circuit card (UICC),
a universal subscriber identity module (USIM),
an embedded subscriber identity module (eSIM), or
a secure storage component.
4 . The method according to claim 1 , wherein the first association relationship comprises at least one of the following:
an association relationship between a device identifier of the first terminal and a device identifier of the second terminal;
an association relationship between the device identifier of the first terminal and a user identifier of the second terminal;
an association relationship between a user identifier of the first terminal and the user identifier of the second terminal;
an association relationship between the user identifier of the first terminal and the device identifier of the second terminal; or
wherein the security information comprises at least one of the following:
a security key; or
a security parameter.
5 . The method according to claim 1 , further comprising:
sending, by the first network function, the key material of the first terminal to the first terminal.
6 . A method for key material obtaining, comprising:
sending, by a first terminal, capability indication information to a first network function, wherein the capability indication information indicates that the first terminal does not have a secure storage function;
receiving, by the first terminal, a key material of the first terminal, wherein the key material of the first terminal comprises security information required by the first terminal for communication;
sending, by the first network function, first information to a second terminal, wherein the first information is used for determining a first association relationship between the first terminal and the second terminal; and
starting a first timer, wherein a timing period of the first timer is a validity period of the security information of the first terminal; and after the validity period expires, the security information of the first terminal is invalid,
wherein the key material of the first terminal comprises security information required by the first terminal for communication and a validity period, wherein the validity period is a validity period of the security information,
wherein the first information comprises:
a first identifier, wherein the first identifier is a device identifier or a user identifier of the first terminal; and
association information, wherein the association information is information for determining the first association relationship.
7 . The method according to claim 6 , wherein receiving, by the first terminal, the key material of the first terminal comprises:
receiving, by the first terminal, the key material of the first terminal sent by the first network function; or
receiving, by the first terminal, the key material of the first terminal sent by a second terminal.
8 . The method according to claim 6 , wherein the key material of the first terminal is derived based on a key material the second terminal,
wherein the key material of the second terminal comprises security information required by the second terminal for communication; or
wherein the security information comprises at least one of the following:
a security key; or
a security parameter.
9 . The method according to claim 6 , wherein the key material further comprises:
the validity period, wherein the validity period is a validity period of the security information,
wherein the method further comprises:
after the validity period expires, sending, by the first terminal, first update indication information to the first network function, wherein the first update indication information indicates the first network function to update the key material of the first terminal.
10 . A terminal, wherein the terminal is a first terminal, comprising: a memory storing a computer program; and a processor coupled to the memory and configured to execute the computer program to perform the method for key material obtaining according to claim 6 .
11 . The terminal according to claim 10 , wherein receiving, by the first terminal, the key material of the first terminal comprises:
receiving, by the first terminal, the key material of the first terminal sent by the first network function; or
receiving, by the first terminal, the key material of the first terminal sent by a second terminal.
12 . The terminal according to claim 10 , wherein the key material of the first terminal is derived based on a key material the second terminal,
wherein the key material of the second terminal comprises security information required by the second terminal for communication; or
wherein the security information comprises at least one of the following:
a security key; or
a security parameter.
13 . The terminal according to claim 10 , wherein the key material further comprises:
the validity period, wherein the validity period is a validity period of the security information,
wherein the method further comprises:
after the validity period expires, sending, by the first terminal, first update indication information to the first network function, wherein the first update indication information indicates the first network function to update the key material of the first terminal.
14 . A network side device, having a first network function and comprising: a memory storing a computer program; and a processor coupled to the memory and configured to execute the computer program to perform operations comprising:
receiving, by the first network function, capability indication information sent by a first terminal, wherein the capability indication information indicates that the first terminal does not have a secure storage function;
performing, by the first network function, the following based on the capability indication information:
sending a key material of the first terminal; and
sending first information to a second terminal, wherein the first information is used for determining a first association relationship between the first terminal and the second terminal; and
starting a first timer, wherein a timing period of the first timer is a validity period of the security information of the first terminal; and after the validity period expires, the security information of the first terminal is invalid,
wherein the key material of the first terminal comprises security information required by the first terminal for communication and a validity period, wherein the validity period is a validity period of the security information,
wherein the first information comprises:
a first identifier, wherein the first identifier is a device identifier or a user identifier of the first terminal; and
association information, wherein the association information is information for determining the first association relationship.
15 . The network side device according to claim 14 , wherein before sending, by the first network function, the key material of the first terminal, the operations further comprise:
deriving, by the first network function, the key material of the first terminal based on a key material of the second terminal, wherein the key material of the second terminal comprises security information required by the second terminal for communication.
16 . The network side device according to claim 14 , wherein when the first terminal is not installed with at least one of the following, the first terminal does not have a secure storage function:
a universal integrated circuit card (UICC),
a universal subscriber identity module (USIM),
an embedded subscriber identity module (eSIM), or
a secure storage component.
17 . The network side device according to claim 14 , wherein the operations further comprise:
sending, by the first network function, the key material of the first terminal to the first terminal.