Huawei Technologies Co., Limited

Ao Lei

Yan Li

Hui Ni

Fang Yu

Yizhuang Wu

He Li

Yongcui Li

Rong Wu

Embodiments of this application provide a communication method, apparatus, and system, to improve security of a vehicle-to-everything (V2X) PC5 establishment procedure. In the method, a first terminal device obtains a first security protection method, where the first security protection method is a security protection method determined in a discovery procedure between the first terminal device and a second terminal device. Also in the method, the first terminal device determines a second security protection method according to the first security protection method, where the second security protection method is a security protection method for a PC5 connection between the first terminal device and the second terminal device. For example, a security level of the second security protection method is higher than a security level of the first security protection method. The communication method is applicable to the V2X communication field.

Communication method, apparatus, and system

The present disclosure provides example traffic routing methods, apparatuses, and systems. One example method includes receiving a routing rule from a session management network element in a session management process, wherein the routing rule indicates at least one of the following: to send a first traffic to a first function entity, or to send a second traffic to a second function entity or an access device, where the first traffic is a traffic on which first traffic steering control is to be performed, and the second traffic is a traffic on which the first traffic steering control has been performed; and transmitting a received traffic according to the routing rule.

Traffic routing method, apparatus, and system

A method for determining a user plane security algorithm, a system, and an apparatus. The method may include: a second device selects a non-null user plane confidentiality protection algorithm based on a security capability of a first device and a security capability of the second device in a case in which user plane confidentiality protection between the second device and the first device is enabled and control plane confidentiality protection between the second device and the first device is not enabled. The second device sends a first message to the first device. The first message includes first algorithm indication information indicating the user plane confidentiality protection algorithm. Therefore, the first device can obtain the non-null user plane confidentiality protection algorithm. Embodiments can be adopted to determine an effective user plane confidentiality protection algorithm, for confidentiality protecting user plane data.

Method, system, and apparatus for determining user plane security algorithm

Embodiments of this application provide a packet transmission method, a communication apparatus, and a communication system. A target transport layer proxy network element establishes a fourth transport layer connection based on a first context of a source transport layer proxy network element, where the first context is a context about packet transmission of the source transport layer proxy network element on a first path. If the target transport layer proxy network element receives first indication information, and the first indication information indicates that application context migration between a first application server and a second application server is completed, the target transport layer proxy network element performs transport layer processing on a packet on a second path based on a second context of the target transport layer proxy network element, and transmits, on the second path, a packet obtained through the transport layer processing. Hence, a packet loss can be avoided.

Packet transmission method, communication apparatus, and communication system

The present disclosure provides example traffic routing methods, apparatuses, and systems. One example method includes determining, by a session management network element, a routing rule, where the routing rule indicates a first traffic steering entity to send a first traffic to a first function entity, or send a second traffic to a second function entity or an access device, where the first traffic is a traffic on which first traffic steering control is to be performed, and the second traffic is a traffic on which the first traffic steering control has been performed. The routing rule is sent by the session management network element to the first traffic steering entity in a session management process.

Growing community of inventors

Beijing, China

Ao Lei