Transmission data protection system, method, and apparatus

A transmission data protection system, comprising:

• a user equipment (UE);
• and
• an access point configured to:
• obtain system parameters from at least one of a network or a key management system (KMS), wherein the system parameters comprise a public key for encryption and at least one group of data selected from a first global public key and a first private key, or a second global public key and a second private key, wherein the first global public key is a global public key (GPKenc) for data encryption in an identity based cryptography (IBC) technology, wherein the first private key is a private key (SKBS_ID_enc) for data encryption corresponding to the access point in the IBC technology, wherein the second global public key is a global public key (GPKSig) for data signature in the IBC technology, and wherein the second private key is a private key (SKBS_ID_Sig for data signature corresponding to the access point in the IBC technology, and wherein the public key for encryption is at least one of is base station (BS) identity (BS_ID), comprises a BS_ID, comprises a media access control (MAC) address of a Wi-Fi access point (AP), comprises a service set identifier (SSID) of a Wi-Fi AP, comprises a hotspot UE identity (UE_ID), or comprises an international mobile subscriber identity (IMSI) of hotspot UE;
• store the system parameters as second prestored data of the access point;
• and
• send a broadcast message after obtaining the system parameters, wherein the broadcast message carries the public key for encryption;
• wherein the UE is configured to receive the broadcast message of the access point and store the public key for encryption;
• wherein the UE is further configured to perform, in response to transmission data needing to be sent to the access point:
• obtain at least one of a global public key in an identity based cryptography (IBC) technology or a private key corresponding to the UE from first prestored data of the UE, wherein the global public key comprises the first global public key and the second global public key;
• and
• protect the transmission data using the public key for encryption and the at least one of the global public key or the private key corresponding to the UE, and obtain a protection message;
• wherein the UE is further configured to send the protection message to the access point, wherein the protection message carries an indication message indicating a protection manner of the transmission data;
• wherein the access point is further configured to perform, after receiving the protection message:
• obtain the global public key and a private key corresponding to the access point from second prestored data of the access point according to the indication message indicating the protection manner, wherein the private key corresponding to the access point comprises the first private key and the second private key;
• and
• parse the protection message using the global public key and the private key corresponding to the access point, and obtain the transmission data sent by the UE;
• and
• wherein the access point is further configured to send, to a core network, the transmission data that is obtained through parsing and that is sent by the UE.