# US 12,225,373 B2 · Privacy information transmission method, apparatus, computer device and computer-readable medium

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,225,373 B2
- Document ID: US12225373B2
- Status: Granted
- Kind: B2
- Application number: 17/784,808
- Filed: 2020-09-27
- Published: 2023-01-26
- Granted: 2025-02-11
- Earliest claimed: 2019-12-25
- Assignees: Zte Corporation
- Applicants: Zte Corporation
- Inventors: Haitao Lu
- Web page: https://patentgrep.com/patent/US12225373B2

## CPC

- H04W 12/02: Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
- H04L 9/14: using a plurality of keys or algorithms
- H04L 9/3297: {involving time stamps, e.g. generation of time stamps}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords}
- H04W 12/033: of the user plane, e.g. user's traffic
- H04W 12/06: Authentication
- H04W 12/122: Counter-measures against attacks; Protection against rogue devices
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- H04W 12/03: Protecting confidentiality, e.g. by encryption
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A privacy information transmission method, an apparatus, a computer device and a computer-readable medium are disclosed. The method may include: generating authentication information in response to receiving of an identity registration request message sent by a terminal device via a base station, and encrypting the authentication information with a first private key to generate encrypted authentication information; sending a first identity identification request message carrying the encrypted authentication information to the terminal device; and receiving an identity identification response message returned by the terminal device, and acquiring privacy information from the identity identification response message.

## Claims

### Claim 1

A privacy information transmission method, which is performed by a network device, the method comprising:
generating authentication information in response to receiving of an identity registration request message sent by a terminal device via a base station, the identity registration request message carrying a globally unique temporary identity, GUTI, of the terminal device, and encrypting the authentication information with a first private key to generate encrypted authentication information;
sending a first identity identification request message carrying the encrypted authentication information to the terminal device;
receiving an identity identification response message returned by the terminal device in response to the authentication information being determined as valid by the terminal device, and acquiring privacy information from the identity identification response message; wherein the authentication information comprises a timestamp, and the authentication information being determined as valid comprises: the timestamp being determined as consistent with the current time;
and determining by the network device that the identity of the terminal device is authentic if privacy data is correct;
wherein the privacy information comprises encrypted privacy data, and subsequent to the sending of the first identity identification request message to the terminal device, the method further comprises:
receiving an identity identification acknowledgment message returned by the terminal device, and acquiring a second public key from the identity identification acknowledgment message; and
generating a temporary key, encrypting the temporary key with the second public key to generate an encrypted temporary key, generating a second identity identification request message according to the encrypted temporary key, and sending the second identity identification request message to the terminal device;
the acquiring of privacy information from the identity identification response message comprises: acquiring the encrypted privacy data carried in the identity identification response message; and
subsequent to the acquiring of privacy information from the identity identification response message, the method further comprises: decrypting the encrypted privacy data with the temporary key to generate privacy data.

### Claim 2

A privacy information transmission method, which is performed by a terminal device, the method comprising:
sending an identity registration request message carrying a globally unique temporary identity, GUTI, of the terminal device;
receiving a first identity identification request message sent by a network device, and acquiring encrypted authentication information from the first identity identification request message; wherein, the authentication information is encrypted with a first private key, by the network device;
decrypting the encrypted authentication information with a first public key to generate authentication information; and
sending an identity identification response message carrying privacy information to the network device in response to the authentication information being determined as valid by the terminal device; wherein the authentication information comprises a timestamp, and the authentication information being determined as valid comprises: the timestamp being determined as consistent with the current time;
wherein the privacy information comprises encrypted privacy data, and prior to the sending of the identity identification response message to the network device, the method further comprises:
sending an identity identification acknowledgment message carrying a second public key to the network device;
receiving a second identity identification request message sent by the network device, acquiring an encrypted temporary key carried in the second identity identification request message, and decrypting the encrypted temporary key with a second private key to generate a temporary key, the encrypted temporary key being generated by encryption of the temporary key generated by the network device with the second public key; and
encrypting the privacy data with the temporary key to generate the encrypted privacy data; and
the sending of an identity identification response message to the network device comprises: sending the identity identification response message carrying the encrypted privacy data to the network device.

### Claim 3 (depends on 2)

A non-transitory computer-readable medium, storing a computer program which, when executed by a processor, causes the processor to perform the method as claimed in claim 2.

### Claim 4

A non-transitory computer-readable medium, storing a computer program which, when executed by a processor, causes the processor to perform a privacy information transmission method comprising,
generating authentication information in response to receiving of an identity registration request message sent by a terminal device via a base station, the identity registration request message carrying a globally unique temporary identity, GUTI, of the terminal device, and encrypting the authentication information with a first private key to generate encrypted authentication information;
sending a first identity identification request message carrying the encrypted authentication information to the terminal device; and
receiving an identity identification response message returned by the terminal device in response to the authentication information being determined as valid by the terminal device, and acquiring privacy information from the identity identification response message; wherein the authentication information comprises a timestamp, and the authentication information being determined as valid comprises: the timestamp being determined as consistent with the current time;
and determining by the network device that the identity of the terminal device is authentic if privacy data is correct;
wherein the privacy information comprises encrypted privacy data, and subsequent to the sending of the first identity identification request message to the terminal device, the method further comprises:
receiving an identity identification acknowledgment message returned by the terminal device, and acquiring a second public key from the identity identification acknowledgment message; and
generating a temporary key, encrypting the temporary key with the second public key to generate an encrypted temporary key, generating a second identity identification request message according to the encrypted temporary key, and sending the second identity identification request message to the terminal device;
the acquiring of privacy information from the identity identification response message comprises: acquiring the encrypted privacy data carried in the identity identification response message; and
subsequent to the acquiring of privacy information from the identity identification response message, the method further comprises: decrypting the encrypted privacy data with the temporary key to generate privacy data.