Authentication in device to device discovery

• US 10,064,053 B2
• Filed: 03/05/2015
• Issued: 08/28/2018
• Est. Priority Date: 03/21/2014
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Lehtovirta, Vesa, Norrman, Karl, Wifvesson, Monica
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Doan, Huan V
• Application Number:
  US14/437,662
• Publication Number:
  US 20160302062A1
• Time in Patent Office: 1,272 Days
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

There is provided a method for authentication in device to device discovery. A method performed by a Discoverer device, comprises broadcasting a direct discovery request, receiving a direct discovery response from a Discoveree device, the direct discovery response comprising a first token, and obtaining a determination of whether the first token was generated for the Discoveree device or not.

Claims

1. A method for authentication in device to device discovery, the method being performed by a network node, comprising:

receiving a discovery request message transmitted by a discoverer device, the discovery request message requesting a permission to announce an application identifier;

transmitting to the discoverer device a discovery response message comprising the application identifier;

receiving, from a discoveree device, a token generation request to generate a first token, the token generation request comprising the application identifier;

in response to receiving the token generation request transmitted by the discoveree device and comprising the application identifier, generating the first token using a security key and the application identifier;

transmitting the first token to the discoveree device;

receiving, from a discoverer device, a verification request to verify the first token;

in response to receiving the verification request, verifying the first token, wherein verifying the first token comprises generating a second token using information included in the verification request and comparing the second token to the first token; and

transmitting to the discoverer device a message indicating that the first token is authenticate.

2. The method according to claim 1, further comprising:

receiving a request to generate a second token from the discoverer device;

generating the second token.

3. The method according to claim 2, further comprising:

transmitting the second token to the discoverer device.

4. A network node for authentication in device to device discovery, the network node comprising a processing unit and a non-transitory computer readable storage medium, said non-transitory computer readable storage medium comprising instructions executable by said processing unit whereby said network node is operative to:

receive a discovery request message transmitted by a discoverer device, the discovery request message requesting a permission to announce an application identifier;

transmit to the discoverer device a discovery response message comprising the application identifier;

receive, from a discoveree device, a token generation request to generate a first token, the token generation request comprising the application identifier;

in response to receiving the token generation request transmitted by the discoveree device and comprising the application identifier, generate the first token using a security key and the application identifier;

transmit the first token to the discoveree device;

receive, from the discoverer device, a verification request to verify the first token;

in response to receiving the verification request, verify the first token, wherein the network node is configured to verify the first token by performing a process comprising generating a second token using information included in the verification request and comparing the second token to the first token; and

transmit to the discoverer device a message indicating that the first token is authenticate.

5. A computer program product comprising a non-transitory computer readable medium storing a computer program for authentication in device to device discovery, the computer program comprising computer code which, when run on a network node, causes the network node to:

transmit to a discoverer device a discovery response message responding to a discovery request message transmitted by the discoverer device, the discovery request message requesting a permission to announce an application identifier, and the discovery response message comprising the application identifier;

after receiving a token generation request transmitted by a discoveree device and comprising the application identifier, wherein the received token generation request comprises the application identifier, generate a first token using a security key and the application identifier;

transmit the first token to the discoveree device;

in response to receiving a verification request transmitted by the discoverer device, verify the first token, wherein the computer program is configured to verify the first token by performing a process comprising generating a second token using information included in the verification request and comparing the second token to the first token; and

transmit to the discoverer device a message indicating that the first token is authenticate.