Secure method for MTC device triggering

• US 10,122,700 B2
• Filed: 12/01/2017
• Issued: 11/06/2018
• Est. Priority Date: 10/28/2011
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Zhang, Xiaowei, Prasad, Anand Raghawa
• Primary Examiner(s): Cai, Wayne H
• Application Number:
  US15/829,220
• Publication Number:
  US 20180152433A1
• Time in Patent Office: 340 Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 68/00 User notification, e.g. alerting and paging, for incoming communication, change of service or the like

Abstract

Upon receiving a triggering message from a MTC server (20), a network (10) verifies if the MTC server (20) is authorized to trigger a target MTC device (30) and also if the MTC device (30) is authorized to respond the triggering message, by comparing an MTC device ID and MTC server ID (and optionally information on subscription) which are include in the triggering message with authorized ones. Upon succeeding in the verification, the network (10) checks a trigger type included in the triggering message to verify if the triggering message is authorized to be sent to the MTC device (30). Upon succeeding in the check, the network (10) forwards the triggering message to the MTC device (30). The network (10) also validates a response from the MTC device (30), by checking whether the MTC device (30) is allowed to communicate with the addressed MTC server (20).

Claims

1. A server that performs device trigger for a mobile communication system, comprising:

a transceiver configured to send a trigger message including a first information on a lifetime to a first node that connects to the server; and

a controller configured to control the transceiver to re-send the trigger message if the trigger message does not reach a UE (User Equipment) within the lifetime,

wherein the first node checks whether the server is authorized to send the trigger message, and sends the trigger message to the UE based on the first information via a second node that performs mobility management.

2. The server of claim 1, wherein the trigger message includes a second information on an identifier of the UE.

3. A method of a server that performs device trigger for a mobile communication system, comprising:

sending a trigger message including a first information on a lifetime to a first node that connects to the server; and

re-sending the trigger message if the trigger message does not reach a UE (User Equipment) within the lifetime,

wherein the first node checks whether the server is authorized to send the trigger message, and sends the trigger message to the UE based on the first information via a second node that performs mobility management.

4. The method of claim 3, wherein the trigger message includes a second information on an identifier of the UE.

5. A first node that connects to a server for a mobile communication system, comprising:

a transceiver configured to receive a trigger message including a first information on a lifetime from the server that performs device trigger; and

a controller configured to control the transceiver to check whether the server is authorized to send the trigger message; and

a sender configured to send the trigger message to a UE (User Equipment) based on the first information via a second node that performs mobility management,

wherein the server re-sends the trigger message if the trigger message does not reach the UE within the lifetime.

6. The first node of claim 5, wherein the trigger message includes a second information on an identifier of the UE.

7. A method of a first node that connects to a server for a mobile communication system, comprising:

receiving a trigger message including a first information on a lifetime from the server that performs device trigger;

checking whether the server is authorized to send the trigger message; and

sending the trigger message to a UE (User Equipment) based on the first information via a second node that performs mobility management,

wherein the server re-sends the trigger message if the trigger message does not reach the UE within the lifetime.

8. The method of claim 7, wherein the trigger message includes a second information on an identifier of the UE.

9. A UE (User Equipment) for a mobile communication system, comprising:

a transceiver configured to receive a trigger message via a second node that performs mobility management from a first node that connects to a server; and

a controller configured to control the transceiver to send a trigger response to the first node via the second node in response to the received trigger message,

wherein the server performs device trigger, sends the trigger message including a first information on a lifetime to the first node, and re-sends the trigger message if the trigger message does not reach the UE within the lifetime, and

the first node checks whether the server is authorized to send the trigger message.

10. The UE of claim 9, wherein the trigger message includes a second information on an identifier of the UE.

11. A method of a UE (User Equipment) for a mobile communication system, comprising:

receiving a trigger message via a second node that performs mobility management from a first node that connects to a server; and

sending a trigger response to the first node via the second node in response to the received trigger message,

wherein the server performs device trigger, sends the trigger message including a first information on a lifetime to the first node, and re-sends the trigger message if the trigger message does not reach the UE within the lifetime, and

the first node checks whether the server is authorized to send the trigger message.

12. The method of claim 11, wherein the trigger message includes a second information on an identifier of the UE.