End-to-end M2M service layer sessions

• US 10,200,353 B2
• Filed: 07/25/2014
• Issued: 02/05/2019
• Est. Priority Date: 07/25/2013
• Status: Active Grant

• Current Assignee: Convida Wireless LLC
• Original Assignee: Convida Wireless LLC
• Inventors: Seed, Dale N., Dong, Lijun, Lu, Guang, Starsinic, Michael F.
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US14/341,556
• Publication Number:
  US 20150033312A1
• Time in Patent Office: 1,656 Days
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 69/321 Interlayer communication protocols or service data unit [SDU] definitions; Interfaces between layers
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Mechanisms support machine-to-machine service layer sessions that can span multiple service layer hops where a machine-to-machine service layer hop is a direct machine-to-machine service layer communication session between two machine-to-machine service layer instances or between a machine-to-machine service layer instance and a machine-to-machine application. Mechanisms are also disclosed that illustrate machine-to-machine session establishment procedures for one M2M Session Management Service supporting multiple resources.

Claims

1. A system comprising:

a display; and

a first device communicatively connected with the display, the first device comprising;

a processor; and

a memory coupled with the processor, the memory having stored thereon executable instructions that when executed by the processor cause the processor to effectuate operations comprising;

receiving a bootstrapped service layer session credential for an end-to-end (E2E) communication session;

receiving a targeted session endpoint of the E2E communication session, wherein the target session endpoint is an application of a second device;

providing a request to establish the E2E communication session to a service layer session management function, the request comprising the bootstrapped service layer session credential, a list of session endpoints that a policy for the E2E communication session is applicable to, and the targeted session endpoint, wherein the bootstrapped service layer session credential is used;

to provide multi-hop, end-to-end secured communications for the E2E communication session between an application of the first device and the application of the second device through at least one service layer instance, and

to access a plurality of functions in the at least one service layer instance to provide value-added data services for the E2E communication session for messages flowing through the at least one service layer instance, the value-added data services comprise an indication of whether data of the E2E communication session is allowed to be aggregated with other data;

publishing a set of resource paths to restrict the communication session; and

providing instructions to display a list of the session endpoints that the policy for the communication session is applicable to.

2. The system of claim 1, further operations comprising:

providing instructions to display an indicator that the E2E communication session is established based on the response.

3. The system of claim 1, wherein the bootstrapped service layer session credential allows the service layer instance to provide a value-added service for the E2E communication session.

4. The system of claim 3, wherein the value-added service comprises security, charging, data management, device management, discovery, provisioning, connectivity management, data aggregation, or data management.

5. The system of claim 3, further operations comprising:

providing instructions to display an indicator of the value-added service implemented by the service layer instance.

6. An apparatus comprising:

a processor; and

a memory coupled with the processor, the memory having stored thereon executable instructions that when executed by the processor cause the processor to effectuate operations comprising;

receiving a bootstrapped service layer session credential for an end-to- end (E2E) communication session;

receiving a targeted session endpoint of the E2E communication session, wherein the target session endpoint is an application of a first device;

providing a request to establish the E2E communication session to a service layer session management function, the request comprising the bootstrapped service layer session credential, a list of session endpoints that a policy for the E2E communication session is applicable to, and the targeted session endpoint, wherein the bootstrapped service layer session credential is used;

to provide multi-hop, end-to-end secured communications for the E2E communication session between an application of the apparatus and the application of the first device through at least one service layer instance, and

to access a plurality of functions in the at least one service layer instance to provide value-added data services for the E2E communication session for messages flowing through the at least one service layer instance, the value-added data services comprise an indication of whether data of the E2E communication session is allowed to be aggregated with other data;

publishing a set of resource paths to restrict the E2E communication session; and

providing instructions to display a list of the session endpoints that the policy for the communication session is applicable to.

7. The apparatus of claim 6, wherein the bootstrapped service layer session credential allows the at least one service layer instance to provide a value-added service for the E2E communication session.

8. The apparatus of claim 7, wherein the value-added service comprises discovery.

9. The apparatus of claim 7, wherein the response comprises service layer session state of the E2E communication session.

10. A method comprising:

receiving a bootstrapped service layer session credential for an end-to- end (E2E) communication session;

receiving a targeted session endpoint of the E2E communication session, wherein the target session endpoint is an application of a first device;

providing a request to establish the E2E communication session, the request comprising the bootstrapped service layer session credential, a list of session endpoints that a policy for the E2E communication session is applicable to, and the targeted session endpoint, wherein the bootstrapped service layer session credential is used;

to provide multi-hop, end-to-end secured communications for the E2E communication session between the application of the first device and the application of the second device through at least one service layer instance, and

to access a plurality of functions in the at least one service layer instance to provide value-added data services for the E2E communication session for messages flowing through the at least one service layer instance, the value-added data services comprise an indication of whether data of the E2E communication session is allowed to be aggregated with other data;

publishing a set of resource paths to restrict the E2E communication session; and

providing instructions to display a list of the session endpoints that the policy for the communication session is applicable to.

11. The method of claim 10, wherein the bootstrapped service layer session credential allow the at least one service layer instance to provide a value-added service for the E2E communication session.

12. The method of claim 11, wherein the value-added service comprises security, charging, data management, device management, discovery, provisioning, connectivity management, data aggregation, or data management.

13. The method of claim 11, wherein the response comprises service layer session state of the E2E communication session.