Proximity discovery, authentication and link establishment between mobile devices in 3GPP LTE

• US 10,237,718 B2
• Filed: 10/17/2017
• Issued: 03/19/2019
• Est. Priority Date: 01/25/2013
• Status: Active Grant

• Current Assignee: Koninklijke KPN NV, Nederlandse Organisatie Voor Toegepast-Natuurwetenschappelijk Onderzoek Tno
• Original Assignee: Koninklijke KPN NV, Nederlandse Organisatie Voor Toegepast-Natuurwetenschappelijk Onderzoek Tno
• Inventors: Fransen, Frank, Veugen, Peter, de Kievit, Sander, Everts, Maarten
• Primary Examiner(s): Orgad, Edan
• Application Number:
  US15/785,696
• Publication Number:
  US 20180041887A1
• Time in Patent Office: 518 Days
• CPC Class Codes: H04L 12/18 for broadcast or conference , e.g. multicast
• CPC Class Codes: H04L 12/1845 broadcast or multicast in a specific location, e.g. geocast protocols for adapting network applications to user terminal location H04L67/52; services specially adapted for wireless communication networks making use of the location of users or terminals H04W4/02
• CPC Class Codes: H04L 12/185 with management of multicast group membership
• CPC Class Codes: H04L 12/189 in combination with wireless systems selective distribution or broadcast in wireless communication networks H04W4/06
• CPC Class Codes: H04L 61/5038 for local use, e.g. in LAN or USB networks, or in a controller area network [CAN]
• CPC Class Codes: H04L 61/59 using proxies for addressing
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management
• CPC Class Codes: H04W 72/30 Resource management for broadcast services
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 88/02 Terminal devices
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

The invention enables a device to discover one or more other devices within range for a device-to-device mode of communication. This proximity discovery may trigger a target device, e.g. to start listening to signals from a source device or perform any other action based on the proximity discovery like e.g. charging at a toll gate. A source device that wants to be discovered broadcasts a message including an identifier or a representation of the identifier. This identifier may be an identifier of the target device to be contacted or of the source device or a derivation thereof or a common security association used by a set of peers. The target device compares the broadcast identifier with a known identifier to establish proximity discovery.

Claims

1. A method for proximity discovery between a source device and one or more target devices, the method comprising:

receiving in the source device a first data comprising an identifier, wherein the identifier is a temporary broadcast identifier;

receiving in the one or more target devices a second data comprising a first representation of the identifier;

broadcasting by the source device a signal comprising a second representation of the identifier;

receiving in the one or more target devices the signal; and

comparing in the one or more target devices the first representation of the identifier with the second representation of the identifier to obtain a comparison result for establishing a successful proximity discovery.

2. The method according to claim 1, further comprising transmitting from the one or more target devices to the source device an acknowledgement message depending on the comparison result.

3. The method according to claim 2, wherein:

the source device and the one or more target devices are configured to be communicatively connected to a network and wherein the first data and the second data are received from one of a server in the network or the source device.

4. The method according to claim 3, further comprising receiving in the one or more target devices a third data comprising a random number, wherein the first representation of the identifier is a derivation of the identifier obtained by a first mathematical function that uses the identifier and the random number as input to calculate the derivation of the identifier,

and wherein the comparing step comprises:

calculating a derivation of the identifier using a second mathematical function identical to the first mathematical function that uses the second representation of the identifier and the random number as input; and

comparing the calculated derivation of the identifier with the first representation of the identifier,

wherein the random number is one of;

(i) a random number generated in the server or in the source device,

(ii) a salt generated in one of the server or the source device, or

(iii) a derivation of a further random number obtained in one of the server or the source device by a third mathematical function that uses the further random number and an source identifier identifying the source device as input to calculate the derivation of the random number.

5. The method according to claim 3, wherein the second data further comprises a ticket identifier, the method further comprising:

receiving from the server in the source device ticket, data comprising the ticket identifier, the first data and a fourth data;

transmitting from the one or more target devices to the server the ticket identifier to obtain a copy of the fourth data associated with the ticket identifier; and

receiving from the server in the one or more target devices the copy of the fourth data,

wherein the acknowledgement message comprises the copy of the fourth data for verification with the fourth data in the source device.

6. The method according to claim 5, further comprising:

receiving from the source device in the one or more target devices first challenge data; and

calculating in the one or more target devices derivated first challenge data using a fourth mathematical function on the first challenge data,

wherein the acknowledgement message further comprises the derivated first challenge data and second challenge data, and the method further comprises;

calculating in the source device derivated first challenge data using a fifth mathematical function identical to the fourth mathematical function on the first challenge data for comparison with the received derivated first challenge data;

calculating in the source device derivated second challenge data using a sixth mathematical function on the second challenge data;

transmitting the derivated second challenge data to the one or more target devices;

calculating in the one or more target devices derivated second challenge data using a seventh mathematical function identical to the sixth mathematical function on the second challenge data for comparison with the received derivated second challenge data.

7. The method according to claim 6, wherein the ticket data further comprises an encryption key, wherein the method further comprises receiving from the server in the one or more target devices the encryption key associated in the server to the ticket identifier, and wherein the fourth, fifth, sixth and seventh mathematical function comprises a cryptographic function using the encryption key.

8. The method according to claim 3, further comprising charging by an operator of the server of a request for at least one of the first data, the second data or ticket data from one of the source device or the one or more target devices.

9. The method according to claim 1, wherein the identifier is a temporary broadcast identifier uniquely identifying the target device and wherein the identifier is associable with the source device by the target device.

10. The method according to claim 9, wherein the identifier, the first representation of the identifier and the second representation of the identifier are identical.

11. The method according to claim 1, wherein the source device and the one or more target devices form a group of devices and wherein the identifier identifies the group of devices.

12. The method of claim 2, wherein the second representation of the identifier is identical to the identifier.

13. A source device configured for performing a proximity discovery procedure with one or more target devices, the source device comprising:

one or more processors and instructions stored in memory that when executed by the one or more processors cause the source device to carry out operations including;

receiving a first data comprising an identifier, wherein the identifier is a temporary broadcast identifier;

broadcasting a signal comprising a second representation of the identifier to the one or more target devices, wherein a second data comprising a first representation of the identifier is received in the one or more target devices,

and wherein the one or more target devices are configured to receive the broadcasted signal and compare the first representation of the identifier with the second representation of the identifier to obtain a comparison result for establishing a successful proximity discovery.

14. The source device of claim 13, wherein the second representation of the identifier is identical to the identifier.

15. A target device configured for performing a proximity discovery procedure with a source device, the target device comprising:

one or more processors and instructions stored in memory that when executed by the one or more processors cause the target device to carry out operations including;

receiving a second data comprising a first representation of an identifier, wherein a first data comprising the identifier is received by the source device, and wherein the identifier is a temporary broadcast identifier;

receiving a signal broadcast by the source device, the signal comprising a second representation of the identifier; and

comparing the first representation of the identifier with the second representation of the identifier to obtain a comparison result for establishing a successful proximity discovery.

16. The target device of claim 15, wherein the second representation of the identifier is identical to the identifier.

17. A network comprising:

a source device configured for;

receiving a first data comprising an identifier, wherein the identifier is a temporary broadcast identifier; and

a target device configured for;

receiving a second data comprising a first representation of the identifier, receiving the broadcasted signal, and comparing the first representation of the identifier with the second representation of the identifier to obtain a comparison result for establishing a successful proximity discovery.