Authentication and authorization in proximity based service communication

• US 10,574,635 B2
• Filed: 08/03/2017
• Issued: 02/25/2020
• Est. Priority Date: 06/28/2013
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Zhang, Xiaowei, Prasad, Anand Raghawa
• Primary Examiner(s): Patel, Haresh N
• Application Number:
  US15/667,900
• Publication Number:
  US 20170359322A1
• Time in Patent Office: 936 Days
• Field of Search: 726 4
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/104 Location integrity, e.g. secure geotagging
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/108 Source integrity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 76/14 Direct-mode setup

Abstract

A method of performing authentication and authorization in Proximity based Service (ProSe) communication by a requesting device (31) which sends a request of a communication and a receiving device (32) which receives the request from the requesting device (31) and (32), the method including deriving session keys Kpc and Kpi from an unique key Kp at the requesting and receiving devices (31) and (32), using the session keys Kpc and Kpi for ProSe communication setup and direct communication between the requesting and receiving devices (31) and (32), starting the direct communication with the requesting and receiving devices (31) and (32). The key Kpc is confidentiality key and the key Kpi is integrity protection key.

Claims

1. A UE (User Equipment) for one-to-one direct communication, the UE comprising:

at least one processor; and

at least one memory coupled to the at least one processor, the memory storing instructions that, when executed by the at least one processor, cause the at least one processor to;

receive, from another UE, a first message including first information and second information related to a session key;

derive a confidential key and an integrity key based on the second information;

perform a first check that the received first information is the same as a first information possessed by the UE;

perform a second check of an integrity protection on the first message based on the integrity key; and

perform the one-to-one direct communication with the another UE using the confidentiality key and the integrity key if both the first check and the second check pass.

2. The UE according to claim 1, wherein the another UE checks the integrity protection on a second message received from the UE.

3. The UE according to claim 1, wherein the first message includes an algorithm for key derivation.

4. The UE according to claim 1, wherein the UE and the another UE support ProSe (Proximity Services).

5. The UE according to claim 1, wherein the UE and the another UE get an authorization from a network including at least a ProSe (Proximity Services) Function and a ProSe application server.

6. The UE according to claim 1, wherein the UE and the another UE perform mutual authentication.

7. A communication method of a UE (User Equipment) for one-to-one direct communication, the communication method comprising:

receiving, from another UE, a first message including first information and second information related to a session key;

deriving a confidential key and an integrity key based on the second information;

performing a first check that the received first information is the same as a first information possessed by the UE;

performing a second check of an integrity protection on the first message based on the integrity key; and

performing the one-to-one direct communication with the another UE using the confidentiality key and the integrity key if both the first check and the second check pass.

8. The communication method according to claim 7, wherein the another UE checks the integrity protection on a second message received from the UE.

9. The communication method according to claim 7, wherein the first message includes an algorithm for key derivation.

10. The communication method according to claim 7, wherein the UE and the another UE support ProSe (Proximity Services).

11. The communication method according to claim 7, wherein the UE and the another UE get an authorization from a network including at least a ProSe (Proximity Services) Function and a ProSe application server.

12. The communication method according to claim 7, wherein the UE and the another UE perform mutual authentication.