TRAFFIC ENCRYPTION KEY MANAGEMENT FOR MACHINE TO MACHINE MULTICAST GROUP

• US 20130315389A1
• Filed: 12/08/2011
• Published: 11/28/2013
• Est. Priority Date: 12/08/2010
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Jung, Inuk, Kwak, Jinsam, Ryu, Kiseon, Lee, Wookbong
• Granted Patent: US 9,161,216 B2
• Time in Patent Office: Days
• US Class Current: 380/31
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 4/08 User group management
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

A method for decrypting multicast data by a mobile station in a wireless communication system is described. The method includes receiving an identifier of a group from a base station, receiving parameters for generating a group traffic key from the base station, wherein the parameters include an authentication key for the group, a group security seed and a counter, performing a key derivation function to generate the group traffic key based on the identifier and the parameters and decrypting multicast data using the group traffic key.

Claims

1. A method for decrypting multicast data by a mobile station in a wireless communication system, the method comprising:

receiving an identifier of a group from a base station;

receiving parameters for generating a group traffic key from the base station, wherein the parameters include an authentication key for the group, a group security seed and a counter;

performing a key derivation function to generate the group traffic key based on the identifier and the parameters; and

decrypting multicast data using the group traffic key.

2. The method of claim 1, further comprising:

receiving a trigger message for updating the group traffic key from the base station;

performing the key derivation function to update the group traffic key based on updated parameters in the trigger message; and

decrypting the multicast data using the group traffic key updated.

3. The method of claim 2, wherein the updated parameters in the trigger message include the authentication key newly derived.

4. The method of claim 2, wherein the updated parameters in the trigger message include the group security seed is changed.

5. The method of claim 4, wherein the group security seed is changed when other device is unsubscribed from the group.

6. The method of claim 2, wherein the updated parameters in the trigger message include the counter incremented by 1.

7. The method of claim 1, wherein the identifier of the group is M2M (Machine to Machine) device group identifier.

8. The method of claim 7, further comprising:

transmitting, to the base station, control information indicating that M2M capability is enabled.

9. The method of claim 8, wherein the control information is transmitted during a basic capability negotiation procedure with the base station.