Method, apparatus and system for binding MTC device and UICC

• US 20140244994A1
• Filed: 01/16/2012
• Published: 08/28/2014
• Est. Priority Date: 11/11/2011
• Status: Active Grant

• Current Assignee: Eight Deer Ventures LLC (Markman Advisors)
• Original Assignee: ZTE Corporation
• Inventors: Yu, Wantao
• Granted Patent: US 9,158,549 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/48 using secure binding, e.g. securely binding identity modules to devices, services or applications
• CPC Class Codes: H04W 12/71 Hardware identity
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

A method for binding a Machine Type Communication (MTC) device and a Universal Integrated Circuit Card (UICC) is disclosed. The method includes: during a process of establishment of a shared key, a Network Application Function (NAF) acquires identity information of the MTC device and identity information of the UICC (101); the NAF establishes a binding relationship between the MTC device and the UICC based on the identity information of the MTC device and the identity information of the UICC, and stores the binding relationship into a binding relationship table stored by the NAF (102). An apparatus and system for binding an MTC device and a UICC and a method and system for establishing a shared key between an MTC device and a UICC are further disclosed, such that the binding relationship between the MTC device and the UICC will not be limited by the life cycle of the shared key when the binding between the MTC device and the UICC is implemented in the manner of Generic Bootstrapping Architecture (GBA) with UICC-based enhancements (GBA-U), thus ensuring the security in use of the MTC device and the UICC.

Claims

1. A method for binding a Machine Type Communication (MTC) device and a Universal Integrated Circuit Card (UICC), comprising:

acquiring, by a Network Application Function (NAF), identity information of the MTC device and identity information of the UICC during a process of establishment of a shared key; and

establishing, by the NAF, a binding relationship between the MTC device and the UICC based on the identity information of the MTC device and the identity information of the UICC, and storing the binding relationship into a binding relationship table stored by the NAF.

2. The method according to claim 1, wherein,

the process of establishment of the shared key is a process of establishing the shared key in the manner of Generic Bootstrapping Architecture (GBA) with UICC-based enhancements (GBA-U).

3. The method according to claim 1, wherein the establishing, by the NAF, a binding relationship between the MTC device and the UICC based on the identity information of the MTC device and the identity information of the UICC comprises:

searching for, by the NAF, a binding relationship of the MTC device and a binding relationship of the UICC based on the identity information of the UICC and the identity information of the MTC device, and establishing the binding relationship between the MTC device and the UICC when there is no binding relationship between the MTC device and the UICC, there is no binding relationship between the MTC device and other UICCs and there is no binding relationship between the UICC and other MTC devices.

4. The method according to claim 1, wherein

the identity information of the MTC device comprises one or more of the followings:

identification of the MTC device, International Mobile Equipment Identity (IMEI) of the MTC device, an International Mobile Equipment Identity Software Version (IMEISV) of the MTC device, and application identification of the MTC device;

the identity information of the UICC comprises one or more of the followings;

Integrate Circuit Card Identity (ICCID) of the UICC, identity information of a Universal Subscriber Identity Module (USIM) on the UICC, and application identification of the UICC; and

the establishing the binding relationship between the MTC device and the UICC comprises;

establishing a corresponding relationship between any one or more of the identity information of the MTC device and any one or more of the identity information of the UICC.

5. The method according to claim 1, further comprising:

updating, by the NAF, the binding relationship table stored by the NAF according to user requirement.

14. The method according to claim 3, wherein

the identity information of the MTC device comprises one or more of the followings:

identification of the MTC device, International Mobile Equipment Identity (IMEI) of the MTC device, an International Mobile Equipment Identity Software Version (IMEISV) of the MTC device, and application identification of the MTC device;

the identity information of the UICC comprises one or more of the followings;

Integrate Circuit Card Identity (ICCID) of the UICC, identity information of a Universal Subscriber Identity Module (USIM) on the UICC, and application identification of the UICC; and

the establishing the binding relationship between the MTC device and the UICC comprises;

establishing a corresponding relationship between any one or more of the identity information of the MTC device and any one or more of the identity information of the UICC.

15. The method according to claim 2, further comprising:

updating, by the NAF, the binding relationship table stored by the NAF according to user requirement.

16. The method according to claim 3, further comprising:

updating, by the NAF, the binding relationship table stored by the NAF according to user requirement.

6. A method for establishing a shared key between a Machine Type Communication (MTC) device and a Universal Integrated Circuit Card (UICC), comprising:

receiving, by a Network Application Function (NAF), a service request including identity information of the MTC device and identity information of the UICC from the MTC device;

searching for, by the NAF, a binding relationship of the MTC device and a binding relationship of the UICC from a binding relationship table stored by the NAF based on the identity information of the MTC device and the identity information of the UICC; and

when there is a binding relationship between the MTC device and the UICC, generating, by the NAF, a shared key used for secure communication between the MTC device and the UICC, determining a life cycle of the shared key, and returning the shared key and the life cycle of the shared key to the MTC device.

7. An apparatus for implementing binding between a Machine Type Communication (MTC) device and a Universal Integrated Circuit Card (UICC), comprising:

an acquisition unit, a binding unit and a storage unit, wherein

the acquisition unit is configured to acquire identity information of the MTC device and identity information of the UICC during a process of establishment of a shared key;

the binding unit is configured to establish, based on the identity information of the MTC device and the identity information of the UICC acquired by the acquisition unit, a binding relationship between the MTC device and the UICC, and store the binding relationship into a binding relationship table in the storage unit; and

the storage unit is configured to store the binding relationship table.

8. The apparatus according to claim 7, wherein the acquisition unit is configured to, during the process of establishing the shared key in the manner of Generic Bootstrapping Architecture (GBA) with UICC-based enhancements (GBA-U), acquire the identity information of the MTC device and the identity information of the UICC.

9. The apparatus according to claim 7, wherein the binding unit is configured to search for, based on the identity information of the UICC and the identity information of the MTC device acquired by the acquisition unit, a binding relationship of the MTC device and a binding relationship of the UICC from the binding relationship table stored in the storage unit, and establish the binding relationship between the MTC device and the UICC when there is no binding relationship between the MTC device and the UICC, there is no binding relationship between the MTC device and other UICCs and there is no binding relationship between the UICC and other MTC devices.

10. The apparatus according to claim 7, wherein

the identity information of the MTC device comprises one or more of the followings:

identification of the MTC device, International Mobile Equipment Identity (IMEI) of the MTC device, an International Mobile Equipment Identity Software Version (IMEISV) of the MTC device, and application identification of the MTC device;

the identity information of the UICC comprises one or more of the followings;

Integrate Circuit Card Identity (ICCID) of the UICC, identity information of a Universal Subscriber Identity Module (USIM) on the UICC, and application identification of the UICC; and

the binding unit is further configured to establish a corresponding relationship between any one or more of the identity information of the MTC device and any one or more of the identity information of the UICC.

11. A system for implementing binding between a Machine Type Communication (MTC) device and a Universal Integrated Circuit Card (UICC), comprising:

the MTC device, the UICC and a Network Application Function (NAF), and the NAF comprises an acquisition unit, a binding unit and a storage unit, wherein

the acquisition unit is configured to, during a process of establishment of a shared key, acquire identity information of the MTC device and identity information of the UICC from the MTC device after the MTC device acquires the identity information of the UICC from the UICC;

the binding unit is configured to establish, based on the identity information of the MTC device and the identity information of the UICC acquired by the acquisition unit, a binding relationship between the MTC device and the UICC, and store the binding relationship into a binding relationship table in the storage unit; and

the storage unit is configured to store the binding relationship table.

12. The system according to claim 11, wherein,

the identity information of the MTC device comprises one or more of the followings:

identification of the MTC device, International Mobile Equipment Identity (IMEI) of the MTC device, an International Mobile Equipment Identity Software Version (IMEISV) of the MTC device, and application identification of the MTC device;

the identity information of the UICC comprises one or more of the followings;

Integrate Circuit Card Identity (ICCID) of the UICC, identity information of a Universal Subscriber Identity Module (USIM) on the UICC, and application identification of the UICC; and

the binding unit is further configured to establish a corresponding relationship between any one or more of the identity information of the MTC device and any one or more of the identity information of the UICC.

13. A system for establishing a shared key between a Machine Type Communication (MTC) device and a Universal Integrated Circuit Card (UICC), comprising:

the MTC device, the UICC and a Network Application Function (NAF), wherein

the MTC device is configured to interact with the UICC, initiate establishment of the shared key, and acquire identity information of the UICC from the UICC; and

the NAF is configured to;

receive a service request including identity information of the MTC device and the identity information of the UICC from the MTC device, search for, based on the identity information of the MTC device and the identity information of the UICC, a binding relationship of the MTC device and a binding relationship of the UICC from a binding relationship table stored by the NAF; and

when there is a binding relationship between the MTC device and the UICC, generate a shared key used for secure communication between the MTC device and the UICC, obtain a life cycle of the shared key, and return the shared key and the life cycle of the shared key to the MTC device.