SECURITY MANAGEMENT METHOD AND APPARATUS FOR GROUP COMMUNICATION IN MOBILE COMMUNICATION SYSTEM

• US 20150244720A1
• Filed: 09/27/2013
• Published: 08/27/2015
• Est. Priority Date: 09/27/2012
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Suh, Kyung-Joo
• Granted Patent: US 9,894,065 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 4/08 User group management
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

The present invention relates to a security management method and an apparatus for group communication when a terminal interacts and communicates with a mobile communication system. The security management method for group communication performed in a server, which manages the group communication in the mobile communication system according to one embodiment of the present invention, includes the steps of: generating a session security key for session protection in the group communication, and mapping the session security key to a group identifier for identifying a specific group to which a terminal using the group communication belongs; transmitting the group identifier and the session security key to the terminal; and generating a traffic key for protecting traffic and transmitting the group identifier and the traffic key to the terminal.

Claims

1. A security management method for group communication performed in a server that manages group communication in a mobile communication system, the method comprising:

generating a session security key for session protection in the group communication, and mapping the session security key to a group identity for identifying a specific group to which a User Equipment (UE) using the group communication belongs;

transmitting the group identity and the session security key to the UE; and

generating a traffic key for protection of traffic, and transmitting the group identity and the traffic key to the UE.

2. The security management method of claim 1, further comprising:

receiving group information for the group communication from the UE; and

assigning a group identity corresponding to the group information.

3. The security management method of claim 2, wherein the group information includes information about at least one of an area and a cell to which the UE belongs.

4. The security management method of claim 1, further comprising receiving the group identity from the UE, conditioned upon the UE knowing the group identity.

5. The security management method of claim 1, further comprising:

in response to receiving a Machine Type Communication (MTC) security function identity and the group information from the UE that uses MTC, transmitting the group information to another server that generates a security key related to use of an application; and

receiving the security key related to use of the application and a session key of the application from said another server.

6. The security management method of claim 1, wherein the session security key is used for each UE during deciphering of the traffic key.

7. A server for managing group communication in a mobile communication system, the server comprising:

a communication interface configured to transmit and receive various information for the group communication; and

a controller configured to control generating a session security key for session protection in the group communication, to map the session security key to a group identity for identifying a specific group to which a User Equipment (UE) using the group communication belongs, to control transmitting the group identity and the session security key to the UE, to generate a traffic key for protection of traffic, and to control transmitting the group identity and the traffic key to the UE.

17. The server of claim 7, wherein the controller is configured to receive, via the communication interface, group information for the group communication from the UE;

and assign a group identity corresponding to the group information.

18. The server of claim 17, wherein the group information includes information about at least one of an area and a cell to which the UE belongs.

19. The server of claim 7, wherein the controller is configured to receive, via the communication interface, the group identity from the UE, conditioned upon the UE knowing the group identity.

20. The server of claim 7, wherein the controller is configured to transmit, via the communication interface, in response to receiving a Machine Type Communication (MTC) security function identity and the group information from the UE that uses MTC, the group information to another server that generates a security key related to use of an application;

and receive, via the communication interface, the security key related to use of the application and a session key of the application from said another server.

21. The server of claim 7, wherein the session security key is used for each UE during deciphering of the traffic key.

8. (canceled)

9. A security management method performed in a User Equipment (UE) that uses group communication in a mobile communication system, the method comprising:

transmitting information about a specific group to which the UE using the group communication belongs, to a server that manages the group communication;

receiving each of a session security key for the group communication and a traffic key for protection of traffic from the server that has received the information about the specific group;

deciphering the traffic key using the received session security key; and

performing the group communication through the server using the deciphered traffic key.

10. The security management method of claim 9, wherein the information about the specific group to which the UE belongs includes information about at least one of an area and a cell to which the UE belongs.

11. The security management method of claim 9, wherein the information about the specific group to which the UE belongs includes a group identity corresponding to the specific group.

12. The security management method of claim 9, wherein the receiving further comprises receiving an assigned group identity from the server based on the information about the specific group.

13. A User Equipment (UE) that uses group communication in a mobile communication system, the UE comprises:

a transceiver configured to transmit and receive various information related to the group communication; and

a controller configured to control transmitting information about a specific group to which the UE using the group communication belongs, to a server that manages the group communication, to control receiving each of a session security key for the group communication and a traffic key for protection of traffic from the server that has received the information about the specific group, to decipher the traffic key using the received session security key, and to control performing the group communication through the server using the deciphered traffic key.

14. The UE of claim 13, wherein the information about the specific group to which the UE belongs includes information about at least one of an area and a cell to which the UE belongs.

15. The UE of claim 13, wherein the information about the specific group to which the UE belongs includes a group identity corresponding to the specific group.

16. The UE of claim 13, wherein the controller is configured to receive, via the transceiver, an assigned group identity from the server based on the information about the specific group.