SECURE DEVICE-TO-DEVICE (D2D) COMMUNICATION

• US 20150326537A1
• Filed: 05/09/2014
• Published: 11/12/2015
• Est. Priority Date: 05/09/2014
• Status: Active Grant

• Current Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Original Assignee: Alcatel-Lucent SA (Nokia Corporation)
• Inventors: Cheng, Fang-Chen, Tatesh, Said
• Granted Patent: US 9,876,767 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 4/08 User group management
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/14 Direct-mode setup

Abstract

User equipment decrypt information received in a first frame over an air interface during device-to-device (D2D) communication with another user equipment. The information is decrypted using a cryptographic function that is applied to a security key and a first frame number of the first frame.

Claims

1. A method comprising:

decrypting, at a first user equipment, information received in a first frame over an air interface during device-to-device (D2D) communication with a second user equipment, wherein the information is decrypted using a cryptographic function that is applied to a security key and a first frame number of the first frame.

2. The method of claim 1, further comprising:

determining the first frame number of the first frame based on a reference frame number stored by the first user equipment, a corresponding reference time stored by the first user equipment, and a current time.

3. The method of claim 2, further comprising:

storing the reference frame number, the corresponding reference time, and the security key during activation of the first user equipment.

4. The method of claim 2, wherein determining the first frame number based on the current time comprises determining the first frame number based upon a current time indicated by at least one of a Global Positioning System (GPS) reference time, a Long Term Evolution (LTE) reference time, or a common reference time to discipline the local oscillator implemented in the first user equipment.

5. The method of claim 4, further comprising:

determining at least one transmission time of at least one of a D2D synchronization signal or a scheduling assignment message based on the current time, the first frame number, and pre-configured values of at least one transmission period and at least one transmission offset that are stored in the user equipment.

6. The method of claim 1, further comprising:

accessing the security key from a data structure stored in the first user equipment based on a D2D identifier associated with the D2D communication, wherein the data structure is to store a plurality of security keys associated with a corresponding plurality of D2D identifiers.

7. The method of claim 6, wherein accessing the security key comprises accessing at least one of a unicast security key shared with the second user equipment, a groupcast security key shared with a group of user equipment comprising the first user equipment and the second user equipment, and a public key.

8. The method of claim 7, further comprising:

decoding a scheduling assignment packet received by the first user equipment, wherein the scheduling assignment packet includes information indicating the D2D identifier associated with the D2D communication and resources allocated to subsequent data transmission comprising the first frame.

9. The method of claim 1, further comprising:

encrypting information for transmission in a second frame over the air interface during D2D communication using the cryptographic function applied to the security key and a second frame number of the second frame.

10. An apparatus comprising:

a processor to decrypt information received by a first user equipment in a first frame over an air interface during device-to-device (D2D) communication with a second user equipment, wherein the information is decrypted using a cryptographic function that is applied to a security key and a first frame number of the first frame.

11. The apparatus of claim 10, wherein the processor is to determine the first frame number of the first frame based on a reference frame number stored by the first user equipment, a corresponding reference time stored by the first user equipment, and a current time.

12. The apparatus of claim 11, further comprising:

at least one memory element to store the reference frame number, the corresponding reference time, and the security key during activation of the first user equipment.

13. The apparatus of claim 10, wherein the processor is to determine the first frame number based upon a current time indicated by at least one of a Global Positioning System (GPS) reference time, a Long Term Evolution (LTE) reference time, or a common reference time to discipline the local oscillator implemented in the first user equipment.

14. The apparatus of claim 13, wherein the processor is to determine at least one transmission time of at least one of a D2D synchronization signal or a scheduling assignment message based on the current time, the first frame number, and pre-configured values of at least one transmission period and at least one transmission offset that are stored in the user equipment.

15. The apparatus of claim 10, further comprising:

at least one data structure to store a plurality of security keys associated with a corresponding plurality of D2D identifiers, wherein the processor is to access the security key from the data structure based on a D2D identifier associated with the D2D communication.

16. The apparatus of claim 15, wherein the security key comprises at least one of a unicast security key shared with the second user equipment, a groupcast security key shared with a group of user equipment comprising the first user equipment and the second user equipment, and a public key.

17. The apparatus of claim 15, wherein the processor is to decode a scheduling assignment packet received by the first user equipment, wherein the scheduling assignment packet includes information indicating the D2D identifier associated with the D2D communication and resources allocated to subsequent data transmission comprising the first frame.

18. The apparatus of claim 10, wherein the processor is to encrypt information for transmission in a second frame over the air interface during D2D communication using the cryptographic function applied to the security key and a second frame number of the second frame.

19. A non-transitory computer readable storage medium embodying a set of executable instructions, the set of executable instructions to manipulate at least one processor to:

decrypt information received at a first user equipment in a first frame over an air interface during device-to-device (D2D) communication with a second user equipment, wherein the information is decrypted using a cryptographic function that is applied to a security key and a first frame number of the first frame.

20. The non-transitory computer readable storage medium of claim 19, wherein the set of executable instructions is to manipulate the at least one processor to determine the first frame number of the first frame based on a reference frame number stored by the first user equipment, a corresponding reference time stored by the first user equipment, and a current time.

21. The non-transitory computer readable storage medium of claim 19, wherein the set of executable instructions is to manipulate the at least one processor to store a plurality of security keys associated with a corresponding plurality of D2D identifiers in a data structure in the first user equipment and access the security key from the data structure based on a D2D identifier associated with the D2D communication.

22. The non-transitory computer readable storage medium of claim 19, wherein the set of executable instructions is to manipulate the at least one processor to encrypt information for transmission in a second frame over the air interface during D2D communication using the cryptographic function applied to the security key and a second frame number of the second frame.