AUTHENTICATION IN DEVICE TO DEVICE DISCOVERY

• US 20160302062A1
• Filed: 03/05/2015
• Published: 10/13/2016
• Est. Priority Date: 03/21/2014
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: NORRMAN, Karl, LEHTOVIRTA, Vesa, WIFVESSON, Monica
• Granted Patent: US 10,064,053 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

There is provided a method for authentication in device to device discovery. A method performed by a Discoverer device, comprises broadcasting a direct discovery request, receiving a direct discovery response from a Discoveree device, the direct discovery response comprising a first token, and obtaining a determination of whether the first token was generated for the Discoveree device or not.

Claims

1. A method for authentication in device to device discovery, the method being performed by a Discoverer device, comprising:

broadcasting, by the Discoverer device, a direct discovery request;

receiving, at the Discovery device, a direct discovery response from a Discoveree device, the direct discovery response comprising a first token; and

obtaining, by the Discovery device, a determination of whether the first token was generated for the Discoveree device or not.

2. The method according to claim 1, wherein the first token is generated by a network node.

3. The method according to claim 1, wherein the first token is generated by the Discoveree device.

4. The method according to claim 1, wherein the determination comprises comparing the first token to a second token of the Discoverer device.

5. The method according to claim 4, wherein the second token is generated by a network node.

6. The method according to claim 5, wherein the second token is generated by the Discoverer device.

7. The method according to claim 4, wherein the determination is generated by the Discoverer device.

8. The method according to claim 4, wherein the generation of the determination comprises:

querying a network node to decide whether the first token was generated for the Discoveree device or not.

9. The method according to claim 1, wherein the direct discovery response comprises at least two broadcasted identifiers, one of which is encrypted.

10. The method according to claim 1, wherein the direct discovery request comprises at least two broadcasted identifiers, one of which is encrypted.

11. The method according to claim 1, further comprising, if determined that the first token was generated for the Discoveree device:

enabling exchange of data messages in direct communication with the Discoveree device.

12. The method according to claim 1, further comprising, if determined that the first token was generated for the Discoveree device:

preventing exchange of data messages in direct communication with the Discoveree device.

13. The method according to claim 1, wherein the generation of the first token comprises using any of a Discovery security key, a Group security key, and a security key shared between Discoverer device and the Discoveree device.

14. The method according to claim 13, wherein the Discovery security key is shared by the Discoverer device and a network node, wherein the Discovery key is shared by the Discoverer device and the Discoveree device, and wherein the Group key is shared by all Group members part of the same Group.

15. A method for authentication in device to device discovery, the method being performed by a Discoveree device, comprising:

receiving, at the Discoveree device, a broadcasted direct discovery request from a Discoverer device;

transmitting, by the Discoveree device, a direct discovery response to the Discoverer device, the direct discovery response comprising a first token.

16. The method according to claim 15, further comprising:

requesting a network node to generate the first token; and

receiving the first token from the network node prior to transmitting the direct discovery response.

17. The method according to claim 15, further comprising:

generating the first token prior to transmitting the direct discovery response.

18. A method for authentication in device to device discovery, the method being performed by a network node, comprising:

receiving a request to generate a first token from a Discoveree device;

generating the first token;

transmitting the first token to the Discoveree device;

receiving a request from a Discoverer device to determine whether the first token was generated for the Discoveree device or not;

performing a determination of whether the first token was generated for the Discoveree device or not; and

transmitting a result of the determination to the Discoverer device.

19. The method according to claim 18, further comprising:

receiving a request to generate a second token from the Discoverer device;

generating the second token; and

performing the determination by comparing the first token to the second token.

20. The method according to claim 19, further comprising:

transmitting the second token to the Discoverer device.

21. A wireless device for authentication in device to device discovery, the wireless device comprising a processing unit and a non-transitory computer readable storage medium, said non-transitory computer readable storage medium comprising instructions executable by said processing unit whereby said wireless device is operative to:

broadcast a direct discovery request;

receive a direct discovery response from a Discoveree device, the direct discovery response comprising a first token; and

obtain a determination of whether the first token was generated for the Discoveree device or not.

22. A wireless device for authentication in device to device discovery, the wireless device comprising a processing unit and a non-transitory computer readable storage medium, said non-transitory computer readable storage medium comprising instructions executable by said processing unit whereby said wireless device is operative to:

receive a broadcasted direct discovery request from a Discoverer device;

transmit a direct discovery response to the Discoverer device, the direct discovery response comprising a first token.

23. A network node for authentication in device to device discovery, the network node comprising a processing unit and a non-transitory computer readable storage medium, said non-transitory computer readable storage medium comprising instructions executable by said processing unit whereby said network node is operative to:

receive a request to generate a first token from a Discoveree device;

generating the first token;

transmit the first token to the Discoveree device;

receiving a request from a Discoverer device to determine whether the first token was generated for the Discoveree device or not;

perform a determination of whether the first token was generated for the Discoveree device or not; and

transmit a result thereof to the Discoverer device.

24. A computer program product comprising a non-transitory computer readable medium storing a computer program for authentication in device to device discovery, the computer program comprising computer code which, when run on a wireless device, causes the wireless device to:

broadcast a direct discovery request;

receive a direct discovery response from a Discoveree device, the direct discovery response comprising a first token; and

obtain a determination of whether the first token was generated for the Discoveree device or not.

25. A computer program product comprising a non-transitory computer readable medium storing a computer program for authentication in device to device discovery, the computer program comprising computer code which, when run on a wireless device, causes the wireless device to:

receive a broadcasted direct discovery request from a Discoverer device (11a);

transmit a direct discovery response to the Discoverer device, the direct discovery response comprising a first token.

26. A computer program product comprising a non-transitory computer readable medium storing a computer program for authentication in device to device discovery, the computer program comprising computer code which, when run on a network node, causes the network node to:

receive a request to generate a first token from a Discoveree device;

generating the first token;

transmit the first token to the Discoveree device;

receiving a request from a Discoverer device to determine whether the first token was generated for the Discoveree device or not;

perform a determination of whether the first token was generated for the Discoveree device or not; and

transmit a result thereof to the Discoverer device.

27. (canceled)