SECURITY FOR PROSE GROUP COMMUNICATION

• US 20170359322A1
• Filed: 08/03/2017
• Published: 12/14/2017
• Est. Priority Date: 06/28/2013
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: ZHANG, Xiaowei, PRASAD, Anand Raghawa
• Granted Patent: US 10,574,635 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/104 Location integrity, e.g. secure geotagging
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/108 Source integrity
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 76/14 Direct-mode setup

Abstract

A method of performing authentication and authorization in Proximity based Service (ProSe) communication by a requesting device (31) which sends a request of a communication and a receiving device (32) which receives the request from the requesting device (31) and (32), the method including deriving session keys Kpc and Kpi from an unique key Kp at the requesting and receiving devices (31) and (32), using the session keys Kpc and Kpi for ProSe communication setup and direct communication between the requesting and receiving devices (31) and (32), starting the direct communication with the requesting and receiving devices (31) and (32). The key Kpc is confidentiality key and the key Kpi is integrity protection key.

Claims

1-7. -7. (canceled)

8. A UE (User Equipment) for one-to-one direct communication, comprising:

a receiver configured to receive a request including an information from another UE; and

a controller configured to perform integrity check based on the received information, and perform the one-to-one direct communication with the another UE using an encryption key and an integrity key if the check passes.

9. The UE according to claim 8, wherein the information includes a security algorithm.

10. The UE according to claim 8, wherein the information includes an identifier of security key.

11. The UE according to claim 8, wherein the UE and the another UE support ProSe (Proximity Services).

12. The UE according to claim 8, wherein the UE and the another UE get an authorization from a network including at least a ProSe (Proximity Services) Function and a ProSe application server.

13. The UE according to claim 8, wherein the UE and the another UE perform mutual authentication.

14. A UE (User Equipment) for one-to-many direct communication, comprising:

a receiver configured to receive an information from a network if a check of security algorithm in the network is successful; and

a controller configured to perform the one-to-many direct communication with other UEs, which received the information, using an encryption key.

15. The UE according to claim 14, wherein the information includes a security key for a group.

16. The UE according to claim 14, wherein the encryption key is derived from a group key.

17. The UE according to claim 14, wherein the UE and the other UEs support ProSe (Proximity Services).

18. The UE according to claim 14, wherein the UE and the other UEs get an authorization from the network including at least a ProSe (Proximity Services) Function and a ProSe application server.

19. The UE according to claim 14, wherein the UE and the other UEs form the group.

20. A communication method of a UE (User Equipment) for one-to-one direct communication, comprising:

receiving a request including an information from another UE;

performing integrity check based on the received information; and

performing the one-to-one direct communication with the another UE using an encryption key and an integrity key if the check passes.

21. The communication method according to claim 20, wherein the information includes a security algorithm.

22. The communication method according to claim 20, wherein the information includes an identifier of security key.

23. The communication method according to claim 20, wherein the UE and the another UE support ProSe (Proximity Services).

24. The communication method according to claim 20, wherein the UE and the another UE get an authorization from a network including at least a ProSe (Proximity Services) Function and a ProSe application server.

25. The communication method according to claim 20, wherein the UE and the another UE perform mutual authentication.

26. A communication method of a UE (User Equipment) for one-to-many direct communication, comprising:

receiving an information from a network if a check of security algorithm in the network is successful; and

performing one-to-many direct communication with other UEs, which received the information, using an encryption key.

27. The communication method according to claim 26, wherein the information includes a security key for a group.

28. The communication method according to claim 26, wherein the encryption key is derived from a group key.

29. The communication method according to claim 26, wherein the UE and the other UEs support ProSe (Proximity Services).

30. The communication method according to claim 26, wherein the UE and the other UEs get an authorization from the network including at least a ProSe (Proximity Services) Function and a ProSe application server..

31. The communication method according to claim 26, wherein the UE and the other UEs form the group.