AUTHENTICATION IN DEVICE TO DEVICE DISCOVERY

• US 20180295515A1
• Filed: 06/07/2018
• Published: 10/11/2018
• Est. Priority Date: 03/21/2014
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: LEHTOVIRTA, Vesa, NORRMAN, Karl, WIFVESSON, Monica
• Granted Patent: US 11,516,659 B2
• Time in Patent Office: Days
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 76/10 Connection setup
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

There is provided a method for authentication in device to device discovery. A method performed by a Discoverer device, comprises broadcasting a direct discovery request, receiving a direct discovery response from a Discoveree device, the direct discovery response comprising a first token, and obtaining a determination of whether the first

Claims

1. A method for device authorization in device to device discovery, the method being performed by a discoverer device, comprising:

broadcasting, by the discoverer device, a direct discovery request, the direct discovery request comprising an application identifier;

the discoverer device receiving a direct discovery response transmitted by a discoveree device, wherein the direct discovery response comprises;

i) the application identifier, ii) a discoveree device identifier or an encrypted version thereof, and iii) a first token for verifying that the discoveree device is authorized to respond to the direct discovery request, and further wherein the discoveree device transmitted the direct discovery response as a result of the discoveree device receiving the direct discovery request and determining, based on the application identifier included in the direct discovery request, to respond to the direct discovery request; and

the discoverer device using the first token to verify that the discoveree device is authorized to respond to the direct discovery request.

2. The method according to claim 1, wherein the first token is generated by a network node.

3. The method according to claim 1, wherein the first token is generated by the discoveree device.

4. The method according to claim 1, wherein using the first token to verify that the discoveree device is authorized to respond to the direct discovery request comprises comparing the first token to a second token.

5. The method according to claim 4, wherein the second token is generated by a network node.

6. The method according to claim 4, wherein the second token is generated by the discoverer device.

7. The method according to claim 4, wherein the comparing is performed by the discoverer device.

8. The method according to claim 1, wherein using the first token to verify that the discoveree device is authorized to respond to the direct discovery request comprises:

the discoverer device querying a network node to decide whether the first token was generated for the discoveree device.

9. The method according to claim 1, wherein the direct discovery response comprises the first token, an application identifier, and an encrypted discoveree device identifier, said discoveree device identifier identifying the discoveree device.

10. The method according to claim 9, wherein the direct discovery request comprises the application identifier and an encrypted discoverer device identifier, said discoverer device identifier identifying the discoverer device.

11. The method according to claim 10, wherein using the first token to verify that the discoveree device is authorized to respond to the direct discovery request comprises determining whether a second token matches the first token, wherein the second token is generated using the application identifier, a security key, and the discoveree device identifier.

12. The method according to claim 1, further comprising:

prior to broadcasting the direct discovery request, the discoverer device transmitting to a network node a discovery request message requesting permission to announce an application identifier on a Public Land Mobile Network (PLMN); and

the discoverer device receiving a discovery response message transmitted by the network node, the discovery response message comprising;

i) an application identifier that the network node has determined may be announced by the discoverer device and ii) a security key, wherein

the direct discover request broadcasted by the discoverer device comprises the application identifier that was included in the discovery response message transmitted by the network device,

the direct discovery response transmitted by the discoveree device also comprises the application identifier, and

the step of using the first token to verify that the discoveree device is authorized to respond to the direct discovery request comprises the discoverer device using the security key to generate a second token and discoverer device comparing the second token with the first token to determine whether the tokens are equal.

13. The method according to claim 1, wherein the generation of the first token comprises using any of a discovery security key, a group security key, and a security key shared between discoverer device and the discoveree device.

14. The method according to claim 13, wherein the discovery security key is shared by the discoverer device and a network node, wherein the discovery key is shared by the discoverer device and the discoveree device, and wherein the group key is shared by all group members part of the same group.

15. A method for authentication in device to device discovery, the method being performed by a discoveree device, comprising:

receiving, at the discoveree device, a broadcasted direct discovery request transmitted by a discoverer device, the direct discovery request comprising an application identifier; and

transmitting, by the discoveree device, a direct discovery response to the discoverer device, the direct discovery response comprising;

i) the application identifier, ii) a discoveree device identifier or an encrypted version thereof, and iii) a first token for verifying that the discoveree device is authorized to respond to the direct discovery request, wherein

the discoveree device transmits the direct discovery response to the discoverer device as a result of the discoveree device receiving the direct discovery request and determining, based on the application identifier included in the direct discovery request, to respond to the direct discovery request.

16. The method according to claim 15, further comprising:

requesting a network node to generate the first token; and

receiving the first token from the network node prior to transmitting the direct discovery response.

17. The method according to claim 15, further comprising:

generating the first token prior to transmitting the direct discovery response.

18. A wireless device for authentication in device to device discovery, the wireless device comprising a processing unit and a non-transitory computer readable storage medium, said non-transitory computer readable storage medium comprising instructions executable by said processing unit whereby said wireless device is operative to:

broadcast a direct discovery request, the direct discovery request comprising an application identifier;

receive a direct discovery response transmitted by a discoveree device, wherein the direct discovery response comprises;

i) the application identifier, ii) a discoveree device identifier or an encrypted version thereof, and iii) a first token for verifying that the discoveree device is authorized to respond to the direct discovery request, and further wherein the discoveree device transmitted the direct discovery response as a result of the discoveree device receiving the direct discovery request and determining, based on the application identifier included in the direct discovery request, to respond to the direct discovery request; and

use the first token to verify that the discoveree device is authorized to respond to the direct discovery request.

19. A wireless device for authentication in device to device discovery, the wireless device comprising a processing unit and a non-transitory computer readable storage medium, said non-transitory computer readable storage medium comprising instructions executable by said processing unit whereby said wireless device is operative to:

receive a broadcasted direct discovery request transmitted by a discoverer device, the direct discovery request comprising an application identifier; and

transmit a direct discovery response to the discoverer device, the direct discovery response comprising;

i) the application identifier, ii) a discoveree device identifier or an encrypted version thereof, and iii) a first token for verifying that the discoveree device is authorized to respond to the direct discovery request, wherein

the wireless device is configured such that the wireless device transmits the direct discovery response to the discoverer device as a result of the wireless device receiving the direct discovery request and determining, based on the application identifier included in the direct discovery request, to respond to the direct discovery request.

20. A computer program product comprising a non-transitory computer readable medium storing a computer program for authentication in device to device discovery, the computer program comprising computer code which, when run on a wireless device, causes the wireless device to:

broadcast a direct discovery request, the direct discovery request comprising an application identifier;

receive a direct discovery response transmitted by a discoveree device, wherein the direct discovery response comprises;

i) the application identifier, ii) a discoveree device identifier or an encrypted version thereof, and iii) a first token for verifying that the discoveree device is authorized to respond to the direct discovery request, and further wherein the discoveree device transmitted the direct discovery response as a result of the discoveree device receiving the direct discovery request and determining, based on the application identifier included in the direct discovery request, to respond to the direct discovery request; and

use the first token to verify that the discoveree device is authorized to respond to the direct discovery request.

21. A computer program product comprising a non-transitory computer readable medium storing a computer program for authentication in device to device discovery, the computer program comprising computer code which, when run on a wireless device, causes the wireless device to:

receive a broadcasted direct discovery request transmitted by a discoverer device, the direct discovery request comprising an application identifier; and

transmit a direct discovery response to the discoverer device, the direct discovery response comprising;

i) the application identifier, ii) a discoveree device identifier or an encrypted version thereof, and iii) a first token for verifying that the discoveree device is authorized to respond to the direct discovery request, wherein

the computer program is configured such that the wireless device transmits the direct discovery response to the discoverer device as a result of the wireless device receiving the direct discovery request and determining, based on the application identifier included in the direct discovery request, to respond to the direct discovery request.