Method and related device for generating group key

• US 9,775,028 B2
• Filed: 04/29/2014
• Issued: 09/26/2017
• Est. Priority Date: 11/01/2011
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Zhang, Lijia, Chen, Jing, Xu, Yixian
• Primary Examiner(s): Gee, Jason K
• Application Number:
  US14/264,587
• Publication Number:
  US 20140233736A1
• Time in Patent Office: 1,246 Days
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 4/08 User group management
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Embodiments of the present invention provide a method and a related device for generating a group key. The method includes: obtaining a group ID of a group where a machine type communication MTC device is located; obtaining a group communication root key corresponding to the group ID; generating a group key corresponding to the group ID according to the group communication root key; and sending the group key encrypted by using an access stratum key of the MTC device to the MTC device, so that the MTC device obtains the group key through decryption according to the access stratum key of the MTC device. According to the foregoing technical solutions, a base station may allocate, to an MTC device, a group key corresponding to a group where the MTC device is located.

Claims

1. A method for generating a group key, comprising:

obtaining a group ID of a group to which a machine type communication MTC device of a plurality of MTC devices belongs;

obtaining a group communication root key corresponding to the group ID of the group to which the MTC device of the plurality of MTC devices belongs;

generating a group key corresponding to the group ID according to the group communication root key;

sending the group key encrypted by using an access stratum key of the MTC device to the MTC device, so that the MTC device obtains the group key through decryption according to the access stratum key of the MTC device; and

using the group key to encrypt normal communication with the plurality of MTC devices belonging to the group by the MTC device,

wherein the obtaining the group ID of the group to which the MTC device belongs comprises;

receiving, from a mobility management entity MME, a service ID and a service root key corresponding to the service ID, wherein the service ID is a service ID of a service of the MTC device, which is sent to the MME by the MTC device, and the service root key is generated, according to a random number and a set key corresponding to the service ID, by an HSS to which the MTC device belongs, or the service root key is generated according to the random number, the service ID and an exclusive key of one MTC device by the HSS when the HSS receives the service ID from the one MTC device that is forwarded by the MME, and the HSS sends the service root key to the MME; and

determining, according to the service ID, the group ID of the group to which the MTC device belongs; and

the obtaining the group communication root key corresponding to the group ID comprises;

generating the group communication root key corresponding to the group ID according to the service root key.

2. The method according to claim 1, wherein the obtaining a group ID of a group to which an MTC device belongs comprises:

grouping the MTC device into a group corresponding to the group ID;

or

obtaining, from another network element, the group ID of the group to which the MTC device belongs.

3. The method according to claim 1, wherein the obtaining a group communication root key corresponding to the group ID comprises:

selecting the MTC device from the plurality of MTC devices with the group ID, and

determining the group communication root key corresponding to the group ID according to a key of the selected MTC device;

or

receiving the group communication root key corresponding to the group ID from a mobility management entity MME, wherein the MME groups the MTC device into the group corresponding to the group ID, selects the MTC device from the plurality of the MTC devices with the group ID, and determines the group communication root key corresponding to the group ID according to a key of the selected MTC device, or the MME determines the group communication root key corresponding to the group ID according to a random number generated by the MME;

or

generating a random number, and determining the group communication root key corresponding to the group ID according to the random number.

4. The method according to claim 1, wherein the obtaining a group ID of a group to which an MTC device belongs, and obtaining a group communication root key corresponding to the group ID comprises:

receiving the group ID and the group communication root key from a mobility management entity MME, wherein the group communication root key is generated, according to a random number and a set key corresponding to the group ID, by a home subscriber system HSS to which the MTC device belongs, or the group communication root key is generated according to the random number, the group ID and an exclusive key of one MTC device by the HSS when the HSS receives the group ID from the one MTC device that is forwarded by the MME, and the HSS sends the group communication root key to the MME.

5. The method according to claim 1, wherein after the generating a group key corresponding to the group ID according to the group communication root key, the method further comprises:

binding and storing the group communication root key, the group key and the group ID;

when it is determined that another MTC device belongs to the group corresponding to the group ID, obtaining the bound group key according to the group ID; and

sending the group key encrypted by using an access stratum key of the another MTC device to the another MTC device, so that the another MTC device obtains the group key through decryption according to the access stratum key of the another MTC device.

6. A base station, comprising:

a processor, configured to obtain a group ID of a group to which a machine type communication MTC device of a plurality of MTC devices belongs;

the processor, configured to obtain a group communication root key corresponding to the group ID of the group to which the MTC device of the plurality of MTC devices belongs;

the processor, configured to generate a group key corresponding to the group ID according to the group communication root key; and

a transmitter configured to send the group key encrypted by using an access stratum key of the MTC device to the MTC device, so that the MTC device obtains the group key through decryption according to the access stratum key of the MTC device; and

the MTC device configured to encrypt communications with the plurality of MTC devices belonging to the group using the group key,

wherein the processor specifically is configured to;

receive, from a mobility management entity MME, a service ID and a service root key corresponding to the service ID, wherein the service ID is a service ID of a service of the MTC device, which is sent to the MME by the MTC device, and the service root key is generated, according to a random number and a set key corresponding to the service ID, by an HSS to which the MTC device belongs, or the service root key is generated according to the random number, the service ID and an exclusive key of one MTC device by the HSS when the HSS receives the service ID from the one MTC device that is forwarded by the MME, and the HSS sends the service root key to the MME; and

determine, according to the service ID, the group ID of the group to which the MTC device belongs; and

generate the group communication root key corresponding to the group ID according to the service root key.

7. The base station according to claim 6, wherein the processor is configured to group the MTC device into a group corresponding to the group ID;

or obtain, from another network element, the group ID of the group to which the MTC device belongs.

8. The base station according to claim 6, wherein the processor is configured to:

select the MTC device from the plurality of MTC devices with the group ID, and determine the group communication root key corresponding to the group ID according to a key of the selected MTC device;

or

receive the group communication root key corresponding to the group ID from a mobility management entity MME, wherein the MME groups the MTC device into the group corresponding to the group ID, selects the MTC device from the plurality of MTC devices with the group ID, and determines the group communication root key corresponding to the group ID according to a key of the selected MTC device, or the MME determines the group communication root key corresponding to the group ID according to a random number generated by the MME;

or

generate a random number, and determine the group communication root key corresponding to the group ID according to the random number.

9. The base station according to claim 6, further comprising:

a receiver, configured to, receive the group ID and the group communication root key from a mobility management entity MME, wherein the group communication root key is generated, according to a random number and a set key corresponding to the group ID, by a home subscriber system HSS to which the MTC device belongs, or the group communication root key is generated according to the random number, the group ID and an exclusive key of one MTC device by the HSS when the HSS receives the group ID from the one MTC device that is forwarded by the MME, and the HSS sends the group communication root key to the MME.

10. The base station according to claim 6, wherein the processor is further configured to:

bind and store the group communication root key, the group key and the group ID;

when it is determined that another MTC device belongs to the group corresponding to the group ID, obtain the bound group key according to the group ID;

wherein the transmitter is further configured to;

send the group key encrypted by using an access stratum key of the another MTC device to the another MTC device, so that the another MTC device obtains the group key through decryption according to the access stratum key of the another MTC device.