End-To-End M2M Service Layer Sessions

• US 20150033311A1
• Filed: 07/25/2014
• Published: 01/29/2015
• Est. Priority Date: 07/25/2013
• Status: Active Grant

• Current Assignee: Convida Wireless LLC
• Original Assignee: Convida Wireless LLC
• Inventors: Seed, Dale N., Dong, Lijun, Lu, Guang, Starsinic, Michael F.
• Granted Patent: US 10,530,757 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04L 69/321 Interlayer communication protocols or service data unit [SDU] definitions; Interfaces between layers
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 76/10 Connection setup

Abstract

Mechanisms support machine-to-machine service layer sessions that can span multiple service layer hops where a machine-to-machine service layer hop is a direct machine-to-machine service layer communication session between two machine-to-machine service layer instances or between a machine-to-machine service layer instance and a machine-to-machine application. Mechanisms are also disclosed that illustrate machine-to-machine session establishment procedures for oneM2M Session Management Service supporting multiple resources.

Claims

1. A method comprising:

receiving, by a service layer session management function of a machine-to-machine gateway, a session request to create a communication session;

determining, based on the session request, a first application and a second application for the communication session;

determining, based on the session request, a first service layer instance, the first service layer instance an intermediate service layer instance associated with the communication session;

receiving a credential response based on a request for session credentials, the credential response comprising the session credentials for the communication session; and

providing the session credentials to the first application, the second application, and the first service layer instance of the communication session.

2. The method of claim 1, wherein, the session credentials are adapted to allow the first service layer instance to compress and decompress application data of the communication session flowing through the first service layer instance.

3. The method of claim 1, wherein the communication session is an encrypted communication between the first application and the second application.

4. The method of claim 1, wherein the session credential is periodically refreshed based on a lifetime of the session credential.

5. The method of claim 4, wherein the session credentials are adapted to allow the first service layer instance to encrypt and decrypt application data of the communication session flowing through the first service layer instance.

6. The method of claim 1, wherein the credential response further comprises a list of applications for the communication session.

7. The method of claim 1, further comprising authenticating the first application with the first service layer instance based on the session credentials.

8. The method of claim 1, further comprising storing a session state of the communication session.

9. The method of claim 8, wherein the session state is stored as a session cookie.

10. A machine-to-machine apparatus comprising:

a processor; and

a memory coupled with the processor, the memory having stored thereon executable instructions that when executed by the processor cause the processor to effectuate operations comprising;

receiving a session request to create a communication session;

determining, based on the session request, a first application and a second application for the communication session;

determining, based on the session request, a first service layer instance, the first service layer instance an intermediate service layer instance associated with the communication session;

receiving a credential response based on a request for session credentials, the credential response comprising the session credentials for the communication session; and

providing the session credentials to the first application, the second application, and the first service layer instance of the communication session.

11. The machine-to-machine apparatus of claim 10, wherein, the session credentials are adapted to allow the first service layer instance to compress and decompress application data of the communication session flowing through the first service layer instance.

12. The machine-to-machine apparatus of claim 10, wherein the communication session is an encrypted communication between the first application and the second application.

13. The machine-to-machine apparatus of claim 10, wherein the session credential is periodically refreshed based on a lifetime of the session credential.

14. The machine-to-machine apparatus of claim 13, wherein the session credentials are adapted to allow the first service layer instance to encrypt and decrypt application data of the communication session flowing through the first service layer instance.

15. The machine-to-machine apparatus of claim 10, wherein the credential response further comprises a list of applications for the communication session.

16. The machine-to-machine apparatus of claim 10, further operations comprising authenticating the first application with the first service layer instance based on the session credentials.

17. The machine-to-machine apparatus of claim 10, further operations comprising storing a session state of the communication session.

18. The machine-to-machine apparatus of claim 17, wherein the session state is stored as a session cookie.

19. A computer readable storage medium comprising computer executable instructions that when executed by a computing device cause said computing device to perform the instructions comprising:

receiving a session request to create a communication session;

determining, based on the session request, a plurality of participants of the communication session, the plurality of participants of the communication session comprising a first application, a second application, and a service layer instance, wherein the communication session is an encrypted communication session between the first application and the second application;

receiving, based on a request for session credentials, a credential response comprising the session credentials for the communication session; and

providing the session credentials to the plurality of participants of the communication session.

20. The computer readable storage medium of claim 19, further operations comprising:

retrieving, by the service layer instance, a session cookie from the first application, wherein the session cookie includes historical activity of the first application.