APPARATUS, SYSTEM AND METHOD FOR SECURE DIRECT COMMUNICATION IN PROXIMITY BASED SERVICES

• US 20160269903A1
• Filed: 08/27/2014
• Published: 09/15/2016
• Est. Priority Date: 10/30/2013
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: ZHANG, Xiaowei, PRASAD, Anand Raghawa
• Granted Patent: US 10,212,597 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/023 using mutual or relative location information between multiple location based services [LBS] targets or of distance thresholds
• CPC Class Codes: H04W 76/14 Direct-mode setup
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 8/08 Mobility data transfer

Abstract

In order for effectively ensuring security for direct communication in ProSe, a ProSe Function acquires from a 3rd party root keys for each of UEs to derive a pair of session keys for securely conducting direct communication with different UEs, and distributes the acquired root keys to each of the UEs. Each of the UEs derives the session keys by using one of the distributed root keys. Moreover, a plurality of UEs, which form a communication system, and are allowed to conduct direct communication with each other when the UEs are in proximity to each other, share public keys of the UEs therebetween through a node which supports the direct communication upon successfully registering the UEs with the node. Each of the UEs verifies at least a request for the direct communication by using one of the public keys.

Claims

1. (canceled)

2. (canceled)

3. (canceled)

4. (canceled)

5. (canceled)

6. (canceled)

7. (canceled)

8. (canceled)

9. (canceled)

10. (canceled)

11. (canceled)

12. (canceled)

13. (canceled)

14. A mobile communication system for Proximity services (Prose), comprising:

a plurality of UEs (User Equipment) that provide the Prose;

a first Prose Function that supports the Prose and communicates with the plurality of UEs via a PC3 interface;

a second Prose Function that supports the Prose and communicates with the plurality of UEs via the PC3 interface; and

a Prose application server that communicates with the first Prose function and the second Prose function via a PC2 interface,

wherein a first UE comprises one UE among the plurality of UEs and receives a first information on security from the first Prose Function which communicated with the Prose Application Server based on a first message for a discovery from the first UE,

a second UE comprises another UE among the plurality of UEs and receives a second information on security from the second Prose Function which communicated with the Prose Application Server based on a second message for the discovery from the second UE,

the first UE sends a direct communication request message to the second UE, and

the first UE and the second UE conduct one-to-one direct communication via a PC5 interface.

15. The mobile communication system according to claim 14, wherein the direct one-to-one communication is protected with the first information and the second information.

16. A Prose function in a mobile communication system for Proximity services (Prose) including a plurality of UEs (User Equipment) that provide the Prose and a Prose Application server, comprising:

a first Prose Function includes a first transmission unit that supports the Prose and communicates with the plurality of UEs via a PC3 interface and sends a first information on security to a first UE which comprises one UE among the plurality of UEs by communicating with the Prose Application Server via a PC2 interface based on a first message for a discovery from the first UE; and

a second Prose Function includes a second transmission unit that supports the Prose and communicates with the plurality of UEs via the PC3 interface and sends a second information on security to a second UE which comprises another UE among the plurality of UEs by communicating with the Prose Application Server via a PC2 interface based on a second message for a discovery from the second UE,

wherein the first UE sends a direct communication request message to the second UE, and

thereafter, the first UE and the second UE conduct one-to-one direct communication via a PC5 interface.

17. The Prose function according to claim 16, wherein the direct one-to-one communication is protected with the first information and the second information.

18. A plurality of UEs (User Equipment) in a mobile communication system for Proximity services (Prose) including a first Prose Function that supports the Prose and communicates with the plurality of UEs via a PC3 interface, a second Prose Function that supports the Prose and communicates with the plurality of UEs via the PC3 interface, and a Prose application server that communicates with the first Prose function and the second Prose function via a PC2 interface, comprising:

a first UE includes a first receive unit that comprises one UE among the plurality of UEs, provides the Prose, and receives a first information on security from the first Prose Function which communicates with the Prose Application Server based on a first message for a discovery from the first UE, and

a second UE includes a second receive unit that comprises another UE among the plurality of UEs, provides the Prose, and receives a second information on security from the second Prose Function which communicates with the Prose Application Server based on a second message for the discovery from the second UE,

wherein the first UE includes a first transmission unit that sends a direct communication request message to the second UE, and

the first UE and the second UE conduct one-to-one direct communication via a PC5 interface.

19. The UEs according to claim 18, wherein the direct one-to-one communication is protected with the first information and the second information.

20. A communication method of a mobile communication system for Proximity services (Prose) including a plurality of UEs (User Equipment) that provide the Prose, a first Prose Function that supports the Prose and communicates with the plurality of UEs via a PC3 interface, a second Prose Function that supports the Prose and communicates with the plurality of UEs via the PC3 interface, and a Prose application server that communicates with the first Prose function and the second Prose function via a PC2 interface, comprising:

receiving, by a first UE which comprises one UE among the plurality of UEs, a first information on security from the first Prose Function which communicated with the Prose Application Server based on a first massage for a discovery from the first UE;

receiving, by a second UE which comprises another UE among the plurality of UEs, a second information on security from the second Prose Function which communicated with the Prose Application Server based on a second message from the second UE;

sending, by the first UE, a direct communication request message to the second UE; and

conducting, by the first UE and the second UE, one-to-one direct communication via a PC5 interface.

21. The method according to claim 20, wherein the direct one-to-one communication is protected with the first information and the second information.

22. A communication method of a Prose function in a mobile communication system for Proximity services (Prose) including a plurality of UEs (User Equipment) that provide the Prose and a Prose Application server, comprising:

sending, by a first Prose Function that supports the Prose and communicates with the plurality of UEs via a PC3 interface, a first information on security to a first UE which comprises one UE among the plurality of UEs by communicating with the Prose Application Server via a PC2 interface based on a first message for a discovery from the first UE; and

sending, by a second Prose Function that supports the Prose and communicates with the plurality of UEs via the PC3 interface, a second information on security to a second UE which comprises another UE among the plurality of UEs by communicating with the Prose Application Server via a PC2 interface based on a second message for a discovery from the second UE,

wherein the first UE sends a direct communication request message to the second UE, and

thereafter, the first UE and the second UE conduct one-to-one direct communication via a PC5 interface.

23. The method according to claim 22, wherein the direct one-to-one communication is protected with the first information and the second information.

24. A communication method of a plurality of UEs (User Equipment) in a mobile communication system for Proximity services (Prose) including a first Prose Function that supports the Prose and communicates with the plurality of UEs via a PC3 interface, a second Prose Function that supports the Prose and communicates with the plurality of UEs via the PC3 interface, and a Prose application server that communicates with the first Prose function and the second Prose function via a PC2 interface, comprising:

receiving, by a first UE that comprises one UE among the plurality of UEs and provides the Prose, a first information on security from the first Prose Function which communicates with the Prose Application Server based on a first message for a discovery from the first UE;

receiving, by a second UE that comprises another UE among the plurality of UEs and provides the Prose, a second information on security from the second Prose Function which communicates with the Prose Application Server based on a second message for the discovery from the second UE;

sending, by the first UE, a direct communication request message to the second UE; and

conducting, by the first UE and the second UE, one-to-one direct communication via a PC5 interface.

25. The method according to claim 24, wherein the direct one-to-one communication is protected with the first information and the second information.