Traffic encryption key management for machine to machine multicast group

• US 9,161,216 B2
• Filed: 12/08/2011
• Issued: 10/13/2015
• Est. Priority Date: 12/08/2010
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Jung, Inuk, Kwak, Jinsam, Ryu, Kiseon, Lee, Wookbong
• Primary Examiner(s): Rashid, Harunur
• Assistant Examiner(s): HOLMES, ANGELA R
• Application Number:
  US13/992,662
• Publication Number:
  US 20130315389A1
• Time in Patent Office: 1,405 Days
• Field of Search: 370/328, 380/31, 380/45
• US Class Current: 1/1
• CPC Class Codes: H04L 2463/061 applying further key derivation, e.g. deriving traffic keys from a pair-wise master key cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/0471 Key exchange
• CPC Class Codes: H04W 4/08 User group management
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]

Abstract

A method for decrypting multicast data by a mobile station in a wireless communication system is described. The method includes receiving an identifier of a group from a base station, receiving parameters for generating a group traffic key from the base station, wherein the parameters include an authentication key for the group, a group security seed and a counter, performing a key derivation function to generate the group traffic key based on the identifier and the parameters and decrypting multicast data using the group traffic key.

Claims

1. A method for decrypting multicast data by a mobile station in a wireless communication system, the method comprising:

receiving an identifier of a group from a base station;

receiving parameters for generating a group traffic encryption key from the base station, wherein the parameters include an authentication key for the group, a group security seed for the group and a counter for the group traffic encryption key;

performing a key derivation function to generate the group traffic encryption key based on the identifier and the parameters; and

decrypting multicast data using the group traffic encryption key,

wherein, when another mobile station unsubscribes from the group, the method further comprises;

receiving a trigger message for updating the group traffic encryption key from the base station,

wherein the trigger message includes a new group security seed and an initialized counter;

performing the key derivation function to update the group traffic encryption key based on the new group security seed and the initialized counter in the trigger message; and

decrypting the multicast data using the updated group traffic encryption key.

2. The method of claim 1, wherein the trigger message further includes the authentication key derived based on the new group security seed.

3. The method of claim 1, wherein the identifier of the group is a M2M (Machine to Machine) device group identifier.

4. The method of claim 3, further comprising:

transmitting, to the base station, control information indicating that M2M capability is enabled.

5. The method of claim 4, wherein the control information is transmitted during a capability negotiation procedure with the base station.

6. The method of claim 1, wherein the group is a machine to machine (M2M) multicast group.

7. A mobile station configured to decrypt multicast data in a wireless communication system, the mobile station comprising:

a transmit/receive device; and

a processor operatively connected to the transmit/receive device and configured to;

receive an identifier of a group from a base station;

receive parameters for generating a group traffic encryption key from the base station,

wherein the parameters include an authentication key for the group, a group security seed for the group and a counter for the group traffic encryption key;

perform a key derivation function to generate the group traffic encryption key based on the identifier and the parameters; and

decrypt multicast data using the group traffic encryption key,

wherein, when another mobile station unsubscribes from the group, the processor is further configured to;

receive a trigger message for updating the group traffic encryption key from the base station, wherein the trigger message includes a new group security seed and an initialized counter;

perform the key derivation function to update the group traffic encryption key based on the new group security seed and the initialized counter in the trigger message; and

decrypt the multicast data using the updated group traffic encryption key.

8. The mobile station of claim 7, wherein the group is a machine to machine (M2M) multicast group.