Communicating with a machine to machine device

Patent metadata

Field	Value
Publication number	US-10313307-B2
Application number	US-201415021879-A
Country	US
Kind code	B2
Filing date	Sep 12, 2014
Priority date	Sep 13, 2013
Publication date	Jun 4, 2019
Grant date	Jun 4, 2019

Abstract

The present disclosure provides methods and apparatus for administering an interface between a machine-to-machine, M2M, device and a network application function, NAF, for secure communication between the M2M device and the NAF. In one method, the M2M device comprises security information for enabling secure communication via the interface, and administers the interface by: setting a secure interface lifetime parameter based on a lifetime of at least part of the security information; and transmitting administration data to the NAF, wherein the administration data comprises the secure interface lifetime parameter.

First claim

The invention claimed is:

1. A method for a machine-to-machine (M2M) device to administer an interface between the M2M device and a network application function (NAF) for secure communication between the M2M device and the NAF, wherein the M2M device comprises security information as a key for enabling secure communication via the interface, the method comprising the steps of initiating, before expiry of a lifetime of at least part of the security information and on wake up from a sleep cycle:
setting a secure interface lifetime parameter based on a lifetime of the at least part of the security information;
transmitting administration data to the NAF, wherein the administration data comprises the secure interface lifetime parameter;
after determining that a registration of the interface is about to expire, pre-emptively initiating a new bootstrapping process to obtain new security information, the initiating being pre-emptive as a result of obtaining the new security information prior to expiration of the registration; and
using the new security information to either update the registration or, alternatively, to carry out a new registration.

2. The method of claim 1 , wherein the secure interface lifetime parameter is set to a value greater than or equal to the lifetime of the at least part of the security information.

3. The method of claim 1 , wherein the secure interface lifetime parameter is set to a value greater than the lifetime of the at least part of the security information.

4. The method of claim 1 , wherein the secure interface lifetime parameter is set to a value greater than the lifetime of the at least part of the security information by a first amount.

5. The method of claim 1 , wherein the secure interface lifetime parameter is set to a value less than or equal to the lifetime of the at least part of the security information.

6. The method of claim 1 , wherein the secure interface lifetime parameter is set to a value less than or equal to the lifetime of the at least part of the security information.

7. The method of claim 1 , wherein the secure interface lifetime parameter is set to a value less than the lifetime of the at least part of the security information by a second amount.

8. The method of claim 1 , further comprising the steps of:
checking the remaining lifetime of the at least part of the security information; and if the remaining lifetime of the at least part of the security information is less than a security information lifetime threshold, requesting new security information from a bootstrapping server.

9. The method of claim 8 , further comprising the step of:
if the request for new security information fails, repeating the request for new security information after a period of time.

10. The method of claim 8 , wherein the step of checking the remaining lifetime of the security information is carried out before a secure communication transmission from the M2M device to the NAF via the interface.

11. A method for a network application function (NAF) to administer an interface between the NAF and a machine-to-machine (M2M), device, wherein the M2M device comprises security information as a key for enabling secure communication via the interface, the method comprising the steps of:
receiving, before expiry of a lifetime of at least part of the security information and on wake up from a sleep cycle, administration data from the M2M device, the registration data comprising a secure interface lifetime parameter that has been set based on a lifetime of the at least part of the security information;
transmitting an administration response to the M2M device;
after determining that a registration of the interface is about to expire, pre-emptively initiating a new bootstrapping process to obtain new security information, the initiating being pre-emptive as a result of obtaining the new security information prior to expiration of the registration; and
using the new security information to either update the registration or, alternatively, to carry out a new registration.

12. The method of claim 11 , wherein the administration data comprises the at least part of the security information, the method further comprising:
checking the lifetime of the at least part of the security information; and
comparing the secure interface lifetime parameter with the lifetime of the at least part of the security information;
wherein if the comparison does not meet a comparison condition, the administration response is set to indicate an error in the administration data.

13. The method of claim 12 , wherein the comparison condition is that the secure interface lifetime parameter is greater than or equal to the lifetime of the at least part of the security information.

14. The method of claim 12 , wherein the comparison condition is that the secure interface lifetime parameter is greater than the lifetime of the at least part of the security information.

15. The method of claim 12 , wherein the comparison condition is that the secure interface lifetime parameter is greater than the lifetime of the at least part of the security information by a first amount.

16. The method of claim 12 , wherein the comparison condition is that the secure interface lifetime parameter is less than or equal to the lifetime of the at least part of the security information.

17. The method of claim 12 , wherein the comparison condition is that the secure interface lifetime parameter is less than the lifetime of the at least part of the security information.

18. The method of claim 12 , wherein the comparison condition is that the secure interface lifetime parameter is less than the lifetime of the at least part of the security information by a second amount.

19. The method of claim 11 , further comprising a step of:
obtaining the lifetime of the at least part of the security information.

20. The method of claim 11 , wherein:
the administration data further comprises a name for the M2M device; and wherein the name for the M2M device is equal to, or derived at least in part from, or
otherwise linked to, at least part of data that are shared between the M2M device and the bootstrapping server.

Assignees

• Vodafone Ip Licensing Ltd

Inventors

• Bone Nick

Classifications

• H04W12/06

  Authentication · CPC title

• H04W4/50

  Service provisioning or reconfiguring · CPC title

• H04W4/12

  Messaging; Mailboxes; Announcements · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/0838

  using one-time-passwords · CPC title