Apparatus and method for providing security service in communication system

Patent metadata

Field	Value
Publication number	US-10826913-B2
Application number	US-201715686966-A
Country	US
Kind code	B2
Filing date	Aug 25, 2017
Priority date	Aug 25, 2016
Publication date	Nov 3, 2020
Grant date	Nov 3, 2020

Abstract

An apparatus and a method for providing a security service in a communication system are provided. The security device includes a receiver configured to receive validation information used for validating data received by a receiving apparatus from the receiving apparatus, at least one processor configured to determine whether the validation information matches set validation related information, and a transmitter configured to transmit information indicating the determined result to the receiving apparatus.

First claim

What is claimed is:

1. A security device in a communication system, the security device comprising:
a transceiver; and
at least one processor coupled to the transceiver,
wherein the at least one processor is configured to:
receive, from a receiving apparatus, a first message including security information used for validating an external device which is to interact with the receiving apparatus and a session identifier (ID) of a session which is established between the receiving apparatus and the security device,
determine whether the security information matches set validation related information,
based on the session ID being valid and determining that the security information matches the set validation related information, transmit, to the receiving apparatus, a validation result for the session ID, a determined result for the security information, and an encryption key used for communication between the receiving apparatus and the external device, and
based on the session ID being valid and determining that the security information does not match the set validation related information, transmit, to the receiving apparatus, a second message including the validation result for the session ID and a parameter value for requesting additional security information, and
wherein the security information comprises information associated with an interaction between the receiving apparatus and the external device requested by the external device.

2. The security device of claim 1 , wherein the validation related information is received from a transmitting apparatus which is related to the receiving apparatus or is provided from the transmitting apparatus to the security device previously.

3. The security device of claim 1 , wherein the security information includes a token used for a communication between the receiving apparatus and the external device.

4. The security device of claim 1 , wherein the at least one processor is further configured to:
receive a third message including the additional security information used for validating the external device which wants to communicate with the receiving apparatus from the receiving apparatus,
determine whether the additional security information matches the set validation related information, and
transmit a fourth message including information indicating the determined result for the additional security information to the receiving apparatus.

5. A receiving apparatus in a communication system,
the receiving apparatus comprising:
a transceiver; and
at least one processor coupled to the transceiver,
wherein the at least one processor is configured to:
receive, from an external device, a first message indicating that the external device is to interact with the receiving apparatus,
transmit, to a security device, a second message including security information used for validating the external device and a session identifier (ID) of a session which is established between the receiving apparatus and the security device,
if the session ID is valid and the security information matches validation related information set in the security apparatus, receive, from the security device, a third message including a validation result for the session ID, a determined result for the security information, and an encryption key used for communication between the receiving apparatus and the external device, and
if the session ID is valid and the security information does not match the validation related information, receive, from the security device, a fourth message including the validation result for the session ID and a parameter value for requesting additional security information used for validating the external device, and
wherein the security information comprises an information associated with an interaction between the receiving apparatus and the external device requested by the external device.

6. The receiving apparatus of claim 5 , wherein the validation related information is received from a transmitting apparatus which is related to the receiving apparatus or is provided from the transmitting apparatus to the security device previously.

7. The receiving apparatus of claim 5 , wherein the security information includes a token used for a communication between the receiving apparatus and the external device.

8. The receiving apparatus of claim 5 , wherein the at least one processor is further configured to:
if the session ID is valid and the security information does not match the validation related information, transmit a fifth message indicating that a validation process for the external device is progressing to the external device.

9. The receiving apparatus of claim 8 , wherein the at least one processor is further configured to:
receive a sixth message indicating that the external device wants to communicate with the receiving apparatus from the external device, and
transmit, to the security device, a seventh message including the additional security information used for validating the external device which wants to communicate with the receiving apparatus.

10. The receiving apparatus of claim 9 , wherein the at least one processor is further configured to:
receive, from the security device, an eighth message including information indicating whether the additional security information matches the validation related information set in the security device.

Assignees

• Samsung Electronics Co Ltd

Inventors

• NAUGHTON-GREEN Jonathan David
• Waller Arthur Simon

Classifications

• H04L63/123 Primary

  received data contents, e.g. message integrity · CPC title

• H04L63/0807

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L63/06

  for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08) · CPC title

• H04L2209/601

  Broadcast encryption · CPC title

• H04L67/34

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title