End-to-end M2M service layer sessions

Patent metadata

Field	Value
Publication number	US-11765150-B2
Application number	US-202117400561-A
Country	US
Kind code	B2
Filing date	Aug 12, 2021
Priority date	Jul 25, 2013
Publication date	Sep 19, 2023
Grant date	Sep 19, 2023

Abstract

Mechanisms support machine-to-machine service layer sessions that can span multiple service layer hops where a machine-to-machine service layer hop is a direct machine-to-machine service layer communication session between two machine-to-machine service layer instances or between a machine-to-machine service layer instance and a machine-to-machine application. Mechanisms are also disclosed that illustrate machine-to-machine session establishment procedures for oneM2M Session Management Service supporting multiple resources.

First claim

What is claimed:

1. A method for service layer session management, the method comprising:
receiving a session request to create a communication session;
determining, based on the session request, a first application, a second application, and at least a first service layer instance for the communication session, the communication session comprising multiple hops, wherein the session request comprises an indication of supporting end-to-end secured communications;
providing a session credential to the first application, the second application, and the at least first service layer instance of the communication session,
wherein the session credential is used to provide multi-hop, end-to-end secured communications between the first application and the second application through the at least first service layer instance,
wherein the session credential is provisioned to the first application, the second application and the at least first service layer instance;

maintaining session state information indicating current state of the communication session, the session state information including at least a parameter indicating the communication session is in an online mode or an offline mode;
based on the session credential, the session request, and the session state information, managing the communication session;
maintaining session description information indicating a description of the communication session; and
based on the session description information, supporting discovery of information of the communication session by a third application.

2. The method of claim 1 , wherein, the session credential is adapted to allow the first service layer instance to compress and decompress application data of the communication session flowing through the first service layer instance.

3. The method of claim 1 , wherein the session credential is periodically refreshed based on a lifetime of the session credential.

4. The method of claim 3 , wherein the session credential is adapted to allow the first service layer instance to encrypt and decrypt application data of the communication session flowing through the first service layer instance.

5. The method of claim 1 , further comprising receiving a service layer session response to create a communication, wherein the response comprises a list of application identifiers, end-to-end service layer session identifier, or end-to-end service layer session credentials for the communication session.

6. The method of claim 1 , further comprising authenticating the first application with the first service layer instance based on the session credential.

7. The method of claim 1 , further comprising:
interfacing with one or more other functions in the first service layer instance to provide value-added data services for messages flowing through the at least first service layer instance, the value-added data services comprise whether data of the communication session flowing through the first service layer instance can be aggregated with other data; and
storing a session state of the communication session.

8. The method of claim 7 , wherein the session state is stored as a session cookie.

9. An apparatus comprising:
a processor; and
a memory coupled with the processor, the memory having stored thereon executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
receiving a session request to create a communication session;
determining, based on the session request, a first application, a second application, and at least a first service layer instance for the communication session, the communication session comprising multiple hops, wherein the session request comprises an indication of supporting end-to-end secured communications;
providing a session credential to the first application, the second application, and the at least first service layer instance of the communication session,
wherein the session credential is used to provide multi-hop, end-to-end secured communications between the first application and the second application through the at least first service layer instance,
wherein the session credential is provisioned to the first application, the second application and the at least first service layer instance;

maintaining session state information indicating current state of the communication session, the session state information including at least a parameter indicating the communication session is in an online mode or an offline mode;
based on the session credential, the session request, and the session state information, managing the communication session;
maintaining session description information indicating a description of the communication session; and
based on the session description information, supporting discovery of information of the communication session by a third application.

10. The apparatus of claim 9 , wherein, the session credential is adapted to allow the first service layer instance to compress and decompress application data of the communication session flowing through the first service layer instance.

11. The apparatus of claim 9 , wherein the session credential is periodically refreshed based on a lifetime of the session credential.

12. The apparatus of claim 9 , wherein the session credential is adapted to allow the first service layer instance to encrypt and decrypt application data of the communication session flowing through the first service layer instance.

13. The apparatus of claim 9 , further comprising receiving a service layer session response to create a communication session, wherein the response comprises a list of application identifiers, end-to-end service layer session identifier, or end-to-end service layer session credentials for the communication session.

14. The apparatus of claim 9 , further operations comprising authenticating the first application with the first service layer instance based on the session credential.

15. The apparatus of claim 9 , further operations comprising storing a session state of the communication session.

16. The apparatus of claim 15 , wherein the session state is stored as a session cookie.

17. A computer readable storage medium that is not a signal comprising computer executable instructions that when executed by a computing device cause said computing device to perform the instructions comprising:
receiving a session request to create a communication session determining, based on the session request, a first application, a second application, and at least a first service layer instance for the communication session, the communication session comprising multiple hops, wherein the session request comprises an indication of supporting end-to-end secured communications;
providing a session credential to the first application, the second application, and the at least first service layer instance of the communication session,
wherein the session credential is used to provide multi-hop, end-to-end secured communications between the first application and the second application through the at least first service layer instance, wherein the session credential is provisioned to the first application, the second application and the at least first service layer instance;

maintaining session state information indicating current state of the communication session, the session state information including at least a parameter indicating the communication session is in an online mode or an offline mode;
based on the session credential, the session request, and the session state information, managing t

Assignees

• Convida Wireless LLC

Inventors

• Seed Dale N
• Dong Lijun
• Lu Guang
• Starsinic Michael F

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L67/14 Primary

  Session management (for real-time applications in data packet communications networks H04L65/1066) · CPC title

• H04L67/141 Primary

  Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/062

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title