Method and apparatus for managing security key in a near field d2d communication system

Patent metadata

Field	Value
Publication number	US-2016295406-A1
Application number	US-201415036789-A
Country	US
Kind code	A1
Filing date	Nov 14, 2014
Priority date	Nov 14, 2013
Publication date	Oct 6, 2016
Grant date	—

Abstract

The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). The present disclosure further relates to a method and apparatus for managing a security key in a communication system are provided. The method includes transmitting a first key request message including an identifier (ID) of an originating user equipment (UE) to a server through a mobility management entity (MME), receiving a key response message including security parameters and a secret key of the originating UE from the server, determining a security key based on the security parameters and the secret key of the originating UE by the originating UE, and communicating with a terminating UE based on the security key by the originating UE, while a connection between the originating UE and the terminating UE is maintained.

First claim

1 . A method for managing a security key by a first user equipment (UE) in a communication system, the method comprising;
transmitting a first key request message including an identifier (ID) of the first UE to a server through a mobility management entity (MME); receiving a key response message including security parameters and a secret key of the first UE from the server; determining a security key based on the security parameters and the secret key of the first UE; and communicating with a second UE based on the security key while a connection between the first UE and the second UE is maintained.

2 . The method of claim 1 , wherein the MME receives a second key request message including the ID of the first UE from the second UE, and if the second UE is authorized, transmits the second key request message to the server.

3 . The method of claim 1 , wherein the security parameters include at least one of a RAND function, a connection count, and a medium access control (MAC) address.

4 . The method of claim 2 , wherein, if the second UE needs to be authorized and an ID of the second UE is used in generating the security key, the second key request message includes the ID of the second UE.

5 . The method of claim 1 , wherein, if an ID of the second UE is used in generating the security key, unavailable to the first UE, the key response message includes the ID of the second UE.

6 . The method of claim 2 , if the second key request message includes a key index, the method further comprising:
receiving a first response message including the key index, from between the key index and the security key transmitted by the server; transmitting a third key request message including the ID of the first UE and the key index to the server through the MME; and receiving a second response message including the security key from the server.

7 . The method of claim 6 , wherein, if the second UE is authorized, the MME transmits the third key request message to the server.

8 . A method for managing a security key by a second user equipment (UE) in a communication system, the method comprising;
transmitting a key request message including an identifier (ID) of a first UE to a server; receiving a first key response message including security parameters and a security key from the server, the security key being derived based on a secret key of the first UE; transmitting a second key response message including the security parameters to the first UE; and communicating with the first UE based on the security key while a connection between the first UE and the second UE is maintained.

9 . The method of claim 8 , wherein, if the second UE is authorized, a mobile management entity (MME) transmits the key request message to the server.

10 . The method of claim 8 , wherein the security parameters include at least one of a RAND function, a connection count, and a medium access control (MAC) address.

11 . The method of claim 8 , wherein, if the second UE needs to be authorized and an ID of the second UE is used in generating the security key, the key request message includes the ID of the second UE.

12 . The method of claim 8 , wherein, if an ID of the second UE is used in generating the security key, unavailable to the first UE, the second key response message includes the ID of the second UE.

13 . The method of claim 8 , wherein, if the key request message includes a key index, the method further comprising:
receiving a third key response message including the key index and the security key from the server; and transmitting a fourth key response message including the key index to the first UE.

14 . A first user equipment (UE) for managing a security key in a communication system, the first UE comprising;
a transceiver configured to transmit and receive related messages; and a controller configured to:
transmit, to a server, a first key request message including an identifier (ID) of the first UE through a mobility management entity (MME);
receive, from the server, a key response message including security parameters and a secret key of the first UE;
determine a security key based on the security parameters and the secret key of the first UE; and
communicate with a second UE based on the security key while a connection between the first UE and the second UE is maintained.

15 . The first UE of claim 14 , wherein the MME receives a second key request message including the ID of the first UE from the second UE, and if the second UE is authorized, transmits the second key request message to the server.

16 . The first UE of claim 14 , wherein the security parameters include at least one of a RAND function, a connection count, and a medium access control (MAC) address.

17 . The first UE of claim 15 , wherein, if the second UE needs to be authorized and an ID of the second UE is used in generating the security key, the second key request message includes the ID of the second UE.

18 . The first UE of claim 14 , wherein, if an ID of the second UE is used in generating the security key, unavailable to the first UE, the key response message includes the ID of the second UE.

19 . The first UE of claim 15 , wherein, if the second key request message includes a key index, the controller is further configured to receive a first response message including the key index, from between the key index and the security key transmitted by the server, transmit a third key request message including the ID of the first UE and the key index to the server through the MME, and receive a second response message including the security key from the server.

20 . The first UE of claim 19 , wherein, if the second UE is authorized, the MME transmits the third key request message to the server.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Agiwal Anil
• Rajadurai Rajavelsamy
• Chang Young-Bin

Classifications

• H04W76/14

  Direct-mode setup · CPC title

• H04W76/23 Primary

  Manipulation of direct-mode connections · CPC title

• H04W76/043

  Electricity · mapped topic

• H04W12/04 Primary

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04W12/0431

  Key distribution or pre-distribution; Key agreement · CPC title