Method and apparatus for providing machine-to-machine service

Patent metadata

Field	Value
Publication number	US-9317688-B2
Application number	US-201213447599-A
Country	US
Kind code	B2
Filing date	Apr 16, 2012
Priority date	Apr 15, 2011
Publication date	Apr 19, 2016
Grant date	Apr 19, 2016

Abstract

A method and an apparatus for providing service are provided. A method of providing service by a Machine-to-Machine (M2M) device includes transmitting a request for a first authentication to a Network Security Capability (NSEC), the request for the first authentication including an identifier of the M2M device, performing an Extensible Authentication Protocol (EAP) authentication with the NSEC, and generating, if the first authentication is successful, a secret key using at least one of a Master Session Key (MSK) and the identifier of the M2M device.

First claim

What is claimed is:

1. A method for machine-to-machine (M2M) service bootstrapping of an M2M device, the method comprising:
receiving, at the M2M device, a first message from a network M2M node, the first message comprising a service provider (SP) identifier (ID) and at least one of a usage type, an M2M service bootstrap function (MSBF) ID, a network service capability layer (NSCL) ID, and a target device ID;
receiving, at the M2M device, a second message from the network M2M node after receiving the first message from the network M2M node;
identifying whether the second message includes a service provider assigned device ID; and
generating, by the M2M device, an M2M root key based on the SP ID and the service provider assigned device ID if the second message from the network M2M node includes the service provider assigned device ID based on a result of the identification,
wherein the M2M root key is used for mutual authentication between the M2M device and a service provider corresponding to the SP ID, and
wherein the generating of the M2M root key comprises generating, if the service provider assigned device ID is not assigned by the network, the M2M root key based on an extended master session key (EMSK), a predetermined string, the SP ID, and the M2M device's own ID.

2. The method of claim 1 , wherein the generating of the M2M root key further comprises:
generating the M2M root key based on the extended master session key (EMSK), the predetermined string, the SP ID, and the service provider assigned device ID.

3. The method of claim 1 , further comprising:
discarding, if the target device ID does not match the M2M device's own ID, the first message.

4. The method of claim 1 , wherein at least one of the M2M root key and the service provider assigned device ID is transmitted to an M2M authentication server (MAS).

5. A method for machine-to-machine (M2M) service bootstrapping of an M2M network node server, the method comprising:
transmitting, by the M2M network node server, a first message to an M2M device, the first message comprising a service provider (SP) identifier (ID) and at least one of a usage type, an M2M service bootstrap function (MSBF) ID, a network service capability layer (NSCL) ID, and a target device ID;
identifying, by the M2M network node server, whether the M2M device is assigned a service provider assigned device ID;
transmitting, by the M2M network node server, a second message to the M2M device after transmitting the first message to the M2M device; and
generating, by the M2M network node server, an M2M root key based on the SP ID and the service provider assigned device ID if the second message from the network M2M node includes the service provider assigned device ID based on a result of the identification,
wherein the M2M root key is used for mutual authentication between the M2M device and a service provider corresponding to the SP ID, and
wherein the generating of the M2M root key comprises generating, if the service provider assigned device ID is not assigned by the network, the M2M root key based on an extended master session key (EMSK), a predetermined string, the SP ID, and the M2M device's own ID.

6. The method of claim 5 , wherein the generating of the M2M root key further comprises:
generating the M2M root key based on the extended master session key (EMSK), the predetermined string, the SP ID, and the service provider assigned device ID.

7. The method of claim 5 , wherein the first message is discarded by the M2M device if the target device ID does not match the M2M device's own ID.

8. The method of claim 5 , further comprising:
transmitting at least one of the M2M root key and the service provider assigned device ID to an M2M authentication server (MAS).

9. An apparatus of machine-to-machine (M2M) device for M2M service bootstrapping, the apparatus comprising:
a transceiver configured to communicate with a network M2M node; and
a controller configured to:
receive a first message from the network M2M node, the first message comprising a service provider (SP) identifier (ID) and at least one of a usage type, an M2M service bootstrap function (MSBF) ID, a network service capability layer (NSCL) ID, and a target device ID;
receive a second message from the network M2M node after receiving the first message from the network M2M node;
identify whether the second message includes a service provider assigned device ID; and
generate an M2M root key based on the SP ID and the service provider assigned device ID if the second message from the network M2M node includes the service provider assigned device ID based on a result of the identification,

wherein the M2M root key is used for mutual authentication between an M2M device and a service provider corresponding to the SP ID, and
wherein the controller is further configured to generate, if the service provider assigned device ID is not assigned by the network, the M2M root key based on an extended master session key (EMSK), a predetermined string, the SP ID, and the M2M device's own ID.

10. The apparatus of claim 9 , wherein the controller is further configured to generate the M2M root key based on the extended master session key (EMSK), the predetermined string, the SP ID, and the service provider assigned device ID.

11. The apparatus of claim 9 , wherein the controller is further configured to discard, if the target device ID does not match the M2M device's own ID, the first message.

12. The apparatus of claim 9 , wherein at least one of the M2M root key and the service provider assigned device ID is transmitted to an M2M authentication server (MAS).

13. An apparatus of a machine-to-machine (M2M) network node server for M2M service bootstrapping, the apparatus comprising:
a transceiver configured to communicate with at least one of an M2M device and M2M authentication server (MAS); and
a controller configured to:
transmit a first message to the M2M device, the first message comprising a service provider (SP) identifier (ID) and at least one of a usage type, an M2M service bootstrap function (MSBF) ID, a network service capability layer (NSCL) ID, and a target device ID;
identify whether the M2M device is assigned a service provider assigned device ID;
transmit a second message to the M2M device after transmitting the first message to the M2M device; and
generate an M2M root key based on the SP ID and the service provider assigned device ID if the second message from the network M2M node includes the service provider assigned device ID based on a result of the identification,

wherein the M2M root key is used for mutual authentication between the M2M device and a service provider corresponding to the SP ID, and
wherein the controller is further configured to generate, if the service provider assigned device ID is not assigned by the network, the M2M root key based on an extended master session key (EMSK), a predetermined string, the SP ID, and the M2M device's own ID.

14. The apparatus of claim 13 , wherein the controller is further configured to generate the M2M root key based on the extended master session key (EMSK), the predetermined string, the SP ID, and the service provider assigned device ID.

15. The apparatus of claim 13 , wherein the first message is discarded by the M2M device if the target device ID does not match the M2M device's own ID.

16. The apparatus of claim 13 , wherein the controller is further configured to transmit at least one of the M2M root key and the service provider assigned device ID to the MAS.

Assignees

• Yegin Alper
• Baek Youngkyo
• Samsung Electronics Co Ltd

Inventors

• Yegin Alper
• Baek Youngkyo

Classifications

• G06F9/4401

  Bootstrapping (security arrangements therefor G06F21/57) · CPC title

• G06F2221/2143

  Clearing memory, e.g. to prevent the data from being stolen · CPC title

• H04W4/70 Primary

  Services for machine-to-machine communication [M2M] or machine type communication [MTC] · CPC title

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• H04W4/50

  Service provisioning or reconfiguring · CPC title