Network entity, user device, and method for setting up device to device communications

Patent metadata

Field	Value
Publication number	US-9876821-B2
Application number	US-201314387822-A
Country	US
Kind code	B2
Filing date	Feb 18, 2013
Priority date	Mar 30, 2012
Publication date	Jan 23, 2018
Grant date	Jan 23, 2018

Abstract

A communications system is provided. A network device ( 9 ) controls the setting up of a device to device communication link, as sent between a device in the core network ( 7 ) and the base station(s) ( 5 ) servicing the relevant mobile devices ( 3 ), including disclosure of the common security information for two mobile devices to communicate securely over the direct device to device communications link.

First claim

What is claimed is:

1. A network entity comprising:
a processor; and
a transceiver circuit,
wherein the processor is configured to control setting up a security configuration for a device to device communications direct link between a first user equipment (UE) and a second UE in Evolved Packet System (EPS),
wherein the transceiver circuit is configured to send, to the first UE and to the second UE, security information that is common to the first UE and the second UE and from which the first UE and the second UE can derive a security key for protecting user plane traffic sent over the device to device communication direct link in EPS,
wherein the transceiver circuit is further configured to send the security information to the first UE in a first message,
wherein the transceiver circuit is further configured to send the security information to the second UE in a second message, and
wherein each of the first message and the second message are respectively protected using a further security key previously provided to the one of the first UE and the second UE to which the respective message is sent.

2. The network entity of claim 1 , wherein the processor is further configured to generate a key specific to each of the first UE and the second UE, and
wherein the processor is further configured to encrypt the security information with the key specific to each of the first UE and the second UE.

3. A user equipment (UE) comprising:
a transceiver circuit; and
a processor,
wherein the transceiver circuit is configured to receive, from a network entity, security information that is common to the UE and another UE and from which the UE and the another UE can derive a security key for protecting user plane traffic sent Over a device to device communications direct link in Evolved Packet System (EPS),
wherein the security information is received by the UE in a first message,
wherein the security information is received by the another UE in a second message,
wherein the first message is protected using a further security key previously received by the UE,
wherein the processor is configured to derive, using the received security information, the security key for protecting user plane traffic, and to establish the device to device communications direct link with the another UE in EPS, and
wherein the processor is further configured to protect user plane communication sent over the device to device communications direct link using the derived security key for protecting user plane traffic.

4. The user equipment of claim 3 , wherein each of the first message and the second message is respectively encrypted using a security key previously stored at the UE to which the respective message is sent.

5. The user equipment device of claim 3 , wherein the transceiver circuit is further configured to receive radio bearer information that is common for the UE and the another UE and that is used by the first UE and the another UE to establish the device to device communications direct link in EPS.

6. The user equipment of claim 5 , wherein the transceiver circuit is further configured to receive bearer configuration data, including a traffic flow template, for the UE, that includes a destination address for the another UE.

7. The user equipment of claim 3 , wherein each of the first message and the second message is associated with a respective IP address of the destination UE to which the respective message is sent.

8. A communication control method comprising:
controlling setting up a security configuration for a device to device communications direct link in Evolved Packet System (EPS) between a first user equipment (UE) and a second UE;
sending, to the first UE and to the second UE, security information that is common to the first UE and to the second UE and from which the first UE and the second UE can derive a security key for protecting user plane traffic sent over the device to device communications direct link in EPS;
wherein the security information is sent to the first UE, in a first message,
wherein the security information is sent to the second UE, in a second message, and
wherein each of the first message and the second message are respectively protected using a further security key previously provided to the one of the first UE and the second UE to which the respective message is sent.

9. A communication control method for a user equipment (UE), the communication control method comprising:
receiving, from a network entity, security information that is common to the UE and to another UE and from which the UE and the another UE can derive a security key for protecting user plane traffic sent over a device to device communications direct link in Evolved Packet System (EPS),
wherein the security information is received by the UE in a first message,
wherein the security information is received by the another UE in a second message, and
wherein each of the first message and the second message are respectively protected using a further security key previously received by the one of the UE and the another UE to which the respective message is sent;

deriving, using the received security information, the security key for protecting user plane traffic;
establishing the device to device communications direct link in EPS with the another UE; and
protecting user plane communications sent over the device to device communications direct link using the derived security key for protecting user plane traffic.

Assignees

• Nec Corp

Inventors

• Delsol Thomas
• Jactat Caroline

Classifications

• H04L63/062 Primary

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04W76/14 Primary

  Direct-mode setup · CPC title

• H04L63/205

  involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24) · CPC title

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04W76/023

  Electricity · mapped topic