Security architecture and solution for handling internet of things devices in a fifth generation system

A method of establishing a group trust relationship in an Internet of Things (IoT) system using a base controller, comprising:

• receiving, from a management entity, a first set of keys corresponding to a first IoT device within a group of IoT devices;
• receiving, from the management entity, a group key corresponding to the group of IoT devices after the first IoT device has transmitted initial data using the first set of keys;
• generating a group set of keys corresponding to the group key;
• discarding the first set of keys and storing the group set of keys to establish an always on connection between each of the IoT devices and the base controller, the always on connection maintained while each of the IoT devices is idle;
• and
• receiving, from a second IoT device within the IoT group, subsequent data using the group set of keys and the always on connection.

A management entity configured to establish a group trust relationship in an Internet of Things (IoT) system, comprising:

• a non-transitory memory storage comprising instructions;
• and
• one or more processors in communication with the memory, wherein the one or more processors execute the instructions to:
• obtain, from a subscriber identification module card, a secret key corresponding to a first IoT device from a group of IoT devices;
• derive a cyphering key and an integrity protection key based on the secret key;
• derive an access security mobility entity key based on the cyphering key and an integrity protection key;
• derive a first set of keys corresponding to the first IoT device based on the access security mobility entity key, the first set of keys configured to be used by the first IoT device to transmit initial data and then discarded;
• and
• encrypt and transmit a group secret key to the first IoT device over a secure communications channel, wherein the group secret key permits the first IoT device to generate a group set of keys, the group set of keys configured to be stored to establish an always on connection, the always on connection maintained while the first IoT device is idle and used by the first IoT device to transmit subsequent data.