# US 10,320,917 B2 · Key negotiation processing method and apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,320,917 B2 - Document ID: US10320917B2 - Status: Granted - Kind: B2 - Application number: 15/146,690 - Filed: 2016-05-04 - Published: 2016-08-25 - Granted: 2019-06-11 - Earliest claimed: 2013-11-04 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Bo Zhang; Chengdong He; Lu Gan - Web page: https://patentgrep.com/patent/US10320917B2 ## CPC - H04L 9/0838: {Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these (network architectures or network communication protocols for key exchange in a packet data network H04L63/061)} - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - H04L 69/24: Negotiation of communication capabilities - H04W 12/041: Key generation or derivation - H04W 12/0471: Key exchange - H04L 2209/80: Wireless - H04W 76/14: Direct-mode setup - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method and apparatus of key negotiation processing, which includes acquiring, by a control network element, a first key negotiation parameter and a second key negotiation parameter, and sending, by the control network element, the first key negotiation parameter and/or the second key negotiation parameter to the first user equipment UE and a second UE such that the first UE and the second UE generate a key according to the first key negotiation parameter and the second key negotiation parameter. Key negotiation may be performed between two UEs that perform proximity communication. ## Claims ### Claim 1 A key negotiation processing method, comprising: acquiring, by a control network element, a first key negotiation parameter and a second key negotiation parameter by: receiving, by the control network element, a third key negotiation parameter from a first user equipment (UE); and generating the first key negotiation parameter according to the third key negotiation parameter and a first shared key between the first UE and the control network element, acquiring, by the control network element, the first key negotiation parameter and the second key negotiation parameter in response to a proximity communication connection request being sent between the first UE and a second UE, the control network element acquiring the second key negotiation parameter by: receiving, by the control network element, a fourth key negotiation parameter from the second UE; and generating the second key negotiation parameter according to the fourth key negotiation parameter and a second shared key between the second UE and the control network element; and sending, by the control network element, at least one of the first key negotiation parameter or and the second key negotiation parameter to the first UE and the second UE such that the first UE and the second UE generate a first key according to the first key negotiation parameter and the second key negotiation parameter, and a proximity communication connection is established between the first UE and the second UE using the first key. ### Claim 2 (depends on 1) The method of claim 1, wherein acquiring, by the control network element, the first key negotiation parameter comprises receiving, by the control network element, the first key negotiation parameter from the first UE, and acquiring, by the control network element, the second key negotiation parameter comprises receiving, by the control network element, the second key negotiation parameter from the second UE. ### Claim 3 (depends on 1) The method of claim 1, wherein sending, by the control network element, at least one of the first key negotiation parameter and the second key negotiation parameter to the first UE and the second UE comprises: sending, by the control network element, the second key negotiation parameter to the first UE; and sending, by the control network element, the first key negotiation parameter to the second UE. ### Claim 4 (depends on 1) The method of claim 1, wherein acquiring, by the control network element, the first key negotiation parameter and the second key negotiation parameter comprises generating, by the control network element, the first key negotiation parameter and the second key, negotiation parameter. ### Claim 5 (depends on 4) The method of claim 4, wherein sending, by the control network element, at least one of the first key negotiation parameter or the second key negotiation parameter to the first UE and the second UE comprises: sending, by the control network element, the first key negotiation parameter and the second key negotiation parameter to the first UE; and sending, by the control network element, the first key negotiation parameter and the second key negotiation parameter to the second UE. ### Claim 6 (depends on 1) The method of claim 1, wherein the control network element comprises a mobility management entity. ### Claim 7 (depends on 1) The method of claim 1, wherein the first key negotiation parameter comprises a nonce. ### Claim 8 (depends on 1) The method of claim 1, wherein the first key negotiation parameter comprises a connection identifier. ### Claim 9 (depends on 1) The method of claim 1, wherein the first key negotiation parameter comprises an application identifier. ### Claim 10 (depends on 1) The method of claim 1, wherein the first key negotiation parameter comprises an identifier of a cell in which the first UE is located. ### Claim 11 (depends on 1) The method of claim 1, wherein the first key negotiation parameter comprises a count value of a counter. ### Claim 12 (depends on 1) The method of claim 1, wherein the first key negotiation parameter comprises a constant. ### Claim 13 (depends on 1) The method of claim 1, wherein the second key negotiation parameter is calculated according to the first key negotiation parameter and a key derivation function. ### Claim 14 (depends on 1) The method of claim 1, wherein the first UE and the second UE use a same key generation algorithm. ### Claim 15 A key negotiation processing method, comprising: acquiring, by, a control network element, a first key negotiation parameter and a second key negotiation parameter, the first key negotiation parameter and the second key negotiation parameter being acquired by the control network element in response to a proximity communication connection request being sent between a first user equipment (UE) and a second UE, the control network element comprising a first control network sub-element to which the first UE is attached and a second control network sub-element to which the second UE is attached, and the control network element acquiring the first key negotiation parameter and the second key negotiation parameter by: receiving, by the first control network sub-element, a third key negotiation parameter from the first UE; generating, by the first control network sub-element, the first key negotiation parameter according to the third key negotiation parameter and a first shared key between the first UE and the first control network sub-element; sending, by the first control network sub-element, the first key negotiation. parameter to the second control network sub-element such that the second control network element sends the first key negotiation parameter to the second UE; receiving, by the second control network sub-element, a fourth key negotiation parameter from the second UE; generating, by the second control network sub-element, the second key negotiation parameter according to the fourth key negotiation parameter and a second shared key between the second UE and the second control network sub-element; and sending, by the second control network sub-element, the second key negotiation parameter to the first control network sub-element such that the first control network sub-element sends the second key negotiation parameter to the first UE; and sending, by the control network element, at least one of the first key negotiation parameter or the second key negotiation parameter to the first UE and the second UE such that the first UE and the second UE generate a first key according to the first key negotiation parameter and the second key negotiation parameter, and a proximity communication connection is established between the first UE and the second UE using the first key. ### Claim 16 (depends on 15) The method of claim 15, wherein sending, by the control network element, at least one of the first key negotiation parameter or the second key negotiation parameter to the first UE and a second UE comprises: sending, by the first control network sub-element, the second key negotiation parameter to the first UE; and sending, by the second control network element, the first key negotiation parameter to the second UE. ### Claim 17 A key negotiation processing method, comprising: acquiring, by a control network element, a first key negotiation parameter and a second key negotiation parameter, the first key negotiation parameter and the second key negotiation parameter being acquired by the control network element in response to a proximity communication connection request being sent between a first user equipment (UE) and a second UE, the control network element comprising a first control network sub-element to which the first UE is attached and a second control network sub-element to which the second UE is attached, and the control network element acquiring the first key negotiation parameter and the second key negotiation parameter by: receiving, by the first control network sub-element, the first key negotiation parameter from the first UE; sending, by the first control network sub-element, the first key negotiation parameter to the second control network sub-element such that the second control network sub-element sends the first key negotiation parameter to the second UE; receiving, by the second control network element, the second key negotiation parameter from the second UE; and sending, by the second control network element, the second key negotiation parameter to the first control network sub-element such that the first control network sub-element sends the second key negotiation parameter to the first UE; and sending, by the control network element, at least one of the first key negotiation parameter or the second key negotiation parameter to the first UE and the second UE such that the first UE and the second UE generate a first key according to the first key negotiation parameter and the second key negotiation parameter, and a proximity communication connection is established between the first UE and the second UE using the first key. ### Claim 18 A key negotiation processing method, comprising: acquiring, by a control network element, a first key negotiation parameter by: receiving, by the control network element, a third key negotiation parameter from a first user equipment (UE); and generating the first key negotiation parameter according to the third key negotiation parameter and a first shared key between the first UE and the control network element; acquiring, by the control network element, a second key negotiation parameter by: receiving, by the control network element, a fourth key negotiation parameter from a second UE; and generating the second key negotiation parameter according to the fourth key negotiation parameter and a second shared key between the second UE and the control network element; and sending, by the control network element, at least one of the first key negotiation parameter or the second key negotiation parameter to the first UE and the second UE such that the first UE and the second UE generate a first key according to the first key negotiation parameter and the second key negotiation parameter, the control network element comprising a first control network sub-element to which the first UE is attached and a second control network sub-element to which the second UE is attached, and the control network element acquiring the first key negotiation parameter and the second key negotiation parameter by: receiving, by the first control network sub-element, the first key negotiation parameter from the first UE; sending, by the first control network sub-element, the first key negotiation parameter to the second control network sub-element such that the second control network sub-element sends the first key negotiation parameter to the second UE; receiving, by the second control network element, the second key negotiation parameter from the second UE; receiving, by the first control network sub-element, a third key negotiation parameter from the first UE; generating, by the first control network sub-element, the first key negotiation parameter according to the third key negotiation parameter and a first .shared key between the first UE and the first control network sub-element; sending, by the first control network sub-element, the first key negotiation parameter to the second control network sub-element such that the second control network element sends the first key negotiation parameter to the second UE; receiving, by the second control network sub-element, a fourth key negotiation parameter from the second UE; generating, by the second control network sub-element, the second key negotiation parameter according to the fourth key negotiation parameter and a second shared key between the second UE and the second control network sub-element; and sending, by the second control network sub-element, the second key negotiation parameter to the first control network sub-element such that the first control network sub-element sends the second key negotiation parameter to the first UE. ### Claim 19 (depends on 18) The method of claim 18, wherein the control network element comprises a mobility management entity, the first key negotiation parameter comprises an identifier of a cell in which the first UE is located, and the second key negotiation parameter is calculated according to the first key negotiation parameter and a key derivation function.