# US 10,769,615 B2 · Device and method in wireless communication system and wireless communication system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,769,615 B2 - Document ID: US10769615B2 - Status: Granted - Kind: B2 - Application number: 16/297,746 - Filed: 2019-03-11 - Published: 2019-07-04 - Granted: 2020-09-08 - Earliest claimed: 2015-08-07 - Assignees: Sony Corporation - Applicants: Sony Corporation - Inventors: Ji Li; Zhihui Zhang - Web page: https://patentgrep.com/patent/US10769615B2 ## CPC - G06Q 20/3224: {Transactions dependent on location of M-devices} - G06Q 20/382: {insuring higher security of transaction} - G06Q 20/4016: {involving fraud or risk level assessment in transaction processing} - H04W 4/38: for collecting sensor information - H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA] - G06Q 2220/00: Business processing using cryptography - H04W 4/21: for social networking applications - H04W 12/63: Location-dependent; Proximity-dependent - H04W 76/14: Direct-mode setup - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract There is disclosed a device and method in a wireless communication system and a wireless communication system, the device including: a secure channel establishing unit configured to establish a secure communication channel between a first apparatus and a second apparatus using a location-based service; a data security key generating unit configured to generate a data security key for protecting service data based on at least a channel key extracted from the secure communication channel; and a controlling unit configured to control the service data protected using the data security key to be transmitted on the secure communication channel. According to the embodiments of the disclosure, it is possible to improve security of data transmission. ## Claims ### Claim 1 A device, comprising: processing circuitry configured to establish a secure communication channel between a first apparatus and a second apparatus; extract a channel key from the secure communication channel; generate a data security key for protecting service data based on at least the extracted channel key; protect the service data using the generated data security key; generate cipher text data from the protected service data using the extracted channel key; and transmit the generated cipher text data on the secure communication channel. ### Claim 2 (depends on 1) The device according to claim 1, wherein the processing circuitry is further configured to generate a service classification parameter based on a type of the service data, the service classification parameter indicates one or more of an algorithm for generating the data security key and a key length of the data security key, and the processing circuitry is further configured to generate the data security key based on the service classification parameter. ### Claim 3 (depends on 2) The device according to claim 2, wherein the processing circuitry is further configured to generate the service classification parameter based on authentication information inputted by a user for an authentication process to send the service data. ### Claim 4 (depends on 2) The device according to claim 2, wherein the type of the service data comprises payment data. ### Claim 5 (depends on 4) The device according to claim 4, wherein the first apparatus is a mobile payment client, and the second apparatus is a mobile payment server. ### Claim 6 (depends on 1) The device according to claim 1, wherein the data security key comprises one or more of a verification key protecting verifiability, an encryption and decryption key protecting data confidentiality and an integrity key protecting data integrity. ### Claim 7 (depends on 1) The device according to claim 1, wherein the device is the first apparatus, and the processing circuitry is further configured to: send a connection request to a corresponding second apparatus among a plurality of second apparatuses based on location information; and establish the secure communication channel according to a response to the connection request from the corresponding second apparatus. ### Claim 8 (depends on 7) The device according to claim 7, wherein the processing circuitry is further configured to reselect, according to a predetermined triggering condition, the corresponding second apparatus from the plurality of second apparatuses based on the location information to send the connection request. ### Claim 9 (depends on 7) The device according to claim 7, wherein the processing circuitry is further configured to select, using a preset list, the corresponding second apparatus from the plurality of second apparatuses to send the connection request. ### Claim 10 (depends on 1) The device according to claim 1, wherein the processing circuitry is configured to establish the secure communication channel between the first apparatus and the second apparatus using a location-based service. ### Claim 11 (depends on 10) The device according to claim 10, wherein the location-based service is Proximity-based Service (ProSe). ### Claim 12 (depends on 1) The device according to claim 1, wherein the channel key is a ProSe traffic key (PTK). ### Claim 13 (depends on 12) The device according to claim 12, wherein the processing circuitry is further configured to generate the data security key according to apparatus information of the first apparatus and the second apparatus. ### Claim 14 (depends on 1) The device according to claim 1, wherein the channel key is a WiFi key. ### Claim 15 (depends on 1) The device according to claim 1, wherein the processing circuitry is further configured to generate the data security key according to a Service Set ID (SSID). ### Claim 16 A device, comprising: processing circuitry configured to establish, in response to a connection request from a first apparatus, a secure communication channel between the first apparatus and a second apparatus; protect service data using a data security key; generate cipher text data from the protected service data using a channel key; and transmit the generated cipher text data on the secure communication channel, wherein the channel key is extracted by the first apparatus from the secure communication channel, the data security key is generated by the first apparatus based on at least the channel key extracted from the secure communication channel. ### Claim 17 (depends on 16) The device according to claim 16, wherein the first apparatus is a mobile payment client, and the second apparatus is a mobile payment server. ### Claim 18 (depends on 16) The device according to claim 16, wherein the channel key is a ProSe traffic key (PTK). ### Claim 19 (depends on 16) The device according to claim 16, wherein the channel key is a WiFi key. ### Claim 20 A communication system, comprising: a first apparatus including first processing circuitry configured to: establish a secure communication channel with a second apparatus, extract a channel key from the secure communication channel, generate a data security key for protecting service data based on at least the extracted channel key, protect the service data using the generated data security key, generate cipher text data from the protected service data using the extracted channel key, and transmit the generated cipher text data to the second apparatus on the secure communication channel; and the second apparatus including second processing circuitry configured to: establish, in response to a connection request from the first apparatus, the secure communication channel with the first apparatus, and receive the generated cipher text data from the first apparatus. ### Claim 21 A method, comprising: establishing, using processing circuitry, a secure communication channel between a first apparatus and a second apparatus; extracting a channel key from the secure communication channel; generating a data security key for protecting service data based on at least the extracted channel key; protecting the service data using the generated data security key; generating cipher text data from the protected service data using the extracted channel key; and transmitting the generated cipher text data on the secure communication channel. ### Claim 22 A non-transitory computer readable medium including executable instructions, which when executed by a computer cause the computer to: establish a secure communication channel between a first apparatus and a second apparatus; extract a channel key from the secure communication channel; generate a data security key for protecting service data based on at least the extracted channel key; protect the service data using the generated data security key; generate cipher text data from the protected service data using the extracted channel key; and transmit the generated cipher text data on the secure communication channel.