Back to results
US 11,109,206 B2Granted
Security method and system for supporting discovery and communication between proximity based service terminals in mobile communication system environment
AssigneeSamsung Electronics Co., Ltd.
InventorKyungjoo Suh
Life of this patent
Estimating the term…
Abstract
A device-to-device (hereinafter referred to as “D2D”) discovery for D2D communication and a related security method during the D2D communication are provided when a proximity based service (hereinafter referred to as “ProSe”), ProSe discovery, ProSe communication, and the D2D communication are performed in a mobile communication network, and thus a device for performing communication is capable of carrying out a security method for the ProSe discovery and the ProSe communication.
Claims10
A method for a proximity based service (ProSe) communication by a first terminal in a mobile communication system, the method comprising:
- receiving a public key of at least one terminal of a ProSe group from a ProSe function node, wherein the public key belongs to a second terminal that is one of the at least one terminal of the ProSe group;
- receiving, from the second terminal, a paging message including an indicator that informs the first terminal that the second terminal is initiating the ProSe communication;
- receiving, from the second terminal, a ProSe communication request including a ProSe identity of the first terminal, a ProSe identity of the second terminal and an identity of the ProSe group, wherein the ProSe communication request is different from the paging message;
- encrypting authentication information based on the public key to generate encrypted authentication information;
- transmitting, to the second terminal, a first message including the encrypted authentication information;
- receiving, from the second terminal, a second message including decrypted authentication information;
- determining whether the first terminal is a target terminal for the ProSe communication request based on verifying that the decrypted authentication information included in the second message is the authentication information, and has been decrypted from the encrypted authentication information based on a private key of the second terminal;
- transmitting, to the second terminal, a ProSe communication response message after it is verified that the decrypted authentication information included in the second message is the authentication information included in the first message;
- and
- performing the ProSe communication with the second terminal.
7 more elements
A first terminal for a proximity based service (ProSe) communication in a mobile communication system, the first terminal comprising:
- a transceiver;
- and
- a controller configured to:
- receive a public key of at least one terminal of a ProSe group from a ProSe function node, wherein the public key belongs to a second terminal that is one of the at least one terminal of the ProSe group;
- receive, from the second terminal via the transceiver, a paging message including an indicator that informs the first terminal that the second terminal is initiating the ProSe communication;
- receive, from the second terminal via the transceiver, a ProSe communication request including a ProSe identity of the first terminal, a ProSe identity of the second terminal and an identity of the ProSe group, wherein the ProSe communication request is different from the paging message;
- encrypt authentication information based on the public key to generate encrypted authentication information;
- transmit, to the second terminal via the transceiver, a first message including the encrypted authentication information;
- receive, from the second terminal via the transceiver, a second message including decrypted authentication information;
- determine whether the first terminal is a target terminal for the ProSe communication request based on verifying that the decrypted authentication information included in the second message is the authentication information, and has been decrypted from the encrypted authentication information based on a private key of the second terminal;
- transmit, to the second terminal via the transceiver, a ProSe communication response message after it is verified that the decrypted authentication information included in the second message is the authentication information included in the first message;
- and
- perform the ProSe communication with the second terminal.
10 more elements
A method for a proximity based service (ProSe) communication by a second terminal in a mobile communication system, the method comprising:
- transmitting, to a first terminal, a paging message including an indicator that informs the first terminal that the second terminal is initiating the ProSe communication;
- transmitting, to the first terminal, the ProSe communication request including a ProSe identity of the first terminal, a ProSe identity of the second terminal and an identity of a ProSe group, wherein the ProSe communication request is different from the paging message;
- receiving, from the first terminal, a first message including encrypted authentication information, which is authentication information that has been encrypted based on a public key of the second terminal;
- decrypting the encrypted authentication information based on a private key of the second terminal;
- transmitting, to the first terminal, a second message including the decrypted authentication information;
- receiving, from the first terminal, a ProSe communication response message after it is verified that the decrypted authentication information included in the second message is the authentication information;
- and
- performing the ProSe communication with the first terminal.
5 more elements
A second terminal for proximity based service (ProSe) communication in a mobile communication system, the second terminal comprising:
- a transceiver;
- and
- a controller configured to:
- transmit, to a first terminal via the transceiver, a paging message including an indicator that informs the first terminal that the second terminal is initiating the ProSe communication;
- transmit, to the first terminal via the transceiver, the ProSe communication request including a ProSe identity of the first terminal, a ProSe identity of the second terminal and an identity of a ProSe group, wherein the ProSe communication request is different from the paging message;
- receive, from the first terminal via the transceiver, a first message including encrypted authentication information, which is authentication information that has been encrypted based on a public key of the second terminal;
- decrypt the encrypted authentication information based on a private key of the second terminal;
- transmit, to the first terminal via the transceiver, a second message including the decrypted authentication information;
- receive, from the first terminal via the transceiver, a ProSe communication response message after it is verified that the decrypted authentication information included in the second message is the authentication information;
- and
- perform the ProSe communication with the first terminal.
8 more elements
Dependencies are inferred from the claim text.