US 11,452,001 B2Granted

Group based context and security for massive internet of things devices

AssigneeApple Inc.

InventorsChing-Yu Liao, Xiruo Liu, Liuyang Yang, Moreno Ambrosin

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods are provided for efficient group-based handling of massive internet of things (M-IoT) devices that are compatible with both current cellular networks, and next generation 5G systems. Examples allow reduced overhead between a (radio) access network (R)AN and a core network (CN) that originates from unnecessary signaling traffic for IoT devices transitioning from IDLE to CONNECTED mode, especially when sending small data packets. In addition, or in other embodiments, mobility solutions are provided for group based M-IoT.

Claims24

Dependent claims

An apparatus for a first network entity to handle group based context and security of a group of communication devices in a communication network, the apparatus comprising:

a memory interface to send or receive, to or from a memory device, information corresponding to a user plane routing profile and a group security context;
and
a processor to:
create a group context corresponding to the group of communication devices for a service, wherein the group context comprising the user plane routing profile and the group security context;
based on a service subscription of the group of communication devices, determine a network slice for the group of communication devices to use for the service;
and
generate a message to communicate the group context to a second network entity for storing and using for authentication of one or more of the communication devices returning from an idle or inactive mode to a connected mode for packet transmission through the communication network.

4 more elements

A non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions to, when executed, instruct a processor of an authentication server function (AUSF) to provide group security control in a mobile network, the computer-readable instructions to:

validate an internet of things (IoT) device with a first security key for integrity (KNASint) and a second security key for confidentiality (KNASenc);
send a first message to a group authority (GA) for managing group enrollment for the IoT device in respond to a second message received from the IoT device,
wherein the first message includes a first token (TK1) for the IoT device to deliver a third secret key (k) together with session information including nonce, user equipment (UE) security capabilities, and identifiers, and
wherein the GA uses a second token (TK2) to deliver the third secret key (k) and a seed number together with the session information.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 16/480,267Filed 16 Apr 2018 · us provisional application
Priority: 17 Apr 2017
Published: US 2019/0387401 A119 Dec 2019
Granted: 20 Sep 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification15 codes

H04W 4/08
Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective…:…
H04W 76/12
Connection setup: setup of transport tunnels
H04W 4/70
Services specially adapted for wireless communication networks; Facilities therefor: services for machine-to-machine communication [M2M] or…
H04W 8/08
Processing of mobility data, e.g. registration information at HLR [Home Location Register] or VLR [Visitor Location Register]; Transfer of…:…

Family

Application62/486,197Us provisional application · filed 17 Apr 2017
Application62/566,731Us provisional application · filed 2 Oct 2017
Application62/588,033Us provisional application · filed 17 Nov 2017
US 2019/0387401 A1Pre-grant publication · published 19 Dec 2019
US 11,452,001 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key