# US 2013/0160101 A1 · Wireless Communication Systems and Methods > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2013/0160101 A1 - Document ID: US20130160101A1 - Status: Published application - Kind: A1 - Application number: 13/330,991 - Filed: 2011-12-20 - Published: 2013-06-20 - Earliest claimed: 2011-12-19 - Assignees: Renesas Mobile Corporation - Inventors: Sami-Jukka HAKOLA; Samuli TURTINEN; Timo K. KOSKELA - Web page: https://patentgrep.com/patent/US20130160101A1 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04W 12/06: Authentication - H04W 76/14: Direct-mode setup - H04W 4/70: Services for machine-to-machine communication [M2M] or machine type communication [MTC] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Embodiments of the invention provide methods, devices and computer programs arranged to control provisioning of device-to-device (D2D) communication services in a communication network. One embodiment includes an apparatus including a processing system arranged to cause the apparatus to: assign a credential of a first type to a first D2D device; store an association between a validity condition and the credential of the first type, wherein the validity condition is dependent on a characteristic of a D2D communication service; transmit data indicative of the credential of the first type for reception by the first D2D device, said credential being for use in verification of said D2D communication service to be provided by the first D2D device to a second, different, D2D device; and maintain an operative state for the D2D communication in dependence on said association. ## Claims ### Claim 1 Apparatus for use in controlling access to a device-to-device (D2D) communication service provided by a first D2D device in a communication network, the apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus at least to: assign a credential of a first type to the first D2D device; store an association between a validity condition and the credential of the first type, wherein the validity condition is dependent on a characteristic of the D2D communication service; transmit data indicative of the credential of the first type for reception by the first D2D device, said credential being for use in verification of said D2D communication service to be provided by the first D2D device to a second, different, D2D device; and maintain an operative state for the D2D communication service in dependence on said association. ### Claim 2 (depends on 1) Apparatus according to claim 1, wherein the at least one memory and the computer program code is configured to maintain a first said operative state and a second, different, said operative state, the first operative state being one in which said first D2D device is authorised to provide the D2D communication service to the second D2D device. ### Claim 3 (depends on 2) Apparatus according to claim 2, wherein the validity condition comprises a validity time period, wherein, subsequent to expiry of the validity time period, the at least one memory and the computer program code is configured to change said operative state associated with said D2D communication service to said second operative state. ### Claim 4 (depends on 2) Apparatus according to claim 2, wherein the at least one memory and the computer program code is configured to: determine the operative state for the D2D communication service; and in the event that the D2D communication service is determined to be in the second operative state, assign and transmit a further, different, credential of the first type for reception by the first D2D device. ### Claim 5 (depends on 4) Apparatus according to claim 4, wherein the at least one memory and the computer program code is configured to perforin said determination periodically. ### Claim 6 (depends on 4) Apparatus according to claim 4, wherein the at least one memory and the computer program code being configured to perform said determination in response to a request message from said second D2D device comprising data indicative of said D2D communication service. ### Claim 7 (depends on 6) Apparatus according to claim 6, wherein, responsive to receiving said request message, the at least one memory and the computer program code is further configured to determine whether said second D2D device is authorised to access said D2D communication service. ### Claim 8 (depends on 6) Apparatus according to claim 6, wherein the at least one memory and the computer program code is further configured to transmit a response message for receipt by the second D2D device, the response message comprising data indicative of the result of said determination. ### Claim 9 (depends on 1) Apparatus according to claim 1, wherein the at least one memory and the computer program code is further configured to assign and transmit a credential of a second type for reception by the second D2D device, said credential of the second type being suitable for use in verification of said D2D communication service. ### Claim 10 (depends on 1) Apparatus according to claim 1, wherein the characteristic comprises a type of the D2D communication service. ### Claim 11 (depends on 2) Apparatus according to claim 2, wherein the at least one memory and the computer program code is configured to maintain a list of D2D communication services determined to be in the first operative state. ### Claim 12 (depends on 11) Apparatus according to claim 11, wherein the at least one memory and the computer program code is further configured to transmit said list to a mobility management entity associated with said communication network. ### Claim 13 (depends on 1) A service gateway comprising an apparatus according to claim 1. ### Claim 14 A method of controlling access to a device-to-device (D2D) communication service provided by a first D2D device in a communication network, the method comprising: assigning a credential of a first type to the first D2D device; storing an association between a validity condition and the credential of the first type, wherein the validity condition is dependent on a characteristic of the D2D communication service; transmitting data indicative of the credential of the first type for reception by the first D2D device, said credential being for use in verification of said D2D communication service to be provided by the first D2D device to a second, different, D2D device; and maintaining an operative state for the D2D communication service in dependence on said association. ### Claim 15 Apparatus for use in controlling access to a device-to-device (D2D) communication service provided by a D2D device in a communication network, the apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus at least to: receive a credential of a first type associated with the D2D device, said credential of the first type being suitable for use in verification of said D2D communication service provided by the D2D device; assign a credential of a second type to the D2D device, said credential of the second type being suitable for use by the D2D device in establishing access to the communication network; and transmit data indicative of the credential of the first type and the credential of the second type for receipt by the D2D device. ### Claim 16 (depends on 15) Apparatus according to claim 15, wherein the at least one memory and the computer program code is configured to combine the credential of the first type to the credential of the second type prior to transmission for receipt by the D2D device ### Claim 17 (depends on 15) Apparatus according to claim 15, wherein the at least one memory and the computer program code is configured to periodically assign a further credential of the second type. ### Claim 18 (depends on 15) A mobility management entity comprising an apparatus according to claim 15. ### Claim 19 Apparatus for use in provisioning a device-to-device (D2D) communication service by a first D2D device within a communication network, the apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus at least to: transmit a D2D discovery signal comprising data indicative of a first credential of a first type for reception by a second, different, D2D device; receive a second, different, credential of the first type; and thereafter transmit a further, different, D2D discovery signal comprising data indicative of said second credential of the first type, wherein said first and second credentials are suitable for use in verification of said D2D communication service. ### Claim 20 (depends on 19) Apparatus according to claim 19, wherein the at least one memory and the computer program code is further configured to receive a credential of a second type, said credential of the second type being suitable for use by the first D2D device in establishing access to the communication network. ### Claim 21 (depends on 19) Apparatus according to claim 19, wherein said D2D discovery signal and said further D2D discovery signal each comprise data indicative of said credential of the second type. ### Claim 22 Apparatus for use in controlling access to a device-to-device (D2D) communication service in a communication network, the apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus at least to: receive a D2D discovery signal comprising data indicative of a credential of a first type corresponding to said D2D communication service; selectively transmit a first message comprising data indicative of said credential of the first type so as to verify said D2D communication service; and thereafter in response to receiving an indication that said D2D communication service is authorised for said communication network, selectively transmit a second message whereby to request access to said D2D communication service. ### Claim 23 (depends on 22) Apparatus according to claim 22, wherein the at least one memory and the computer program code is further configured to: receive a credential of a second type, said credential of the second type being suitable for verifying said D2D communication service; verify said D2D communication service on the basis of said credential of the second type; and in the event that said verification is unsuccessful, transmit said first message. ### Claim 24 (depends on 22) Apparatus according to claim 22, wherein the first message comprises a Non Access Stratum (NAS) message. ### Claim 25 (depends on 24) Apparatus according to claim 24, wherein, while in a Radio Resource Control (RRC) idle operative mode, the at least one memory and the computer program code is configured to transmit said NAS message in a RRC signalling message, so as to cause the apparatus to transition into an RRC operative mode other than said RRC idle operative mode. ### Claim 26 (depends on 25) Apparatus according to claim 25, wherein said RRC signalling message comprises a RRCConnectionRequest or a RRCConnectionSetupComplete message. ### Claim 27 (depends on 22) Apparatus according to claim 22, wherein the first message comprises a non-3GPP dedicated information message.