Selection and use of a security agent for device-to-device (d2d) wireless communications

A method comprising:

• detecting, by a base station (BS), a failure of an interface between the BS and a core network;
• sending, by the BS, a failure notification message to one or more mobile stations (MSs) of a cell indicating the failure of the interface between the BS and the core network;
• selecting, by the BS, one or more of the MSs to be a security agent (SA);
• and
• sending a SA configuration message to one or more of the MSs, the SA configuration message including a service identification identifying one or more services, one or more user group IDs identifying one or more user groups for which the MS has been configured as a security agent to perform the one or more identified services, and a BS access key to allow one or more other MSs to access or establish a connection with the BS.

An apparatus comprising at least one processor and at least one memory including computer instructions, when executed by the at least one processor, cause a base station (BS) at least to:

• detect a failure of an interface between the BS and a core network;
• send a failure notification message to one or more mobile stations (MSs) of a cell indicating the failure of the interface between the BS and the core network;
• select one or more of the MSs to be a security agent (SA);
• and
• send a SA configuration message to one or more of the MSs, the SA configuration message including a service identification identifying one or more services, one or more user group IDs identifying one or more user groups for which the MS has been configured as a security agent to perform the one or more identified services, and a BS access key to allow one or more other MSs to access or establish a connection with the BS.

An apparatus comprising at least one processor and at least one memory including computer instructions, when executed by the at least one processor, cause a mobile station (MS) at least to:

• receive, from a base station (BS), a failure notification message indicating a failure of a BS-core network interface;
• send, to the BS, a security agent (SA) notification, the SA notification including at least a MSID identifying the MS, a service profile identifying one or more services that the MS can perform, and one or more user group IDs that identify one or more user groups of which the MS is a member;
• and
• receive, from the BS, a SA configuration message including a service identification identifying at least one of the one or more services, one or more user group IDs identifying one or more user groups for which the MS has been configured as a security agent to perform the identified service, and a BS access key to allow one or more other MSs to access or establish a connection with the BS.