Service authorization and credential provisioning for v2x communications

An apparatus of a user equipment (UE) configured to communicate with a vehicle-to-everything (V2X) control function (CF) and a V2X Key Management Function (KMF), the UE comprising:

• memory;
• and
• processing circuitry, configured to:
• select a broadcast service from a plurality of available broadcast services;
• encode a key request message for transmission to the V2X KMF, the key request message comprising a service identification (ID) of the selected broadcast service and identification of V2X security techniques supported by the UE for security credential provisioning;
• decode a key response message received from the V2X KMF in response to the key request message, the key response message identifying a V2X security technique of the UE-supported V2X security techniques;
• execute the identified V2X security technique to decode security credentials provisioned by the V2X KW;
• and
• encode data for transmission to a second UE during the selected broadcast service, the encoding based on the provisioned security credentials.

An apparatus of a vehicle-to-everything (V2X) Key Management Function (KMF) configured to communicate with a user equipment (UE) and a V2X control function (CF), the V2X KMF apparatus comprising:

• memory;
• and
• processing circuitry configured to:
• decode a key request message received from the UE, the key request message comprising a service identification (ID) of a broadcast service selected by the UE and identification of V2X security techniques supported by the UE for security credential provisioning;
• select a V2X security technique for provisioning security credentials of the broadcast service;
• determine whether the selected security technique is included in the identified V2X security techniques;
• upon determining the selected security technique is included in the identified V2X security techniques supported by the LTE, encode a key response message for transmission to the UE, the key response message identifying the selected V2X security technique;
• and
• provision the security credentials for transmission to the UE.

A computer-readable storage medium that stores instructions for execution by one or more processors of a user equipment (UE) configured to communicate with a vehicle-to-everything (V2X) control function (CF) and a V2X Certification Authority (CA), the one or more processors to configure the UE to:

• acquire at least one of a private key and a root certificate for communication with the V2X CA;
• select a broadcast service from a plurality of available broadcast services;
• encode a certificate request message for transmission to the V2X CA, the certificate request message comprising a service identification (ID) of the selected broadcast service and identification of V2X security techniques supported by the UE for security credential provisioning;
• decode a certificate response message received from the V2X CA in response to the certificate request message, the certificate response message identifying a V2X security technique of the UE-supported V2X security techniques;
• execute the identified V2X security technique to decode security credentials provisioned by the V2X CA;
• and
• encode data for transmission to a second UE during the selected broadcast service, the encoding based on the provisioned security credentials.

A computer-readable storage medium that stores instructions for execution by one or more processors of a vehicle-to-everything (V2X) Certification Authority (CA) configured to communicate with a user equipment (UE) and a V2X control function (CF), the one or more processors to configure the V2X CA to:

• decode a certificate request message received from the UE, the certificate request message comprising a service identification (ID) of a broadcast service selected by the UE and identification of V2X security techniques supported by the UE for security credential provisioning;
• select a V2X security technique for provisioning certificate-based security credentials of the broadcast service;
• determine whether the selected security technique is included in the identified V2X security techniques;
• upon determining the selected security technique is included in the identified V2X security techniques supported by the UE, encode a certificate response message for transmission to the UE, the key response message identifying the selected V2X security technique;
• and
• provision the certificate-based security credentials for transmission to the UE.