Systems and methods for secure policy messaging
AssigneeVerizon Patent and Licensing Inc.
InventorsVinod Kumar CHOYI, Shanthala KURAVANGI-THAMMAIAH, Yousif TARGALI
Life of this patent
Estimating the term…
Abstract
In some implementations, a policy control function (PCF) device may receive a PCF device key uniquely associated with a user equipment (UE). The PCF device may generate an integrity key and an encryption key based on the PCF device key and an identifier of the PCF device. The PCF device may generate, based on the integrity key, integrity data associated with policy information related to the UE. The PCF device may encrypt, based on the encryption key, the policy information to generate encrypted policy information. The PCF device may send, for the UE, a UE policy message indicating the integrity data, the encrypted policy information, and the identifier of the PCF device.
Claims20
A method, comprising:
- receiving, by a policy control function (PCF) device, a PCF device key uniquely associated with a user equipment (UE);
- generating, by the PCF device, an integrity key and an encryption key based on the PCF device key and an identifier of the PCF device;
- generating, by the PCF device and based on the integrity key, integrity data associated with policy information related to the UE;
- encrypting, by the PCF device and based on the encryption key, the policy information to generate encrypted policy information;
- and
- sending, by the PCF device and for the UE, a UE policy message indicating the integrity data, the encrypted policy information, and the identifier of the PCF device.
A user equipment (UE), comprising:
- one or more processors configured to:
- receive a UE policy message indicating first integrity data, encrypted policy information related to the UE, and an identifier of a policy control function (PCF) device,
- wherein the UE is associated with a master session key;
- generate, based on the master session key and the identifier of the PCF device, a PCF device key uniquely associated with the UE;
- generate, based on the PCF device key and the identifier of the PCF device, an integrity key and an encryption key;
- generate, based on the integrity key, second integrity data;
- compare the first integrity data and the second integrity data to determine whether the first integrity data matches the second integrity data;
- decrypt, based on determining that the first integrity data matches the second integrity data and by using the encryption key, the encrypted policy information to generate decrypted policy information associated with the UE;
- and
- apply the decrypted policy information to outgoing traffic associated with the UE.
A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
- one or more instructions that, when executed by one or more processors of a policy control function (PCF) device, cause the PCF device to:
- receive a PCF device key uniquely associated with a user equipment (UE);
- generate an integrity key and an encryption key based on the PCF device key and an identifier of the PCF device;
- generate, based on the integrity key, integrity data associated with policy information related to the UE;
- encrypt, based on the encryption key, the policy information to generate encrypted policy information;
- and
- send, for the UE, a UE policy message indicating the integrity data, the encrypted policy information, and the identifier of the PCF device.
Dependencies are inferred from the claim text.