A method for operating a cellular network

A method comprising:

• receiving a second discovery protected message from a first device protected,
• wherein the second discovery protected message is with a second set of keys,
• wherein the second discovery protected message comprises including a first discovery message,
• wherein the first discovery message is end-to-end protected with a first set of keys according to a policy or a configuration;
• undoing the protection of the second discovery protected message;
• verifying the integrity and freshness of the received second discovery protected messages with a second set of keys,
• extracting the first discovery protected messages according to the policy or the configuration;
• constructing a third discovery protected message, wherein the third discovery message comprises the first discovery protected messages;
• protecting the third discovery message using a third set of keys into a third discovery protected message according to the policy or the configuration;
• and
• transmitting the third discovery protected message to a third device.

An apparatus comprising:

• a processor circuit and a memory circuit, wherein the memory is arranged to store instructions for the processor circuit,
• wherein the processor circuit is arranged to construct a Direct Communication Request message,
• wherein the Direct Communication Request message comprises integrated discovery,
• wherein the Direct Communication Request message comprises an indication determining whether the message is protected,
• wherein the processor circuit is arranged to protect the Direct Communication Request message with a second set of keys if the indication is enabled,
• wherein the processor circuit is arranged to broadcast the Direct Communication Request message.

An apparatus comprising:

• a processor circuit and a memory circuit, wherein the memory is arranged to store instructions for the processor circuit,
• wherein the processor circuit is arranged to receive a Direct Communication Request message,
• wherein the Direct Communication Request message comprises integrated discovery,
• wherein the Direct Communication Request message comprises a protection indication from a first device,
• wherein the processor circuit is arranged to undo the protection if the protection indication is enabled,
• wherein the processor circuit is arranged to verify the integrity and freshness of the Direct Communication Request DCR message if the protection indication is enabled,
• wherein the processor circuit is arranged to construct a new Direct Communication Request message from the Direct Communication Request message,
• wherein the Direct Communication Request message comprises integrated discovery,
• wherein the Direct Communication Request message comprises the protection indication,
• wherein the processor circuit is arranged to protect the new Direct Communication Request message with at least one set of keys, if the indication is enabled,
• wherein the processor circuit is arranged to broadcast the protected new Direct Communication Request message with integrated discovery to a third device.

An apparatus comprising:

• a processor circuit and a memory circuit, wherein the memory is arranged to store instructions for the processor circuit,
• wherein the processor circuit is arranged to receive at least one Direct Communication Request messages,
• wherein the at least one Direct Communication Request messages comprises integrated discovery,
• wherein the at least one Direct Communication Request messages comprises a protection indication from a second device, and
• wherein the processor circuit is arranged to undo the protection,
• wherein the processor circuit is arranged to perform integrity and freshness verification of the at least one Direct Communication Request messages, with integrated discovery, if the protection indication is enabled.

An apparatus comprising:

• a processor circuit and a memory circuit, wherein the memory is arranged to store instructions for the processor circuit,
• wherein the processor circuit is arranged to send a first message to connect to a second device,
• wherein the first message comprises a Message Integrity Code or an encrypted identifier and/or a key identifier;
• and
• wherein the processor circuit is arranged to receive a failure message when the integrity verification or the Relay Service Code integrity check fails at the second device and/or receive an accept message when the integrity verification succeeds at the second device.

An apparatus comprising:

• a processor circuit and a memory circuit, wherein the memory is arranged to store instructions for the processor circuit,
• wherein the processor circuit is arranged to receive a first message to provide connectivity to a first device,
• wherein the processor circuit is arranged to verify the integrity of the first message by checking a Message Integrity Code and/or an encrypted identifier using an integrity key,
• wherein the integrity is used in a previous discovery procedure or is bound to one of the configured Relay Service Code in the apparatus or is bound to a previously exchanged message identified by a key identifier or is bound to a key identifier included in the message,
• wherein the processor circuit is arranged to ignore the first message when the Message Integrity Code verification fails, and/or reply with a failure message when the integrity verification succeeds but the Relay Service Code fails, and/or reply with an accept message when the integrity verification succeeds, or verify the integrity of the first message by checking a Message Integrity Code or an encrypted identifier using an integrity key bound to one of the configured Relay Service Codes in the apparatus or bound to a previously exchanged message identified by a key identifier,
• wherein the processor circuit is arranged to ignore the first message if the integrity verification fails.

A method comprising:

• receiving a first message to provide connectivity to a first device, wherein the first message comprises a Message Integrity Code and/or encrypted identifier;
• and
• verifying the integrity of the first message by checking the Message Integrity Code and/or the encrypted identifier;
• and
• replying with a failure message when the integrity verification of the encrypted identifier fails and/or an accept message when the integrity verification succeeds.

A method comprising:

• receiving at least one Direct Communication Request messages,
• wherein new the Direct Communication Request message comprises integrated discovery,
• wherein new the Direct Communication Request message comprises a protection indication from a second device;
• undoing the protection;
• and
• performing integrity and freshness verification of the received Direct Communication Request messages if the protection indication is enabled.

A method comprising:

• receiving a Direct Communication Request message,
• wherein new the Direct Communication Request message comprises integrated discovery,
• wherein new the Direct Communication Request message comprises a protection indication from a first device;
• undoing the protection, and verifying the integrity and freshness of the Direct Communication Request message if the protection indication is enabled;
• constructing a new Direct Communication Request message wherein new the Direct Communication Request message comprises from the Direct Communication Request message,
• wherein the Direct Communication Request message comprises integrated discovery,
• wherein the Direct Communication Request message comprises the protection indication;
• protecting the new Direct Communication Request message with at least one set of keys, if the indication is enabled;
• and
• broadcasting the protected new Direct Communication Request message to a third device.

A method comprising:

• constructing a Direct Communication Request message,
• wherein new the Direct Communication Request message comprises integrated discovery,
• wherein new the Direct Communication Request message comprises an indication determining whether the message is protected;
• protecting the Direct Communication Request message with at least a second set of keys if the indication is enabled;
• and
• broadcasting the Direct Communication Request message.