Device-to-device communication security with authentication certificates
AssigneeNokia Technologies Oy
InventorsJan-Erik Ekberg, Mikko Aleksi Uusitalo, Zexian Li
Life of this patent
Estimating the term…
Abstract
An apparatus comprising: a requester configured to request a certificate comprising at least one identifier associated with the apparatus from at least one network node; a first receiver configured to receive the certificate from the at least one network node; and a forwarder configured to forward the certificate to at least one further apparatus; a second receiver configured to receive a further certificate from the further apparatus, the further certificate comprising at least one further identifier associated with the further apparatus; and an authenticated configured to authenticate the further apparatus based on the further certificate.
Claims13
An apparatus comprising at least one processor and at least one memory including computer program code for one or more programs, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to:
- transmit, to a first network node, a request for a certificate comprising at least one identifier associated with the apparatus, the request comprising a request identifier with a security association established between the apparatus and another apparatus in a device-to-device communication network;
- receive, from the first network node, the certificate;
- forward the certificate to the other apparatus;
- receive, from the other apparatus, another certificate, the other certificate comprising at least one other identifier associated with the other apparatus;
- authenticate the other apparatus based on the other certificate;
- and
- enable, in response to the authentication, communication with the other apparatus.
An apparatus comprising at least one processor and at least one memory including computer program code for one or more programs, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to:
- receive a request from a first apparatus for a certificate comprising at least one identifier associated with the first apparatus, the request comprising a request identifier with a security association established between the first apparatus and a second apparatus in a device-to-device communication network;
- generate the certificate comprising the at least one identifier associated with the first apparatus;
- and
- transmit the certificate comprising the at least one identifier associated with the first apparatus, wherein the certificate is configured to be exchanged between the first apparatus and the second apparatus to authenticate the first apparatus at the second apparatus to enable communication between the first apparatus and the second apparatus.
An apparatus comprising:
- a requester configured to request, from a first network node, a certificate comprising at least one identifier associated with the apparatus, the request comprising a request identifier with a security association established between the apparatus and another apparatus in a device-to-device communication network;
- a first receiver configured to receive the certificate from the first network node;
- a forwarder configured to forward the certificate to the other apparatus;
- a second receiver configured to receive another certificate from the other apparatus, the other certificate comprising at least one other identifier associated with the other apparatus;
- an authenticator configured to authenticate the other apparatus based on the other certificate;
- and
- an enabler configured to enable, in response to the authentication, communication with the other apparatus.
Dependencies are inferred from the claim text.