D2D Broadcast Security via Pre-provisioned Keys

Solution Overview

Problem

Providing secure device-to-device (D2D) communication is challenging, especially in out-of-coverage scenarios where network support is unavailable, as conventional security protocols require renegotiation of security agreements upon changes in group membership, increasing overhead and degrading user experience.

Innovation Solution

User equipment pre-provisioned with security keys and frame numbers can autonomously encrypt or decrypt frames for secure D2D communication, using a cryptographic function applied to a pre-provisioned security key and frame number, allowing secure D2D communication without network assistance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional security protocols are used for D2D communication, then security is maintained, but overhead increases and user experience degrades due to renegotiation requirements

Engineering Contradiction:

ImprovesecurityVSAvoidoverhead

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Security keys and frame numbers are pre-provisioned to user equipment before D2D communication occurs. This preliminary provisioning enables devices to autonomously encrypt and decrypt frames without requiring real-time network assistance or security renegotiation, thereby maintaining security while reducing overhead and improving user experience

Inventive Principle:

Principle #10Preliminary action

2Reliability

If network support is required for secure D2D communication, then security can be established, but out-of-coverage scenarios cannot support secure communication

Engineering Contradiction:

ImprovesecurityVSAvoidcoverage scenario flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

User equipment is equipped with pre-provisioned security keys and frame numbers that enable autonomous security operations. Devices can independently encrypt and decrypt D2D frames without requiring network assistance, allowing secure communication to function in both in-coverage and out-of-coverage scenarios, thereby achieving adaptability across different coverage conditions

Inventive Principle:

Principle #25Self-service

3Reliability

If security renegotiation occurs upon group membership changes, then security is maintained, but communication efficiency decreases

Engineering Contradiction:

ImprovesecurityVSAvoidcommunication efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Security keys and frame numbers are pre-provisioned to user equipment before D2D communication occurs. This preliminary provisioning enables devices to autonomously encrypt and decrypt frames without requiring real-time network assistance or security renegotiation, thereby maintaining security while reducing overhead and improving user experience

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentEP3141009B1Secure communication procedure for d2d broadcast communication

Publication Date: 2023.10.04 ALCATEL LUCENT SA

Figure 1
Figure 2
Figure 3

AI summary

User equipment decrypt information received in a first frame over an air interface during device-to-device (D2D) communication with another user equipment. The information is decrypted using a cryptographic function that is applied to a security key and a first frame number of the first frame.