Secure D2D Charging via Dual-Report Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network operators face challenges in ensuring accurate and fair charging for Device-to-Device (D2D) services, as D2D users may report fake billing records, leading to unfair payment distribution between peers and potential revenue loss for operators.
Innovation Solution
A secure charging mechanism where both D2D UEs record and generate charging reports, using shared security keys to ensure the integrity and accuracy of charging information, which is then verified and compared by the core network to prevent cheating and ensure fair billing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If D2D users independently record and report charging information without network monitoring, then charging flexibility and user autonomy are improved, but charging reliability and fairness deteriorate due to potential cheating
Solution Approach 1:
The patent introduces a core network entity as an intermediary that receives, verifies, and compares charging reports from multiple D2D users. This mediator ensures charging reliability by validating the authenticity of reports and detecting discrepancies, while still allowing users to independently generate their own charging information.
Solution Approach 2:
The patent implements a feedback mechanism where the core network entity sends verification results and charging decisions back to the involved users. This feedback loop enables users to understand the validity of their charging reports and ensures fair charging through transparent verification and comparison of multiple reports.
2Reliability
If the core network verifies and compares charging reports from multiple UEs, then charging fairness and operator revenue protection are improved, but system complexity and verification overhead increase
Solution Approach 1:
The patent uses digital signatures and hash functions to create verifiable copies of charging reports. Each UE generates a signed copy of its charging information, allowing the core network to efficiently verify authenticity without complex manual checking, thus maintaining fairness while reducing verification complexity.
Solution Approach 2:
The patent implements preliminary authentication where UEs are pre-configured with security credentials and authentication keys before D2D communication. This preliminary action ensures that when charging reports are submitted, the core network can quickly verify their authenticity without complex real-time authentication, reducing verification overhead.
3Reliability
If security keys are used to protect charging reports, then reporting integrity is improved, but key management complexity and security overhead increase
Solution Approach 1:
The patent uses universal security mechanisms where the same authentication keys and encryption algorithms are used for multiple purposes: establishing D2D communication security, protecting charging reports, and enabling verification by the core network. This multi-functionality reduces key management complexity compared to maintaining separate security systems for different functions.
Solution Approach 2:
The patent implements self-service security where each UE independently generates and manages its own charging reports with digital signatures. The security mechanism is designed to be self-verifying through cryptographic proofs, reducing the need for complex centralized key management and allowing UEs to autonomously ensure their report integrity.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
A method of secure charging for a device-to-device service may comprise: recording charging information of a device-to-device service between a first user equipment and a second user equipment, wherein the charging information is associated at least with the first user equipment; generating a first report comprising the charging information, wherein the first report is protected by a security key of the first user equipment; and sending the first report to a network node by the first user equipment, wherein the first report is used for charging for the device-to-device service together with a second report generated at the second user equipment, and wherein the second report comprises charging information associated at least with the device-to-device service of the second user equipment and is protected by a security key of the second user equipment.