D2D Group Communication Security via HSS Key Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current proximity-based communication systems face security vulnerabilities and inefficiencies in device-to-device group communication, particularly in setting and managing security settings, which can lead to insecure communication.
Innovation Solution
A method and system for device-to-device group communication in a mobile communication system that involves collecting information, receiving security key-related information, and performing security procedures using a security key to enhance communication efficiency and security, specifically in environments like EUTRAN or UTRAN/GERAN, through a Home Subscriber Server (HSS) and transceiver units.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If device-to-device communication is enabled in proximity based communication system, then communication functionality and service discovery capability are improved, but security vulnerability and exposure of terminal relation information occur
Solution Approach 1:
The patent segments security management into multiple levels: group formation phase (with group identity assignment), communication phase (with encryption keys), and discovery phase (with proximity verification). Each phase has dedicated security parameters and procedures, preventing single-point security failures while enabling versatile device-to-device communication.
Solution Approach 2:
The patent introduces network-side entities (eNodeB, MME, HSS) as intermediaries that manage security keys, group identities, and authentication vectors. These intermediaries mediate between devices, providing centralized security control that enables device-to-device communication while preventing security vulnerabilities through network-managed security policies.
2Productivity
If proximity based service discovery is implemented, then service discovery efficiency is improved, but terminal relation information exposure and security management difficulties occur
Solution Approach 1:
The patent performs preliminary security setup during group formation, where group identities and security parameters are assigned before actual communication occurs. Authentication vectors and encryption keys are pre-configured in the network, enabling efficient service discovery without real-time security negotiations that would increase complexity.
Solution Approach 2:
The patent creates equipotential security conditions by ensuring all devices in a proximity group have equal access to group identity and security parameters. This uniform security setup simplifies management while enabling efficient service discovery, as devices don't need complex individual security negotiations.
3Adaptability or versatility
If device-to-device group communication is supported, then communication functionality is improved, but insufficient security setting and management discussion leads to security vulnerability
Solution Approach 1:
The patent applies local quality by assigning specific security parameters to each group context. Each proximity group has its own group identity, encryption keys, and authentication vectors tailored to that group's communication needs. This localized security approach enables versatile group communication while maintaining security through context-specific parameters.
Solution Approach 2:
The patent utilizes parameter changes by dynamically assigning different security parameters (group identities, encryption keys, authentication vectors) based on group formation and communication context. Security parameters are changed and updated according to network policies and group characteristics, enabling flexible group communication with appropriate security levels.
Data Source
AI summary
The present disclosure relates to security schemes for device-to-device (hereinafter referred to as “D2D”) discovery and D2D group communication in performing proximity based service (hereinafter referred to as “prose”), prose discovery, prose communication, and D2D group communication in a mobile communication network.