D2D Session Key Establishment via Time-Validated Initiation Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile network operators lack control over device-to-device (D2D) communication sessions between mobile devices, which can lead to interference and unauthorized access, as these sessions operate outside the network's direct control.
Innovation Solution
A method for establishing D2D communication sessions by preloading an initiation key on mobile devices with a validity period, using this key to perform a key agreement procedure and generate a session key, ensuring that only valid and matching initiation keys can establish a secure communication session, thereby providing the operator with control over who can access D2D communication and when.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If D2D communication is enabled between mobile devices, then direct communication and network load reduction are achieved, but network operator control over communication sessions is lost
Solution Approach 1:
The network operator pre-generates and distributes initiation keys to mobile devices before D2D communication occurs. These keys are valid only within specific time windows, allowing the operator to control and authorize D2D sessions in advance while maintaining the ability to manage key distribution and validity periods
Solution Approach 2:
The initiation key acts as an intermediary mechanism between the network operator and D2D communication. The key enables direct device-to-device communication while simultaneously serving as a controllable authorization token that the operator can issue, manage, and revoke, thus maintaining indirect control over the communication
2Ease of operation
If D2D communication operates outside network control, then direct device communication is enabled, but interference and unauthorized access increase
Solution Approach 1:
The system performs preliminary authorization by validating initiation keys before allowing D2D communication to establish. The operator pre-configures valid key-time combinations, ensuring that only authorized devices can initiate D2D sessions within approved timeframes, thereby preventing unauthorized access and interference
Solution Approach 2:
The key validation mechanism provides feedback control by checking whether the initiation key is valid for the current time before permitting D2D communication. This time-based validation ensures that communication only occurs when authorized, creating a closed-loop control system that prevents unauthorized access
Data Source
Figure 1~3
Figure 4~5
Figure 6
AI summary
Legacy technologies show the problem that when establishing a secured device-to-device [D2D] communication a playback attack can easily succeed. Method (100) for establishing a device-to-device communication session between mobile devices (MD1, MD2) which are mutually connectable via a D2D communication channel (DDC) and individually connectable to a mobile network (MN), comprising: - preloading (120) an initiation key on each of the mobile devices (MD1, MD2), the initiation key being associated with a validity period; and on each of the mobile devices (MD1, MD2): - verifying (140) a validity of the initiation key based on a current time; - if the initiation key is deemed valid, generating (160) a session key using the initiation key by using the initiation key in performing (164, 166) a key agreement procedure between the mobile devices (MD1, MD2) over the D2D communication channel (DDC), the key agreement procedure resulting in the session key if the initiation key used by each of the mobile devices matches; and - establishing (180) the D2D communication session over the D2D communication channel (DDC) based on the session key.