PC5 Positioning Security Context Reuse for Sidelink Ranging

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing security mechanisms for PC5 direct communication in enhanced 5G systems do not adequately protect the ranging or sidelink positioning process, as they may not meet the specific security requirements of ranging or sidelink positioning services, even when a PC5 direct communication link is established for ProSe/V2X applications.

Innovation Solution

A method to regenerate a security context for positioning services by reusing the PC5 direct communication link established for ProSe/V2X services, involving the generation and exchange of security keys, such as root keys and session keys, to ensure secure communication between terminal devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the existing security mechanisms for PC5 direct communication are used, then the communication link can be established for ProSe/V2X applications, but the security protection for ranging or sidelink positioning process is insufficient

Engineering Contradiction:
Improvesecurity protection for positioning serviceVSAvoidsecurity mechanism adaptability to positioning service
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments the security context into different components (root key KNRP for ProSe/V2X service and root key KNRR for positioning service) and establishes separate security contexts for different services. This allows the existing PC5 direct communication link to be reused while adding enhanced security protection specifically tailored for positioning services, thereby improving security protection without sacrificing adaptability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent makes the PC5 direct communication link universal by enabling it to serve dual purposes: ProSe/V2X applications and positioning services. The mechanism allows reusing the existing communication link while generating additional security keys (KNRR, NRRIK, NRREK) specifically for positioning, thus achieving multi-functionality with enhanced security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If a PC5 direct communication link is established for ProSe/V2X applications, then communication can proceed, but it cannot provide adequate security for ranging or sidelink positioning

Engineering Contradiction:
Improveintegrity and confidentiality of positioning communicationVSAvoidsecurity key generation and management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent performs preliminary key generation actions by deriving the root key KNRR and session keys (NRRIK, NRREK) before the actual positioning communication begins. The security context is established in advance through key derivation from the shared root key KNRP, ensuring that when positioning services start, the security infrastructure is already in place, thus improving reliability without adding operational complexity.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary key derivation mechanism that transforms the existing ProSe/V2X root key KNRP into positioning-specific keys (KNRR, NRRIK, NRREK) through cryptographic functions. This intermediary layer allows the system to leverage the existing communication link while generating dedicated security credentials for positioning, thereby enhancing security without requiring complete system redesign.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20250374037A1Direct communication method for localization service and terminal
Publication Date: 2025.12.04 BEIJING XIAOMI MOBILE SOFTWARE CO LTD
  • US20250374037A1 patent drawing
  • US20250374037A1 patent drawing
  • US20250374037A1 patent drawing

AI summary

A direct communication method for a positioning service method executed by a first terminal device includes: determining to share a unicast link communication root key KNRP with a second terminal device; and sending a direct communication request message to the second terminal device, the direct communication request message comprising information used for generating a security context for a localization service.