PC5 V2X Unicast Security Context Pairing for Direct Link Setup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing ProSe direct communication systems lack efficient methods for establishing secure vehicle-to-everything (V2X) services over the PC5 interface, particularly in ensuring secure communication links between wireless devices.
Innovation Solution
A method for establishing secure direct communication links between wireless devices using a combined security context identifier (ID) composed of most significant bits (MSBs) and least significant bits (LSBs) of a security key ID, allowing for the negotiation and establishment of secure V2X services over the PC5 interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single security context ID is used for ProSe direct communication, then the security establishment process is simple, but it cannot provide sufficient security for V2X services requiring multiple security contexts
Solution Approach 1:
The security context ID is segmented into two separate identifiers: a first security context ID (e.g., ProSe application code) and a second security context ID (e.g., ProSe remote user identifier). This segmentation allows the system to maintain multiple distinct security contexts for different V2X services while keeping each individual identifier manageable in size. The first identifier handles application-level security contexts while the second handles user-level security contexts, enabling fine-grained security management without requiring a single large complex identifier.
Solution Approach 2:
The patent introduces a two-dimensional security context identification space by combining application-level identifiers and user-level identifiers. Instead of using a single flat security context ID, the system creates a composite security context by pairing identifiers from different dimensions (application code dimension and user identifier dimension). This dimensional approach allows exponential expansion of security context possibilities while keeping each individual identifier compact.
2Reliability
If multiple security context identifiers are exchanged between WTRUs, then secure V2X service establishment is enabled, but the message exchange overhead and establishment time increase
Solution Approach 1:
The patent performs preliminary security context establishment by having WTRUs pre-generate and store multiple security context identifiers (both first and second types) before actual V2X communication begins. During the direct communication setup, these pre-generated identifiers are simply exchanged and referenced rather than being generated on-the-fly. This preliminary preparation significantly reduces the time required for secure V2X service establishment while maintaining the ability to support multiple security contexts.
Solution Approach 2:
The patent merges the exchange of multiple security-related parameters into a single integrated message flow. Instead of separately exchanging application codes, user identifiers, and security context information in multiple rounds, the first and second security context IDs are combined and exchanged together in the direct communication setup messages. This merging reduces message overhead and accelerates the security establishment process.
Data Source
AI summary
Systems, methods, and instrumentalities are provided for vehicle to everything (V2X) service oriented link establishment. A first wireless transmit receive unit (WTRU) may broadcast a direct communication request message. The direct communication request message may include a first security context identifier (ID). The first WTRU may receive a direct security mode command message from a second WTRU. The direct security mode command message may include a second security context ID. The first WTRU may determine a third security context ID by combining the first security context ID and the second security context ID. The first WTRU may establish, using the third security context ID, a secure direct communication link with the second WTRU. The first WTRU may generate, based on the third security context ID, a security context entry for the secure direct communication link with the second WTRU.