ProSe D2D Communication with IMS Link Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication technologies face challenges in enabling direct, secure device-to-device communication without network coverage, particularly in emergency situations where network infrastructure may be compromised, and existing solutions do not effectively scale for large groups or ensure secure key management.
Innovation Solution
The implementation of ProSe (Proximity-based services) communication systems, which allow devices to communicate directly using WiFi Direct or LTE Direct technologies, employing certificate-based authentication and key management to establish and maintain secure D2D links, with a P2P Group Owner and Client architecture for 1:1 and group communications, and utilizing Pairwise Master Keys and Group Master Keys for data protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices communicate through network infrastructure, then communication reliability is maintained under normal conditions, but communication fails when network coverage is lost or compromised
Solution Approach 1:
The patent segments communication into two independent modes: network-based communication for normal operations and direct device-to-device communication for emergency scenarios. This segmentation allows the system to maintain reliability through network infrastructure when available, while enabling autonomous operation when network coverage is lost, thus resolving the contradiction between reliability and adaptability.
Solution Approach 2:
The system dynamically switches between network-based and direct device-to-device communication modes based on network availability. The communication architecture is designed to be flexible, allowing devices to transition from relying on network infrastructure to establishing direct connections when network coverage is compromised, thereby maintaining reliability while adapting to changing conditions.
2Adaptability or versatility
If direct device-to-device communication is implemented without network coverage, then network independence is achieved, but secure key management becomes more complex
Solution Approach 1:
The patent implements preliminary action by establishing key management protocols and security credentials before devices enter direct communication mode. Security keys and authentication mechanisms are pre-configured and validated while network infrastructure is still available, so that when direct device-to-device communication begins, the key management complexity is already resolved, enabling network independence without overwhelming complexity.
Solution Approach 2:
The system uses an intermediary approach where network infrastructure serves as a mediator for establishing initial security credentials and key exchange mechanisms. Even in direct communication mode, the security framework benefits from intermediary-based key establishment protocols, reducing the complexity of managing security in autonomous device-to-device communication while maintaining network independence.
3Device complexity
If traditional network-based communication is used, then key management is centralized and simplified, but communication cannot occur without network coverage
Solution Approach 1:
The patent implements a universal key management system that serves multiple functions: it works with centralized network-based communication when available and with decentralized direct device-to-device communication when necessary. The same security framework and key management mechanisms are designed to be universally applicable across both communication modes, eliminating the need for separate key management systems and maintaining simplicity while enabling communication availability in all scenarios.
Data Source
Figure 1A~1B
Figure 2
Figure 3
AI summary
A method and system for establishing a secure device-to-device connection between two mobile devices involves the use of a WiFi Direct (LTE Direct or other similar protocols) link paired with an IP Multimedia Subsystems (IMS) link. A device detects the presence of another device that it wishes to connect to. The devices negotiate a group owner, then authenticate each other using a variety of techniques, such as a centrally issued certificate. Thereafter, the devices derive keys to be used for communication, both over the WiFi Direct link and via the IMS link. A WiFi Direct Link may be paired with a Push to Talk over Cellular (PoC) link in order to couple together more than two devices. In such a connection, devices transmit to a group owner, which then sends multicast versions to the rest of the group devices.