ProSe Security Management via Location-Based Session Key Updates

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current 3GPP specifications lack solutions for maintaining ProSe service security and preventing security context reuse when User Equipment (UEs) move out of proximity range during ProSe communication.

Innovation Solution

A server and UE system that monitors UEs' locations and manages ProSe communication security by updating or removing session keys based on location changes, ensuring secure communication within proximity ranges and preventing unauthorized reuse of security contexts.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Duration of action of moving object

If ProSe communication is maintained for UEs that move out of proximity range, then service continuity is improved, but security context reuse risk increases

Engineering Contradiction:

Improveservice continuityVSAvoidsecurity context reuse risk

Core Design Contradiction:

Duration of action of moving objectVSReliability

Solution Approach 1:

The server performs preliminary actions by monitoring UE locations and detecting when UEs move out of proximity range before security issues arise. Upon detecting location changes, the server proactively notifies UEs to update or remove session keys, preventing security context reuse risks before they can occur while maintaining service continuity.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If session keys are updated frequently to prevent security context reuse, then security reliability is improved, but communication interruption risk increases

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidcommunication continuity

Core Design Contradiction:

ReliabilityVSDuration of action of moving object

Solution Approach 1:

The system dynamically adjusts session key update timing based on actual UE location changes rather than using fixed periodic updates. The server monitors UE locations in real-time and triggers session key updates only when UEs move out of proximity range, making the security mechanism adaptive to actual communication conditions and avoiding unnecessary interruptions.

Inventive Principle:

Principle #15Dynamics

3Adaptability or versatility

If location monitoring is implemented to manage ProSe security, then security management capability is improved, but system complexity increases

Engineering Contradiction:

Improvesecurity management capabilityVSAvoidsystem complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The server acts as an intermediary that centralizes location monitoring and security management functions. Instead of requiring complex local implementation at each UE, the server performs location monitoring, proximity determination, and session key management, simplifying the overall system architecture while maintaining enhanced security management capabilities.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentEP3063917B1Security management according to location change in proximity based services

Publication Date: 2018.09.26 NEC CORP

Figure 1
Figure 2
Figure 3

AI summary

In order for effectively managing security of ProSe (Proximity based Services) communication, a server (20) forming a communication system monitors locations of a plurality of UEs (10_1-10_n) that are grouped to conduct direct communication with each other. The server (20) manages security of the direct communication based on the locations.