Proximity Security Negotiation for Out-of-Coverage D2D Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security establishment mechanisms for device-to-device communication, particularly in out-of-coverage scenarios, face challenges in ensuring secure connections without network assistance, leading to potential failures and resource wastage.
Innovation Solution
A method for determining a target security establishment mechanism, either with or without network assistance, based on the network coverage status of the communicating devices, allowing for flexible negotiation and selection of a mechanism supported by both parties to ensure secure connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a security establishment mechanism without network assistance is used, then devices can establish secure connections in out-of-coverage scenarios, but the reliability of security establishment deteriorates due to potential failures and resource wastage
Solution Approach 1:
The patent implements dynamic mechanism selection where the security establishment mechanism is adaptively chosen based on real-time network coverage conditions. The system transitions between network-assisted and non-network-assisted mechanisms dynamically, allowing the security establishment process to adapt to changing environmental conditions while maintaining reliability.
Solution Approach 2:
The patent changes the parameter of network assistance presence based on coverage conditions. When in coverage, network-assisted mechanisms are used with high reliability; when out of coverage, non-network-assisted mechanisms are used to maintain adaptability. This parameter change resolves the contradiction by optimizing for the appropriate condition.
2Adaptability or versatility
If multiple security establishment mechanisms are supported and negotiated, then adaptability to different network conditions improves, but device complexity increases
Solution Approach 1:
The patent segments the security establishment process into distinct phases: capability indication, mechanism selection, and execution. By dividing the complex negotiation into manageable segments with clear protocols, the system maintains high adaptability while reducing the perceived complexity through structured interaction sequences.
Solution Approach 2:
The patent creates a universal security establishment framework that can handle multiple mechanisms through a single standardized negotiation protocol. The request and response messages are designed to accommodate different mechanisms universally, allowing one protocol structure to serve multiple functions and reduce overall system complexity.
3Reliability
If network-assisted security establishment is used, then security reliability improves through latest subscription information, but loss of time increases due to network dependency
Solution Approach 1:
The patent performs preliminary capability indication where devices declare their supported security mechanisms in advance during connection setup. This preliminary action allows the network to prepare appropriate security parameters beforehand, reducing both the time needed for security establishment and ensuring reliable subscription information is available when needed.
Solution Approach 2:
The patent uses the network as an intermediary to facilitate efficient security establishment. The network assists in mechanism selection and parameter negotiation, acting as a mediator that provides latest subscription information without creating excessive delays. This intermediary role optimizes the balance between reliability and time efficiency.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
A security establishment method and a related apparatus are provided, to select an appropriate security establishment mechanism for a communication apparatus, thereby ensuring communication security. In the method, a first communication apparatus initiating proximity-based service communication determines a target mechanism from a plurality of mechanisms, for example, determines the target mechanism according to a mechanism selection rule, and sends a request message, to request a receiver to perform security establishment with the first communication apparatus by using the target mechanism. A second communication apparatus that receives the request message sends a first message to the first communication apparatus based on a network coverage status, to indicate whether to agree to perform the security establishment with the first communication apparatus by using the target mechanism. The second communication apparatus may agree to use a security establishment mechanism without network assistance or a security establishment mechanism with network assistance when being in network coverage; or agree to use the security establishment mechanism without network assistance when not being in network coverage. After negotiation between the first communication apparatus and the second communication apparatus, the first communication apparatus and the second communication apparatus may establish a secure connection by using a jointly supported security establishment mechanism.