Relay Authentication Using Network Name Matching in D2D Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In device-to-device (D2D) communication, particularly in network relay scenarios, the authentication process fails due to the relay communication apparatus not broadcasting its serving network identifier, leading to security risks and authentication failures.
Innovation Solution
The remote communication apparatus obtains and compares the serving network identifier of the relay communication apparatus with network name information to authenticate the relay, ensuring consistency and preventing security risks, or alternatively, sends an authentication response without comparing identifiers to maintain compatibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the relay communication apparatus does not broadcast its serving network identifier, then the authentication process fails and security risks arise, but broadcasting the identifier may expose the relay to potential security threats or interference
Solution Approach 1:
The remote communication apparatus performs authentication request actions before establishing the relay connection. By sending an authentication request message that includes network name information to the relay communication apparatus beforehand, the system ensures that authentication verification is completed in advance, preventing unauthorized relays from being established and eliminating the need for continuous broadcasting of serving network identifiers.
Solution Approach 2:
The patent introduces network name information as an intermediary element in the authentication process. Instead of directly comparing serving network identifiers or establishing trust through broadcasting, the system uses network name information carried in authentication request messages as a mediator to verify the authenticity of the relay communication apparatus, thereby resolving the contradiction between authentication reliability and security risks.
2Measurement precision
If the remote communication apparatus compares serving network identifier with network name information, then authentication accuracy improves, but the complexity of the authentication process increases
Solution Approach 1:
The authentication request message serves multiple functions: it initiates the authentication process, carries network name information for verification, and establishes the relay connection. By making this single message multi-functional, the patent avoids the need for separate broadcasting mechanisms and additional verification messages, thereby maintaining authentication accuracy while minimizing process complexity.
Solution Approach 2:
The relay communication apparatus itself provides the network name information in its authentication response message, eliminating the need for the remote communication apparatus to separately obtain or verify serving network identifiers from external sources. This self-service approach simplifies the authentication process while maintaining verification accuracy.
Data Source
AI summary
Embodiments of the present disclosure provide a communication method, an apparatus, a computer-readable storage medium, and a computer program product. The method is used in a process of establishing a relay communication connection. When a relay communication security link is established by using control plane signaling, a remote communication apparatus obtains a serving network identifier of a relay communication apparatus. The remote communication apparatus obtains an authentication request message from the relay communication apparatus, where the authentication request message includes network name information. The remote communication apparatus compares the network name information with the serving network identifier, and determines, based on a result of the comparison, whether to perform a subsequent authentication procedure.