Root Key Generation for Secure Remote-to-Relay Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In device-to-device communication, establishing a secure connection between a remote terminal device and a relay terminal device is challenging due to the dynamic nature of the indirect communication connection, which prevents preconfiguration of shared security information, leading to difficulties in securing data transmission.
Innovation Solution
A method for generating a root key for communication between a remote terminal device and a relay terminal device using a first identifier, a relay service code, and freshness parameters, facilitated by network elements such as AUSF and PKMF, ensuring secure key sharing without preconfiguration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If preconfigured shared security information is used to establish security connection, then communication security is improved, but adaptability to dynamic indirect communication connections deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-configuring shared security information (first shared key) between the remote terminal device and the remote authentication service function network element before the indirect communication connection is established. This pre-configured key is then used to generate the root key for the security connection, resolving the contradiction by having security preparation done in advance rather than requiring real-time configuration for dynamic connections.
Solution Approach 2:
The patent uses the first shared key as an intermediary element that bridges the remote terminal device and the relay terminal device. Instead of directly sharing security information between these two devices, the first shared key (obtained through authentication with the remote authentication service function network element) serves as a mediator to derive the root key, enabling secure connection establishment without direct preconfiguration between the terminal devices.
2Ease of operation
If dynamic indirect communication connection is established on demand, then ease of operation is improved, but difficulty in establishing security connection worsens
Solution Approach 1:
The patent applies self-service by enabling the remote terminal device to autonomously generate the root key using the first shared key and relay service code without requiring manual security configuration. The device automatically performs key derivation and establishes the security connection, simplifying the operation while managing the complexity through automated procedures.
Solution Approach 2:
The patent uses parameter changes by transforming the first shared key and relay service code into the root key through key derivation functions. This parameter transformation allows the system to adapt to different dynamic connections by changing the input parameters (first shared key, relay service code) while maintaining a consistent key derivation process, thus simplifying operation without compromising security establishment.
Data Source
AI summary
This application discloses a key obtaining method and a communication apparatus. A remote terminal device sends a first identifier and a relay service code to a relay terminal device. The first identifier is an identifier that is of the remote terminal device and that is corresponding to the relay service code, or the first identifier is an anonymous identifier of the remote terminal device. The remote terminal device generates, based on a first shared key, the relay service code, and at least one first freshness parameter, a root key for communication between the remote terminal device and the relay terminal device. A remote authentication service function network element is an authentication service function network element that serves the remote terminal device, and the first shared key is a key shared between the remote terminal device and the remote authentication service function network element.