V2X Unicast Security Context Setup Over the PC5 Interface
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing ProSe direct communication systems lack efficient mechanisms for establishing secure layer-2 links between wireless devices for V2X services, particularly in ensuring compatibility and security of communication links.
Innovation Solution
A wireless transmit/receive unit (WTRU) initiates secure direct communication by exchanging security context identifiers (IDs) using most and least significant bits of a security key ID to establish a secure direct communication link with another WTRU, handling conflicts through message exchanges to ensure compatibility and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ProSe direct communication systems establish layer-2 links between wireless devices, then communication capability is enabled, but security and compatibility assurance is insufficient
Solution Approach 1:
The security key ID is segmented into two parts: most significant bits (MSBs) exchanged in the direct communication request message and least significant bits (LSBs) exchanged in the direct security mode command message. This segmentation allows both devices to contribute to security context establishment while maintaining manageable complexity in each message exchange.
Solution Approach 2:
The initiating WTRU performs preliminary action by including its security context ID (MSBs) in the direct communication request message before the actual security context is fully established. This allows the target WTRU to prepare for security context establishment by receiving and storing the MSBs in advance.
2Reliability
If security context IDs are exchanged to establish secure links, then security is enhanced, but message exchange complexity increases
Solution Approach 1:
The security context establishment procedure is merged with the existing direct communication setup messages. The security context ID (MSBs) is combined into the direct communication request message, and the complete security context ID (LSBs) is combined into the direct security mode command message, eliminating the need for separate security negotiation messages.
Solution Approach 2:
Each WTRU autonomously generates its own security context ID and contributes it to the joint security context establishment. The initiating WTRU generates MSBs and the target WTRU generates LSBs, with each device independently managing its own security parameters without requiring external authentication infrastructure.
3Adaptability or versatility
If multiple WTRUs attempt to establish connections simultaneously, then network connectivity is improved, but security context conflicts occur
Solution Approach 1:
Each WTRU contributes locally generated security parameters (LSBs) that are unique to that specific device and connection instance. This local quality assurance through device-specific LSB generation ensures that even when multiple connections are established simultaneously, each security context remains unique and non-conflicting.
Data Source
AI summary
Systems, methods, and instrumentalities are provided for vehicle to everything (V2X) service oriented link establishment. A first wireless transmit receive unit (WTRU) may broadcast a direct communication request message. The direct communication request message may include a first security context identifier (ID). The first WTRU may receive a direct security mode command message from a second WTRU. The direct security mode command message may include a second security context ID. The first WTRU may determine a third security context ID by combining the first security context ID and the second security context ID. The first WTRU may establish, using the third security context ID, a secure direct communication link with the second WTRU. The first WTRU may generate, based on the third security context ID, a security context entry for the secure direct communication link with the second WTRU.