Update of security for group based feature in m2m

Abstract

A network node ( 21 ), which is placed within a core network, receives a message from a transmission source ( 30 ) placed outside the core network. The message includes an indicator indicating whether or not the message is addressed to a group of one or more MTC devices attached to the core network. The network node ( 21 ) determines to authorize the transmission source ( 30 ), when the indicator indicates that the message is addressed to the group. Further, the message includes an ID for identifying whether or not the message is addressed to the group. The MTC device determines to discard the message, when the ID does not coincide with an ID allocated for the MTC device itself. Furthermore, the MTC device communicates with the transmission source ( 30 ) by use of a pair of group keys shared therewith.

1 . A network node placed within a core network, comprising:
 a reception unit that receives a message from a transmission source placed outside the core network, the message including an indicator indicating whether or not the message is addressed to a group of one or more MTC (Machine-Type-Communication) devices attached to the core network, and an external ID (identifier) for the transmission source to identify the group;   a determination unit that determines to authorize the transmission source, when the indicator indicates that the message is addressed to the group;   a storage unit that stores a mapping of the external ID and an internal ID for identifying addresses of the MTC devices;   a mapping unit that maps the external ID to the corresponding internal ID in the message, by use of the mapping; and   a forwarding unit that forwards the message to a network element capable of broadcasting the message to the MTC devices.   
     
     
         2 . The network node according to  claim 1 , wherein the indicator further indicates whether the message triggers the group to communicate with the transmission source. 
     
     
         3 . (canceled) 
     
     
         4 . The network node according to  claim 1 , wherein the network node comprises an MTC-IWF (MTC-Interworking Function). 
     
     
         5 . A MTC (Machine-Type-Communication) device attached to a core network, and configured to receive a message forwarded by the network node according to  claim 1 . 
     
     
         6 . A network node placed outside a core network, and configured to transmit a message to the network node according to  claim 1  and to include said indicator in the message. 
     
     
         7 . The network node according to  claim 6 , wherein the network node placed outside the core network comprises an SCS (Services Capability Server) or an SME (Short Message Entity). 
     
     
         8 . A method of controlling a network node that is placed within a core network, the method comprising:
 receiving a message from a transmission source placed outside the core network, the message including an indicator indicating whether or not the message is addressed to a group of one or more MTC (Machine-Type-Communication) devices attached to the core network, and an external ID (identifier) for the transmission source to identify the group;   determining to authorize the transmission source, when the indicator indicates that the message is addressed to the group;   storing a mapping of the external ID and an internal ID for identifying addresses of the MTC devices;   mapping the external ID to the corresponding internal ID in the message, by use of the mapping; and   forwarding the message to a network element capable of broadcasting the message to the MTC devices.   
     
     
         9 . A MTC (Machine-Type-Communication) device attached to a core network, comprising:
 a reception unit that receives a message from the core network, the message including an ID (identifier) for identifying whether or not the message is addressed to a group of one or more MTC devices; and   a determination unit that determines to discard the message, when the ID does not coincide with an ID allocated for the MTC device itself.   
     
     
         10 . A network node placed within a core network, and configured to forward a message to the MTC device according to  claim 9  and to include said ID in the message. 
     
     
         11 . The network node according to  claim 10 , wherein the network node comprises an MTC-IWF (MTC-Interworking Function). 
     
     
         12 . A network node placed outside a core network, and configured to transmit a message to the MTC device according to  claim 9  through the core network and to include said ID in the message. 
     
     
         13 . The network node according to  claim 12 , wherein the network node comprises an SCS (Services Capability Server) or an SME (Short Message Entity). 
     
     
         14 . A method of controlling a MTC (Machine-Type-Communication) device attached to a core network, the method comprising:
 receiving a message from the core network, the message including an ID (identifier) for identifying whether or not the message is addressed to a group of one or more MTC devices; and   determining to discard the message, when the ID does not coincide with an ID allocated for the MTC device itself.   
     
     
         15 . A gateway that relays a message from a transmission source of the message placed outside a core network to a group of one or more MTC (Machine-Type-Communication) devices attached to the core network, the gateway comprising:
 an acquisition unit that acquires a pair of group keys for the group of MTC devices to securely conduct communication with the transmission source; and   a relaying unit that relays the message by use of the group keys.   
     
     
         16 . The gateway according to  claim 15 , wherein the relaying unit is configured to:
 verify the message with the group keys; and   discard the message upon failing the verification.   
     
     
         17 . The gateway according to  claim 15 , wherein the gateway is deployed on a base station to which the MTC devices wirelessly connect. 
     
     
         18 . The gateway according to  claim 15 , wherein the gateway is deployed on a network element connected to one or more base stations to which the MTC devices wirelessly connect. 
     
     
         19 . A MTC (Machine-Type-Communication) device attached to a core network, comprising:
 an acquisition unit that acquires a pair of group keys for securely conducting communication with a transmission source that is placed outside the core network and transmits a message addressed to a group of one or more MTC devices; and   a communication unit that communicates with the transmission source by use of the group keys.   
     
     
         20 . A network node placed outside a core network, and configured to communicate with the MTC device according to  claim 19  through the core network and to use said group keys for the communication. 
     
     
         21 . The network node according to  claim 20 , wherein the network node comprises an SCS (Services Capability Server) or an SME (Short Message Entity). 
     
     
         22 . A method of controlling gateway that relays a message from a transmission source of the message placed outside a core network to a group of one or more MTC (Machine-Type-Communication) devices attached to the core network, the method comprising:
 acquiring a pair of group keys for the group of MTC devices to securely conduct communication with the transmission source; and   relaying the message by use of the group keys.   
     
     
         23 . A method of controlling a MTC (Machine-Type-Communication) device attached to a core network, the method comprising:
 acquiring a pair of group keys for securely conducting communication with a transmission source that is placed outside the core network and transmits a message addressed to a group of one or more MTC devices; and   communicating with the transmission source by use of the group keys.