Authentication and authorization in proximity based service communication using a group key

Abstract

A method of performing authentication and authorization in Proximity based Service (ProSe) communication by a requesting device which sends a request of a communication and a receiving device which receives the request from the requesting device, the method including deriving session keys Kpc and Kpi from an unique key Kp at the requesting and receiving devices, using the session keys Kpc and Kpi for ProSe communication setup and direct communication between the requesting and receiving devices, starting the direct communication with the requesting and receiving devices. The key Kpc is confidentiality key and the key Kpi is integrity protection key.

1 . A first User Equipment (UE) for direct communication, the first UE comprising:
 at least one processor; and   at least one memory coupled to the at least one processor, the at least one memory storing instructions that, when executed by the at least one processor, cause the at least one processor to:
 receive, from a network node, a message including a group key, 
 receive, from a second UE, an identifier related to the group key, wherein the identifier is received by the second UE from the network node, 
 identify the group key based on the identifier, 
 derive a first key and a second key based on the identified group key, and 
 perform the direct communication with the second UE, the direct communication being protected by the first key and the second key. 
   
     
     
         2 . The first UE according to  claim 1 , wherein the first key or the second key is an encryption key. 
     
     
         3 . The first UE according to  claim 1 , wherein the UE and the second UE support Proximity Services (ProSe). 
     
     
         4 . The first UE according to  claim 1 , wherein the UE and the second UE get an authorization from a network including at least a Proximity Services (ProSe) Function and a ProSe application server. 
     
     
         5 . A communication method of a first User Equipment (UE) for direct communication, the communication method comprising:
 receiving, from a network node, a message including a group key;   receiving, from a second UE, an identifier related to the group key, wherein the identifier is received by the second UE from the network node;   identifying the group key based on the identifier;   deriving a first key and a second key based on the identified group key; and   performing the direct communication with the second UE, the direct communication being protected by the first key and the second key.   
     
     
         6 . The communication method according to  claim 5 , wherein the first key or the second key is an encryption key. 
     
     
         7 . The communication method according to  claim 5 , wherein the first UE and the second UE support Proximity Services (ProSe). 
     
     
         8 . The communication method according to  claim 5 , wherein the first UE and the second UE get an authorization from a network including at least a Proximity Services (ProSe) Function and a ProSe application server.