Security methods for protecting discovery procedures in wireless networks
This patent document describes, among other things, techniques, and apparatuses for a security method of discovery in proximity-based services. In one aspect, a method of wireless communication is disclosed. The method includes transmitting, by a wireless device to a first network function, an encrypted and integrity-protected message, wherein the encrypted and integrity-protected message is encrypted using a first key that is derived from a second key, wherein the wireless device has established the second key using a communication with a second network function, and wherein the encrypted and integrity-protected message is obtained by encrypting and integrity-protecting a message.
1 . A method of wireless communication, comprising:
transmitting, by a wireless device to a first network function, an encrypted and integrity-protected message obtained by encrypting and integrity-protecting a first message,
wherein the encrypted and integrity-protected message is encrypted and a message authentication code (MAC) of the encrypted and integrity-protected message is calculated using either (1) an authentication and key management for applications (AKMA) application key (K AF ) that is derived from an authentication and key management for applications (AKMA) anchor key (K AKMA ), or (2) an encryption key (K enc ) and an integrity key (K int ) that are derived from the K AF , and wherein the K enc is for use by the first network function to decrypt the encrypted and integrity-protected message in a case that the first network function is able to successfully check the MAC using the K int , otherwise the K AF is for use by the first network function to check the MAC and decrypt the encrypted and integrity-protected message,
wherein the wireless device is configured to establish the K AKMA using a communication with a second network function.
2 . The method of claim 1 , wherein the K AF is used to obtain the encrypted and integrity-protected message by:
generating, by the wireless device, an encryption key and an integrity key based on the K AF ; and
encrypting and integrity-protecting the first message using the encryption key and the integrity key.
3 . The method of claim 1 , wherein the K AF includes the authentication and key management for applications (AKMA) application key, and the K AKMA includes the AKMA anchor key.
4 . The method of claim 1 , wherein the encrypted and integrity-protected message includes a discovery request message that is transmitted through an interface for establishing proximity-based services.
5 . The method of claim 1 , wherein the encrypted and integrity-protected message includes a discovery request message that includes an authentication and key management for applications (AKMA) key identifier (A-KID) and the MAC.
6 . The method of claim 1 , further comprising:
receiving, by the wireless device, a discovery response message from the first network function; and
checking a message authentication code (MAC) of the discovery response message and decrypting the discovery response message by using the K AF or by using the encryption key and an integrity key generated based on the K AF .
7 . The method of claim 1 , wherein the first network function includes a direct discovery name management function (DDNMF).
8 . The method of claim 1 , wherein the second network function includes AKMA anchor function.
9 . A method of wireless communication, comprising:
receiving, by a first network function, from a wireless device, an encrypted and integrity-protected message obtained by encrypting and integrity-protecting a first message; and
decrypting the encrypted and integrity-protected message using either (1) an authentication and key management for applications (AKMA) application key (K AF ) that is derived from an AKMA anchor key (K AKMA ), or (2) an encryption key (K enc ) and an integrity key (K int ) that are derived from the K AF , wherein, in a case that the first network function successfully checks a message authentication code (MAC) of the encrypted and integrity-protected message by using the K int , the first network function decrypts the encrypted and integrity-protected message using the K enc , or in a case that the K int and Kene are unavailable, the first network function decrypts the encrypted and integrity-protected message using the K AF ,
wherein the K AKMA is established using a communication between the wireless device and a second network function.
10 . The method of claim 9 , wherein the decrypting the encrypted and integrity-protected message using the K AF comprises:
generating an encryption key and an integrity key based on the K AF ;
checking the MAC of the encrypted and integrity-protected message using the integrity key; and
decrypting the encrypted and integrity-protected message using the encryption key.
11 . The method of claim 9 , wherein the second network function determines whether the second network function is configured to provide a service to the first network function based on at least one of a configured local policy, authorization information, or a policy provided by a network repository function using an identity of the first network function.
12 . The method of claim 9 , wherein the second network function verifies whether a subscriber is authorized to use authentication and key management for applications (AKMA) based on presence of the K AKMA identified by an AKMA Key Identifier (A-KID).
13 . The method of claim 9 , wherein the encrypted and integrity-protected message received from the wireless device includes a discovery request message that is transmitted through an interface for establishing proximity-based services.
14 . The method of claim 9 , wherein the first network function includes a direct discovery name management function (DDNMF).
15 . The method of claim 9 , wherein the second network function includes authentication and key management for applications (AKMA) anchor function.
16 . A wireless communication device, comprising:
one or more processors configured to generate an encrypted and integrity-protected message by encrypting and integrity-protecting a first message; and
a transceiver configured to transmit the encrypted and integrity-protected message to a first network function, wherein the encrypted and integrity-protected message is encrypted and a message authentication code (MAC) of the encrypted and integrity-protected message is calculated using either (1) an authentication and key management for applications (AKMA) application key (K AF ) that is derived from an authentication and key management for applications (AKMA) anchor key (K AKMA ), or (2) an encryption key (K enc ) and an integrity key (K int ) that are derived from the K AF , and wherein the K enc is for use by the first network function to decrypt the encrypted and integrity-protected message in a case that the first network function is able to successfully check the MAC using the K int , otherwise the K AF is for use by the first network function to check the MAC and decrypt the encrypted and integrity-protected message,
wherein the K AKMA is established using a communication with a second network function.
17 . The device of claim 16 , wherein the K AF is used to obtain the encrypted and integrity-protected message by:
generating, by the wireless device, an encryption key and an integrity key based on the K AF ; and
encrypting and integrity-protecting the first message using the encryption key and the integrity key.
18 . The device of claim 16 , wherein the K AF includes the authentication and key management for applications (AKMA) application key, and the K AKMA includes the AKMA anchor key.
19 . The device of claim 16 , wherein the encrypted and integrity-protected message includes a discovery request message that is transmitted through an interface for establishing proximity-based services.
20 . The device of claim 16 , wherein the encrypted and integrity-protected message includes a discovery request message that includes an authentication and key management for applications (AKMA) key identifier (A-KID) and the MAC.