Procedures to provision and attach a cellular internet of things device to a cloud service provider
View Patent ↗A cellular IoT (CIoT) device can comprise a coverage and/or processing constrained device e.g., devices operating primarily MTC or M2M (e.g., sensor devices, controller devices, etc.). These devices can have limited or no user interface, and can be used for machines or devices with little mobility. CIoT devices can be deployed in usage scenarios such as home automation (e.g., security, appliances, energy packages, etc.), industry automation, and smart cities with low-power devices (e.g., devices having a battery life of several years), and can be easily installed and operated in challenging coverage conditions, such as lower or basement levels of buildings. CIoT devices can be provisioned to connect to a cellular carrier network and an associated CSP. The CSP can execute end2end solutions (e.g., service portal, service sign-up, etc.) while the cellular carrier can provide the bulk data pipe to the CSP.
1. A mobility management entity (MME) comprising:
transmission circuitry to transmit a request to a cellular Internet of Things (CIoT) user equipment (UE) through an eNodeB for identification information of the CIoT UE;
reception circuitry to:
receive a response from the CIoT UE via the eNodeB, the response including the identification information of the CIoT UE, the identification information of the CIoT UE communicated via the transmission circuitry to a home subscriber server (HSS) that is communicatively coupled to a CSP and a Machine-Type Communications Interworking Function (MTC-IWF) via at least one of an S6m interface or an Sh interface, the S6m interface to exchange CSP subscription data related to a user of the CIoT UE, the Sh interface to exchange CSP user data for the user of the CIoT UE; and
receive cloud service provider (CSP) authentication data for the CIoT UE, including an encrypted master key associated with an evolved packet core (EPC) network;
processing circuitry to execute a device attachment process with the encrypted master key to attach the CIoT UE to an evolved packet core (EPC) network in response to reception of the CSP authentication data.
2. The MME of claim 1 , wherein the device attachment process comprises an authentication and key agreement (AKA) authentication process to be executed based, at least in part, on the received identification information of the CIoT UE and the CSP authentication data for the CIoT UE.
3. The MME of claim 2 , wherein the encrypted master key comprises a long term evolution (LTE) Authentication Key (K) used for the AKA authentication process.
4. The MME of claim 2 , wherein the transmission circuitry is further to transmit confirmation of the AKA authentication process to one of a serving gateway (S-GW) or a packet data network gateway (PDN-GW) of the EPC network for transmission to the CSP through the HSS.
5. The MME of claim 1 , wherein the identification information of the CIoT UE includes at least one of a device serial number or manufacturer identification data.
6. The MME of claim 1 , wherein the identification information of the CIoT UE includes an access point name (APN) associated with the CSP.
7. The MME of claim 1 , further comprising:
an antenna, communicatively coupled to the transmission circuitry and the receiver circuitry, to exchange signal data with the eNodeB.
8. The MME of claim 1 , wherein the CIoT UE is pre-provisioned with the encrypted master key and the transmission circuitry avoids transmission of the encrypted master key to the CIoT UE after reception of the encrypted master key.
9. The MME of claim 1 , wherein the transmission circuitry is further to transmit the encrypted master key to the CIoT UE after reception of the encrypted master key.
10. The MME of claim 9 , wherein the transmission circuitry is further to:
transmit the request in response to reception, by the reception circuitry, of an attach request from the CIoT UE, and
transmit the encrypted master key in an attach reject message to the CIoT UE in response to the attach request, the attach reject message transmitted in response to addition of the encrypted master key to the CIoT UE.
11. The MME of claim 10 , wherein processing circuitry is further to:
execute a new device attachment process and in response to reception of a new attach request received after transmission of the encrypted master key.
12. The MME of claim 1 , wherein the encrypted master key is a session key based on a key received at the HSS from the CSP and a random number.
13. The MME of claim 1 , wherein the identification information of the CIoT UE is an uniform resource locator (URL) link.