Authorization of user equipment for mobile communications network that has previously been authorized by trusted traffic authority
A method of operation of a control node ( 400, 700, 1000 ) in a mobile communications network, the method comprising: receiving a request for authorization from a user equipment ( 500, 800, 1100 ); determining whether the request for authorization includes evidence that the user equipment is authorized by a trusted traffic authority; and processing the request for authorization only if the request for authorization includes evidence that the user equipment is authorized by the trusted traffic authority. Methods for the user equipment and a trusted authority device, as well as corresponding devices, computer programs and computer program products are also disclosed.
1. A method of operation of a Vehicle-to-Everything (V2X) control node in a mobile communications network, the method comprising:
receiving a request for V2X authorization from a user equipment;
determining whether the request for V2X authorization includes evidence that the user equipment is authorized by a trusted traffic authority, wherein the evidence is configured to not reveal information associated with:
a Mobile Network Operator (MNO) subscription used in the trusted traffic authority; and
credentials sent by the trusted traffic authority to the MNO; and
processing the request for V2X authorization only if the request for V2X authorization includes evidence that the user equipment is authorized by the trusted traffic authority.
2. The method of claim 1 , wherein the determining comprises determining whether the request for V2X authorization includes evidence whose authenticity is guaranteed.
3. The method of claim 2 further comprising determining whether the request for V2X authorization includes evidence signed by the trusted traffic authority.
4. The method of claim 1 , wherein the determining comprises determining whether the evidence that the user equipment is authorized by a trusted traffic authority includes evidence of freshness.
5. The method of claim 4 , wherein the evidence of freshness comprises a valid timestamp.
6. The method of claim 4 , wherein the evidence of freshness comprises a counter value.
7. The method of claim 1 , wherein the determining comprises determining whether the evidence that the user equipment is authorized by a trusted traffic authority is within a validity time thereof.
8. A Vehicle-to-Everything (V2X) control node for use in a mobile communications network, the control node comprising:
processing circuitry;
memory containing instructions executable by the processing circuitry whereby the V2X control node is operative to:
receive a request for V2X authorization from a user equipment;
determine whether the request for V2X authorization includes evidence that the user equipment is authorized by a trusted traffic authority, wherein the evidence is configured to not reveal information associated with:
a Mobile Network Operator (MNO) subscription used in the trusted traffic authority; and
credentials sent by the trusted traffic authority to the MNO; and
process the request for V2X authorization only if the request for V2X authorization includes evidence that the user equipment is authorized by the trusted traffic authority.
9. A method of operating a user equipment in a mobile communications network, the method comprising:
running a Vehicle-to-Everything (V2X) authorization or enrolment procedure with a trusted traffic authority;
obtaining evidence that the user equipment is authorized by the trusted traffic authority;
sending a request for V2X authorization to a V2X control node; and
sending, to the V2X control node, the evidence that the user equipment is authorized by the trusted traffic authority, wherein the evidence is configured to not reveal information associated with:
a Mobile Network Operator (MNO) subscription used in the trusted traffic authority; and
credentials sent by the trusted traffic authority to the MNO.
10. The method of claim 9 , wherein the sending the evidence that the user equipment is authorized by the trusted traffic authority comprises sending the evidence that the user equipment is authorized by the trusted traffic authority as part of the request for V2X authorization.
11. The method of claim 9 , wherein the running the V2X authorization or enrolment procedure comprises an establishment of a secure channel with the trusted traffic authority using a certificate.
12. A user equipment for use in a mobile communications network, the user equipment comprising:
processing circuitry;
memory containing instructions executable by the processing circuitry whereby the user equipment is operative to:
run a Vehicle-to-Everything (V2X) authorization or enrolment procedure with a trusted traffic authority;
obtain evidence that the user equipment is authorized by the trusted traffic authority;
send a request for V2X authorization to a V2X control node; and
send, to the V2X control node, the evidence that the user equipment is authorized by the trusted traffic authority, wherein the evidence is configured to not reveal information associated with:
a Mobile Network Operator (MNO) subscription used in the trusted traffic authority; and
credentials sent by the trusted traffic authority to the MNO.
13. A method of operation of a trusted traffic authority device, the method comprising:
receiving a request for Vehicle-to-Everything (V2X) authorization from a user equipment;
determining whether the user equipment may be authorized; and,
in response to determining that the user equipment may be authorized,
sending, to the user equipment, evidence that the user equipment is authorized by the trusted traffic authority, wherein the evidence is configured to not reveal information associated with:
a Mobile Network Operator (MNO) subscription used in the trusted traffic authority; and
credentials sent by the trusted traffic authority to the MNO.
14. The method of claim 13 , further comprising including a guarantee of authenticity of the evidence that the user equipment is authorized by the trusted traffic authority.
15. The method of claim 14 , further comprising signing the evidence that the user equipment is authorized by the trusted traffic authority.
16. The method of claim 13 , further comprising adding evidence of freshness to the evidence that the user equipment is authorized by the trusted traffic authority.
17. The method of claim 16 , wherein the evidence of freshness comprises a valid timestamp.
18. The method of claim 16 , wherein the evidence of freshness comprises a counter value.
19. The method of claim 16 , further comprising including a validity time to the evidence that the user equipment is authorized by the trusted traffic authority.
20. The method of claim 13 , further comprising, in response to determining that the user equipment may be authorized, allowing the user equipment to take part in vehicular communications.
21. A trusted traffic authority device, comprising:
processing circuitry;
memory containing instructions executable by the processing circuitry whereby the trusted traffic authority device is operative to:
receive a request for Vehicle-to-Everything (V2X) authorization from a user equipment;
determine whether the user equipment may be authorized; and,
in response to determining that the user equipment may be authorized, send, to the user equipment, evidence that the user equipment is authorized by the trusted traffic authority, wherein the evidence is configured to not reveal information associated with:
a Mobile Network Operator (MNO) subscription used in the trusted traffic authority; and
credentials sent by the trusted traffic authority to the MNO.