Method for securing a direct communication connection

1. Method for securing a direct communication connection between a first and a second user equipment, both configured to operate with at least one of a plurality of base stations of a wireless network, the method comprising the steps for the first user equipment of:

maintaining an authentication code received from a first security center accessible via the wireless network, said first security center being assigned to a first area, said authentication code being made available to at least all user equipment in the first area,

maintaining a trust level of the authentication code,

reducing the trust level relating to the time of last access to one of the base stations of the wireless network,

submitting to the second user equipment the authentication code and the trust level, for setting up the direct communication connection,

in case of reception of a confirmation transmission from the second user equipment:

setting up the direct communication connection with the second user equipment.

2. Method according to claim 1 , wherein the trust level reduction considers the last access to the first security center by means of the base station.

3. Method according to claim 1 , wherein the trust level reduction is governed by a policy, provided by at least one of the wireless network or the security center.

4. Method according to claim 1 , wherein the trust level is maintained in a tamper resistant environment on board of the user equipment.

5. Method according to claim 1 , wherein in case the trust level is below a first predetermined threshold, the method comprises carrying out a renewal process of the trust level by accessing the security center via a second communication channel.

6. Method according to claim 1 , wherein in case the trust level is below a second predetermined threshold, the renewal process comprises requesting a new authentication code from a security center.

7. Method according to claim 1 , wherein the reduction of trust level additionally considers at least one of

moving speed of the user equipment,

spatial relation to a cell area,

measured network coverage conditions.

8. Method according to claim 1 ,

the second user equipment maintaining a list of valid authentication codes,

the method comprising the steps for the second user equipment upon reception, of the authentication code and the trust level from the first user equipment for setting up the direct communication connection,

checking the authentication code with said list of valid authentication codes, and

evaluating if the trust level matches a predetermined eligibility pattern, in case of a valid authentication code and trust level matches the eligibility pattern:

responding with a confirmation transmission to the first user equipment.

9. Method according to claim 8 , wherein the eligibility pattern considers at least one of:

a second trust level maintained by the second user equipment,

a third trust level received from a third user equipment during a predetermined time before receiving the direct communication connection request,

the distance to the cell area of a base station,

the time of last access to one of the base stations of the wireless network.

10. Method according to claim 8 , wherein the second user equipment is at least one of:

a user equipment,

an infrastructure equipment, using user equipment communication means.

11. User equipment configured for operating with at least one of a plurality of base stations of a wireless network, and for operating with a second user equipment by means of a direct communication connection,

the user equipment further maintaining an authentication code received from a first security center accessible via the wireless network, said first security center being assigned to a first area, said authentication code being made available at least to all user equipment in the first area, for securing the direct communication connection, the user equipment is configured to:

maintain a trust level of the authentication code,

reduce the trust level relating to the time of last access to one of the base stations of the wireless network,

submit to the second user equipment the authentication code and the trust level, for setting up the direct communication connection,

in case of reception of a confirmation transmission from the second user equipment:

set up the direct communication connection with the second user equipment.

12. User equipment according to claim 11 , wherein the trust level reduction is governed by a policy, provided by at least one of the wireless network or the security center.

13. User equipment according to claim 11 , further comprising a tamper resistant environment, wherein the trust level is maintained in said tamper resistant environment.

14. User equipment according to claim 11 , configured to maintain a list of valid authentication codes, and upon reception of the authentication code and the trust level from another user equipment for setting up the direct communication connection,

to check the authentication code with said list of valid authentication codes, and

to evaluate if the trust level matches a predetermined eligibility pattern, in case of a valid authentication code and trust level matches the eligibility pattern:

to respond with a confirmation transmission to the other user equipment.

15. User equipment according to claim 14 , wherein the eligibility pattern considers at least one of:

a second trust level maintained by the user equipment,

a third trust level received from a third user equipment during a predetermined time before receiving the direct communication connection request,

the distance to the cell area of a base station,

the time of last access to one of the base stations of the wireless network.