Methods and apparatus for C2 communications security establishment, modification and revocation
Methods, apparatus, systems, architectures and interfaces for performing secure command and control (C2) communications in an Unmanned Aerial System (CAS) including a UAV controller (UAV-C) are provided. The method includes on condition that the UAV has completed a registration procedure with a network, transmitting, to a session management function (SMF) of the network, a packet data unit (PDU) session establishment request message; performing a secondary authentication, with any of the USS and the UTM, via the SMF; receiving a PDU session establishment accept message including C2 security information; and establishing C2 communications security with the peer UAV-C using the C2 security information.
1 . A method implemented in an unmanned aerial vehicle (UAV), the method comprising:
sending a packet data unit (PDU) session establishment request message, wherein the PDU session establishment request message comprises an indication of a UAV identity (ID) of the UAV for command and control (C2) communication establishment between the UAV and a first UAV controller (UAV-C);
receiving a PDU session establishment accept message, wherein the PDU session establishment accept message comprises C2 security information for C2 communications between the UAV and the first UAV-C; and
receiving a PDU session modification message, wherein the PDU session modification message comprises second C2 security information for C2 communications with a second UAV-C.
2 . The method of claim 1 , wherein a first extended protocol configuration option (EPCO) information element (IE) comprises the PDU session establishment request message, and wherein a second EPCO IE comprises the PDU session establishment accept message.
3 . The method of claim 2 , wherein a third EPCO IE comprises the PDU session establishment modification message.
4 . The method of claim 1 , wherein the PDU session establishment accept message is received via a cellular communication network.
5 . The method of claim 4 , wherein the PDU session establishment message is sent to a session management function (SMF) of the cellular communication network.
6 . The method of claim 1 , wherein the C2 security information comprises unmanned aerial systems (UAS) key material.
7 . The method of claim 1 , wherein the PDU session establishment accept message further comprises one or more of a UAS temporary ID and an internet protocol (IP) address associated with the first UAV-C.
8 . The method of claim 7 , wherein the PDU session establishment modification message further comprises a second IP address associated with the second UAV-C.
9 . An unmanned aerial vehicle (UAV) comprising:
a processor configured to:
send a packet data unit (PDU) session establishment request message, wherein the PDU session establishment request message comprises an indication of a UAV identity (ID) of the UAV for command and control (C2) communication establishment between the UAV and a first UAV controller (UAV-C);
receive a PDU session establishment accept message, wherein the PDU session establishment accept message comprises C2 security information for C2 communications between the UAV and the first UAV-C; and
receive a PDU session modification message, wherein the PDU session modification message comprises second C2 security information for C2 communications with a second UAV-C.
10 . The UAV of claim 9 , wherein a first extended protocol configuration option (EPCO) information element (IE) comprises the PDU session establishment request message, and wherein a second EPCO IE comprises the PDU session establishment accept message.
11 . The UAV of claim 10 , wherein a third EPCO IE comprises the PDU session establishment modification message.
12 . The UAV of claim 9 , wherein the processor is configured to receive the PDU session establishment accept message via a cellular communication network.
13 . The UAV of claim 12 , wherein the PDU session establishment message is sent to a session management function (SMF) of the cellular communication network.
14 . The UAV of claim 9 , wherein the C2 security information comprises unmanned aerial systems (UAS) key material.
15 . The UAV of claim 9 , wherein the PDU session establishment accept message further comprises one or more of a UAS temporary ID and an internet protocol (IP) address associated with the first UAV-C.
16 . The UAV of claim 15 , wherein the PDU session establishment modification message further comprises a second IP address associated with the second UAV-C.