Protection of mission-critical push-to-talk multimedia broadcast and multicast service subchannel control messages
A Mission-Critical Push-To-Talk (MCPTT) node is connected to a group of user equipments (UEs) served by the MCPTT node. The MCPTT node generates a Multimedia Broadcast and Multicast Service (MBMS) Subchannel Control Key (MSCCK), sends first messages to the UEs in unicast, wherein the first messages include the generated MSCCK, generates at least one MBMS subchannel control message, applies integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK, and sends the at least one MBMS subchannel control message in multicast.
1. A method of operating a Mission-Critical Push-To-Talk (MCPTT) node connected to user equipments (UEs) comprising MCPTT clients served by the MCPTT node, comprising:
generating a Multimedia Broadcast and Multicast Service (MBMS) Subchannel Control Key (MSCCK) when activating a MBMS bearer;
sending first messages to the UEs in unicast, wherein the first messages include the generated MSCCK;
generating at least one MBMS subchannel control message;
applying integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK; and
sending the at least one MBMS subchannel control message in broadcast.
2. The method of claim 1 , wherein the at least one MBMS subchannel control message comprises a Map Group To Bearer message.
3. The method of claim 1 , wherein the at least one MBMS subchannel control message comprises an Unmap Group To Bearer message.
4. The method of claim 1 , wherein applying integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK comprises generating a message authentication code (MAC) value using the at least one MBMS subchannel control message and the MSCCK, and appending the MAC value to the at least one MBMS subchannel control message.
5. The method of claim 1 , wherein applying integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK comprises encrypting the at least one MBMS subchannel control message with the MSCCK.
6. A Mission-Critical Push-To-Talk (MCPTT) node equipped to be connected to user equipments (UEs) comprising MCPTT clients to be served by the MCPTT node, comprising:
a key management module adapted to generate Multimedia Broadcast and Multicast Service (MBMS) Subchannel Control Keys (MSCCKs) when activating a MBMS bearer;
a PTT message generator module adapted to generate first messages to be sent in unicast to the UEs, wherein the first messages contain the MSCCKs, and further adapted to generate MBMS subchannel control messages and apply integrity protection and/or confidentiality protection to the MBMS subchannel control messages; and
a transmission module configured to send the MBMS subchannel control messages in broadcast.
7. The MCPTT node of claim 6 , wherein the at least one MBMS subchannel control message comprises a Map Group To Bearer message.
8. The MCPTT node of claim 6 , wherein the at least one MBMS subchannel control message comprises an Unmap Group To Bearer message.
9. The MCPTT node of claim 6 , wherein applying integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK comprises generating a message authentication code (MAC) value using the at least one MBMS subchannel control message and the MSCCK, and appending the MAC value to the at least one MBMS subchannel control message.
10. The MCPTT node of claim 6 , wherein applying integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK comprises encrypting the at least one MBMS subchannel control message with the MSCCK.
11. A Mission-Critical Push-To-Talk (MCPTT) node equipped to be connected to user equipments (UEs) comprising MCPTT clients served by the MCPTT node, comprising:
processing circuitry, memory, and transceiver circuitry collectively configured to:
generate a Multimedia Broadcast and Multicast Service (MBMS) Subchannel Control Key (MSCCK) when activating a MBMS bearer;
send first messages to the UEs in unicast, wherein the first messages include the generated MSCCK;
generate at least one MBMS subchannel control message;
apply integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK; and
send the at least one MBMS subchannel control message in broadcast.
12. The MCPTT node of claim 11 , wherein the at least one MBMS subchannel control message comprises a Map Group To Bearer message.
13. The MCPTT node of claim 11 , wherein the at least one MBMS subchannel control message comprises an Unmap Group To Bearer message.
14. The method of claim 11 , wherein applying integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK comprises generating a message authentication code (MAC) value using the at least one MBMS subchannel control message and the MSCCK, and appending the MAC value to the at least one MBMS subchannel control message.
15. The method of claim 11 , wherein applying integrity protection and/or confidentiality protection to the at least one MBMS subchannel control message with the MSCCK comprises encrypting the at least one MBMS subchannel control message with the MSCCK.