Method and system for supporting security and information for proximity based service in mobile communication system environment
A method for acquiring security related information for Proximity based security (Prose) search and prose communication by User Equipment (UE) in a mobile communication network is provided. A security communication method for UE for prose includes transmitting an attach request to an evolved Node B (eNB), receiving an attach response that includes security related information for the prose from the eNB, and performing device-to-device communication using the security related information.
1. A security communication method for user equipment (UE) for proximity based services (prose), the security communication method comprising:
transmitting, to a prose function, a first message including a public key of the UE and a prose function identification (ID);
receiving, from the prose function, a prose authentication token in response to the first message;
transmitting, to the prose function, a second message including a value determined based on the prose authentication token;
receiving, from the prose function, a third message including a prose group key (PGK), a PGK ID, and a prose public land mobile network (PLMN) list;
generating a prose traffic key (PTK) based on the PGK and a PTK ID;
deriving a prose encryption key (PEK) based on the PTK;
receiving, from the prose function, a public key of another UE communicating with the UE; and
performing a device-to-device (D2D) communication by encrypting data based on the PEK and using the public key of the other UE.
2. The security communication method of claim 1 ,
wherein the third message includes at least one of a prose ID, a prose capability, and a security key.
3. The security communication method of claim 1 , further comprising:
receiving, from a mobility management entity (MME), a fourth message including a UE authentication token (AUTN); and
transmitting, to the MME, a fifth message including a response security value (RES) in response to the fourth message.
4. The security communication method of claim 1 , further comprising:
receiving, from an MME, a non access stratum security command (NAS SMC); and
transmitting, to the MME, a non access stratum security completion response.
5. The security communication method of claim 2 , further comprising:
receiving, from an evolved Node B (eNB), an access stratum security command (AS SMC); and
transmitting, to the eNB, an access stratum security completion response.
6. A user equipment (UE) configured to perform security communication in a network that provides proximity based services (prose), the UE comprising:
a transceiver; and
a controller coupled with the transceiver and configured to:
control the transceiver to transmit a first message including a public key of the UE and a prose function identification (ID),
control the transceiver to receive, from the prose function, a prose authentication token in response to the first message,
control the transceiver to transmit, to the prose function, a second message including a value determined based on the prose authentication token,
control the transceiver to receive a third message including a prose group key (PGK), a PGK identification (ID), and a prose public land mobile network (PLMN) list,
generate a prose traffic key (PTK) based on the PGK and a PTK ID,
derive a prose encryption key (PEK) based on the PTK,
control the transceiver to receive a public key of another UE communicating with the UE from the prose function, and
perform a device-to-device (D2D) communication by encrypting data based on the PEK and using the public key of the other UE.
7. The UE of claim 6 , wherein the third message includes at least one of a prose ID, a prose capability, and a security key.
8. The UE of claim 6 , wherein the controller is further configured to:
control the transceiver to receive, from a mobility management entity (MME), a fourth message including a UE authentication token (AUTN), and
control the transceiver to transmit, to the MME, a fifth message including a response security value (RES) in response to the fourth message.
9. The UE of claim 6 , wherein the controller is further configured to:
control the transceiver to receive, from an MME, a non access stratum security command (NAS SMC), and
control the transceiver to transmit, to the MME, a non access stratum security completion response.
10. The UE of claim 6 , wherein the controller is further configured to:
control the transceiver to receive, from an evolved Node B (eNB), an access stratum security command (AS SMC), and
control the transceiver to transmit, to the eNB, an access stratum security completion response.