Method of secured transmission and reception of discovery message in a D2D communication system
The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). The various embodiments of the present invention disclose a method of secured transmission and reception of discovery message in device to device (D2D) communication system. According to one embodiment, a transmitting user equipment (UE) receives a ProSe group key (PGK) from a Prose function to perform a D2D communication in a D2D public safety group. The transmitting UE then derives a ProSe traffic key (PTK) using the PGK for transmitting data packets in the D2D communication. Using the PTK, the transmitting UE further derives a Prose integrity protection key (PIK) for securing a discovery message to discover one or more receiving UEs. The transmitting UE transmits the integrity protected discovery message using the derived PIK to the receiving UE. In turn, the receiving UE transmits a response message in a secure manner by deriving a PIK using PGK configured for the receiving UE. The various embodiments of the present invention disclose a method of a terminal. According to one embodiment, the method comprises of deriving a first traffic key and a second traffic key based on a group key, deriving a first security key for securing a discovery message based on the first traffic key and a second security key for securing data packets based on the second traffic key, and transmitting the discovery message generated based on the first security key.
1. A method of a terminal, the method comprising:
deriving a first traffic key and a second traffic key based on a group key;
deriving a first security key for securing a discovery message based on the first traffic key;
deriving a second security key for securing data packets based on the second traffic key; and
transmitting the discovery message generated based on the first security key,
wherein the first security key is a proximity based services (ProSe) integrity protection key (PIK) and the second security key is a ProSe encryption key (PEK).
2. The method of claim 1 ,
wherein the discovery message includes information including at least one of an identification (ID) for the group key, an ID for the first traffic key, an ID for the second traffic key, an ID for the terminal, or an ID for a group in which the terminal is included.
3. The method of claim 2 ,
wherein the discovery message is verified based on the first security key.
4. The method of claim 1 ,
wherein the group key is identified using an 8-bit group key ID, and
wherein the first traffic key and the second traffic key are identified using a 16-bit traffic key ID.
5. The method of claim 1 , wherein the discovery message is protected in ProSe protocol and the data packets are protected in PDCP protocol.
6. A method of a terminal, the method comprising:
receiving a discovery message;
deriving a first traffic key and a second traffic key based on a group key;
deriving a first security key for securing the discovery message based on the first traffic key,
deriving a second security key for securing data packets based on the second traffic key; and
verifying the discovery message based on the first security key,
wherein the first security key is a proximity based services (ProSe) integrity protection key (PIK) and the second security key is a ProSe encryption key (PEK).
7. The method of claim 6 , further comprising:
transmitting a response message.
8. The method of claim 6 ,
wherein the discovery message includes information including at least one of an identification (ID) for the group key, an ID for the first traffic key, an ID for the second traffic key, an ID for the terminal, or an ID for a group in which the terminal is included.
9. The method of claim 6 ,
wherein the group key is identified using an 8-bit group key ID, and
wherein the first traffic key and the second traffic key are identified using a 16-bit traffic key ID.
10. The method of claim 6 , wherein the discovery message is protected in protocol and the data packets are protected in PDCP protocol.
11. A terminal comprising:
a transceiver for transmitting and receiving a signal; and
a controller configured to:
derive a first traffic key and a second traffic key based on a group key,
derive a first security key for securing a discovery message based on the first traffic key,
derive a second security key for securing data packets based on the second traffic key, and
transmit the discovery message generated based on the first security key,
wherein the first security key is a proximity based services (ProSe) integrity protection key (PIK) and the second security key is a ProSe encryption key (PEK).
12. The terminal of claim 11 ,
wherein the discovery message includes information including at least one of an identification (ID) for the group key, an ID for the first traffic key, an ID for the second traffic key, an ID for the terminal, or an ID for a group in which the terminal is included.
13. The terminal of claim 12 ,
wherein the discovery message is verified based on the first security key.
14. The terminal of claim 11 ,
wherein the group key is identified using an 8-bit group key ID, and
wherein the first traffic key and the second traffic key are identified using a 16-bit traffic key ID.
15. The terminal of claim 11 , wherein the discovery message is protected in ProSe protocol and the data packets are protected in PDCP protocol.
16. A terminal, the terminal comprising:
a transceiver for transmitting and receiving a signal; and
a controller configured to:
receive a discovery message,
derive a first traffic key and a second traffic key based on a group key,
derive a first security key for securing the discovery message based on the first traffic key,
derive a second security key for securing data packets based on the second traffic key, and
verify the discovery message based on the first security key,
wherein the first security key is a proximity based services (ProSe) integrity protection key (PIK) and the second security key is a ProSe encryption key (PEK).
17. The terminal of claim 16 , wherein the controller is further configured to transmit a response message.
18. The terminal of claim 16 ,
wherein the discovery message includes information including at least one of an identification (ID) for the group key, an ID for the first traffic key, an ID for the second traffic key, an ID for the terminal, or an ID for a group in which the terminal is included.
19. The terminal of claim 16 ,
wherein the group key is identified using an 8-bit group key ID, and
wherein the first traffic key and the second traffic key are identified using a 16-bit traffic key ID.
20. The terminal of claim 16 , wherein the discovery message is protected in ProSe protocol and the data packets are protected in PDCP protocol.