System and method of counter management and security key update for device-to-device group communication

1. A method for providing data encryption in a device-to-device (D2D) group communication, the method comprising:

creating, by a user equipment (UE), a new packet data convergence protocol (PDCP) entity for a service group wherein a service group is identified by a destination identifier (ID);

determining if any PDCP entity of the service group exists or not;

generating a new ProSe traffic key (PTK) from a ProSe group key (PGK) corresponding to the service group associated with the new PDCP entity;

initializing a new packet counter associated with the service group to zero if the new PDCP entity is a first PDCP entity associated with the service group;

generating a ProSe encryption key (PEK) from the PTK; and

encrypting data packets mapped to the new PDCP entity using the PEK and a packet counter associated with the service group.

2. The method of claim 1 , wherein the UE maintains a single packet counter for one or more PDCP entities associated with the service group.

3. The method of claim 1 , wherein the UE updates the packet counter for each data packet received for the service group.

4. The method of claim 1 , further comprising:

using one of a PTK or a PEK used by an existing PDCP entity of the service group for encrypting data packets mapped to the new PDCP entity, if another PDCP entity associated with the service group already exists.

5. The method of claim 1 , wherein the new PTK is generated when the new PDCP entity created for the service group is the first PDCP entity for the service group.

6. The method of claim 1 , wherein the new PTK is generated when the new PDCP entity created for the service group is the first PDCP entity for the service group and the PTK for the service group does not exist.

7. The method of claim 1 , wherein the new PEK is generated when the new PDCP entity created for the service group is the first PDCP entity for the service group.

8. The method of claim 1 , wherein the new PEK is generated when the new PDCP entity created for the service group is the first PDCP entity for that service group and the PEK for that service group does not exist.

9. The method of claim 1 , further comprising:

releasing, the PTK and PEK generated for the service group when a plurality of existing PDCP entities associated with the service group are released.

10. A method for providing data encryption in device-to-device (D2D) group communication, the method comprising:

creating, by a user equipment (UE), a new packet data convergence protocol (PDCP) entity for a service group, wherein the service group is identified by a destination identifier (ID);

determining if any PDCP entity of the service group exists or not;

generating a new ProSe traffic key (PTK) from a ProSe group key (PGK) corresponding to the service group associated with the new PDCP entity if the new PDCP entity is the first PDCP entity associated with the service group;

generating a ProSe encryption key (PEK) from the generated PTK if the new PDCP entity is the first PDCP entity associated with the service group;

initializing a new packet counter corresponding to the new PDCP entity to zero; and

encrypting data packets mapped to the new PDCP entity using the PEK associated with the service group, the packet counter corresponding to the new PDCP entity for the service group and logical channel ID of the logical channel associated with the new PDCP entity for the service group.

11. The method of claim 10 , further comprising:

using one of the PTK or the PEK used by the existing PDCP entity of the service group for encrypting data packets mapped to the new PDCP entity, if another PDCP entity associated with the service group already exists.

12. The method of claim 10 , further comprising:

releasing, the PTK and PEK derived for the service group when the one or more existing PDCP entities associated with the service group are released.