Enhanced security for direct link communications

摘要

A method and apparatus for secure direct link communication between multiple wireless transmit/receive units (WTRUs) are disclosed. The WTRUs may exchange nonces that are used for generating a common nonce. Group identification information may be generated from at least the common nonce and is forwarded to an authentication server. The authentication server may generate a master key from the group identification information to match WTRUs as part of a key agreement group. The common nonce may be a session key and be refreshed during communication with the second WTRU. A group key encryption key (GKEK) and a group key confirmation key (GKCK) may also be generated based on the common nonce and used to encrypt and sign the master key so that base stations do not have access to the master key. A first WTRU may generate a group direct link temporal key (GDLTK) for communicating with the second WTRU.

主权项

1. A method, implemented at a first wireless transmit/receive unit (WTRU), for secure direct link communication, the method comprising:
generating, by the first WTRU, a first nonce; exchanging, by the first WTRU, the first nonce and a second nonce associated with a second WTRU; subsequent to exchanging the first nonce and the second nonce, generating, by the first WTRU, a common nonce that is common to the first WTRU and the second WTRU, wherein the common nonce is derived from the exchanged first and second nonces; transmitting, by the first WTRU, group identification information including the common nonce to an authentication server; and receiving, by the first WTRU, a master key from the authentication server, wherein the master key is securely encrypted uniquely for the first WTRU.