公开(公告)号：US10158625B2

公开(公告)日：2018-12-18

申请号：US15022024

申请日：2013-09-27

Applicant: Nokia Technologies Oy

Inventor： Yang Liu ,  Dajiang Zhang

IPC: H04L29/06 ,  H04W76/14 ,  H04W12/04 ,  H04W12/06

Abstract: Methods and apparatus are provided for key pairing between peer D2D UEs in different eNBs or D2D areas. A method may comprise: receiving at a first access network node serving a first D2D area from a first user equipment in the first D2D area, a request for keys for a D2D communication between the first user equipment and a second user equipment, wherein the request comprises an identification of a second D2D area where the second user equipment is located and being different from the first D2D area; identifying a second access network node serving the second D2D area based on the identification; sending to the second access network node, a request for a security context of the second user equipment; and receiving from the second access network node the security context for obtaining the keys for the D2D communication.

公开(公告)号：US20160165491A1

公开(公告)日：2016-06-09

申请号：US14906382

申请日：2013-08-08

Applicant: NOKIA TECHNOLOGIES OY

Inventor： Yang Liu ,  Dajiang Zhang

IPC: H04W36/00 ,  H04W36/22 ,  H04L29/06 ,  H04W12/04

CPC classification number: H04W36/0038 ,  H04L63/0428 ,  H04L63/205 ,  H04W12/0013 ,  H04W12/04 ,  H04W36/22

Abstract: A method for proxy algorithm identity selection may comprise: selecting, at a first network node, a security algorithm identity for a user equipment which is determined to handover to a second network node, based at least in part on security information of the user equipment and a list of security algorithm identities for the second network node; generating security keys for a communication between the user equipment and the second network node, based at least in part on the selected security algorithm identity; providing the security keys and the selected security algorithm identity to the second network node from the first network node; and sending the selected security algorithm identity to the user equipment from the first network node, in response to a handover acknowledgement from the second network node.

Abstract translation: 用于代理算法身份选择的方法可以包括：至少部分地基于用户设备的安全性信息，在第一网络节点处选择被确定为切换到第二网络节点的用户设备的安全算法身份，以及 第二网络节点的安全算法身份列表; 至少部分地基于所选择的安全算法身份，为所述用户设备和所述第二网络节点之间的通信生成安全密钥; 从所述第一网络节点向所述第二网络节点提供所述安全密钥和所选择的安全算法身份; 以及响应于来自所述第二网络节点的切换确认，从所述第一网络节点向所述用户设备发送所选择的安全算法身份。