公开(公告)号：US11570161B2

公开(公告)日：2023-01-31

申请号：US14908240

申请日：2014-07-07

Applicant: NEC Corporation

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: H04L9/40 ,  H04W4/70 ,  H04W4/08 ,  H04W12/06 ,  H04W12/50 ,  H04W88/16

Abstract: In order to improve security upon distributing a group key, there is provided a gateway (20) to a core network for a group of MTC devices (10_1-10_n) communicating with the core network. The gateway (20) protects confidentiality and integrity of a group key, and distributes the protected group key to each of the MTC devices (10_1-10_n). The protection is performed by using: a key (Kgr) that is preliminarily shared between the gateway (20) and each of the MTC devices (10_1-10_n), and that is used for the gateway (20) to authenticate each of the MTC devices (10_1-10_n) as a member of the group; or a key (K_iwf) that is shared between an MTC-IWF (50) and each of the MTC devices (10_1-10_n), and that is used to derive temporary keys for securely conducting individual communication between the MTC-IWF (50) and each of the MTC devices (10_1-10_n).

公开(公告)号：US20220103459A1

公开(公告)日：2022-03-31

申请号：US17546216

申请日：2021-12-09

Applicant: NEC Corporation

Inventor： Xiaowei ZHANG ,  Anand Raghawa Prasad

IPC: H04L12/729 ,  H04W4/70 ,  H04W28/02 ,  H04W40/02 ,  H04W52/02

Abstract: A network node (21), which is placed within a core network, stores a list of network elements (24) capable of forwarding a trigger message to a MTC device (10). The network node (21) receives the trigger message from a transmission source (30, 40) placed outside the core network, and then selects, based on the list, one of the network elements to forward the trigger message to the MTC device (10). The MTC device (10) validates the received trigger message, and then transmits, when the trigger message is not validated, to the network node (21) a reject message indicating that the trigger message is not accepted by the MTC device (10). Upon receiving the reject message, the network node (21) forwards the trigger message through a different one of the network elements, or forwards the reject message to transmission source (30, 40) to send the trigger message through user plane.

公开(公告)号：US11228904B2

公开(公告)日：2022-01-18

申请号：US16663253

申请日：2019-10-24

Applicant: NEC Corporation

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: G06F21/00 ,  H04W12/04 ,  H04W12/0431 ,  H04W12/08 ,  H04W84/04

Abstract: In order for supporting separate ciphering at an MeNB (20) and an SeNB (30), the MeNB (20) derives separate first and second keys (KUPenc-M, KUPenc-S) from a third key (KeNB). The first key (KUPenc-M) is used for confidentially protecting first traffic transmitted over U-Plane between the MeNB (20) and a UE (10). The first key (KUPenc-M) may be the same as current KUPenc or a new key. The second key (KUPenc-S) is used for confidentially protecting second traffic transmitted over the U-Plane between the UE (10) and the SeNB (30). The MeNB (20) sends the second key (KUPenc-S) to the SeNB (30). The UE (10) negotiates with the MeNB (20), and derives the second key (KUPenc-S) based on a result of the negotiation.

公开(公告)号：US11223554B2

公开(公告)日：2022-01-11

申请号：US16535626

申请日：2019-08-08

Applicant: NEC Corporation

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: H04W4/70 ,  H04L12/729 ,  H04W28/02 ,  H04W40/02 ,  H04W52/02 ,  H04W88/16

Abstract: A network node (21), which is placed within a core network, stores a list of network elements (24) capable of forwarding a trigger message to a MTC device (10). The network node (21) receives the trigger message from a transmission source (30, 40) placed outside the core network, and then selects, based on the list, one of the network elements to forward the trigger message to the MTC device (10). The MTC device (10) validates the received trigger message, and then transmits, when the trigger message is not validated, to the network node (21) a reject message indicating that the trigger message is not accepted by the MTC device (10). Upon receiving the reject message, the network node (21) forwards the trigger message through a different one of the network elements, or forwards the reject message to transmission source (30, 40) to send the trigger message through user plane.

公开(公告)号：US11122405B2

公开(公告)日：2021-09-14

申请号：US16444517

申请日：2019-06-18

Applicant: NEC CORPORATION

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: H04W4/70 ,  H04W12/041 ,  H04W12/0433 ,  H04W12/03

Abstract: There is provided a new IWF SMC procedure for establishing security association between an MTC UE (10) and an MTC-IWF (20). The MTC-IWF (20) sends to the UE (10) at least an algorithm identifier which instructs the UE (10) to select one of algorithms for deriving a root key (K_iwf). The UE (10) derives the root key (K_iwf) in accordance with the selected algorithm, and derives at least a subkey for checking the integrity of messages transferred between the UE (10) and the MTC-IWF (20) by using the derived root key (K_iwf). The UE (10) protects uplink messages transmitted to the MTC-IWF (20) with the derived subkey. The MTC-IWF (20) protects downlink messages transmitted to the UE (10) with the same subkey derived at a core network.

公开(公告)号：US10375614B2

公开(公告)日：2019-08-06

申请号：US15123494

申请日：2015-03-05

Applicant: NEC CORPORATION

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: H04W36/28 ,  H04W76/27 ,  H04W28/08 ,  H04W36/00 ,  H04W12/04 ,  H04W88/08 ,  H04W92/20

Abstract: An SeNB informs an MeNB that it can configure bearers for the given UE. At this time, the MeNB manages the DRB status, and then sends a key S-KeNB to the SeNB. The MeNB also sends a KSI for the S-KeNB to both of the UE and the SeNB. After this procedure, the MeNB informs an EPC (MME and S-GW) about the new bearer configured at the SeNB, such that the S-GW 50 can start offloading the bearer(s) to the SeNB 30. Prior to the offloading, the EPC network entity (MME or S-GW) performs verification that: 1) whether the request is coming from authenticated source (MeNB); and 2) whether the SeNB is a valid eNB to which the traffic can be offload.

公开(公告)号：US10212597B2

公开(公告)日：2019-02-19

申请号：US15033278

申请日：2014-08-27

Applicant: NEC Corporation

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: G06F7/04 ,  H04W12/08 ,  H04W12/04 ,  G06F15/16 ,  H04L29/06 ,  H04W76/14

Abstract: In order for effectively ensuring security for direct communication in ProSe, a ProSe Function acquires from a 3rd party root keys for each of UEs to derive a pair of session keys for securely conducting direct communication with different UEs, and distributes the acquired root keys to each of the UEs. Each of the UEs derives the session keys by using one of the distributed root keys. Moreover, a plurality of UEs, which form a communication system, and are allowed to conduct direct communication with each other when the UEs are in proximity to each other, share public keys of the UEs therebetween through a node which supports the direct communication upon successfully registering the UEs with the node. Each of the UEs verifies at least a request for the direct communication by using one of the public keys.

公开(公告)号：US12107950B2

公开(公告)日：2024-10-01

申请号：US17421363

申请日：2019-12-19

Applicant: NEC Corporation

Inventor： Sander De Kievit ,  Sheeba Backia Mary Baskaran ,  Anand Raghawa Prasad

IPC: H04L9/08 ,  H04L9/32

CPC classification number: H04L9/0825 ,  H04L9/0838 ,  H04L9/3242

Abstract: The present disclosure relates to method of enabling key re-usage for an electronic device. The method comprising: receiving a request message from the electronic device, wherein the request message comprises a first information being indicative of a preference for one of a first key associated with a first network node in a first network or a second key associated with a second network node in a second network; processing the request message to determine the preference indicated in the first information; and transmitting a response message to the electronic device for reusing the first key or second key, the electronic device is configured to derive a third key based on the first key or the second key as indicated in the determined preference, and the second network is able to access to the first key and the second key whereas the first network cannot access the second key.

公开(公告)号：US11856074B2

公开(公告)日：2023-12-26

申请号：US16990141

申请日：2020-08-11

Applicant: NEC Corporation

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: H04L67/566 ,  H04W4/70 ,  H04L67/563 ,  H04L67/567 ,  H04L69/22 ,  H04W88/16 ,  H04L67/61 ,  H04L45/16 ,  H04W28/06

CPC classification number: H04L67/566 ,  H04L67/563 ,  H04L67/567 ,  H04L69/22 ,  H04W4/70 ,  H04L45/16 ,  H04L67/61 ,  H04W28/06 ,  H04W88/16

Abstract: In order for efficiently managing communications between a UE (10) and multiple SCSs (20_1-20_n), the UE (10) includes, in one message, multiple pieces of data to be transmitted to the SCSs (20_1-20_n), and sends the message to an MTC-IWF (30). The MTC-IWF (30) receives the message from the UE (10), and distributes the date to the SCSs (20_1-20_n). Each of the SCSs sends (20_1-20_n), to the MTC-IWF (30), data to be transmitted to the UE (10) and an indicator that indicates for the SCSs (20_1-20 n) the time tolerance until the data is transmitted to the UE (10). The MTC-IWF (30) receives the data and the indicators from the SCSs (20_1-20_n), and determines when to forward the data to the UE (10) based on the indicators.

公开(公告)号：US11751107B2

公开(公告)日：2023-09-05

申请号：US17306125

申请日：2021-05-03

Applicant: NEC Corporation

Inventor： Xiaowei Zhang ,  Anand Raghawa Prasad

IPC: H04W36/00 ,  H04W8/30 ,  H04W8/12 ,  H04W12/041 ,  H04W12/06 ,  H04W36/22 ,  H04L9/40

CPC classification number: H04W36/0038 ,  H04W8/12 ,  H04W8/30 ,  H04W12/041 ,  H04W12/068 ,  H04W36/22 ,  H04L63/083

Abstract: There is provided a network system including one or more first MMEs (30), and a second MME (40) separated from the first MMEs (30). In one of operation cases, the first MME (30) pushes, to the second MME (40), security context for a UE (10) that attaches to the first MME (30). The second MME (40) stores the security context. The first MME (30) further pushes the latest security context to the second MME (40), during a switch-off procedure for the first MME (30). The second MME (40) updates the stored security context with the latest security context. The first MME (30) pulls the security context from the second MME (40), when the UE (10) re-attaches to the first MME (30) or is handovered from different one of the first MMEs (30).