KR20190096907A - Method and apparatus for performing proximity service in wireless communication system - Google Patents

Abstract

Disclosed is a method in which a terminal obtains a layer-2 identifier of a terminal from a first entity and performs communication with another terminal using the obtained layer-2 identifier in proximity service communication.

Description

METHOD AND APPARATUS FOR PERFORMING PROXIMITY SERVICE IN WIRELESS COMMUNICATION SYSTEM}

The present invention relates to a method for performing proximity service communication in a wireless communication system, an apparatus for performing proximity service communication, and a recording medium on which a program for performing proximity service communication is recorded.

Proximity Service (ProSe) refers to a method of supporting communication between devices located in a physical location. Specifically, ProSe aims to support the operation of discovering applications running on devices in close proximity to each other, and ultimately exchanging application-related data. For example, it may be considered that ProSe is applied to applications such as social network services (SNS), commerce, and games.

ProSe may be referred to as device-to-device (D2D) communication. That is, by establishing a direct link between a plurality of devices (eg, user equipments (UEs)), communication between user devices (eg, voice, multimedia data, etc.) is directly exchanged between devices without going through a network. Say the way. ProSe communication may include a scheme such as UE-to-UE communication, Peer-to-Peer communication, and the like. In addition, the ProSe communication method may be applied to machine-to-machine communication (M2M), machine type communication (MTC), and the like. Therefore, ProSe is considered as one way to solve the burden of the base station due to the rapidly increasing data traffic. In addition, the introduction of ProSe can reduce the procedure of the base station, decrease the power consumption of the devices participating in the ProSe, increase the data transmission speed, increase the capacity of the network, load balancing, cell coverage can be expected.

The present invention proposes a method for determining identification information, security information, and the like, which are used for communication when performing proximity service communication between terminals in a wireless communication system.

Disclosed is a method in which a terminal acquires a layer-2 identifier of a terminal from a first entity and performs communication with another terminal using the obtained layer-2 identifier in proximity service communication according to an embodiment of the present invention.

1 is a diagram illustrating a wireless communication system according to an exemplary embodiment.
2 is a flowchart illustrating a method of determining a datalink layer identifier (hereinafter, referred to as a layer-2 identifier) of a UE performing proximity service communication according to an embodiment.
3 is a flowchart illustrating a method of determining an IP address of a terminal in a communication service between proximity terminals according to an embodiment.
4 is a flowchart illustrating a method of sharing IP addresses of UE1 and UE2 according to an embodiment.
FIG. 5 is a diagram for describing a method of setting security using an identifier of a UE in proximity service communication according to an embodiment.
6 is a flowchart illustrating an authorization procedure between UEs in proximity service communication according to an embodiment.
7 is a flowchart illustrating a method of protecting a media stream between UEs in proximity service communication according to an embodiment.
8 is a diagram illustrating a discovery message used in proximity service communication according to an embodiment.
9 is a flowchart illustrating a discovery method between a UE and a relay terminal in proximity service communication according to an embodiment.
10 is a block diagram illustrating a UE in which an embodiment of the present invention is implemented.

The following embodiments combine the components and features of the present invention in a predetermined form. Each component or feature may be considered to be optional unless otherwise stated. Each component or feature may be embodied in a form that is not combined with other components or features. In addition, some components and / or features may be combined to form an embodiment of the present invention. The order of the operations described in the embodiments of the present invention may be changed. Some components or features of one embodiment may be included in another embodiment or may be replaced with corresponding components or features of another embodiment.

Specific terms used in the following description are provided to help the understanding of the present invention, and the use of such specific terms may be changed to other forms without departing from the technical spirit of the present invention.

In some instances, well-known structures and devices may be omitted or shown in block diagram form centering on the core functions of the structures and devices in order to avoid obscuring the concepts of the present invention. In addition, the same components will be described with the same reference numerals throughout the present specification.

Embodiments of the present invention may be supported by standard documents disclosed in relation to at least one of the Institute of Electrical and Electronics Engineers (IEEE) 802 series system, 3GPP system, 3GPP LTE and LTE-A system, and 3GPP2 system. That is, steps or parts which are not described to clearly reveal the technical spirit of the present invention among the embodiments of the present invention may be supported by the above documents. In addition, all terms disclosed in the present document can be described by the above standard document.

The following techniques can be used in various wireless communication systems. For clarity, the following description focuses on 3GPP LTE and 3GPP LTE-A systems, but the technical spirit of the present invention is not limited thereto.

Terms used in this document are defined as follows.

UE (User Equipment): a user device. The UE may be referred to in terms of terminal, mobile equipment (ME), mobile station (MS), and the like. In addition, the UE may be a portable device such as a laptop, a mobile phone, a personal digital assistant (PDA), a smart phone, a multimedia device, or the like, or may be a non-portable device such as a personal computer (PC) or a vehicle-mounted device. The UE is a UE capable of communicating in the 3GPP spectrum such as LTE and / or non-3GPP spectrum such as WiFi, public safety spectrum.

Proximity Services or Proximity-based Services (ProSe): A service that enables discovery between physically close devices, and direct communication / communication via a base station / communication through a third party device. In this case, user plane data is exchanged through a direct data path without passing through a 3GPP core network (eg, EPC).

Proximity: Whether a UE is in proximity to another UE depends on whether a given proximity criterion is satisfied. Proximity criteria may be given differently for ProSe discovery and ProSe communication. In addition, the proximity criterion may be set to be controlled by the operator.

ProSe Discovery: A process using E-UTRA or identifying between UEs which UE is in proximity to another UE.

ProSe Communication: Communication between adjacent UEs performed via a communication path established between the UEs. The communication path may be established directly between the UEs or may be routed through local base station (eNodeB) (s).

1 is a diagram illustrating a wireless communication system 100 according to an exemplary embodiment.

The wireless communication system 100 according to an embodiment may include a UE1 110, a UE2 120, and a base station 130.

In the wireless communication system 100 shown in FIG. 1, only components related to the present embodiment are shown. Accordingly, it will be understood by those skilled in the art that other general purpose components may be further included in addition to the components shown in FIG. 1.

UE1 110 and UE2 120 according to an embodiment may perform Prose one-to-one direct communication. In Prose one-to-one direct communication according to an embodiment, for direct communication between two UEs over an air interface (eg, PC5), each UE may have a layer-2 identifier. In a wireless communication system according to an embodiment, at least one entity of a prose function (PF), a prose key management function (PKMF), and a UE may determine a layer-2 identifier of the UE.

Meanwhile, if an IP address exists, the UE1 110 and UE2 120 may reuse the existing IP address. The IP addresses of UE1 110 and UE2 120 may be shared through PC5 signaling.

In addition, the UE1 110 and the UE2 120 according to an embodiment may generate a security key by using identifiers of the UE1 110 and the UE2 120 instead of the group ID for bearer level security. In addition, the UE1 110 and the UE2 120 may generate a security key by using identifiers of the UE1 110 and the UE2 120 instead of the group ID for encrypting the media data.

Meanwhile, when at least one of the UE1 110 and the UE2 120 communicates with the relay terminal, the same key may be present between the UEs 110 and 120 and the relay terminal. The UE (eg, 110) and the relay terminal may transmit and receive a discovery message by using the same key and each identifier that they have.

In addition, when generating the Message Integrity Code (MIC), which is a signature used for code authentication, UE1 110 and UE2 120 according to an embodiment generate MIC using only their UE identifier except for other information. can do. According to another example, other parameters besides the UE identifier may be used together to generate the MIC.

The base station 130 according to an embodiment generally refers to a station communicating with at least one of a relay terminal and a UE, and includes an evolved-NodeB (eNodeB), a base transceiver system (BTS), an access point, Other terms such as a femto base station (femto-eNB), a pico base station (pico-eNB), a home base station (Home eNB), a relay (relay). The base station 130 may provide at least one cell to at least one of the relay terminal 130 and the terminal 140. The cell may mean a geographic area where the base station 20 provides a communication service or may mean a specific frequency band. The cell may mean a downlink frequency resource and an uplink frequency resource. Alternatively, the cell may mean a combination of a downlink frequency resource and an optional uplink frequency resource.

2 is a flowchart illustrating a method of determining a datalink layer identifier (hereinafter, referred to as a layer-2 identifier) of a UE performing proximity service communication according to an embodiment.

In step S210, the UE may request a layer-2 identifier of the UE from the first entity providing the proximity communication service.

Layer-2 identifiers must be unique, not duplicated locally, and must be used identically in multiple datalink layers. In a wireless communication system according to an embodiment, a UE identifier for group communication may be used as a layer-2 identifier in one-to-many proximity service communication.

In Prose one-to-one direct communication according to an embodiment, for direct communication between two UEs over an air interface (eg, PC5), each UE may have a layer-2 identifier. For example, for unicast communication, a source layer-2 identifier and a destination layer-2 identifier may be needed for each frame transmitted from UE 1 to UE 2. In addition, bearer level security may be applied to secure data link layer communication through PC5.

In a wireless communication system according to an embodiment, at least one entity of a prose function (PF), a prose key management function (PKMF), and a UE may determine a layer-2 identifier of the UE.

For example, the PF may determine the layer-2 identifier of the UE. The PF may provide a layer-2 identifier to the UE during the service authorization procedure. Here, security parameters according to SA3 WG may be provided from the PKMF. If the value of the layer-2 identifier is unique to each layer-2 group, the PKMF may provide the PF with a layer-2 identifier for unicast communication as a ProSe UE identifier.

According to another embodiment, the PKMF may determine the layer-2 identifier of the UE.

For example, the UE can reuse the ProSe UE identifier assigned for group communication. Here, security parameters for one-to-one communication can be provided from the PKMF. If the UE is assigned to any one of the layer-2 groups for one-to-many communication, the UE may use the ProSe UE identifier assigned for ProSe group communication as the layer-2 identifier for unicast communication.

As another example, the UE may be assigned a layer-2 identifier for unicast communication along with security parameters from the PKMF. The PKMF may determine the value of the layer-2 identifier for unicast communication as the ProSE UE identifier of the plurality of layer-2 groups.

According to another embodiment, the UE may determine for itself a layer-2 identifier for unicast communication. Security parameters may be provided from the PKMF. Here, the UE needs to confirm that the layer-2 identifier for unicast communication is unique locally.

According to an embodiment, when a collision of the layer-2 identifier is detected, the UE may determine a layer-2 identifier for unicast communication by itself.

Meanwhile, hereinafter, a specific method of receiving a layer-2 identifier from the first entity will be described. Here, the first entity may obtain a layer-2 identifier of the UE from another second entity and provide it to the UE.

A PF according to an embodiment manages a UE identifier or a layer-2 identifier for one-to-one communication and must ensure that the UE identifier or the layer-2 identifier is unique for each PF.

According to an embodiment, the PKMF manages a UE identifier or a layer-2 identifier for one-to-one communication and must ensure that the UE identifier or the layer-2 identifier is unique for each PF.

According to an embodiment, the PF may provide a PKMF with a UE identifier or a layer-2 identifier for one-to-one communication. For example, the PF may provide a UE identifier or a layer-2 identifier for each UE. According to another example, the PF may provide at least one list including at least one UE identifier or at least one layer-2 identifier for the group. According to another example, the PF may provide a range of at least one UE identifier or at least one layer-2 identifier for the group.

According to an embodiment, when the PF receives a ProSe discovery authorization or direct communication service authorization request to the PF, the PF may provide at least one UE identifier or at least one layer-2 identifier to the PKMF.

The PF according to an embodiment may provide the PKMF with at least one UE identifier or at least one layer-2 identifier as the PKMF requests a UE identifier or at least one layer-2 identifier for a specific UE or group.

According to an embodiment, the UE may request at least one UE identifier or at least one layer-2 identifier from the PKMF.

According to one embodiment, the PKMF may provide at least one UE identifier or at least one layer-2 identifier along with other parameters such as security parameters.

A PF according to an embodiment manages a UE identifier or a layer-2 identifier for one-to-one communication and must ensure that the UE identifier or the layer-2 identifier is unique for each PF.

According to an embodiment, the PKMF manages a UE identifier or a layer-2 identifier for one-to-one communication and must ensure that the UE identifier or the layer-2 identifier is unique for each PKMF.

According to an embodiment, the PKMF may provide the PF with a UE identifier or a layer-2 identifier for one-to-one communication. For example, the PKMF may provide a UE identifier or a layer-2 identifier for each UE. According to another example, the PKMF may provide at least one list including at least one UE identifier or at least one layer-2 identifier for the group. According to another example, the PKMF may provide a range of at least one UE identifier or at least one layer-2 identifier for the group.

When receiving a PF ProSe discovery authorization or direct communication service authorization request, the PKMF may provide at least one UE identifier or at least one layer-2 identifier to the PF.

According to an embodiment, the PKMF may provide at least one UE identifier or at least one layer-2 identifier to the PF as the PF requests a UE identifier or at least one layer-2 identifier for a specific UE or group.

According to an embodiment, the UE may request at least one UE identifier or at least one layer-2 identifier from the PF.

The PF according to an embodiment may provide at least one UE identifier or at least one layer-2 identifier to the UE.

According to an embodiment, the UE may request the PF for at least one UE identifier or at least one layer-2 identifier along with other parameters (eg, security parameters).

The PF according to an embodiment may provide the UE with at least one UE identifier or at least one layer-2 identifier along with other parameters (eg, security parameters).

In operation S220, the UE may directly communicate with another UE through an air interface (eg, PC5) using the layer-2 identifier.

3 is a flowchart illustrating a method of determining an IP address of a terminal in a communication service between proximity terminals according to an embodiment.

In step S310, the UE may check whether the IP address of the UE exists.

In step S320, the UE may be assigned an IP address.

Since the UE does not have an IP address, the UE may be assigned an IPv4 address or an IPv6 address through DHCP. For example, in communication between UE1 and UE2, either of the two UEs may operate as a DHCP server or an IPv6 router. According to another example, in the case of a Prose UE-network relay, the relay terminal may operate as a DHCP server or an IPv6 router for at least one UE connected to the relay terminal.

In step S330, if the IP address exists, the UE may reuse the existing IP address. According to an embodiment, the UE may use a link local IP address as an IP address in one-to-one communication. According to another example, the UE may reuse the existing IP address. The IP address of the UE may be shared through PC5 signaling.

In operation S340, the UE may perform communication according to the determined IP address.

4 is a flowchart illustrating a method of sharing IP addresses of UE1 and UE2 according to an embodiment.

UE1 and UE2 according to an embodiment may check whether each IP address exists. When an IP address exists, UE1 and UE2 can communicate using the existing IP address without generating a new IP.

In step S410, the UE1 may transmit IP address information of the UE1 for one-to-one communication to the UE2.

In step S420, UE2 may transmit IP address information of UE2 for one-to-one communication to UE1.

Here, the IP address information may include at least one parameter. For example, it may include at least one of a message type, an operation type, a transaction identifier, a sender's IP, a sender's layer-2 identifier, a receiver's IP, and a receiver's layer-2 identifier. Here, the message type may be any one of a request, a response, and a reject or deny. In addition, the operation type may be any one of one-to-one communication, UE network relay, inter-UE relay, and inter-UE group relay.

According to an embodiment, when the message type is a request, the message may include the sender's IP and the sender's layer-2 identifier. Other fields may be optional.

According to an embodiment, when the message type is a response, the message may include the sender's IP, the sender's layer-2 identifier, the receiver's IP, and the receiver's layer-2 identifier. Other fields may be optional.

According to one embodiment, if no IP address exists in the UE, the UE may receive a reject message.

FIG. 5 is a diagram for describing a method of setting security using an identifier of a UE in proximity service communication according to an embodiment.

FIG. 5A is a diagram illustrating parameters for generating PTK (Prose Traffic Key) used in one-to-many communication.

In proximity service communication, a Prose Group Key (PGK) may be used for bearer level security. Terminals included in the group may generate a PTK from the PGK. The PTK may be generated based on group member identification information, length of group member identification information, PTK identification information, length of PTK identification information, group identification information, and the like. In addition, the terminals may generate a PEK (Prose Encryption Key) and a PIK (Prose Integrity Key) from the PTK. Here, referring to FIG. 5A, it can be seen that group identification information is included among a plurality of parameters for generating PTK.

5B is a diagram for describing a method of generating a PUK using an identifier of a UE, according to an embodiment.

The UE according to an embodiment may generate a PUK (Prose Unicast Traffic Key) using the UE identifier from the PGK for one-to-one communication. For example, the PUK may be generated based on the PTK of the group member identification information, the length of the group member identification information, the PUK identification information 510, the length of the PUK identification information, and the UE identifier 520.

In addition, the UE may generate a PEK and a PIK from the PUK. PUK according to an embodiment may be used for bearer level security, such as in UE-network relay communication and one-to-one communication. Meanwhile, although the layer-2 identifier used for generating the PUK in one-to-one communication is an identifier of a UE requesting authorization, it may be an identifier of a UE requesting direct communication according to a setting.

6 is a flowchart illustrating an authorization procedure between UEs in proximity service communication according to an embodiment.

In operation S610, the UE1 may directly transmit a communication request to the UE2.

Meanwhile, UE1 and UE2 are terminals included in the same group and may have the same PGK.

In operation S620, the UE2 may transmit an authentication request to the UE1. Here, the authentication request may include a PGK ID, a PUK ID, and a message authentication code (MAC).

UE2 may generate PIK and PEK from the PUK. UE1 may also generate PUKs, PIKs, and PEKs.

In operation S630, the UE1 may transmit an authentication response to the UE2. Here, the authentication response may include a MAC.

In operation S640, the UE2 may accept direct communication of the UE1.

UE2 according to an embodiment may accept the direct communication request of UE1 as the MAC of UE1 and the MAC of UE2 are the same.

Meanwhile, according to another example, when using PTK of group communication in one-to-one communication, each of the UEs included in the group may filter messages for which the UE is not a destination by using at least one of a layer-2 identifier and an IP address. have.

7 is a flowchart illustrating a method of protecting a media stream between UEs in proximity service communication according to an embodiment.

In step S710, UE1 and UE2 may set up GMKs (Group Master Keys), respectively. Here, the GMK may be a key that the terminals in the group have the same.

In operation S720, the UE1 may generate group session keys (GSK).

In operation S730, the UE1 may transmit MIKEY_GSK to the UE2. Here, UE2 may acquire information about GSK through MIKEY_GSK. UE1 according to an embodiment may generate a MIKEY (Multimedia Internet KEYing) message by using the identifier of the target UE2 instead of the group identifier.

In step S740, UE2 may detect the GSK.

In step S750, other procedures necessary to set up signaling may be performed.

In step S760, encrypted media may be transmitted from UE1 to UE2 as the setup is completed.

Meanwhile, according to another example, when using a MIKEY message generated using a group identifier in one-to-one communication, each of the UEs included in the group uses at least one of a layer-2 identifier and an IP address so that the UE itself is not the destination. Messages can be filtered.

8 is a diagram illustrating a discovery message used in proximity service communication according to an embodiment.

According to an embodiment, the UE may use only the UE identifier to generate the MIC 810 included in the discovery message. According to another example, other parameters may be used together with the UE identifier. In addition, according to an embodiment, the PIK may be used for authentication of the discovery message.

9 is a flowchart illustrating a discovery method between a UE and a relay terminal in proximity service communication according to an embodiment.

The UE and the relay terminal of FIG. 9 may have the same PSK. Here, the PSK may be provided to the UE and the relay terminal for proximity service.

Referring to FIG. 9A, in step S910a, the UE and the relay terminal may set up the PSK, respectively.

In step S920a, the relay terminal may transmit a discovery announcement message to the UE using the PSK. Here, the relay terminal according to an embodiment may generate the MIC included in the notification message using only the identifier of the relay terminal. According to another example, other parameters besides the UE identifier may be used together to generate the MIC.

Referring to FIG. 9B, in step S910b, the UE and the relay terminal may set up the PSK, respectively.

In step S920b, the UE may transmit a discovery request message to the relay terminal. According to an embodiment, the UE may transmit a discovery announcement message to the UE by using the PSK. Here, the UE according to an embodiment may generate the MIC included in the notification message using only the identifier of the UE. According to another example, other parameters besides the UE identifier may be used together to generate the MIC.

In step S930b, the relay terminal may transmit a response message to the UE. According to an embodiment, the relay terminal may transmit a response message to the UE using the PSK. Here, the relay terminal according to an embodiment may generate the MIC included in the response message using only the identifier of the relay terminal. According to another example, other parameters may be used together with the UE identifier.

10 is a block diagram illustrating a UE 1000 in which an embodiment of the present invention is implemented.

The UE 1000 includes a processor 1010, a memory 1020, and an RF unit 1030.

The processor 1010 implements the proposed functions, processes and / or methods. The above-described operation of the UE 1000 may be implemented by the processor 1010. The processor 1010 according to an embodiment may perform Prose one-to-one direct communication with another UE. The processor 1010 may request a layer-2 identifier of the UE from the first entity providing the proximity communication service. In addition, the processor 1010 may directly generate a layer-2 identifier.

Meanwhile, when an IP address exists, the processor 1010 according to an embodiment may reuse the existing IP address. In addition, the processor 1010 according to an embodiment may generate a security key by using an identifier of the UE instead of a group ID for bearer level security. In addition, the processor 1010 may generate a security key by using the identifier of the UE 1000 instead of the group ID for encrypting the media data.

Meanwhile, when at least one of the UEs 1000 communicates with a relay terminal, the processor 1010 according to an embodiment may transmit and receive a discovery message using the same key and the respective identifier that each has.

In addition, when generating the MIC, which is a signature used for code authentication, the processor 1010 according to an embodiment may generate the MIC using only its UE identifier except other information. Meanwhile, this is only an embodiment, and according to another example, other parameters besides the UE identifier may be used together to generate the MIC.

The RF unit 1020 is connected to the processor 1010 and transmits and / or receives a radio signal. The memory 1030 is connected to the processor 1010 and stores protocols and parameters for operation.

The processor may include application-specific integrated circuits (ASICs), other chipsets, logic circuits, and / or data processing devices. The memory may include read-only memory (ROM), random access memory (RAM), flash memory, memory card, storage medium and / or other storage device. The RF unit may include a baseband circuit for processing a radio signal. When the embodiment is implemented in software, the above-described technique may be implemented as a module (process, function, etc.) that performs the above-described function. Modules may be stored in memory and executed by a processor, which may be internal or external to the processor and may be coupled to the processor by a variety of known means.

In the exemplary system described above, the methods are described based on a flowchart as a series of steps or blocks, but the invention is not limited to the order of steps, and certain steps may occur in a different order or concurrently with other steps than those described above. Can be. In addition, those skilled in the art will appreciate that the steps shown in the flowcharts are not exclusive and that other steps may be included or one or more steps in the flowcharts may be deleted without affecting the scope of the present invention.

The above-described embodiments include examples of various aspects. While not all possible combinations may be described to represent the various aspects, one of ordinary skill in the art will recognize that other combinations are possible. Accordingly, the invention is intended to embrace all other replacements, modifications and variations that fall within the scope of the following claims.

All documents, including publications, patent applications, patents, and the like, cited in the disclosed embodiments are the same as those shown individually and specifically by merging each cited document or as incorporated in their entirety in the published examples. Can be merged.

For the purpose of understanding the disclosed embodiments, reference numerals have been set forth in the preferred embodiments illustrated in the drawings, and specific terms are used to describe the disclosed embodiments, but the embodiments disclosed by the specific terms are not limited. It may include all components conventionally conceivable to those skilled in the art.

The disclosed embodiment can be represented in terms of functional block configurations and various processing steps. Such functional blocks may be implemented in various numbers of hardware or / and software configurations that perform particular functions. For example, the disclosed embodiments may be integrated circuit configurations, such as memory, processing, logic, look-up tables, etc., capable of executing various functions by the control of one or more microprocessors or other control devices. You can employ them. Similar to the components of the disclosed embodiment may be implemented in software programming or software elements, the disclosed embodiment includes various algorithms implemented in data structures, processes, routines or other combinations of programming constructs, such as C, C ++ It may be implemented in a programming or scripting language such as Java, an assembler, or the like. The functional aspects may be implemented with an algorithm running on one or more processors. In addition, the disclosed embodiments may employ prior art for electronic configuration, signal processing, and / or data processing. Terms such as "mechanism", "element", "means" and "configuration" can be used widely and are not limited to mechanical and physical configurations. The term may include the meaning of a series of routines of software in conjunction with a processor or the like.

The specific implementations described in the disclosed embodiments are examples and do not in any way limit the scope of the disclosed embodiments. For brevity of description, descriptions of conventional electronic configurations, control systems, software, and other functional aspects of the systems may be omitted. In addition, the connection or connection members of the lines between the components shown in the drawings by way of example shows a functional connection and / or physical or circuit connections, in the actual device replaceable or additional various functional connections, physical It may be represented as a connection, or circuit connections. In addition, unless otherwise specified, such as "essential", "important" may not be a necessary component for the application of the disclosed embodiments.

1000: UE
1010: processor
1020: RF section
1030: memory

Claims (15)

In the method for the terminal to communicate in a proximity-based service (proximity-based service),
Transmitting a direct communication request to the other terminal by using a layer-2 identifier for unicast communication of the terminal and a layer-2 identifier for unicast communication of another terminal;
Receiving a response of the other terminal to the direct communication request;
Generating a message including a group session key using an identifier of the other terminal; And
Transmitting the generated message to the other terminal. The method of claim 1,
Determining whether an IP address assigned to the terminal exists; And
If there is an IP address assigned to the terminal, further comprising performing one-to-one direct communication with the other terminal based on the IP address. The method of claim 2, wherein the direct communication request,
Including the IP address,
Receiving a response message including the IP address of the other terminal and a layer-2 identifier for unicast communication of the other terminal from the other terminal,
Performing the one-to-one direct communication,
And performing one-to-one direct communication with the other terminal based on the IP address of the terminal and the IP address of the other terminal. The method of claim 2,
If an IP address allocated to the terminal does not exist, receiving a new IP address; And
And performing the one-to-one direct communication with the other terminal based on the assigned IP address. The method of claim 1,
Receiving an authentication request message including a message authentication code from the other terminal; And
Transmitting a response message to the other terminal, the response message including a message authentication code obtained from the authentication request message based on a group key set shared with the other terminal. The method of claim 1,
Transmitting an encrypted media stream to the other terminal;
And the encrypted media stream is decrypted based on the group session key of the terminal included in the generated message at the other terminal. The method of claim 1,
Generating a discovery notification message based on an encryption key shared with the other terminal; And
Detecting the other terminal as a relay terminal as a response to the discovery notification message is received from the other terminal. In a terminal performing communication in a proximity-based service (proximity-based service),
A transceiver; And
Includes a processor,
The processor,
The direct communication request is transmitted to the other terminal by using the layer-2 identifier for unicast communication of the terminal and the layer-2 identifier for unicast communication of another terminal, and the other terminal for the direct communication request. Control the transceiver to receive a response from the terminal,
By using the identifier of the other terminal, generates a message including a group session key,
And controlling the transceiver to transmit the generated message to the other terminal. The method of claim 8, wherein the processor,
Determine whether there is an IP address assigned to the terminal;
If there is an IP address assigned to the terminal, performing one-to-one direct communication with the other terminal based on the IP address. The method of claim 9, wherein the direct communication request,
Including the IP address,
The transceiver unit,
Receive a response message including the IP address of the other terminal and the layer-2 identifier for unicast communication of the other terminal from the other terminal, and based on the IP address of the terminal and the IP address of the other terminal And the one-to-one direct communication with the terminal. The method of claim 9, wherein the processor,
If the IP address assigned to the terminal does not exist, a new IP address is allocated.
The terminal performs the one-to-one direct communication with the other terminal based on the assigned IP address. The method of claim 8, wherein the processor,
Receive an authentication request message including a message authentication code from the other terminal, and transmit a response message including the message authentication code obtained from the authentication request message to the other terminal based on a group key set shared with the other terminal; Terminal for controlling the transceiver. The method of claim 8, wherein the processor,
Controlling the transceiver to transmit an encrypted media stream to the other terminal;
The encrypted media stream is decrypted by the other terminal based on the group session key of the terminal included in the code message. The method of claim 8, wherein the processor,
And generating a discovery notification message based on an encryption key shared with the other terminal, and detecting the other terminal as a relay terminal as a response to the discovery notification message is received from the other terminal. A computer-readable recording medium having recorded thereon a program for executing the method of claim 1 on a computer.

Images