Interdigital Patent Holdings, Inc.

Alec Brusilovsky

Samir Ferdi

Saad Ahmad

Michelle Perras

Guanzhou Wang

Xiaoyan Shi

Khalid Anwar

Ulises Olvera-Hernandez

Behrouz Aghili

Michael F Starsinic

Yogendra C Shah

Vinod Kumar Choyi

Joseph Gredone

Dolores F Howry

Anuj Sethi

Mohamad Kenan Al-Hares

An unmanned aerial vehicle (UAV) authentication and authorization may be performed by a third-party service provider (e.g., an unmanned aerial system traffic management (UTM) over a user plane (UP)). An UAV may be configured to send an UAV ID to a network. The UAV may receive, from the network, security information that indicates an authorization of a connection to a third-party service provider. The UAV may establish, based on the security information, the connection to the third-party service provider for communications with the third-party service provider. The security information may include signature information of the third-party service provider, and one or more of a subscription identifier (ID) associated with the UAV, the UAV ID, or an ID of the third-party service provider.

Unmanned aerial vehicle authentication and authorization by unmanned aerial system traffic management over user plane

Method and apparatus for secure access control in wireless communications are disclosed. In an example, a method includes receiving a broadcast message including system information, identifying a first set of hashed identifiers (IDs) and a first random number based on the system information, and each ID of the first set of hashed IDs is individually hashed using at least the first random number. The method also includes calculating a first hash value for each ID of a second set of IDs using at least the first random number, determining whether at least a hashed ID of the second set of IDs matches a hashed ID of the first set of hashed IDs, and sending a request message based on a determination that at least a hashed ID of the second set of IDs matches a hashed ID of the first set of hashed IDs.

Methods and apparatus for secure access control in wireless communications

Methods and apparatuses are described herein for registration and security for wireless transmit/receive units (WTRUs) with multiple universal subscriber identity modules (USIMs). Optimized registration and authentication procedures, that enable a WTRU to register and authenticate multiple USIMs during one registration and authentication procedure are described herein. The techniques described herein may eliminate the need for separate registration and authentication procedures for each USIM. A gateway device may inform the network in a Registration Request message that it is registering multiple devices (i.e., multiple WTRUs). The network and the gateway may then perform an authentication procedure with an aggregate challenge/response (i.e., a single challenge for each WTRU). A WTRU may inform the network in a Registration Request message that it is registering multiple USIMs. The network and the WTRU may then perform an authentication procedure with an aggregate challenge/response (i.e., a single challenge for all USIMs).

Registration and security enhancements for a WTRU with multiple USIMs

Systems, methods and instrumentalities are described herein that provide security and/or privacy support for wireless transmit receive units (WTRUs) communicating via a WTRU to WTRU relay. A source WTRU may obtain a new IP address from a relay WTRU via a link identifier update request. The source WTRU may indicate to the relay WTRU which one or more target WTRUs are to be informed of the new IP address. The source WTRU may indicate to the relay WTRU whether the target WTRU's ID(s) should be changed. The relay WTRU may send the source WTRU's new IP address to authorized target WTRUs. The source, relay, and target WTRU may use tokens to grant or receive authorizations for sharing each other's IP addresses.

Security and privacy support for direct wireless communications

Methods, apparatus, and systems for a wireless transmit receive unit (WTRU) performing relay communications are provided. A method may include receiving a first message indicating: (1) a first security policy associated with a first data link, and (2) a maximum data rate for integrity protection (MDRIP) supported by the remote WTRU; transmitting, to a network, a second message indicating: (1) an MDRIP supported by the remote WTRU or by the relay WTRU, and (2) a request for PDU session establishment; receiving, from the network, a third message indicating a second security policy for a second data link; and establishing the first data link with the remote WTRU on the condition that an end-to-end (e2e) security policy is compatible with the second security policy, wherein the e2e security policy is determined according to the second security policy and a UP security policy of the relay WTRU.

Methods, apparatus, and systems for communications security with proximity services relay WTRU

A reader device may receive a request including a permanent device identifier (PDI) for an ambient-power-enabled internet of things (AIoT) device. The reader device may generate an encrypted temporary device identifier (ETDI) based on application of an encryption algorithm to the PDI. Further, the reader device may obtain a short-ETDI based on application of a bitmask to the ETDI. Also, the reader device may transmit, over a radio interface, a trigger message including the short-ETDI to the AIoT device. Moreover, the reader device may receive, over the radio interface, a random access (RA) response message including the short-ETDI from the AIoT device. In an example, the request may be an inventory request, and the inventory request may be received from an AIoT function. Further, the request may include an indication that encryption is supported by the AIoT device.

Methods and apparatus for an ambient internet of things (IoT) temporary identifier at a reader

Methods, devices, and systems for changing a layer 2 (L2) identifier (ID) during an ongoing vehicle-to-everything (V2X) session between a source wireless transmit/receive unit (WTRU) and a peer WTRU include communicating between the source and a peer WTRUs based on an existing layer 2 (L2) identifier (ID). On a condition that a trigger event occurs, the source WTRU generates a new source L2 ID, communicates the new source L2 ID to the peer WTRU, receives from the peer WTRU a message that responds to the new source L2 ID, and communicates between the source WTRU and the peer WTRU based on the new source L2 ID.

Procedures enabling privacy for WTRUs using PC5 communication

Systems and methods are described herein for enabling discovery and selection of a WTRU-to-network relay by a remote WTRU and handling a WTRU-to-network relay configuration update. The WTRU-to-network relay may broadcast a service type indicating that the service type is available or conditionally available based on the WTRU-to-network relay slicing configuration. The WTRU-to-network relay may update broadcasting the service type or the indication that the service type as being conditionally available based on update of the WTRU-to-network relay slicing configuration. The WTRU-to-network relay may relay traffic between one or more distinct remote WTRUs and the core network node via a WTRU-to-network relay. The WTRU-to-network relay may reuse an existing PDU session for relay traffic or send a PDU session establishment request to network with the requested PDU session parameters depending on if the session parameters associated with an existing PDU session match the PDU session requirements of the remote WTRU.

Methods, architectures, apparatuses and systems for WTRU-to-network relays

A method for use in wireless transmit/receive unit (WTRU) which assesses both a first network and a second network to receive radio frames from each of the first network and the second network is disclosed. The method comprise: obtaining a first paging occasion (PO) as the first network's current PO and a second PO as the second network's current PO; determining whether there is a PO collision between the first PO and the second PO, on condition that there is the PO collision, selecting a network from the first network and the second network, and sending a request to the selected network; receiving, from the selected network, a collision avoidance parameter corresponding to the request; calculating a third PO for the selected network using the collision avoidance parameter, and using the third PO as the selected network's current PO.

Paging method for WTRU with multiple USIMS

A method for changing layer 2 (L2) identifiers (ID)s during an ongoing vehicle-to-everything session between a source wireless transmit/receive unit (WTRU) and a peer WTRU includes communicating between the source and a peer WTRUs based on existing L2 IDs and an existing session ID. On a condition that a trigger event occurs, the source WTRU and the peer WTRU each generate new L2 IDs as well as respective portions of a new session ID. The new L2 IDs are subsequently used along with the new session ID to increase privacy of communication between the source WTRU and the peer WTRU.

A certification provenance tree (CPT) structure may provide information concerning a layered certification of a device that comprises a hierarchy of components. The CPT structure may include a hierarchy of secure certification provenance document (SCPD) structures. Each SCPD structure in the hierarchy may represent a given component at a given level of the hierarchy of components of the device. Each SCPD structure may include a field that stores a certification proof indicating that security properties of the given component have been certified by a certification authority. An SCPD structure may further include accreditation information fields that store a pointer to an SCPD structure of a component at a next layer of the hierarchy of components of the device. The pointer may provide an indication of assurance that the component at that next layer will perform securely within this component at said given layer.

Growing community of inventors

Downington, PA, United States of America

Alec Brusilovsky