Abstract: A system is capable of authenticating a service per Machine to Machine (M2M) device between an M2M service provider and a mobile communication operator. The system includes an authentication server for generating an M2M device IDentifier (ID), a first authentication key, and an M2M service provider ID per M2M device, The authentication server also generates a second authentication key, a first hash function value, and a first random variable based on the M2M device ID, the first authentication key, and the M2M service provider ID, and transmitting the second authentication key, the first hash function, and the first random variable to an M2M agent to an M2M agent.

Abstract: The present disclosure relates to a technology for providing a service of effectively transmitting and receiving data by simultaneously using a 3GPP system and a non-3GPP system in a network in which the 3GPP system and the non-3GPP system coexist. A communication method of a non-3GPP access network entity according to embodiments of the present disclosure includes receiving overload status information from a gateway; receiving a session management request message from a user equipment (UE); and transmitting a session management reject message comprising a back-off timer to the UE. According to the embodiment of the present disclosure, when a specific PDN (or APN) is overloaded, the overload state can be controlled.

Abstract: A method and a device for setting priority of data transmission are provided. A terminal, which is set to transmit low priority data to a network, transmits a connection request to the network in order to transmit normal-priority data, and receives and stores priority information on data transmission from the network.

Abstract: A discovery method for Device-to-Device (D2D) communication is provided. A terminal transmits a discovery service request message for D2D communication including one of application information and group information for a Proximity based Service (ProSe) to a server. The terminal receives, from the server, a discovery service key delivery message including a discovery service key corresponding to the one of the application information and the group information for a ProSe. The terminal acquires the discovery service key by decrypting the discovery service key delivery message, and performs discovery by encrypting a discovery code with the acquired discovery service key.

Abstract: A method and apparatus for routing a message for a Proximity-based Service (ProSe) by a User Equipment (UE) in a wireless communication system is provided. The method includes sending, to a server, an authorization request message requesting authorization for ProSe usage by an application installed in the UE, the authorization request message including an application ID (ID) for identifying the application and a UE ID for identifying the UE; and receiving an authorization response message including a validity time for a ProSe of the application from the server in response to the authorization request message.

Abstract: A system and a method for switching mobile station identification information in a wireless communication system are provided.

Abstract: Provided is a method for controlling traffic of a Radio Access Network (RAN) in a wireless communication system. The method includes acquiring at least one of subscription class information of a User Equipment (UE) user and type information of an application or content; determining whether a congestion situation has occurred in the RAN; and controlling traffic for the UE based on the acquired information, if the congestion situation has occurred in the RAN.

Abstract: A method and apparatus for network reentry of a Mobile Station (MS) in a wireless communication system are provided. The method includes receiving allocation of a context search identifier from a network while a network entry procedure is performed, and transmitting a ranging request message including the allocated context search identifier to a Base Station (BS) when a network reentry event occurs.

Abstract: Provided is a method for transmitting traffic control information by an Evolved Node B (ENB) in a wireless communication system. The method includes transmitting congestion state information a traffic control node. The congestion state information is used to control traffic for a User Equipment (UE) that is accessing the ENB. And, the congestion state information includes information about a congestion state of the ENB, and is included in a packet header transmitted from the UE.

Abstract: A system and a method for switching mobile station identification information in a wireless communication system are provided.

Abstract: Provided is a method for managing a group key in a key distribution center. The method includes: receiving a key request from a mobile device; generating a private key for the mobile device using information about a withdrawal time included in the key request; generating a public key and a verification key for the mobile device; and transmitting at least one key including the generated key to the mobile device.

Abstract: The present invention relates to a method and apparatus for updating a key for encrypting multicast data in a wireless communication system. The method of the present invention is characterized by comprising: an information receiving step of receiving information on a group entry time and a group exit time from users who have newly entered an arbitrary group including at least one subgroup; a grouping step of grouping the users using the information on the group entry time and the group exit time; and a key transmission step of either transmitting, to the newly-entered users, keys related to the group and the subgroups, or updating, for the remaining users of the subgroups, both the key related to the subgroup to which the user exiting the group belongs and the key of the group and then transmitting the updated keys to the users of the subgroups.

Abstract: The present invention pertains to a method and apparatus for setting a mobile communication terminal. A method for setting a mobile communication terminal according to one embodiment of the present invention may comprise the steps of: transmitting, by the mobile communication terminal, an information provision request message to an information provision entity; and receiving, by the mobile communication terminal, information for access to the mobile communication terminal, which is generated by the information provision entity, from the information provision entity. According to one embodiment of the present invention, a user can directly set a service provider during initial use of a terminal or efficiently change the service provider.

Abstract: A method and apparatus is capable of encrypting short data in a wireless communication system When a terminal generates a short data burst in idle mode, the apparatus generates a Traffic Encryption Key (TEK) using a Cipher-based Message Authentication Code (CMAC)-TEK prekey derived from an Authorization Key (AK) related to Security Association (SA) between the terminal and a Base Station (BS). A nonce is constructed with a Packet Number (PN) identical to an uplink CMAC PN (CMAC-PN_U) transmitted together with a Ranging Request (RNG-REQ) message carrying the short data burst The short data burst is encrypted using the TEK and the nonce. A Medium Access Control (MAC) Protocol Data Unit (PDU) is generated by attaching a MAC header and a CMAC digest for integrity protection to the RNG-REQ message carrying the encrypted short data burst. The MAC PDU is transmitted to the BS.

Abstract: A method provides data communication while a Base Station (BS) is disrupted in a wireless communication system. The method includes, when a plurality of Mobile Stations (MSs) receive a preamble signal from a cluster header through a dedicated control channel while the BS is disrupted, sending a message requesting cluster member subscription to the cluster header, in the cluster header, including the plurality of MSs in a cluster member, configuring a cluster member list, and broadcasting the cluster member list, in a source MS among the plurality of MSs, sending a data transmission request message to the cluster header using the broadcasted cluster member list, in the cluster header, one of unicasting and broadcasting a response message for the data transmission request of the source MS, and, in the source MS, transmitting data to a target MS among the plurality of MSs based on the response message.

Abstract: A method and apparatus is capable of encrypting short data in a wireless communication system When a terminal generates a short data burst in idle mode, the apparatus generates a Traffic Encryption Key (TEK) using a Cipher-based Message Authentication Code (CMAC)-TEK prekey derived from an Authorization Key (AK) related to Security Association (SA) between the terminal and a Base Station (BS). A nonce is constructed with a Packet Number (PN) identical to an uplink CMAC PN (CMAC-PN_U) transmitted together with a Ranging Request (RNG-REQ) message carrying the short data burst The short data burst is encrypted using the TEK and the nonce. A Medium Access Control (MAC) Protocol Data Unit (PDU) is generated by attaching a MAC header and a CMAC digest for integrity protection to the RNG-REQ message carrying the encrypted short data burst. The MAC PDU is transmitted to the BS.

Abstract: A wireless communication system includes a system and method for encryption of multicast data between a subscriber station and a base station that communicate a multicast service in a Machine-To-Machine (M2M) communication system. An M2M service controller manages the multicast service manages information for encrypting the multicast data and provides the information to the subscriber station and the base station.

Abstract: An apparatus and method for generating a Media Access Control (MAC) Protocol Data Unit (MPDU) in a wireless communication system are provided. The method includes reconstructing at least one MAC Service Data Unit (MSDU) according to scheduling information of the MAC layer and generating at least one MPDU data portion, adding control information to each MPDU data portion and generating at least one MPDU payload, adding a General MAC Header (GMH) to each MPDU payload and generating at least one MPDU, and transmitting the MPDU to a receive end. The control information includes at least one piece of MSDU information constituting each MPDU data portion. The GMH includes length information on the MPDU and Connection IDentifier (CID) information.

Abstract: An authentication method and apparatus in a communication system are provided. In a method for authenticating a first node at a second authentication server in a communication system comprising the first node registered to a first authentication server and a second node registered to the second authentication server, an authentication request message requesting authentication of the first node is received from the second node, the authentication request message is transmitted to the first authentication server, and upon receipt of an authentication success message indicating successful authentication of the first node from the first authentication server, the authentication success message is transmitted to the second node.

Abstract: A method and apparatus is capable of encrypting short data in a wireless communication system When a terminal generates a short data burst in idle mode, the apparatus generates a Traffic Encryption Key (TEK) using a Cipher-based Message Authentication Code (CMAC)-TEK prekey derived from an Authorization Key (AK) related to Security Association (SA) between the terminal and a Base Station (BS). A nonce is constructed with a Packet Number (PN) identical to an uplink CMAC PN (CMAC-PN_U) transmitted together with a Ranging Request (RNG-REQ) message carrying the short data burst The short data burst is encrypted using the TEK and the nonce. A Medium Access Control (MAC) Protocol Data Unit (PDU) is generated by attaching a MAC header and a CMAC digest for integrity protection to the RNG-REQ message carrying the encrypted short data burst. The MAC PDU is transmitted to the BS.