Method and apparatus for configuring connection between devices in communication system

Abstract

Disclosed are a communication scheme and a system thereof for converging an IoT technology and a 5G communication system for supporting a high data transmission rate beyond that of a 4G system. A method and an apparatus for configuring a connection with a second device, which provides access to a network, by a first device in a communication system, is provided. The method includes discovering the second device supporting a neighbor awareness network (NAN) and located within a predetermined range from the first device, exchanging an ephemeral key of the first device for identifying the first device and an ephemeral key of the second device for identifying the second device, and performing a secure connection between the first device and the second device.

What is claimed is: 
     
       1. A method of configuring a connection with a second device, which provides access to a network, by a first device supporting a neighbor awareness network (NAN) in a communication system, the method comprising:
 discovering, by a processor of the first device, the second device supporting a neighbor awareness network (NAN) the NAN and located within a predetermined range from the first device; 
 determining an ephemeral key of the first device based on a unique identity value of the first device and a random value; 
 transmitting, by the processor to the second device, a subscribe first message for subscribing to the second device, which includes the ephemeral key of the first device for identifying the first device and the random value; and 
 receiving, by the processor from the second device, a publish second message for indicating that the access to the network is can be provided, which includes an ephemeral key of the second device for identifying the second device and information indicating that the access to the network can be provided, 
 wherein the ephemeral key of the second device is determined, by the second device, based on a unique identity of the second device and the random value being extracted from the subscribe first message. 
 
     
     
       2. The method of  claim 1 , wherein the second device provides the access to the network, or is connected or was previously connected to a third device that provides the access to the network. 
     
     
       3. The method of  claim 1 ,
 further comprising: 
 receiving a user confirmation for authorization of a subscription to the second device; 
 when the user confirmation is received, transmitting, to the second device, a follow-up message indicating that subscription to the second device has been confirmed; 
 receiving, from the second device, a follow-up response message, which includes encrypted configuration data; and 
 canceling the subscription to the second device. 
 
     
     
       4. The method of  claim 3 , wherein the subscribe first message includes an indication of at least one of a type of the subscribe first message which indicates that the subscription to the second device is requested, or the predetermined range, the ephemeral key of the first device, and the random value. 
     
     
       5. The method of  claim 3 , wherein the publish second message includes an indication of at least one of a type of the publish second message which indicates that the access to the network can be is provided, the predetermined range, information on wireless location area network (WLAN) connection attributes, information on a role of the second device, a basic service set identifier (ID) of the network, information on a channel of a WLAN, the ephemeral key of the second device, and or the random value, and
 wherein the information indicating that the access to the network can be provided includes the type of the second message which indicates that the access to the network can be provided. 
 
     
     
       6. The method of  claim 1 , further comprising:
 transmitting, to the second device, a follow-up message, which includes the ephemeral key of the first device and indicates that a subscription to the second device has been confirmed; 
 receiving, from the second device, encrypted configuration data; and 
 canceling the subscription to the second device. 
 
     
     
       7. The method of  claim 6 , wherein the publish second message includes an indication of at least one of a type of the publish second message which indicates that the access to the network can be provided without a request for subscription from the first device, the predetermined range, information on WLAN connection attributes, information on a role of the second device, a basic service set ID of the network, information on a channel of a WLAN, the ephemeral key of the second device, and or the random value, and
 wherein the information indicating that the access to the network can be provided includes the type of the second message which indicates that the access to the network can be provided without the request for subscription from the first device. 
 
     
     
       8. The method of  claim 6 , wherein the follow-up message includes an indication of at least one of a type of the follow-up message which indicates that the subscription to the second device has been confirmed, the predetermined range, the ephemeral key of the first device, the random value, and or a request for performing a role of a configurator. 
     
     
       9. A method of configuring a connection with a first device supporting a neighbor awareness network (NAN) based on NAN sync beacons, by a second device supporting the NAN which provides access to a network in a communication system, the method comprising:
 receiving, by a processor of the second device from the first device, a subscribe first message for subscribing to the second device, which includes an ephemeral key of the first device for identifying the first device and a random value; 
 determining an ephemeral key of the second device based on a unique identity value of the second device and the random value being extracted from the first message; and 
 transmitting, by the processor to the second first device, a publish second message for indicating that the access to the network is can be provided, which includes an the ephemeral key of the second device for identifying the second device and information indicating that the access to the network can be provided, 
 wherein the second device supports a neighbor awareness network (NAN) and is located within a predetermined range from the first device, and 
 wherein the ephemeral key of the first device is determined based on a unique identity value of the first device and the random value, and the ephemeral key of the second device is determined based on a unique identity of the second device and the random value being extracted from the subscribe message. 
 
     
     
       10. The method of  claim 9 , wherein the second device provides the access to the network, or is connected or was previously connected to a third device that provides the access to the network. 
     
     
       11. The method of  claim 9 ,
 further comprising: 
 when a user confirmation for authorization of subscription of the second device is received at the first device, receiving, from the first device, a follow-up message indicating that subscription to the second device has been confirmed; 
 transmitting, to the first device, a follow-up response message, which includes the encrypted configuration data; and 
 canceling publication of the second device. 
 
     
     
       12. The method of  claim 11 , wherein the subscribe first message includes an indication of at least one of a type of the subscribe first message which indicates that the subscription to the second device is requested, or the predetermined range, the ephemeral key of the first device, and the random value. 
     
     
       13. The method of  claim 11 , wherein the publish second message includes an indication of at least one of a type of the publish second message which indicates that the access to the network can be is provided, the predetermined range, information on wireless location area network (WLAN) connection attributes, information on a role of the second device, a basic service set identifier (ID) of the network, information on a channel of a WLAN, the ephemeral key of the second device, and or the random value, and
 wherein the information indicating that the access to the network can be provided includes the type of the second message which indicates that the access to the network can be provided. 
 
     
     
       14. The method of  claim 9 ,
 further comprising: 
 receiving, from the first device, a follow-up message, which includes the ephemeral key of the first device and indicates that subscription to the second device has been confirmed; 
 transmitting the encrypted configuration data, to the first device; and 
 canceling the publication of the first device. 
 
     
     
       15. The method of  claim 14 , wherein the publish second message includes an indication of at least one of a type of the publish second message which indicates that the access to the network can be provided without a request for subscription from the first device, the predetermined range, information on WLAN connection attributes, information on a role of the second device, a basic service set ID of the network, information on a channel of a WLAN, the ephemeral key of the second device, and or the random value, and
 wherein the information indicating that the access to the network can be provided includes the type of the second message which indicates that the access to the network can be provided without the request for subscription from the first device. 
 
     
     
       16. The method of  claim 14 , wherein the follow-up message includes an indication of at least one of a type of the follow-up message which indicates that the subscription to the second device has been confirmed, the predetermined range, the ephemeral key of the first device, the random value, and or a request for performing a role of a configurator. 
     
     
       17. An apparatus for configuring A first device adapted to support a neighbor awareness network (NAN) based on NAN sync beacons and to configure a connection with a second device supporting the NAN, which provides access to a network, by a first device in of a communication system, the apparatus first device comprising:
 a transceiver; and 
 a processor configured tocontrol to:
 discover the second device supporting a neighbor awareness network (NAN) and located within a predetermined range from the first device, 
 determinegenerate an ephemeral key of the first device based on a unique identity value of the first device and a random value, 
 control the transceiver to transmit, to the second device, a subscribe first message for subscribing to the second device, which includes the ephemeral key of the first device for identifying the first device and the random value, and 
 control the transceiver to receive, from the second device, a publish second message for indicating that the access to the network is can be provided, which includes an ephemeral key of the second device for identifying the second device and information indicating that the access to the network can be provided; and 
 
 wherein the ephemeral key of the second device is determined, by the second device, based on a unique identity of the second device and the random value being extracted from the subscribe first message. 
 
     
     
       18. The apparatus of  claim 17 , wherein the second device provides the access to the network, or is connected or was previously connected to a third device that provides the access to the network. 
     
     
       19. The apparatus first device of  claim 17 , wherein the processor controls the transceiver is further configured to:
 receive, via the transceiver, a user confirmation for authorization of a subscription to the second device, 
 when the user confirmation is received, transmit, via the transceiver, to the second device, a follow-up message indicating that subscription to the second device has been confirmed; 
 receive, from the second device, via the transceiver, a follow-up response message, which includes encrypted configuration data; and 
 cancel the subscription to the second device. 
 
     
     
       20. The apparatus first device of  claim 19 , wherein the subscribe first message includes an indication of at least one of a type of the subscribe first message which indicates that the subscription to the second device is requested, or the predetermined range, the ephemeral key of the first device, and the random value. 
     
     
       21. The first device of claim 19, wherein the second message includes an indication of at least one of a type of the second message which indicates that the access to the network can be provided, the predetermined range, information on wireless location area network (WLAN) connection attributes, information on a role of the second device, a basic service set identifier (ID) of the network, information on a channel of a WLAN, the ephemeral key of the second device, or the random value, and
 wherein the information indicating that the access to the network can be provided includes the type of the second message which indicates that the access to the network can be provided.    
     
     
       22. The first device of claim 17, wherein the processor is further configured to:
 transmit, to the second device, via the transceiver, a follow-up message, which includes the ephemeral key of the first device and indicates that a subscription to the second device has been confirmed;   receive, from the second device, via the transceiver, encrypted configuration data; and   cancel the subscription to the second device.    
     
     
       23. The first device of claim 22, wherein the second message includes an indication of at least one of a type of the second message which indicates that the access to the network can be provided without a request for subscription from the first device, the predetermined range, information on wireless location area network (WLAN) connection attributes, information on a role of the second device, a basic service set ID of the network, information on a channel of a WLAN, the ephemeral key of the second device, or the random value, and
 wherein the information indicating that the access to the network can be provided includes the type of the second message which indicates that the access to the network can be provided without the request for subscription from the first device.    
     
     
       24. The first device of claim 22, wherein the follow-up message includes an indication of at least one of a type of the follow-up message which indicates that the subscription to the second device has been confirmed, the predetermined range, the ephemeral key of the first device, the random value, or a request for performing a role of a configurator.