Patent ID: 11863541
Assignee: SIGNIFY HOLDING B.V.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 8:
9. A system for enabling end-to-end secure device-to-device (D2D) communication, comprising:
a plurality of user devices that includes a sender user device, a recipient user device, and a plurality of relay user devices, each user device having:
a proximity service application configured to detect others of the user devices and to enable D2D communications between the user devices; and
a key application module in communication with the proximity service application and configured to manage a public key and a private key for each user device, the private key for each user device arranged to decrypt data encrypted by the public key corresponding to that private key;

a base station configured to produce a wireless network for the plurality of user devices;
a proximity service application server configured to register user devices connected to the wireless network; and
a key server module in communication with the proximity service application server and configured to manage the public keys, the private keys, or both, at least by not storing the private keys if the private keys are stored by the key server module;
wherein the user devices are configured to enable D2D communication between the sender user device and the recipient user device via a chain that includes the plurality of relay user devices;
wherein the sender user device is configured to double-encrypt a data transmission with the public key of the recipient user device and with the public key of a first one of the relay user devices, the data transmission including the digital signature of the sender user device,
wherein each relay user device is configured to: decrypt a first layer of encryption from the data transmission using its private key when the data transmission is received, encrypt the data transmission with the public key of a subsequent one of the user devices in the chain, and forward the data transmission to the subsequent one of the user devices in the chain, and
wherein the recipient user device configured to decrypt the data transmission using its private key and to verify authenticity of the digital signature using the public key of the sender user device.