Techniques for deriving security keys for a cellular network based on performance of an extensible authentication protocol (EAP) procedure

An apparatus for wireless communication at a user equipment (UE), comprising:

• means for performing an extensible authentication protocol (EAP) procedure with an authentication server via an authenticator, the EAP procedure based at least in part on a set of authentication credentials exchanged between the UE and the authentication server;
• means for deriving, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters wherein the first set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• means for determining a network type associated with the authenticator;
• and
• means for performing, based at least in part on the determined network type, at least one authentication procedure with the authenticator, the at least one authentication procedure based on an association of the MSK or the EMSK with the determined network type.

An apparatus for wireless communication at a user equipment (UE), comprising:

• a processor;
• and
• memory in electronic communication with the processor;
• wherein the processor and the memory are configured to:
• perform an extensible authentication protocol (EAP) procedure with an authentication server via an authenticator, the EAP procedure based at least in part on a set of authentication credentials exchanged between the UE and the authentication server;
• derive, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters, wherein the first set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• determine a network type associated with the authenticator;
• and
• perform, based at least in part on the determined network type, at least one authentication procedure with the authenticator, the at least one authentication procedure based on an association of the MSK or the EMSK with the network type.

A non-transitory computer-readable medium storing computer-executable code for wireless communication at a user equipment (UE), the code executable by a processor to:

• perform an extensible authentication protocol (EAP) procedure with an authentication server via an authenticator, the EAP procedure based at least in part on a set of authentication credentials exchanged between the UE and the authentication server;
• derive, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters, wherein the first set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• determine a network type associated with the authenticator;
• and
• perform, based at least in part on the determined network type, at least one authentication procedure with the authenticator, the at least one authentication procedure based on an association of the MSK or the EMSK with the determined network type.

A method for wireless communication at an authentication server, comprising:

• performing an extensible authentication protocol (EAP) procedure with a user equipment (UE) via an authenticator, the EAP procedure based at least in part on a set of authentication credentials exchanged between the authentication server and the UE;
• deriving, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters, wherein the first set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• determining a network type associated with the authenticator;
• deriving a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the network type, and based at least in part on a second set of parameters;
• and
• transmitting the security key to the authenticator via a secure channel.

An apparatus for wireless communication at an authentication server, comprising:

• means for performing an extensible authentication protocol (EAP) procedure with a user equipment (UE) via an authenticator, the EAP procedure based at least in part on a set of authentication credentials exchanged between the authentication server and the UE;
• means for deriving, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters, wherein the first set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• means for determining a network type associated with the authenticator;
• means for deriving a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the determined network type, and based at least in part on a second set of parameters;
• and
• means for transmitting the security key to the authenticator via a secure channel.

An apparatus for wireless communication at an authentication server, comprising:

• a processor;
• and
• memory in electronic communication with the processor;
• wherein the processor and the memory are configured to:
• perform an extensible authentication protocol (EAP) procedure with a user equipment (UE) via an authenticator, the EAP procedure based at least in part on a set of authentication credentials exchanged between the authentication server and the UE;
• derive, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters, wherein the first set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• determine a network type associated with the authenticator;
• derive a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the determined network type, and based at least in part on a second set of parameters;
• and
• transmit the security key to the authenticator via a secure channel.

A non-transitory computer-readable medium storing computer-executable code for wireless communication at an authentication server, the code executable by a processor to:

• perform an extensible authentication protocol (EAP) procedure with a user equipment (UE) via an authenticator, the EAP procedure based at least in part on a set of authentication credentials exchanged between the authentication server and the UE;
• derive, as part of performing the EAP procedure, a master session key (MSK) and an extended master session key (EMSK) that are based at least in part on the authentication credentials and a first set of parameters, wherein the first set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• determine a network type associated with the authenticator;
• derive a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the determined network type, and based at least in part on a second set of parameters;
• and
• transmit the security key to the authenticator via a secure channel.

A method for wireless communication at a cellular network, comprising:

• receiving, from an authentication server, a first security key based at least in part on an extended master session key (EMSK) and a first set of parameters, the EMSK based at least in part on a set of authentication credentials and a second set of parameters, the authentication credentials exchanged between a user equipment (UE) and the authentication server during an extensible authentication protocol (EAP) procedure wherein the second set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• and
• performing at least one authentication procedure with the UE based at least in part on the first security key.

An apparatus for wireless communication at a cellular network, comprising:

• means for receiving, from an authentication server, a first security key based at least in part on an extended master session key (EMSK) and a first set of parameters, the EMSK based at least in part on a set of authentication credentials and a second set of parameters, the authentication credentials exchanged between a user equipment (UE) and the authentication server during an extensible authentication protocol (EAP) procedure, wherein the second set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• and
• means for performing at least one authentication procedure with the UE based at least in part on the first security key.

An apparatus for wireless communication at a cellular network, comprising:

• a processor;
• and
• memory in electronic communication with the processor;
• wherein the processor and the memory are configured to:
• receive, from an authentication server, a first security key based at least in part on an extended master session key (EMSK) and a first set of parameters, the EMSK based at least in part on a set of authentication credentials and a second set of parameters, the authentication credentials exchanged between a user equipment (UE) and the authentication server during an extensible authentication protocol (EAP) procedure, wherein the second set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• and
• perform at least one authentication procedure with the UE based at least in part on the first security key.

A non-transitory computer-readable medium storing computer-executable code for wireless communication at a cellular network, the code executable by a processor to:

• receive, from an authentication server, a first security key based at least in part on an extended master session key (EMSK) and a first set of parameters, the EMSK based at least in part on a set of authentication credentials and a second set of parameters, the authentication credentials exchanged between a user equipment (UE) and the authentication server during an extensible authentication protocol (EAP) procedure, wherein the second set of parameters comprises:
• at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof;
• and
• perform at least one authentication procedure with the UE based at least in part on the first security key.