Cellular network authentication

A method in a mobility management entity, the method comprising:

• receiving a request requiring authentication procedure triggering from a cellular terminal;
• requesting authentication data from a home subscriber server;
• receiving an authentication data response from the home subscriber server with the requested authentication data;
• identifying a cryptographic algorithm selected from a group of a plurality of cryptographic algorithms for use by a cellular terminal for authentication of the cellular terminal;
• obtaining network credentials corresponding to the selected cryptographic algorithm for the authentication of the cellular terminal;
• transmitting to the cellular terminal an authentication request message with an indication of the selected cryptographic algorithm, the authentication request message being decodable by the cellular terminal to obtain an authentication request decoded according to the selected cryptographic algorithm and based on a shared secret known by the cellular terminal and a network operator of the cellular terminal;
• receiving an authentication response message from the cellular terminal, the authentication response message including a cryptography algorithm indication;
• decoding the authentication response message according to the selected cryptographic algorithm;
• determining, based on the network credentials and the decoded authentication response message, whether authentication of the cellular terminal is successful or not successful;
• when authentication is successful, sending a security mode completion message to the cellular terminal;
• and
• receiving a security mode complete reply from the cellular terminal to complete a registration process,
• wherein the cryptographic algorithms are selected from a group consisting of MILENAGE;
• 128 bit TUAK;
• and 256 bit TUAK,
• wherein the authentication request message is an extended authentication request message, and
• wherein the extended authentication request message comprises an authentication token that comprises 128 bits, 192 bits, 256 bits or 320 bits.

An apparatus comprising:

• at least one memory and processor that are collectively configured to cause the apparatus to perform the steps of:
• transmitting a request requiring authentication procedure triggering to a mobility management entity of a cellular network;
• receiving from the mobility management entity of the cellular network an authentication request message with an indication of a cryptographic algorithm selected from a group of a plurality of cryptographic algorithms provided to the mobility management entity by a home subscriber server;
• decoding the authentication request message to obtain a decoded authentication request according to the selected cryptographic algorithm and based on a shared secret known by the cellular terminal and a network operator of the cellular terminal;
• based on the decoded authentication request, the shared secret and the selected cryptographic algorithm, producing and encrypting an authentication response message;
• transmitting the authentication response message to the mobility management entity of the cellular network, the authentication response message including a cryptography algorithm indication;
• receiving a security mode completion message from the mobility management entity of the cellular network;
• and
• sending a security mode complete reply to the mobility management entity of the cellular network to complete a registration process,
• wherein the cryptographic algorithms are selected from a group consisting of MILENAGE;
• 128 bit TUAK;
• and 256 bit TUAK,
• wherein the authentication request message is an extended authentication request message, and
• wherein the extended authentication request message comprises an authentication token that comprises 128 bits, 192 bits, 256 bits or 320 bits.