Methods for authentication and key management in a wireless communications network and related apparatuses
AssigneeTelefonaktiebolaget LM Ericsson (publ)
InventorsNoamen Ben Henda, Helena Vahidi Mazinani, Vesa Lehtovirta
Life of this patent
Estimating the term…
Abstract
A method performed by a network server is provided for authentication and key management for a terminal device in a wireless communication network. The method includes authenticating the terminal device during a primary authentication session for the terminal device. The method further includes responsive to a successful authentication of the terminal device, obtaining a first key. The method further includes generating bootstrapping security parameters. The parameters include a second key derived from the first key and a temporary identifier. The temporary identifier identifies the terminal device and the bootstrapping security parameters.
Claims12
A host computer, comprising:
- processing circuitry configured to provide user data;
- and
- a communication interface configured to initiate transmission of the user data to a cellular network for transmission to a terminal device, wherein the cellular network comprises a network server configured to perform operations for authentication and key management for applications, AKMA, for the terminal device,
- the operations comprising:
- authenticating the terminal device during a primary authentication session for the terminal device;
- responsive to a successful authentication of the terminal device in the primary authentication session, obtaining a first key, the first key comprising an authentication server function key KAUSF;
- and
- generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters,
- where in the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, or 5G AKA protocol signaling during the primary authentication session for the terminal device, and wherein the operations further comprise communicating an authentication response message to the terminal device.
A non-transitory computer readable medium comprising instructions that, when executed by a processor in a host computer of a communication system, cause the host computer to perform operations comprising:
- providing user data;
- and
- initiating transmission of the user data to a cellular network, via a communication interface, for transmission to a terminal device, wherein the cellular network comprises a network server configured to perform operations for authentication and key management for applications, AKMA, for the terminal device, the operations for AKMA comprising:
- authenticating the terminal device during a primary authentication session for the terminal device;
- responsive to a successful authentication of the terminal device in the primary authentication session, obtaining a first key, the first key comprising an authentication server function key KAUSF;
- and
- generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters,
- wherein the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, or 5G AKA protocol signaling during the primary authentication session for the terminal device, and wherein the operations for AKMA further comprise communicating an authentication response message to the terminal device.
A method performed by a host computer in a communication system, comprising:
- providing user data;
- and
- initiating transmission of the user data to a cellular network for transmission to a terminal device, wherein the cellular network comprises a network server configured to perform operations for authentication and key management for applications, AKMA, for the terminal device, the operations comprising:
- authenticating the terminal device during a primary authentication session for the terminal device;
- responsive to a successful authentication of the terminal device in the primary authentication session, obtaining a first key, the first key comprising an authentication server function key KAUSF;
- and
- generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters,
- wherein the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, or 5G AKA protocol signaling during the primary authentication session for the terminal device, and wherein the operations further comprise communicating an authentication response message to the terminal device.
Dependencies are inferred from the claim text.