# US 12,008,108 B2 · Extended authentication method and apparatus for generic bootstrapping architecture, and storage medium > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,008,108 B2 - Document ID: US12008108B2 - Status: Granted - Kind: B2 - Application number: 17/169,737 - Filed: 2021-02-08 - Published: 2021-06-03 - Granted: 2024-06-11 - Earliest claimed: 2018-08-10 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Bo Zhang; Philip Ginzboorg; Valtteri Niemi; Pekka Laitinen - Web page: https://patentgrep.com/patent/US12008108B2 ## CPC - G06F 21/575: {Secure boot} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04W 12/06: Authentication - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract This application provides an extended authentication method and apparatus for a generic bootstrapping architecture and a storage medium. A first network element obtains a bootstrapping transaction identifier (B-TID) and a key lifetime; and the first network element sends the B-TID and the key lifetime to the terminal, so that the terminal performs extensible authentication protocol (EAP)-based generic bootstrapping architecture (GBA) authentication and key agreement (AKA) authentication with the first network element based on the B-TID and the key lifetime. ## Claims ### Claim 1 A method for deriving a key, comprising: generating, by a user equipment (UE), a second key using a key derivation function with input parameters comprising an indicator indicating a protocol type, an identity of the UE, and a first key in an authentication process; and generating, by the UE based on the second key, a third key shared between the UE and an application function. ### Claim 2 (depends on 1) The method according to claim 1, wherein the identity of the UE is a subscription permanent identifier (SUPI). ### Claim 3 (depends on 1) The method according to claim 1, wherein the indicator indicates at least one of the following protocol indicators: extensible authentication protocol (EAP), EAP authentication and key agreement (AKA), EAP AKA′, 5G, 5G AKA, generic bootstrapping architecture (GBA), or 5G GBA. ### Claim 4 (depends on 1) The method according to claim 1, wherein the generating, based on the second key, a third key shared between the UE and an application function comprises: generating, by the UE, the third key based on an identity of bootstrapping server function and the second key. ### Claim 5 (depends on 1) The method according to claim 1, wherein the generating, based on the second key, a third key shared between the UE and an application function comprises: generating, by the UE, the third key based on a server name of bootstrapping server function and the second key. ### Claim 6 (depends on 1) The method according to claim 1, wherein the first key is Kausf that is shared with an authentication server function (AUSF). ### Claim 7 A user equipment (UE) for a deriving a key, comprising: at least one processor; and one or more memories coupled to the at least one processor and storing programming instructions for execution by the at least one processor, the programming instructions instructing the at least one processor to: generate a second key using a key derivation function with input parameters comprising an indicator indicating a protocol type, an identity of the UE, and a first key in an authentication process; and generate, based on the second key, a third key shared between the UE and an application function. ### Claim 8 (depends on 7) The UE according to claim 7, wherein the identity of the UE is a subscription permanent identifier (SUPI). ### Claim 9 (depends on 7) The UE according to claim 7, wherein indicator indicates at least one of the following protocol indicators: EAP, EAP AKA, EAP AKA′, 5G, 5G AKA, GBA, or 5G GBA. ### Claim 10 (depends on 7) The UE according to claim 7, wherein the programming instructions instruct the at least one processor to generate the third key based on an identity of bootstrapping server function and the second key. ### Claim 11 (depends on 7) The UE according to claim 7, wherein the programming instructions instruct the at least one processor to generate the third key based on a server name of bootstrapping server function and the second key. ### Claim 12 (depends on 7) The UE according to claim 7, wherein the first key is Kausf that is shared with an authentication server function (AUSF). ### Claim 13 A non-transitory computer-readable storage medium, comprising a program instruction, wherein the program instruction instructs at least one processor to: generate a second key using a key derivation function with input parameters comprising an indicator indicating a protocol type, an identity of a user equipment (UE), and a first key in an authentication process; and generate, based on the second key, a third key shared between the UE and an application function. ### Claim 14 (depends on 13) The non-transitory computer-readable storage medium according to claim 13, wherein the identity of the UE is a subscription permanent identifier (SUPI). ### Claim 15 (depends on 13) The non-transitory computer-readable storage medium according to claim 13, wherein indicator indicates at least one of the following protocol indicators: EAP, EAP AKA, EAP AKA′, 5G, 5G AKA, GBA, or 5G GBA. ### Claim 16 (depends on 13) The non-transitory computer-readable storage medium according to claim 13, wherein the programming instructions instruct the at least one processor to generate the third key based on an identity of bootstrapping server function and the second key. ### Claim 17 (depends on 13) The non-transitory computer-readable storage medium according to claim 13, wherein the programming instructions instruct the at least one processor to generate the third key based on a server name of bootstrapping server function and the second key. ### Claim 18 (depends on 13) The non-transitory computer-readable storage medium according to claim 13, wherein the first key is Kausf that is shared with an authentication server function (AUSF).