Secure key distribution protocol in AAA for mobile IP
AssigneeNokia Corporation
InventorsDongfeng Jing, Charles E. Perkins
Life of this patent
Estimating the term…
Abstract
A security key distribution and authentication protocol in AAA for Mobile IP has been described. In order to guarantee the secure protocol, messages between the MN, FA, AAAF, AAAH, and HA are encrypted and signed using public/private keys. IPSEC or PKI infrastructure is not required to support the AAA secure key distribution. This protocol enhances the security, flexible, scalability of AAA, and aids in protecting the Diffie-Hellman algorithm from man-in-the-middle attacks. Through this protocol, it is easy to set up a secure registration path in AAA for Mobile IP. This secure registration path provides a secretive and secure key distribution function for AAA.
Claims20
A system for a secure key distribution protocol in AAA for Mobile IP, comprising:
- a MN that is configured to:
- generate a Reg-Req message that includes Diffie-Hellman parameters that are used to generate session keys and produce signatures;
- initiate an authentication session by sending the Reg-Req message;
- receive a Reg-Reply message that includes session keys that may be used to directly communicate with the AAAH, AAAF, HA, and FA nodes while the MN is in a foreign authority;
- a FA that is configured to:
- receive the Reg-Req message;
- ensure that the authentication session is valid;
- and when valid, sign and send the Reg-Req message;
- otherwise, end the authentication session;
- receive, authenticate, decrypt, sign, and send the Reg-Reply message to the MN;
- an AAAF that is configured to:
- receive and authenticate the Reg-Req message;
- generate the session keys using the Diffie-Helman algorithm and the Diffie-Hellman parameters;
- add an identifier relating to the Reg-Req message;
- sign and send the Reg-Req message;
- receive, authenticate, sign and send the Reg-Reply message to the FA;
- an AAAH that is configured to:
- receive and authenticate the Reg-Req message;
- sign and send the Reg-Req message;
- receive and authenticate the Reg-Reply message;
- encrypt the session keys;
- sign and send the Reg-Reply message to the AAAF;
- a HA that is configured to:
- receive the Reg-Req message;
- prepare a Reg-Reply message in response to the Reg-Req message;
- and send the Reg-Reply message to the AAAH.
A method for a secure key distribution protocol in AAA for Mobile IP, comprising:
- establishing secure associations between a MN, an AAAH, an AAAF, a HA, and a FA to help ensure secure communication;
- securing a Reg-Req message and a Reg-Reply message used in establishing the secure associations;
- creating session keys;
- and
- distributing the session keys in a secure manner.
Dependencies are inferred from the claim text.