Key support for password-based authentication mechanisms
AssigneeNokia Siemens Networks Oy
InventorDirk KROESELBERG
Life of this patent
Estimating the term…
Abstract
According to an example embodiment, a session key (e.g., MSK/EMSK) may be determined for a password-based authentication method based on a secret and one or more security parameters used for peer authentication of the method. For example, a session key (e.g., EMSK) may be determined for a EAP-MSCHAP (Extensible Authentication Protocol-Microsoft PPP CHAP Extension) protocol family method between a peer node and an EAP server, the determining being based on a secret and one or more security parameters used for the EAP-MSCHAP protocol family peer authentication.
Claims32
A method comprising:
- determining, at a home authentication server in a wireless network, a session key for a tunneled password-based authentication method based on a secret and one or more security parameters used for peer authentication of the authentication method between the home authentication server and the wireless peer node.
An apparatus provided in a wireless network comprising:
- a network transceiver;
- and
- a controller, the controller configured to:
- determine a master session key (MSK) and an extended master session key (EMSK) for a tunneled password-based authentication method provided between a home authentication server and a wireless peer node, the MSK and EMSK being determined based on a secret and one or more security parameters used for authentication of the authentication method between the home authentication server and the wireless peer node.
A method comprising:
- determining a session key for a EAP-MSCHAP (Extensible Authentication Protocol-Microsoft PPP CHAP Extension) protocol family method between a peer node and an EAP server, the determining being based on a secret and one or more security parameters used for EAP-MSCHAP protocol family method authentication.
A method comprising:
- performing an EAP-MSCHAP (Extensible Authentication Protocol-Microsoft PPP CHAP Extension) protocol family method authentication based on one or more security parameters;
- and
- determining a master session key (MSK) and an extended master session key (EMSK) for a tunneled EAP-MSCHAP protocol family method between a peer node and an EAP server, the determining being based on a secret and one or more of the security parameters used for EAP-MSCHAP protocol family method authentication.
A method comprising:
- performing an EAP-MSCHAPv2 (Extensible Authentication Protocol-Microsoft PPP CHAP Extension, version 2) peer authentication based on one or more security parameters;
- and
- determining a master session key (MSK) and an extended master session key (EMSK) for a tunneled EAP-MSCHAPv2 method with a peer node, the determining being based on a secret and one or more of the security parameters used for EAP-MSCHAPv2 peer authentication.
An apparatus comprising:
- a network transceiver;
- and
- a controller, the controller configured to:
- determine a session key for a tunneled EAP-MSCHAP (Extensible Authentication Protocol-Microsoft PPP CHAP Extension) protocol family method with a peer node, the determining being based on a secret and one or more security parameters used for the EAP-MSCHAP protocol family method peer authentication.
An apparatus comprising:
- a network transceiver;
- and
- a controller, the controller configured to:
- perform an EAP-MSCHAPv2 (Extensible Authentication Protocol-Microsoft PPP CHAP Extension, version 2) peer authentication based on one or more security parameters;
- and
- determine a master session key (MSK) and an extended master session key (EMSK) for a tunneled EAP-MSCHAPv2 method with a peer node, the determining being based on a secret and one or more of the security parameters used for EAP-MSCHAPv2 peer authentication.
Dependencies are inferred from the claim text.