Back to results
US 2010/0135487 A1Published application
Bundle authentication system and method
AssigneesElectronics and Telecommunications Research Institute, Soongsil University Foundation of University-Industry Cooperation
InventorsHyun Woo LEE, Kwi Hoon KIM, Won RYU, Sou Hwan JUNG, Ki Hun HONG
Life of this patent
Estimating the term…
Abstract
There is provided a bundle authentication system and method that can perform network access authentication and authentication at a service request in a next generation network utilizing a Bundled Authentication Key (BAK) generated by using an Extended Master Session Key (EMSK) that is an encryption key generated during access authentication.
Claims16
A bundle authentication system comprising:
- a subscriber terminal calculating a Bundled Authentication Key (BAK) on the basis of an Extended Master Session Key (EMSK) obtained during access authentication and calculating an Auth value using the BAK and an IMS Private User Identity (IMPI) in order to check whether the subscriber terminal has succeeded with the access authentication;
- a first apparatus receiving a register message including the IMPI and the Auth value calculated by the subscriber terminal and then transmitting the IMPI included in the register message to an integration authentication server;
- and
- an integration authentication server performing the access authentication along with the subscriber terminal, calculating a BAK using the EMSK and an Auth value using the BAK and the IMPI after checking the IMPI transmitted from the first apparatus and finding out that the subscriber terminal is a registered subscriber terminal, and transmitting a response message including the Auth value, the BAK and the IMPI to the first apparatus,
- wherein the first apparatus receives and validates the response message and then transmits a registration success message including the IMPI, the Auth value and the BAK to the subscriber terminal.
2 more elements
A bundle authentication method comprising:
- performing access authentication between a subscriber terminal and an integration authentication server;
- calculating, by the subscriber terminal, a Bundled Authentication Key (BAK) on the basis of an Extended Master Session Key (EMSK), obtained during the access authentication, and calculating an Auth value using the BAK and an IMS Private User Identity (IMPI) in order to check whether the subscriber terminal has succeeded in the access authentication;
- transmitting a register message including the IMPI and the Auth value calculated by the subscriber terminal to a first apparatus;
- transmitting, by the first apparatus, the IMPI included in the register message to the integration authentication server upon receiving the register message;
- calculating, by the integration authentication server, a BAK on the basis of the EMSK and calculating an Auth value using the BAK and the IMPI after checking the IMPI transmitted by the first apparatus and finding out the subscriber terminal is a registered subscriber terminal;
- transmitting a response message including the IMPI, the Auth value and the BAK calculated by the integration authentication server to the first apparatus;
- and
- transmitting, by the first apparatus, a registration success message including the Auth value, the BAK and the IMPI to the subscriber terminal after checking the Auth value and the IMPI included in the response message.
5 more elements
A subscriber terminal comprising:
- a BAK generation unit generating a Bundled Authentication Key (BAK) on the basis of an Extended Master Session Key (EMSK) obtained when access authentication is performed between the subscriber terminal and a server;
- an IMPI storage unit storing an IMS Private User Identity (IMPI);
- and
- an Auth value generation unit generating an Auth value using the BAK and the IMPI in order to check whether the subscriber terminal has succeeded with the access authentication.
1 more element
An integration authentication server comprising:
- a BAK generation unit generating a Bundled Authentication Key (BAK) on the basis of an Extended Master Session Key (EMSK) obtained when access authentication is performed between a subscriber terminal and the integration authentication server;
- and
- an Auth value generation unit generating an Auth value using the BAK and an IMS Private User Identity (IMPI) transmitted from the subscriber terminal in order to check whether the subscriber terminal has succeeded with the access authentication.
Dependencies are inferred from the claim text.