Method, system and apparatus for protecting absf entity from attack

A bootstrapping service function (BSF) entity, comprising:

• a processor configured to perform a mutual authentication with a user equipment (UE) by using an initial temporary identity sent from the UE, and generate a first temporary identity and a second temporary identity after the BSF entity performs the mutual authentication with the UE, wherein the first temporary identity is different from the second temporary identity, and wherein the first and second temporary identities are different than the initial temporary identity;
• a transmitter configured to send the first temporary identity and the second temporary identity to the UE;
• and
• a receiver configured to receive a re-authentication request carrying the first temporary identity from the UE,
• wherein the UE is configured to send a service request carrying the second temporary identity to a network application function (NAF) entity.

A method for protecting a bootstrapping service function (BSF) entity from attack, comprising:

• performing, by a BSF entity, a mutual authentication with a user equipment (UE) by using an initial temporary identity sent from the UE;
• generating, by the BSF entity, a first temporary identity and a second temporary identity, wherein the first temporary identity is different from the second temporary identity, and the first and second temporary identities are different than the initial temporary identity;
• sending, by the BSF entity, a temporary identity generation indication to the UE, wherein the temporary identity generation indication is used for instructing the UE generates the first temporary identity and the second temporary identity by using a same way as the BSF entity;
• and
• receiving, by the BSF entity, a re-authentication request carrying the first temporary identity from the UE,
• wherein, the UE sends a service request carrying the second temporary identity to a network application function (NAF) entity.

A bootstrapping service function (BSF) entity, comprising:

• a processor configured to perform a mutual authentication with a user equipment (UE) by using an initial temporary identity sent from the UE, and generate a first temporary identity and a second temporary identity, wherein the first temporary identity is different from the second temporary identity, and the first and second temporary identities are different than the initial temporary identity;
• a transmitter configured to send a temporary identity generation indication to the UE, wherein the temporary identity generation indication is used for instructing the UE generates the first temporary identity and the second temporary identity by using the key obtained in the mutual authentication;
• and
• a receiver configured to receive a re-authentication request carrying the first temporary identity from the UE,
• wherein the UE is configured to send a service request carrying the second temporary identity to a network application function (NAF) entity.