# US 2018/0026982 A1 · Unified authentication method for application in trunking system, server and terminal > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2018/0026982 A1 - Document ID: US20180026982A1 - Status: Published application - Kind: A1 - Application number: 15/721,449 - Filed: 2017-09-29 - Published: 2018-01-25 - Earliest claimed: 2015-04-02 - Assignees: Chengdu Td Tech Ltd. - Applicants: Chengdu TD Tech Ltd. - Inventors: JIANMIAO WEI - Web page: https://patentgrep.com/patent/US20180026982A1 ## CPC - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/0815: {providing single-sign-on or federations} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/10: {for controlling access to devices or network resources} - H04W 4/10: Push-to-Talk [PTT] or Push-On-Call services - H04W 12/06: Authentication - H04W 12/08: Access security - H04W 60/00: Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Embodiments of the present disclosure provide a unified authentication method for application in a trunking system, a server and a terminal. The method includes: an application service network element of a server receives a registration request transmitted by a terminal and transmits the registration request to an authorization authentication network element, where the registration request carries a token indicating a unique identity of a user initiating the registration request, and the token is assigned by the authorization authentication network element of the server to the user when the user logs onto the terminal; the authorization authentication network element then performs a token authorization to the user according to the token; and finally the application service network element performs an application service interaction with the terminal if the token authorization is passed. ## Claims ### Claim 1 A unified authentication method for application in a trunking system, comprising: receiving, by an application service network element of a server, a registration request transmitted by a terminal, wherein the registration request carries a token indicating a unique identity of a user initiating the registration request and an identification of the user, and the token is assigned by an authorization authentication network element of the server to the user when the user logs onto the terminal; performing, by the application service network element of the server, a registration to the terminal according to the identification, and transmitting the token to the authorization authentication network element of the server; performing, by the authorization authentication network element of the server, a token authorization to the user according to the token; and performing, by the application service network element of the server, an application service interaction with the terminal if the token authorization is passed. ### Claim 2 (depends on 1) The method according to claim 1, before the receiving, by the application service network element of the server, the registration request transmitted by the terminal, further comprising: receiving, by the authorization authentication network element of the server, a logon request transmitted by the user through the terminal, wherein the logon request carries the identification; performing, by the authorization authentication network element of the server, an authentication authorization to the user according to the identification; assigning, by the authorization authentication network element of the server, the token to the user if the authentication authorization is passed; and transmitting, by the authorization authentication network element of the server, a logon response message to the terminal, wherein the logon response message carries the token. ### Claim 3 (depends on 1) The method according to claim 1, before the receiving, by the application service network element of the server, the registration request transmitted by the terminal, further comprising: receiving, by the authorization authentication network element of the server, a logon request transmitted by the user through the terminal, wherein the logon request carries the identification; performing, by the authorization authentication network element of the server, an authentication authorization to the user according to the identification; assigning, by the authorization authentication network element of the server, the token to the user and configuring a token expiration time if the authentication authorization is passed; and transmitting, by the authorization authentication network element of the server, a logon response message to the terminal, wherein the logon response message carries the token and the token expiration time. ### Claim 4 (depends on 3) The method according to claim 3, before the performing, by the application service network element of the server, the application service interaction with the terminal if the token authorization is passed, further comprising: receiving, by the authorization authentication network element of the server, a refresh message transmitted by the terminal before the token expiration time expires; and reassigning, by the authorization authentication network element of the server, the token and the token expiration time to the terminal according to the refresh message. ### Claim 5 (depends on 3) The method according to claim 3, before the performing, by the application service network element of the server, the application service interaction with the terminal if the token authorization is passed, further comprising: transmitting, by the authorization authentication network element of the server, a refresh notification to the terminal to enable the terminal to acquire a new token and a token expiration time. ### Claim 6 A unified authentication method for application in a trunking system, comprising: transmitting, by a terminal, a registration request to an application service network element of a server, wherein the registration request carries a token indicating a unique identity of a user initiating the registration request and an identification, enabling the application service network element of the server to perform a registration to the terminal according to the identification and transmit the token to an authorization authentication network element of the server which performs a token authorization to the user according to the token, and the token is assigned by the authorization authentication network element of the server to the user when the user logs onto the terminal; and performing, by the terminal, an application service interaction with the application service network element of the server if the token authorization is passed. ### Claim 7 (depends on 6) The method according to claim 6, before the transmitting, by the terminal, the registration request to the application service network element of the server, further comprising: transmitting, by the terminal, a logon request to the authorization authentication network element of the server to enable the authorization authentication network element of the server to perform an authentication authorization to the user according to the identification, wherein the logon request carries the identification; and receiving, by the terminal, a logon response message transmitted by the authorization authentication network element of the server, wherein the logon response message carries the token. ### Claim 8 (depends on 6) The method according to claim 6, before the transmitting, by the terminal, the registration request to the application service network element of the server, further comprising: transmitting, by the terminal, a logon request to the authorization authentication network element of the server to enable the authorization authentication network element of the server to perform an authentication authorization to the user according to the identification, wherein the logon request carries the identification; and receiving, by the terminal, a logon response message transmitted by the authorization authentication network element of the server, wherein the logon response message carries the token and a token expiration time. ### Claim 9 (depends on 8) The method according to claim 8, before the performing, by the terminal, the application service interaction with the application service network element of the application server if the token authorization is passed, further comprising: transmitting, by the terminal, a refresh message to the authorization authentication network element of the server before the token expiration time expires; and receiving, by the terminal, the token and the token expiration time reassigned by the authorization authentication network element of the server to the terminal according to the refresh message. ### Claim 10 (depends on 8) The method according to claim 8, before the performing, by the terminal, the application service interaction with the application service network element of the application server if the token authorization is passed, further comprising: receiving, by the terminal, a refresh notification transmitted by the authorization authentication network element of the server after determining that the token expiration time expires; transmitting, by the terminal, a refresh message to the authorization authentication network element of the server; and receiving, by the terminal, the token and the token expiration time reassigned by the authorization authentication network element of the server to the terminal according to the refresh message. ### Claim 11 A server, comprising: an application service network element and an authorization authentication network element, wherein the application service network element receives a registration request transmitted by a terminal, the registration request carries a token indicating a unique identity of a user initiating the registration request and an identification of the user, and the token is assigned by the authorization authentication network element to the user when the user logs onto the terminal; the application service network element performs a registration to the terminal according to the identification, and transmits the token to the authorization authentication network element; the authorization authentication network element performs a token authorization to the user according to the token; and the application service network element performs an application service interaction with the terminal if the token authorization is passed. ### Claim 12 (depends on 11) The server according to claim 11, before the application service network element receives the registration request transmitted by the terminal, further comprising: the authorization authentication network element receives a logon request transmitted by the user through the terminal, wherein the logon request carries the identification; the authorization authentication network element performs an authentication authorization to the user according to the identification; the authorization authentication network element assigns the token to the user if the authentication authorization is passed; and the authorization authentication network element transmits a logon response message to the terminal, wherein the logon response message carries the token. ### Claim 13 (depends on 11) The server according to claim 11, before the application service network element receives the registration request transmitted by the terminal, further comprising: the authorization authentication network element receives a logon request transmitted by the user through the terminal, wherein the logon request carries the identification; the authorization authentication network element performs an authentication authorization to the user according to the identification; the authorization authentication network element assigns the token to the user and configures a token expiration time if the authentication authorization is passed; and the authorization authentication network element transmits a logon response message to the terminal, wherein the logon response message carries the token and the token expiration time. ### Claim 14 (depends on 13) The server according to claim 13, before the application service network element performs the application service interaction with the terminal if the token authorization is passed, further comprising: the authorization authentication network element receives a refresh message transmitted by the terminal before the token expiration time expires; and the authorization authentication network element reassigns the token and the token expiration time to the terminal according to the refresh message. ### Claim 15 (depends on 13) The server according to claim 13, before the application service network element performs the application service interaction with the terminal if the token authorization is passed, further comprising: the authorization authentication network element transmits a refresh notification to the terminal to enable the terminal to obtain a new token and a token expiration time. ### Claim 16 A terminal, comprising: a transmitting module, configured to transmit a registration request to an application service network element of a server, wherein the registration request carries a token indicating a unique identity of a user initiating the registration request and an identification, enabling the application service network element of the server to perform a registration to the terminal according to the identification and transmit the token to an authorization authentication network element of the server which performs a token authorization to the user according to the token, and the token is assigned by the authorization authentication network element of the server to the user when the user logs onto the terminal; and an interacting module, configured to perform an application service interaction with the application service network element of the application server if the token authorization is passed. ### Claim 17 (depends on 16) The terminal according to claim 16, further comprising: a first receiving module, the transmitting module is configured to: before transmitting the registration request to the application service network element of the server, transmit a logon request to the authorization authentication network element of the server to enable the authorization authentication network element of the server to perform an authentication authorization to the user according to the identification, wherein the logon request carries the identification; and the first receiving module is configured to receive a logon response message transmitted by the authorization authentication network element of the server, wherein the logon response message carries the token. ### Claim 18 (depends on 16) The terminal according to claim 16, further comprising: a second receiving module, the transmitting module is configured to: before transmitting the registration request to the application service network element of the server, transmit a logon request to the authorization authentication network element of the server to enable the authorization authentication network element of the server to perform an authentication authorization to the user according to the identification, wherein the logon request carries the identification; and the second receiving module is configured to receive a logon response message transmitted by the authorization authentication network element of the server, wherein the logon response message carries the token and a token expiration time. ### Claim 19 (depends on 18) The terminal according to claim 18, wherein, the transmitting module is further configured to: before the interacting module performs the application service interaction with the application service network element of the application server if the token authorization is passed, transmit a refresh message to the authorization authentication network element of the server before the token expiration time expires; and the second receiving module is configured to receive the token and the token expiration time reassigned by the authorization authentication network element of the server to the terminal according to the refresh message. ### Claim 20 (depends on 18) The terminal according to claim 18, wherein, before the terminal performs the application service interaction with the application service network element of the application server if the token authorization is passed, further comprising: the second receiving module is further configured to: before the interacting module performs the application service interaction with the application service network element of the application server if the token authorization is passed, receive a refresh notification transmitted by the authorization authentication network element of the server after determining that the token expiration time expires; the transmitting module is further configured to transmit a refresh message to the authorization authentication network element of the server; and the second receiving module is further configured to receive the token and the token expiration time reassigned by the authorization authentication network element of the server to the terminal according to the refresh message.