Systems and methods for using gba for services used by multiple functions on the same device

A method of operation of a network node implementing a Bootstrapping Server Function, BSF, the method comprising:

• receiving a Generic Bootstrapping Architecture, GBA, authentication request message from a first service function implemented at a device, the authentication request message comprising authentication key agreement, AKA, parameters;
• validating the AKA parameters and providing a Generic Bootstrapping Architecture, GBA, based shared secret to the first service function identified by a common public identity;
• and
• authorizing subsequent application request from a second service function implemented at the device, wherein the subsequent application request comprises the GBA based shared secret and the common public identity of the first and second service functions.

A device implementing at least two service functions sharing a common identity, the device comprising:

• one or more processors;
• and
• memory storing instructions executable by the one or more processors, whereby the device is operable to:
• obtain, by a first service function implemented at the device, a Generic Bootstrapping Architecture, GBA, based shared secret via a GBA bootstrapping procedure;
• share the GBA based shared secret with a second service function implemented at the device;
• and
• request, by the second service function, authentication via a Generic Authentication Architecture, GAA, procedure based on the GBA based shared secret and the common identity of the first and second service functions.

A network node providing a Bootstrapping Server Function, BSF, the network node comprising:

• one or more processors;
• and
• memory storing instructions executable by the one or more processors, whereby the network node is operable to:
• receive a Generic Bootstrapping Architecture, GBA, authentication request message from a first service function implemented at a device, the authentication request message comprising authentication key agreement, AKA, parameters;
• validate the AKA parameters and providing a Generic Bootstrapping Architecture, GBA, based shared secret and a corresponding GBA shared secret lifetime to the first service function;
• and
• authorize subsequent application request from a second service function implemented at the device, wherein the subsequent application request comprises the GBA based shared secret and a common public identity of the first and second service functions.