Secure Communications Using Network Access Identity

A method for enabling secure communication between a first communications device and a second communications device, the method comprising the first communications device:

• performing a network attachment procedure with an authentication server;
• establishing, during the network attachment procedure, a shared secret between the first communications device and the authentication server, wherein the shared secret is established by running an authentication and key agreement protocol as part of the network attachment procedure with a network access identity of the first communications device as input;
• and
• deriving an application level shared key for the first communications device from the shared secret, wherein the application level shared key is to be used for secure communication between the first communications device and the second communications device.

A method for enabling secure communication between a first communications device and a second communications device, the method comprising an authentication server:

• performing a network attachment procedure with the first communications device;
• establishing, during the network attachment procedure, a shared secret between the authentication server and the first communications device, wherein the shared secret is established by running an authentication and key agreement protocol as part of the network attachment procedure with a network access identity of the first communications device as input;
• receiving a request from the second communications device for an application level shared key, wherein the application level shared key is to be used for secure communication between the first communications device and the second communications device;
• deriving the application level shared key for the first communications device from the shared secret;
• and
• providing the application level shared key to the second communications device.

A method for enabling secure communication between a first communications device and a second communications device, the method comprising the second communications device:

• receiving instructions from the first communications device to retrieve an application level shared key from an authentication server when establishing the secure communication with the first communications device, wherein the application level shared key is to be used for the secure communication between the first communications device and the second communications device;
• providing a request for the application level shared key from the authentication server;
• and
• receiving the application level shared key from the authentication server.

A first communications device for enabling secure communication between the first communications device and a second communications device, the first communications device comprising:

• processing circuitry;
• memory containing instructions executable by the processing circuitry whereby the first communications device is operative to:
• perform a network attachment procedure with an authentication server;
• establish, during the network attachment procedure, a shared secret between the first communications device and the authentication server, wherein the shared secret is established by running an authentication and key agreement protocol as part of the network attachment procedure with a network access identity of the first communications device as input;
• and
• derive an application level shared key for the first communications device from the shared secret, wherein the application level shared key is to be used for secure communication between the first communications device and the second communications device.

An authentication server for enabling secure communication between a first communications device and a second communications device, the authentication server comprising:

• processing circuitry;
• memory containing instructions executable by the processing circuitry whereby the authentication server is operative to:
• perform a network attachment procedure with the first communications device;
• establish, during the network attachment procedure, a shared secret between the authentication server and the first communications device, wherein the shared secret is established by running an authentication and key agreement protocol as part of the network attachment procedure with a network access identity of the first communications device as input;
• receive a request from the second communications device for an application level shared key, wherein the application level shared key is to be used for secure communication between the first communications device and the second communications device;
• derive the application level shared key for the first communications device from the shared secret;
• and
• provide the application level shared key to the second communications device.

A second communications device for enabling secure communication between a first communications device and the second communications device, the second communications device comprising:

• processing circuitry;
• memory containing instructions executable by the processing circuitry whereby the second communications device is operative to:
• receive instructions from the first communications device to retrieve an application level shared key from an authentication server when establishing the secure communication with the first communications device, wherein the application level shared key is to be used for the secure communication between the first communications device and the second communications device;
• provide a request for the application level shared key from the authentication server;
• and
• receive the application level shared key from the authentication server.