Back to results
US 7,626,963 B2Granted
EAP/SIM authentication for mobile IP to leverage GSM/SIM authentication infrastructure
AssigneeCisco Technology, Inc.
InventorsAlpesh S. Patel, Kent K. Leung, Joseph A. Salowey, Yu-Cheng Shao
Life of this patent
Estimating the term…
Abstract
Methods and apparatus for dynamically generating a set of Mobile IP keys are disclosed. The set of Mobile IP keys is dynamically generated using an existing HLR/AuC authentication infrastructure. This is accomplished, in part, by obtaining an International Mobile Subscriber Identity (IMSI) that uniquely identifies a particular Mobile Node. Once a set of Mobile IP keys is generated from authentication information associated with the IMSI, the Mobile Node may register with its Home Agent using the set of Mobile IP keys.
Claims17
In a Mobile Node supporting Mobile IP, a method of registering with a Home Agent supporting Mobile IP, comprising:
- sending a bootstrap request to the Home Agent to initiate generation of at least one Mobile IP key from the authentication information associated with an International Mobile Subscriber Identity;
- receiving a bootstrap reply including one or more random numbers from the Home Agent;
- generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random numbers received in the bootstrap reply, wherein generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random number received in the bootstrap reply includes generating a MN-AAA key shared between the Mobile Node and a AAA server;
- generating a registration request including the MN-AAA key;
- generating a MN-HA key from the MN-AAA key to authenticate a registration reply including a MHAE;
- and
- authenticating the MHAE using the MN-HA key.
4 more elements
In a Mobile Node supporting Mobile IP, a method of registering with a Home Agent supporting Mobile IP, comprising:
- sending a bootstrap request to the Home Agent to initiate generation of at least one Mobile IP key from the authentication information associated with an International Mobile Subscriber Identity;
- receiving a bootstrap reply including one or more random numbers from the Home Agent;
- generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random numbers received in the bootstrap reply, wherein generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random number received in the bootstrap reply includes generating a MN-AAA key shared between the Mobile Node and a AAA server;
- deriving a MN-HA key from the MN-AAA key to authenticate the bootstrap reply, wherein the bootstrap reply includes a MH-AE;
- and
- deleting the MN-HA key after the bootstrap reply is authenticated.
3 more elements
In a Home Agent supporting Mobile IP, a method of registering a Mobile Node supporting Mobile IP with the Home Agent, comprising:
- receiving a bootstrap request from the Mobile Node, the bootstrap request initiating generation of at least one Mobile IP key from authentication information associated with an International Mobile Subscriber Identity;
- transmitting a bootstrap reply including one or more random numbers to the Mobile Node, thereby enabling the Mobile Node to generate the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random numbers;
- obtaining the at least one Mobile IP key, the at least one Mobile IP key being derived from the authentication information associated with the International Mobile Subscriber Identity and the random numbers, wherein the at least one Mobile IP key includes a MN-HA key;
- receiving a registration request including a MN-AAA key from the Mobile Node;
- authenticating the Mobile Node using the MN-AAA key;
- obtaining the MN-HA key, wherein the MN-HA key has been derived from the MN-AAA key;
- generating a MHAE using the MN-HA key;
- appending the MHAE to a registration reply;
- and
- sending the registration reply to the Mobile Node.
7 more elements
In a AAA server, a method of generating at least one Mobile IP key, comprising:
- receiving a request message from a Home Agent, the request message including an International Mobile Subscriber Identity;
- transmitting a second request message including the IMSI to a Home Location Register;
- receiving a reply message from the Home Location Register, the reply message including one or more random numbers and information derived from both the authentication information associated with the International Mobile Subscriber Identity and the random numbers;
- generating the at least one Mobile IP key from the information derived from both the authentication information associated with the International Mobile Subscriber Identity and the random number, wherein the at least one Mobile IP key includes a MN-AAA key and a MN-HA key;
- and
- providing the MN-HA key to the Home Agent, thereby enabling the Home Agent to generate a MHAE during Mobile IP registration.
3 more elements
An AAA server adapted for generating at least one Mobile IP key, comprising:
- a processor;
- and a memory, at least one of the processor or the memory being adapted for:
- receiving a request message from a Home Agent, the request message including an International Mobile Subscriber Identity;
- transmitting a second request message including the IMSI to a Home Location Register;
- receiving a reply message from the Home Location Register, the reply message including one or more random numbers and information derived from both the authentication information associated with the International Mobile Subscriber Identity and the random numbers;
- and
- generating the at least one Mobile IP key from the information derived from both the authentication information associated with the International Mobile Subscriber Identity and the random number, wherein the at least one Mobile IP key includes a MN-AAA key and a MN-HA key;
- and providing the MN-HA key to the Home Agent, thereby enabling the Home Agent to generate a MHAE during Mobile IP registration.
5 more elements
A Mobile Node supporting Mobile IP and adapted for registering with a Home Agent supporting Mobile IP, comprising:
- a processor;
- and
- a memory, at least one of the processor or the memory being adapted for:
- sending a bootstrap request to the Home Agent to initiate generation of at least one Mobile IP key from the authentication information associated with an International Mobile Subscriber Identity;
- receiving a bootstrap reply including one or more random numbers from the Home Agent;
- generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random numbers received in the bootstrap reply, wherein generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random number received in the bootstrap reply includes generating a MN-AAA key shared between the Mobile Node and a AAA server;
- generating a registration request including the MN-AAA key;
- generating a MN-HA key from the MN-AAA key to authenticate a registration reply including a MHAE;
- and
- authenticating the MHAE using the MN-HA key.
7 more elements
A Mobile Node supporting Mobile IP and adapted for registering with a Home Agent supporting Mobile IP, comprising:
- a processor;
- and
- a memory, at least one of the processor or the memory being adapted for:
- sending a bootstrap request to the Home Agent to initiate generation of at least one Mobile IP key from the authentication information associated with an International Mobile Subscriber Identity;
- receiving a bootstrap reply including one or more random numbers from the Home Agent;
- generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random numbers received in the bootstrap reply, wherein generating the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random number received in the bootstrap reply includes generating a MN-AAA key shared between the Mobile Node and a AAA server;
- deriving a MN-HA key from the MN-AAA key to authenticate the bootstrap reply, wherein the bootstrap reply includes a MHAE;
- and
- deleting the MN-HA key after the bootstrap reply is authenticated.
6 more elements
A Home Agent supporting Mobile IP, the Home Agent being adapted for registering a Mobile Node supporting Mobile IP with the Home Agent, comprising:
- a processor;
- and
- a memory, at least one of the processor or the memory being adapted for:
- receiving a bootstrap request from the Mobile Node, the bootstrap request initiating generation of at least one Mobile IP key from authentication information associated with an International Mobile Subscriber Identity;
- transmitting a bootstrap reply including one or more random numbers to the Mobile Node, thereby enabling the Mobile Node to generate the at least one Mobile IP key from the authentication information associated with the International Mobile Subscriber Identity and the random numbers;
- obtaining the at least one Mobile IP key, the at least one Mobile IP key being derived from the authentication information associated with the International Mobile Subscriber Identity and the random numbers, wherein the at least one Mobile IP key includes a MN-HA key;
- receiving a registration request including a MN-AAA key from the Mobile Node;
- authenticating the Mobile Node using the MN-AAA key;
- obtaining the MN-HA key, wherein the MN-HA key has been derived from the MN-AAA key;
- generating a MHAE using the MN-HA key;
- appending the MHAE to a registration reply;
- and
- sending the registration reply to the Mobile Node.
10 more elements
An AAA server adapted for generating at least one Mobile IP key, comprising:
- means for receiving a request message from a Home Agent, the request message including an International Mobile Subscriber Identity;
- means for transmitting a second request message including the IMSI to a Home Location Register;
- means for receiving a reply message from the Home Location Register, the reply message including one or more random numbers and information derived from both the authentication information associated with the International Mobile Subscriber Identity and the random numbers;
- means for generating the at least one Mobile IP key from the information derived from both the authentication information associated with the International Mobile Subscriber Identity and the random number, wherein the at least one Mobile IP key includes a MN-AAA key and a MN-HA key;
- and
- means for providing the MN-HA key to the Home Agent, thereby enabling the Home Agent to generate a MHAE during Mobile IP registration.
3 more elements
Dependencies are inferred from the claim text.