Method and apparatus for efficient support for multiple authentications

A method for multiple Extensible Authentication Protocol (EAP)-based authentications in a wireless communication system, the method comprising:

• generating a first master session key (MSK) in a first EAP-based authentication for a first-type access;
• generating a first temporal session key (TSK) from the first master session key (MSK);
• performing a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;
• providing first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• and
• using the first temporal session key (TSK) for a third EAP-based authentication if a second master session key (MSK) is not generated in the second EAP-based authentication.

A method for multiple Extensible Authentication Protocol (EAP)-based authentications in a wireless communication system, the method comprising:

• generating a first master session key (MSK) in a first EAP-based authentication for a first-type access;
• generating a first temporal session key (TSK) from the first master session key (MSK);
• performing a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;
• providing first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• generating a first domain specific root key (DSRK) in the first EAP-based authentication;
• generating a second domain specific root key (DSRK) in the second EAP-based authentication;
• and
• performing an EAP-based reauthentication of at least one of the first type access or the second type access using at least one of the first DSRK or the second DSRK.

An apparatus for multiple Extensible Authentication Protocol (EAP)-based authentications operable in a wireless communication system, the apparatus comprising:

• means for generating a first master session key (MSK) in a first EAP-based authentication for a first-type access;
• means for generating a first temporal session key (TSK) from the first master session key (MSK);
• means for performing a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;
• means for providing first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• means for generating a second master session key (MSK) in the second EAP-based authentication;
• and
• means for generating a second temporal session key (TSK) from the second master session key (MSK), wherein the second temporal session key (TSK) is used in a third EAP-based authentication.

An apparatus for multiple Extensible Authentication Protocol (EAP)-based authentications operable in a wireless communication system, the apparatus comprising:

• means for generating a first master session key (MSK) in a first EAP-based authentication for a first-type access;
• means for generating a first temporal session key (TSK) from the first master session key (MSK);
• means for performing a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;
• means for providing first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• and
• means for using the first temporal session key (TSK) for a third EAP-based authentication if a second master session key (MSK) is not generated in the second EAP-based authentication.

An apparatus for multiple Extensible Authentication Protocol (EAP)-based authentications operable in a wireless communication system, the apparatus comprising:

• means for generating a first master session key (MSK) in a first EAP-based authentication for a first-type access;
• means for generating a first temporal session key (TSK) from the first master session key (MSK);
• means for performing a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;
• means for providing first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• means for generating a first domain specific root key (DSRK) in the first EAP-based authentication;
• means for generating a second domain specific root key (DSRK) in the second EAP-based authentication;
• and
• means for performing an EAP-based reauthentication of at least one of the first type access or the second type access using at least one of the first DSRK or the second DSRK.

A computer program product, comprising:

• non-transitory computer-readable medium, comprising:
• code for causing a computer to generate a first master session key (MSK) in a first Extensible Authentication Protocol (EAP)-based authentication for a first-type access;
• code for causing a computer to generate a first temporal session key (TSK) from the first master session key (MSK);
• code for causing a computer to perform a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;
• code for causing a computer to provide first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• code for causing a computer to generate a second master session key (MSK) in the second EAP-based authentication;
• and
• code for causing a computer to generate a second temporal session key (TSK) from the second master session key (MSK), wherein the second temporal session key (TSK) is used in a third EAP-based authentication.

A computer program product comprising:

• non-transitory computer-readable medium, comprising:
• code for causing a computer to generate a first master session key (MSK) in a first Extensible Authentication Protocol (EAP)-based authentication for a first-type access;
• code for causing a computer to generate a first temporal session key (TSK) from the first master session key (MSK);
• code for causing a computer to perform a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;code for causing a computer to provide first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• and
• code for causing a computer to use the first temporal session key (TSK) for a third EAP-based authentication if a second master session key (MSK) is not generated in the second EAP-based authentication.

The A computer program product comprising:

• non-transitory computer-readable medium, comprising:
• code for causing a computer to generate a first master session key (MSK) in a first Extensible Authentication Protocol (EAP)-based authentication for a first-type access;
• code for causing a computer to generate a first temporal session key (TSK) from the first master session key (MSK);
• code for causing a computer to perform a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access;
• code for causing a computer to provide first-type access and second-type access after the first and second EAP-based authentications are successfully completed;
• code for causing a computer to generate a first domain specific root key (DSRK) in the first EAP-based authentication;
• code for causing a computer to generate a second domain specific root key (DSRK) in the second EAP-based authentication;
• and
• code for causing a computer to perform an EAP-based reauthentication of at least one of the first type access or the second type access using at least one of the first DSRK or the second DSRK.

An apparatus for multiple Extensible Authentication Protocol (EAP)-based authentications operable in a wireless communication system, the apparatus comprising:

• a processor, configured to:
• generate a first master session key (MSK) in a first EAP-based authentication for a first-type access,
• generate a first temporal session key (TSK) from the first master session key (MSK),
• perform a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access,
• provide first-type access and second-type access after the first and second EAP-based authentications are successfully completed,
• generate a second master session key (MSK) in the second EAP-based authentication, and
• generate a second temporal session key (TSK) from the second master session key (MSK), wherein the second temporal session key (TSK) is used in a third EAP-based authentication:
• and
• a memory coupled to the processor for storing data.

An apparatus for multiple Extensible Authentication Protocol (EAP)-based authentications operable in a wireless communication system, the apparatus comprising:

• a processor, configured to:
• generate a first master session key (MSK) in a first EAP-based authentication for a first-type access,
• generate a first temporal session key (TSK) from the first master session key (MSK),
• perform a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access,
• provide first-type access and second-type access after the first and second EAP-based authentications are successfully completed, and
• use the first temporal session key (TSK) for a third EAP-based authentication if a second master session key (MSK) is not generated in the second EAP-based authentication;
• and
• a memory coupled to the processor for storing data.

An apparatus for multiple Extensible Authentication Protocol (EAP)-based authentications operable in a wireless communication system, the apparatus comprising:

• a processor configured to:
• generate a first master session key (MSK) in a first EAP-based authentication for a first-type access,
• generate a first temporal session key (TSK) from the first master session key (MSK),
• perform a second EAP-based authentication, using the first temporal session key (TSK), for a second-type access,
• provide first-type access and second-type access after the first and second EAP-based authentications are successfully completed,
• generate a first domain specific root key (DSRK) in the first EAP-based authentication,
• generate a second domain specific root key (DSRK) in the second EAP-based authentication, and
• perform an EAP-based reauthentication of at least one of the first type access or the second type access using at least one of the first DSRK or the second DSRK;
• and
• a memory coupled to the processor for storing data.