US 8,275,355 B2Granted

Method for roaming user to establish security association with visited network application server

AssigneeHuawei Technologies Co., Ltd.

InventorsYingxin Huang, Wenlin Zhang

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present invention provides a method for a roaming user to establish security association with the application server in the visited network. When receiving the service request from the roaming user, the application server in the visited network establishes security association with the roaming user by making use of the authentication results of the generic authentication architecture in the home network via the BSF in the local network, or the generic authentication architecture proxy in the local network, or the AAA server in the local network and the AAA server in the roaming user's home network, so as to achieve the object that the roaming user is able to use the services of the visited network after authentication of the generic authentication architecture in his home network.

Claims9

Dependent claims

A method for an application server in a visited network to establish a security association with a user comprising the steps of:

receiving, by the application server in the visited network, a service request message from the roaming user, said service request message containing a Bootstrapping—Transaction Identifier (B-TID), the B-TID being assigned to the roaming user by a Bootstrapping Server Function (BSF) based upon a mutual authentication of the roaming user with the BSF that performs user identity initial verification in a generic authentication architecture in a home network of the roaming user;
returning, by the proxy in the visited inquiring, by the application server in the visited network inquiring from a proxy an in the visited network about user's user information of the user associated with the B-TID, the user information comprising user authentication results of the generic authentication architecture in the home network of the user;
identifying, by the proxy in the visited network, the home network to which the user belongs according to the B-TID;
acquiring, by the proxy in the visited network, the user information associated with the B-TID from the BSF in the home network of the user;
network, the acquired user information to the application server;
obtaining, by the application server in the visited network the user information of the user comprising the user authentication results of the generic authentication architecture in the home network of the user;
and
establishing, by the application server in the visited network, a security association with the user according to the user authentication results of the generic authentication architecture in the home network of the user.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 10/591,065Filed 24 Mar 2005
Priority: CN 2004 1 00305172 Apr 2004
Published: US 2008/0160959 A13 Jul 2008
Granted: 25 Sep 2012
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04W 12/06
Security arrangements; Authentication; Protecting privacy or anonymity: authentication
H04L 63/0869
For authentication of entities: for achieving mutual authentication
H04L 63/0892
For authentication of entities: by using authentication-authorization-accounting [AAA] servers or protocols
H04W 12/0431
Using a trusted network node as an anchor: key distribution or pre-distribution; Key agreement