# US 8,782,743 B2 · Methods and apparatus for use in a generic bootstrapping architecture

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,782,743 B2
- Document ID: US8782743B2
- Status: Granted
- Kind: B2
- Application number: 13/505,771
- Filed: 2009-11-24
- Published: 2012-08-30
- Granted: 2014-07-15
- Earliest claimed: 2009-11-24
- Assignees: Telefonaktiebolaget LM Ericsson (publ)
- Applicants: David Castellanos Zamora; Nuria Esteban Vares
- Inventors: David Castellanos Zamora; Nuria Esteban Vares
- Web page: https://patentgrep.com/patent/US8782743B2

## CPC

- H04W 12/06: Authentication
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04W 12/0431: Key distribution or pre-distribution; Key agreement
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

According to an aspect of the present invention there is provided a method of obtaining authentication information for use in a Generic Bootstrapping Architecture, GBA, employed in a network with one or more GBA-capable subscriber registers and one or more GBA-incapable subscriber registers. The method involves a selection function for determining whether the authentication information of a subscriber is stored at a GBA-capable subscriber register or at a GBA-incapable subscriber register, and an inter working function for translating between the Diameter messages of the Zh interface and the MAP messages of the Zh′ interface.

## Claims

### Claim 1

A method of obtaining authentication information for use in a Generic Bootstrapping Architecture, GBA, employed in a network with one or more GBA-capable subscriber registers and one or more GBA-incapable subscriber registers, the method comprising:
at a Bootstrapping Server Function, upon receipt of a bootstrapping request from a subscriber terminal, sending an authentication request for authentication information including an identity of a subscriber to a selection function;
at the selection function, determining if the authentication information of the subscriber is stored at one of the one or more GBA-capable subscriber registers or at one of the one or more GBA-incapable subscriber registers;
if it is determined that the authentication information of the subscriber is stored at one of the one or more GBA-incapable subscriber registers, communicating the authentication request to an inter working function; and
at the inter working function, sending a Mobile Application Part, MAP, protocol message corresponding to the authentication request towards the GBA-incapable subscriber register, receiving a MAP response from the GBA-incapable subscriber register, and sending an authentication response corresponding to the received MAP response to the Bootstrapping Server Function;
wherein the selection function is provided by either of a Subscriber Locator Function and one of the one or more GBA-capable subscriber registers, and the inter working function is provided by either of the Subscriber Locator Function and one of the one or more GBA-capable subscriber registers.

### Claim 2 (depends on 1)

The method as claimed in claim 1, wherein the step of communicating the determination to an inter working function comprises:
at the selection function, forwarding the authentication request to the inter working function.

### Claim 3 (depends on 2)

The method as claimed in claim 2, wherein both the selection function and the inter working function are provided at one of the one or more GBA-capable subscriber registers.

### Claim 4 (depends on 2)

The method as claimed in claim 2, wherein both the selection function and the inter working function are provided at the Subscriber Locator Function.

### Claim 5 (depends on 1)

The method as claimed in claim 1, wherein the step of communicating the authentication request to an inter working function comprises:
at the selection function, sending to the Bootstrapping Server Function an indication that the authentication information of the subscriber is stored at one of the one or more GBA-incapable subscriber registers; and
at the Bootstrapping Server Function, forwarding the authentication request to the inter working function.

### Claim 6 (depends on 5)

The method as claimed in claim 5, wherein the inter working function is provided at one of the one or more GBA-capable subscriber registers and the selection function is provided at the Subscriber Locator Function.

### Claim 7 (depends on 1)

The method as claimed in claim 1, wherein the step of determining if the authentication information of the subscriber is stored at one of the one or more GBA-capable subscriber registers or at one of the one or more GBA-incapable subscriber registers comprises:
determining if the authentication information of the subscriber is stored at one of the one or more GBA-capable subscriber registers; and
if not, implicitly determining that the authentication information of the subscriber is stored at one of the one or more GBA-incapable subscriber registers.

### Claim 8 (depends on 1)

The method as claimed in claim 1, and further comprising, if it is determined that the authentication information of the subscriber is stored at one of the one or more GBA-incapable subscriber registers, retrieving the subscribers GBA User Security Settings, GUSS, from one of the selection function and the inter working function.

### Claim 9 (depends on 8)

The method as claimed in claim 8, wherein the GUSS is stored at one of:
the entity providing the selection function; and
the entity providing the inter working function.

### Claim 10 (depends on 1)

The method as claimed in claim 1, wherein the GBA-capable subscriber registers are Home Subscriber Servers supporting Diameter protocol and capable of communicating with the Bootstrapping Server Function, and wherein the GBA-incapable subscriber registers are Home Subscriber Servers or Home Location Registers supporting MAP protocol and incapable of communicating with the Bootstrapping Server Function.

### Claim 11

An apparatus configured to operate as an inter working function for use in a Generic Bootstrapping Architecture, GBA, employed in a network comprised of one or more GBA-incapable subscriber registers, the apparatus comprising:
a first receiver configured to receive, from a Bootstrapping Server Function, an authentication request for authentication information including an identity of a subscriber;
a processor configured to translate the authentication request into a corresponding Mobile Application Part, MAP, protocol message;
a first sender configured to send the MAP protocol message corresponding to the authentication request towards one of the one or more GBA-incapable subscriber registers;
a second receiver configured to receive a MAP protocol response from the GBA-incapable subscriber register including the subscriber authentication information;
the processor being further configured to translate the MAP response into a corresponding authentication response; and
a second sender configured to send the authentication response corresponding to the received MAP response to the Bootstrapping Server Function;
wherein the inter working function is provided by either of a Subscriber Locator Function and a GBA-capable subscriber register employed in the network.