Apparatus, method and computer program product providing mobile node identities in conjunction with authentication preferences in generic bootstrapping architecture (GBA)

Abstract

In one exemplary and non-limiting aspect thereof a method is provided that includes sending a wireless network (WN) a first message that includes a list of authentication mechanisms supported by a node and, in association with each authentication mechanism, a corresponding identity; determining in the WN an authentication mechanism to be used for bootstrapping, based at least on the list received from the node; and including information in a second message that is sent to the node, the information including the determined authentication mechanism in conjunction with a corresponding identity. The method further includes protecting at least the list of authentication mechanisms supported by the node and the corresponding identities and sending a second message to the network, the second message including at least the list of authentication mechanisms and the corresponding identities. The method further includes receiving a second response message from the network that is at least partially integrity protected, where the second response message includes an indication of the selected authentication mechanism and the corresponding identity.

Description

technical field [0001] The exemplary, non-limiting embodiments of the present invention relate generally to communication systems, methods and devices, and more particularly to authentication and related techniques for use in communication systems. Background technique [0002] The following definitions are limited here: [0003] 3GPP Third Generation Partnership Project [0004] AAA Authentication, Authorization and Accounting [0005] GAA General Authentication Architecture [0006] GBA Generic Boot Architecture [0007] BSF boot server functionality [0008] AKA Authentication and Key Agreement [0009] IM IP multimedia [0010] ISIM IM Service Identity Module [0011] NAI Network Access Identifier [0012] MN mobile node [0013] UE User Equipment [0014] EV-DO evolution only supports data services (Evolution Data Only) [0015] The purpose of 3 GPP GBA (see 3 GPP TS 33.220 "GAA: GBA", attached as Evidence A to the above-referenced US Provisional Patent Appli...

AI Technical Summary

Problems solved by technology

[0020] This creates a problem in that when the MN first contacts the BSF by sending an HTTP GET request (according to 3GPP2 S.P0109-0, Release 0.6, Dec. 8, 2005, "Generic Bootstrapping Architecture (GBA) Framework", attached as Annex C U.S. Provisional Patent Application No. 60 / 759,487, cited above), requires it to insert its identification into the request

Optionally, the mapping of the different identities of the MN may need to be accessible to the BSF, but this may not be desirable for a number of reasons

Images