Methods, apparatus, and non-transitory computer-readable media for wireless communications

Abstract

Methods, apparatus, and non-transitory computer-readable media for wireless communications. Techniques for wireless communications are described. A method for wireless communications at a user equipment (UE) includes performing an extended authentication protocol (EAP) process with an authentication server via an authenticator. The EAP process is based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. The method also includes: as part of performing the EAP process, deriving a master session key (MSK) and an extended master session key (EMSK), the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters; determining a network type associated with the authenticator; and performing at least one authentication process with the authenticator based at least in part on the determined network type. The at least one authentication process is based on an association of the MSK or EMSK with the determined network type.

Description

[0001] This application is a divisional application of the invention patent application with the application date of August 17, 2017, application number 201780056316.4, and name “Methods, devices and non-transitory computer-readable media for wireless communications”.

[0002] Cross-references

[0003] This patent application claims priority to U.S. patent application No. 15 / 489,670, filed by Lee et al. on April 17, 2017, entitled “Techniques For Deriving Security Keys For A Cellular Network Based On Performance of an Extensible Authentication Protocol (EAP) Procedure”; and U.S. Provisional Patent Application No. 62 / 396,791, filed by Lee et al. on September 19, 2016, entitled “Techniques For Deriving Security Keys For A Cellular Network Based On Performance Of an Extensible Authentication Protocol (EAP) Procedure”; each of the above applications is assigned to the assignee of this application. Technical Field

[0004] The present disclosure relates, for example, to wireless communication systems and, more particularly, to techniques for deriving security keys for cellular networks based on execution of an Extended Authentication Protocol (EAP) procedure. Background Art

[0005] Wireless communication systems are widely deployed to provide various types of communication content such as voice, video, packet data, messaging, broadcast, etc. These systems may be multiple-access systems capable of supporting communication with multiple users by sharing available system resources (e.g., time, frequency, and power). Examples of these multiple-access systems include code division multiple access (CDMA) systems, time division multiple access (TDMA) systems, frequency division multiple access (FDMA) systems, and orthogonal frequency division multiple access (OFDMA) systems.

[0006] In some examples, the wireless multiple access communication system may be or include a cellular network. A cellular network may include multiple network access devices, each of which supports communication of multiple communication devices (or commonly known as user equipment (UE)) simultaneously. In a fourth generation (4G) network, a long term evolution (LTE) network, or an advanced LTE (LTE-A) network, the network access device may take the form of an enhanced node B (eNB), each eNB including a set of one or more base stations. In a fifth generation (5G or next generation (NextGen)) network, the network access device may take the form of a smart radio head (SRH) or a gNodeB (gNB) in communication with a network access device controller (e.g., an access node controller (ANC)), wherein a set of one or more network access devices communicating with the network access device controller defines a network node. An eNB, a gNB, or a network node may communicate with a set of UEs on a downlink channel (e.g., for transmission from an eNB, a gNB, or a network node to the UE) and an uplink channel (e.g., for transmission from a UE to an eNB, a gNB, or a network node).

[0007] When a UE accesses a cellular network, the UE or the cellular network may initiate one or more processes that enable the UE to authenticate itself to an authenticator of the cellular network, and enable the authenticator to authenticate the cellular network to the UE. In some examples, the authentication process may include an EAP process in which an authentication server having a secure connection with the authenticator authenticates the UE; enables the UE to derive one or more security keys for authenticating itself to the authenticator; and derives one or more security keys that are sent to the authenticator over the secure connection to enable the authenticator to authenticate the cellular network to the UE. Summary of the invention

[0008] In some cases, a cellular network may allow access to the cellular network via different types of access networks, some of which may be more or less vulnerable to attack, and some of which may be more or less under the control of the operator of the cellular network. For example, a cellular network may allow access to the cellular network via a cellular access network or a non-cellular access network (e.g., a wireless local area network (WLAN)). When authenticators associated with different access networks support the same EAP procedure, the same master session key (MSK) may be derived as a result of performing the EAP procedure via the authenticator associated with the cellular access network or the authenticator associated with the non-cellular access network. Thus, the same MSK or the same security key derived therefrom may be provided to the authenticator associated with the cellular access network or the authenticator associated with the non-cellular access network. If the non-cellular access network is compromised by an attacker, the attacker's access to the MSK or the security key derived therefrom may enable the attacker to use the non-cellular access network to impersonate the cellular access network to the UE, which may compromise the security of the UE and / or applications running on the UE. The techniques described in this disclosure help mitigate this threat by determining the type of network associated with an authenticator and performing an authentication process with the authenticator (or deriving a security key for the authenticator) based on the type of EAP session key (e.g., MSK or Extended MSK (EMSK)) associated with the network type. In some examples, the MSK may be used when the authenticator is associated with a non-cellular access network, and the EMSK may be used when the authenticator is associated with a cellular access network.

[0009] In one example, a method for wireless communication at a UE is described. The method may include performing an EAP process with an authentication server via an authenticator. The EAP process is based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. The method may also include, as part of performing the EAP process, deriving a MSK and an EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters; determining a network type associated with the authenticator; and performing at least one authentication process with the authenticator based at least in part on the determined network type. The at least one authentication process may be based on an association of the MSK or the EMSK with the determined network type.

[0010] In one example, an apparatus for wireless communication at a UE is described. The apparatus may include means for performing an EAP process with an authentication server via an authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. The apparatus may also include means for deriving a MSK and an EMSK as part of performing the EAP process, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters; means for determining a network type associated with the authenticator; and means for performing at least one authentication process with the authenticator. The at least one authentication process may be based on an association of the MSK or the EMSK with the determined network type.

[0011] In one example, another apparatus for wireless communication at a UE is described. The apparatus may include a processor and a memory in electronic communication with the processor. The processor and the memory may be configured to perform an EAP process with an authentication server via an authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. The processor and the memory may also be configured to, as part of performing the EAP process, derive an MSK and an EMSK, the MSK and the EMSK being based at least in part on a first set of the authentication credentials and parameters; determine a network type associated with the authenticator; and perform at least one authentication process with the authenticator based at least in part on the determined network type. The at least one authentication process may be based on an association of the MSK or the EMSK with the determined network type.

[0012] In one example, a non-transitory computer-readable medium storing computer-executable code for wireless communication at a UE is described. The code can be executed by a processor to perform an EAP process via an authenticator with an authentication server. The EAP process can be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. The code can also be executed by the processor to, as part of performing the EAP process, derive an MSK and an EMSK, the MSK and the EMSK being based at least in part on a first set of the authentication credentials and parameters; determine a network type associated with the authenticator; and perform at least one authentication process with the authenticator based at least in part on the determined network type. The at least one authentication process can be based on an association of the MSK or the EMSK with the determined network type.

[0013] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the determined network type may include a cellular network type, and performing the at least one authentication process with the authenticator may include deriving a first security key for the cellular network. The first security key may be based at least in part on the EMSK and a second set of parameters. In some examples, the second set of parameters may include: an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof.

[0014] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, performing the at least one authentication process with the authenticator may include deriving a second security key of a network node of the cellular network, the second security key being based at least in part on the first security key and a third set of parameters; and communicating with the cellular network via the network node based at least in part on the second security key. In some of these examples, the third set of parameters may include: an identifier of the network node, at least one network node-specific parameter, at least one parameter exchanged between the UE and the network node, or a combination thereof.

[0015] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0016] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof.

[0017] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the determined network type may include a non-cellular network type, and performing the at least one authentication process with the authenticator may include deriving a first security key for the non-cellular network. The first security key may be based at least in part on the MSK and the second set of parameters.

[0018] In one example, a method for wireless communication at an authentication server may include performing an EAP process with a UE via an authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the authentication server and the UE. The method may also include, as part of performing the EAP process, deriving a MSK and an EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters; determining a network type associated with the authenticator; deriving a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the network type and at least in part on a second set of parameters; and sending the security key to the authenticator via a secure channel.

[0019] In one example, an apparatus for wireless communication at an authentication server is described. The apparatus may include a unit for performing an EAP process with a UE via an authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the authentication server and the UE. The apparatus may also include a unit for deriving a MSK and an EMSK as part of performing the EAP process, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters; a unit for determining a network type associated with the authenticator; a unit for deriving a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the network type and at least in part on a second set of parameters; and a unit for sending the security key to the authenticator via a secure channel.

[0020] In one example, another apparatus for wireless communication at an authentication server is described. The apparatus may include a processor and a memory in electronic communication with the processor. The processor and the memory may be configured to perform an EAP process with a UE via an authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the authentication server and the UE. The processor and the memory may also be configured to, as part of performing the EAP process, derive an MSK and an EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters; determine a network type associated with the authenticator; derive a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the network type and at least in part on a second set of parameters; and send the security key to the authenticator via a secure channel.

[0021] In one example, a non-transitory computer-readable medium storing computer-executable code for wireless communication at an authentication server is described. The code can be executed by a processor to perform an EAP process with a UE via an authenticator. The EAP process can be based at least in part on a set of authentication credentials exchanged between the authentication server and the UE. The code can also be executed by the processor to, as part of performing the EAP process, derive an MSK and an EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters; determine a network type associated with the authenticator; derive a security key for the determined network type based at least in part on an association of the MSK or the EMSK with the network type and at least in part on a second set of parameters; and send the security key to the authenticator via a secure channel.

[0022] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0023] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the determined network type may include a cellular network type, and the second set of parameters may include an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the authentication server and the cellular network, or a combination thereof.

[0024] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof.

[0025] In one example, a method for wireless communication at a cellular network is described. The method may include receiving a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK may be based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials may be exchanged between a UE and the authentication server during an EAP procedure. The method may also include performing at least one authentication procedure with the UE based at least in part on the first security key.

[0026] In one example, an apparatus for wireless communication at a cellular network is described. The apparatus may include means for receiving a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK may be based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials may be exchanged between a UE and the authentication server during an EAP procedure. The apparatus may also include means for performing at least one authentication procedure with the UE based at least in part on the first security key.

[0027] In one example, another apparatus for wireless communication at a cellular network is described. The apparatus may include a processor and a memory in electronic communication with the processor. The processor and the memory may be configured to receive a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK is based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials may be exchanged between a UE and the authentication server during an EAP process. The processor and the memory may also be configured to perform at least one authentication process with the UE based at least in part on the first security key.

[0028] In one example, a non-transitory computer-readable medium storing computer-executable code for wireless communication at a cellular network is described. The code is executable by a processor to receive a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK is based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials may be exchanged between a UE and the authentication server during an EAP process. The code may also be executable to perform at least one authentication process with the UE based at least in part on the first security key.

[0029] In some examples of the methods, apparatuses, and non-transitory computer-readable media described above, performing the at least one authentication process with the UE may include deriving a second security key of a network node of the cellular network, the second security key being based at least in part on the first security key and a third set of parameters; and communicating with the UE via the network node based at least in part on the second security key. In some examples, the third set of parameters may include: an identifier of the network node, at least one network node-specific parameter, at least one parameter exchanged between the UE and the network node, or a combination thereof.

[0030] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the second set of parameters may include: an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof.

[0031] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0032] In some examples of the methods, apparatus, and non-transitory computer-readable media described above, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof.

[0033] The techniques and technical advantages of the examples according to the present disclosure have been summarized quite extensively above so that the following detailed description can be better understood. Additional techniques and advantages will be described below. The disclosed concepts and specific examples can easily be used as the basis for modifying or designing other structures for the same purpose of performing the present disclosure. Such equivalent constructions do not depart from the scope of the appended claims. The characteristics and associated advantages that are considered to be the concepts disclosed in the present application in both their organization and in the method of operation will be better understood by the following description considered in conjunction with the accompanying drawings. Each figure is provided for the purpose of illustration and description only and is not intended to be a definition of the limitations of the claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] A further understanding of the nature and advantages of the present invention may be achieved by reference to the following drawings. In the drawings, similar components or functions may have the same reference numerals. In addition, various components of the same type may be distinguished by following the reference numeral with a dash and a second reference numeral that distinguishes among similar components. If only the first reference numeral is used in this specification, the description is applicable to any one of the similar components having the same first reference numeral, without regard to the second reference numeral.

[0035] Figure 1 An example of a wireless communication system according to various aspects of the present disclosure is shown;

[0036] Figure 2 An example of a wireless communication system according to various aspects of the present disclosure is shown;

[0037] Figure 3 An example of a key hierarchy for a wireless communication system in accordance with various aspects of the present disclosure is shown.

[0038] Figure 4 An example of a wireless communication system according to various aspects of the present disclosure is shown;

[0039] Figure 5 illustrates an example message flow between a UE, a cellular network, and an authentication server according to various aspects of the present disclosure;

[0040] Figure 6 A block diagram illustrating a UE according to various aspects of the present disclosure;

[0041] Figure 7 A block diagram illustrating a wireless communication manager according to various aspects of the present disclosure;

[0042] Figure 8 A schematic diagram illustrating a wireless communication system according to various aspects of the present disclosure;

[0043] Fig. 9 A block diagram illustrating an authentication server according to various aspects of the present disclosure;

[0044] Fig.10 A block diagram illustrating an authentication server according to various aspects of the present disclosure;

[0045] Fig.11 A block diagram illustrating a network node according to various aspects of the present disclosure;

[0046] Fig.12 A block diagram illustrating a communications manager according to various aspects of the present disclosure;

[0047] Fig.13 A schematic diagram illustrating a network node according to various aspects of the present disclosure; and

[0048] Figure 14-18 A flow chart illustrating a method of wireless communication in accordance with various aspects of the present disclosure is shown. DETAILED DESCRIPTION

[0049] The techniques described in the present disclosure enable a UE to perform an EAP procedure with an authentication server via an authenticator associated with different types of access networks. Upon successfully performing the EAP procedure via the authenticator, the UE and the authentication server may derive a security key for the authenticator based at least in part on the type of network associated with the authenticator. In some examples, the UE and the authentication server may derive a security key for the authenticator based on the MSK when the authenticator is associated with a non-cellular access network, and may derive a security key for the authenticator based on the EMSK when the authenticator is associated with a cellular access network.

[0050] The following description provides examples, but does not limit the scope, applicability or examples set forth in the claims. The functions and arrangements of the elements discussed may be changed without departing from the spirit and scope of the present disclosure. Various processes or components may be omitted, substituted or added to each example as appropriate. For example, the described method may be performed in an order different from that described, and various steps may be added, omitted or combined. In addition, the features described for some examples may be combined into some other examples.

[0051] Figure 1 An example of a wireless communication system 100 according to various aspects of the present disclosure is shown. The wireless communication system 100 may include a network access device (e.g., a distributed network access device, a distributed unit, a gNB, a radio head (RH), an SRH, a transmission / reception point (TRP), an edge node, an edge unit, etc.) 105, a UE 115, a network access device controller (e.g., a centralized network access device, a central node, a central unit, an access node controller (ANC), etc.) 125, and a core network 130. The core network 130 may provide user authentication, access authorization, tracking, Internet Protocol (IP) connectivity, and other access, routing, or mobility functions. The network access device controller 125 may interact with the core network 130 via a backhaul link 132 (e.g., S1, S2, etc.), and may perform wireless configuration and scheduling for communications with the UE 115. In various examples, the network access device controllers 125 can communicate with each other directly or indirectly (e.g., through the core network 130) through a backhaul link 134 (e.g., X1, X2, etc.), which can be a wired or wireless communication link. Each network access device controller 125 can also communicate with multiple UEs 115 through multiple network access devices (e.g., RH) 105. In an alternative configuration of the wireless communication system 100, the functions of the network access device controller 125 can be provided by the network access device 105 or distributed across the network access devices 105 of the network nodes (e.g., access nodes, new radio base stations (NR BSs), etc.) 135. In another alternative configuration of the wireless communication system 100, the network node 135 can be replaced by an eNB, the network access device 105 can be replaced by a base station, and the network access device controller 125 can be replaced by a base station controller (or linked to the core network 130).

[0052] The network access device controller 125 can communicate with the UE 115 via one or more network access devices 105, each of which has one or more antennas for wirelessly communicating with multiple UEs 115. Each network node 135 can provide communication coverage for a corresponding geographic coverage area 110, and can provide one or more remote transceivers associated with one or more network access devices 105. The network access device 105 can perform many functions of an LTE / LTE-A base station. In some examples, the network access device controller 125 can be implemented in a distributed form, with a portion of the network access device controller 125 provided in each network access device 105. The geographic coverage area 110 of the network node 135 can be divided into sectors (not shown) that constitute only a portion of the coverage area, and in some examples, the geographic coverage area 110 of the network node 135 can be constituted by a group of geographic coverage areas of a group of network access devices 105 associated with the network node 135 (not shown). In some examples, the network access device 105 can be replaced with another network access device, such as a base station transceiver, a wireless base station, an access point, a wireless transceiver, a node B, an eNB, a home node B, a home evolved node B, a gNB, etc. The wireless communication system 100 may include network access devices 105 (or base stations or other network access devices) of different types (e.g., macro cell and / or small cell network access devices). The geographic coverage areas of the network access devices 105 and / or network nodes 135 may overlap. In some examples, different network access devices 105 may be associated with different wireless access technologies.

[0053] In some examples, the wireless communication system 100 may include a 5G network. In other examples, the wireless communication system 100 may include an LTE / LTE-A network. The wireless communication system 100 may be a heterogeneous network in some cases, wherein different types of network access devices 105 or network nodes 135 provide coverage for various geographic areas. For example, each network access device 105 or network node 135 may provide communication coverage for a macro cell, a small cell, and / or other types of cells. Depending on the context, the term "cell" may be used to describe a base station, a RH, a carrier or component carrier associated with a base station or RH, or a coverage area (e.g., a sector, etc.) of a carrier or base station.

[0054] A macro cell may cover a relatively large geographic area (e.g., a radius of several kilometers) and may allow access to UE 115 with a service subscription to a network provider. A small cell may include a RH or base station with lower power than a macro cell and may operate in the same or different frequency band as a macro cell. According to various examples, a small cell may include a pico cell, a femto cell, and a micro cell. A pico cell may cover a relatively small geographic area and may allow unrestricted access to a UE 115 with a service subscription to a network provider. A femto cell may also cover a relatively small geographic area (e.g., a home) and may provide restricted access to a UE 115 with an association to the femto cell (e.g., a UE in a closed subscriber group (CSG), a UE of a user in a home, etc.). A network access device of a macro cell may be referred to as a macro network access device. A network access device of a small cell may be referred to as a small cell network access device, a pico network access device, a femto network access device, or a home network access device. A network access device may support one or more (e.g., two, three, four, etc.) cells (e.g., component carriers).

[0055] The wireless communication system 100 may support synchronous or asynchronous operation. For synchronous operation, the network nodes 135 or network access devices 105 may have similar frame timing, and transmissions from different network access devices 105 may be approximately aligned in time. For asynchronous operation, the network nodes 135 or network access devices 105 may have different frame timing, and transmissions from different network access devices 105 may not be aligned in time. The techniques described in this application may be used for synchronous operation or asynchronous operation.

[0056] The communication network that can accommodate some examples in the various disclosed examples can be a packet-based network operating according to a layered protocol stack. In the user plane, the communication at the bearer or packet data convergence protocol (PDCP) layer can be based on IP. The radio link control (RLC) layer can perform packet segmentation and reorganization in some cases to communicate through logical channels. The medium access control (MAC) layer can perform priority processing and multiplexing of logical channels into transport channels. The MAC layer can also use hybrid ARQ (HARQ) to provide retransmission at the MAC layer to improve link efficiency. In the control plane, the radio resource control (RRC) protocol layer can provide the establishment, configuration and maintenance of the RRC connection between the UE 115 and the network access device 105, the network access device controller 125 or the core network 130 supporting the radio bearer of the user plane data. At the physical (PHY) layer, the transport channel can be mapped to the physical channel.

[0057] UE 115 can be spread over the entire wireless communication system 100, and each UE 115 can be stationary or mobile.UE 115 can also include or be referred to as a mobile station, a subscriber station, a mobile unit, a subscriber unit, a wireless unit, a remote unit, a mobile device, a wireless device, a wireless communication device, a remote device, a mobile subscriber station, an access terminal, a mobile terminal, a wireless terminal, a remote terminal, a handset, a user agent, a mobile client, a client, or some other suitable terms by those skilled in the art.UE 115 can be a cellular phone, a personal digital assistant (PDA), a wireless modem, a wireless communication device, a handheld device, a tablet computer, a laptop computer, a cordless phone, a wireless local loop (WLL) station, an Internet of Everything (IoE) device, a motor vehicle, an electrical appliance, or other electronic device with a wireless communication interface.UE can communicate with various types of network nodes 135 or network access devices 105 (including small cell nodes, relay nodes, etc.).UE can also communicate directly with other UEs (e.g., using a peer-to-peer (P2P) protocol).

[0058] The communication link 122 shown in the wireless communication system 100 may include an uplink (UL) channel from the UE 115 to the network access device 105, and / or a downlink (DL) channel from the network access device 105 to the UE 115. A downlink channel may also be referred to as a forward link channel, and an uplink channel may also be referred to as a reverse link channel.

[0059] Each communication link 122 may include one or more carriers, where each carrier may be a signal composed of multiple subcarriers or frequency modulations (e.g., waveform signals of different frequencies) modulated according to one or more wireless access technologies. Each modulated signal may be sent on a different subcarrier and may carry control information (e.g., reference signals, control channels, etc.), overhead information, user data, etc. The communication link 122 may use frequency division duplex (FDD) technology (e.g., using paired spectrum resources) or time division duplex (TDD) technology (e.g., using unpaired spectrum resources) to send bidirectional communications. A frame structure for FDD (e.g., frame structure type 1) and a frame structure for TDD (e.g., frame structure type 2) may be defined.

[0060] In some examples of the wireless communication system 100, the network access device 105 and / or the UE 115 may include multiple antennas for employing antenna diversity schemes to improve the communication quality and reliability between the network access device 105 and the UE 115. Additionally or alternatively, the network access device 105 and / or the UE 115 may employ multiple-input multiple-output (MIMO) technology, which may take advantage of a multipath environment to transmit multiple spatial layers carrying the same or different coded data.

[0061] The wireless communication system 100 may support operation on multiple cells or carriers, a feature that may be referred to as carrier aggregation (CA) or multi-carrier operation. A carrier may also be referred to as a component carrier (CC), layer, channel, etc. The terms "carrier," "component carrier," "cell," and "channel" may be used interchangeably in this application. A UE 115 may be configured with multiple downlink CCs and one or more uplink CCs for carrier aggregation. Carrier aggregation may be used with both FDD component carriers and TDD component carriers.

[0062] One or more UEs 115 may include a wireless communication manager 140. In some examples, the wireless communication manager 140 may be configured to perform EAP procedures with an authentication server via an authenticator associated with the core network 130. Figure 2 As described, an authentication server may be accessed via core network 130. The EAP process may be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. Wireless communication manager 140 may also be configured to derive an MSK and an EMSK (collectively referred to as an EAP method or authentication method) based at least in part on a first set of authentication credentials and parameters (as part of performing an EAP process); determine that the authenticator is associated with a cellular network; and perform at least one authentication process with the cellular network based at least in part on the EMSK. In some examples, wireless communication manager 140 may be a reference Figure 6-8 Examples of aspects of a wireless communications manager are described.

[0063] Figure 2 An example of a wireless communication system 200 is shown in accordance with various aspects of the present disclosure. The wireless communication system 200 may include a home cellular network 205 of a UE 115-a and a cellular network visited by the UE 115-a (ie, visited cellular network 205-a).

[0064] The home cellular network 205 may include a first authenticator 235 (e.g., a server or device that provides a home security anchor function (H-SEAF)) and a home user plane gateway (H-UP-GW) 210. Those skilled in the art will appreciate that the home cellular network 205 may also include other servers or devices (not shown) that provide other functions. The visited cellular network 205-a may include a second authenticator 235-a (e.g., a server or device that provides a visit SEAF (V-SEAF)), a visited UP-GW (V-UP-GW) 210-a, a visited cellular network control plane core network function unit (V-CP-CN) 215, and a radio access network (RAN) 220. In some examples, the RAN 220 may include a reference Figure 1One or more of the network node 135, the network access device 105, and the network access device controller 125 described above. The first authenticator 235, the H-UP-GW 210, the second authenticator 235-a, the V-UP-GW 210-a, and the V-CP-CN 215 may be referenced. Figure 1 Example components of core network 130 are described.

[0065] The home cellular network 205 may communicate with (or may provide) an authentication server 245 . The authentication server 245 may provide an authentication server function (AUSF). The authentication server 245 may access and / or invoke an authentication credential repository and processing function (ARPF) 240 .

[0066] The UE 115 - a may connect to the visited cellular network 205 - a via a node (eg, a network access equipment) of the RAN 220 . Figure 2 Assume that UE 115-a accesses visited cellular network 205-a while operating in roaming mode. In a non-roaming scenario, UE 115-a may access home cellular network 205 via the RAN of home cellular network 205 instead of visited cellular network 205-a. Figure 2 not shown).

[0067] V-CP-CN 215 may include or manage one or more aspects of the mobility management (MM) function and / or session management (SM) function of UE 115-a, and maintain the corresponding security context. The second authenticator 235-a may facilitate and manage the authentication of UE 115-a by the visited cellular network 205-a, and may maintain an anchored session key from which subsequent security keys may be derived. When user plane security terminates at V-UP-GW 210-a, V-UP-GW 210-a may maintain the user plane security context (e.g., security key) of UE 115-a. User plane security may be terminated by RAN220 and / or V-UP-GW 210-a and may be configured by the network. Generally speaking, UE 115-a may maintain a security context with each node of the visited cellular network 205-a.

[0068] Upon accessing the visited cellular network 205-a, the second authenticator 235-a may facilitate EAP procedures performed by the UE 115-a and the authentication server 245. The second authenticator 235-a may establish or maintain a secure channel for performing the EAP procedures with the authentication server 245 via the first authenticator 235 (of the home cellular network 205).

[0069] The EAP process performed by the UE 115-a and the authentication server 245 may be based at least in part on a set of authentication credentials exchanged between the UE 115-a and the authentication server 245. As part of performing the EAP process, each of the UE 115-a and the authentication server 245 may derive an MSK and an EMSK. The MSK and the EMSK may be based at least in part on the authentication credentials and a first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0070] When the EAP process is successful (e.g., when the UE 115-a and the authentication server 245 successfully authenticate each other), the authentication server 245 may send a session anchor key (e.g., a first security key) to the second authenticator 235-a. In accordance with the techniques described in the present disclosure, the session anchor key may be based at least in part on the EMSK. The session anchor key may also be based at least in part on a second set of parameters. The second set of parameters may include an identifier of the visited cellular network 205-a, at least one cellular network-specific parameter, at least one parameter exchanged between the UE 115-a and the second cellular network 205-a, or a combination thereof.

[0071] UE 115-a may independently derive a session anchor key. Based at least in part on the session anchor key, UE 115-a and second authenticator 235-a may mutually authenticate and derive additional security keys (e.g., security keys of other nodes or functional units of second cellular network 205-a), such as Figure 3 as shown in .

[0072] As a pair Figure 2 , a server or device providing H-SEAF and V-SEAF may not assume the role of an authenticator in the EAP process performed between UE 115-a and authentication server 245, but instead, an authenticator may be used in conjunction with authentication server 245 (e.g., a server providing AUSF). In these examples, authentication server 245 may derive a session anchor key for H-SEAF or V-SEAF based on the MSK or EMSK and a second set of parameters, and send the session anchor key to H-SEAF (in a non-roaming scenario) or V-SEAF (in a roaming scenario).

[0073] Figure 3 An example of a key hierarchy 300 for a wireless communication system according to various aspects of the present disclosure is shown. This solution is accomplished by using EMSK to derive a key from an EAP server (e.g., reference Figure 2 The key (e.g., K SEAF) to provide a service network binding to the keys delivered to the 3GPP service network for the general EAP protocol. In some examples, the key hierarchy 300 can be referenced by Figure 1 and 2 The wireless communication systems 100 and 200 described herein use a key hierarchy 300. For example, a UE and / or a network node may use the key hierarchy 300 to implement the reference Figure 1 and 2 Describes one or more aspects of authentication or security functionality.

[0074] The key hierarchy 300 may include a K root key 305 used as a security context between a universal subscriber identity module (USIM) and an ARPF. The K root key 305 may be used to perform EAP procedures and derive keys 310 (e.g., MSK and EMSK) to provide authentication between an authentication server and a UE (e.g., reference Figure 2 The K-root key 305 may be used to perform a shared-key based EAP process, but one or more other keys (e.g., keys derived based on certificates) may be used when performing certificate-based EAP processes. The EMSK may be used by the authentication server (e.g., AUSF) and the UE to derive a key for the authenticator (e.g., for the reference Figure 2 The second authenticator 235-a) K SEAF Anchor Session Key 315. Since EMSK (rather than MSK) is used to derive K SEAF Therefore, it is not necessary to restrict the use of credentials to 3GPP access. For example, when a non-3GPP entity obtains the MSK based on EAP authentication, the non-3GPP entity cannot derive K SEAF This is because K SEAF It is derived from the EMSK which is unknown to non-3GPP entities. SEAF Anchor session key 315 may be maintained by the authenticator and the UE.

[0075] K SEAF The anchor session key 315 can be used by the authenticator to derive K CP-CN Key 320 and K UP-GW Key 325. K CP-CN The key 320 may be provided by a CP-CN functional unit (e.g., Figure 2 V-CP-CN 215) and UE maintenance as described. UP-GW The key 325 may be provided by a UP-GW functional unit (e.g., Figure 2 V-UP-GW 210-a) and UE maintenance described. UP-GW Key 325 can be used by the UP-GW to establish K UP-GWenc Key 340 and KUP-GWint Key 345. K UP-GWenc Key 340 and K UP-GWint Key 345 may be used for integrity protection and encoding of user plane packets.

[0076] K CP-CN Key 320 can be used by the CP-CN functional unit to derive K NASenc Key 330, K NASint Key 335 and K AN / NH key 350. K AN / NH key 350 can be used by the access point to derive K UPint Key 355, K UPenc Key360, K RRCint Key 365 and K RRCenc Keys 370, which can be used for integrity protection and encoding of RRC and user plane packets.

[0077] Figure 4 An example of a wireless communication system 400 is shown in accordance with various aspects of the present disclosure. The wireless communication system 400 may include a home cellular network 205-b of a UE 115-b and a cellular network visited by the UE 115-b (ie, visited cellular network 205-c).

[0078] The home cellular network 205-b may include a first authenticator 235-b (e.g., a server or device that provides H-SEAF) and a H-UP-GW 210-b. The home cellular network 205-b may also include other servers or devices (not shown) that provide other functions. The visited cellular network 205-c may include a second authenticator 235-c (e.g., a server or device that provides V-SEAF), a V-UP-GW 210-c, a V-CP-CN 215-a, and a RAN 220-a. In some examples, the RAN 220-a may include a reference Figure 1 One or more of the network nodes 135, the network access device 105, and the network access device controller 125 described above. The first authenticator 235-b, the H-UP-GW 210-b, the second authenticator 235-c, the V-UP-GW 210-c, and the V-CP-CN 215-a may be reference Figure 1 Example components of core network 130 are described.

[0079] The home cellular network 205-b may communicate with (or may provide) an authentication server 245-a. The authentication server 245-a may provide the AUSF. The authentication server 245-a may access and / or invoke the ARPF 240-a.

[0080] Each of the first authenticator 235-b, the H-UP-GW 210-b, the second authenticator 235-c, the V-UP-GW 210-c, the V-CP-CN 215-a, the RAN 220-a, the authentication server 245-a, and the ARPF 240-a may be a reference Figure 2 Examples of similarly numbered components, functional units or nodes are described.

[0081] Figure 4 Also shown is a non-cellular network 405 that includes a non-cellular access node 410 (e.g., a WLAN access point (AP) or a wireless LAN controller (WLC)). As shown, the UE 115-b can be connected to the RAN 220-a or the non-cellular access node 410, and in each case, the same authentication server 245-a can perform EAP procedures with the UE 115-b. When the UE 115-b is connected to the RAN 220-a, the second authenticator 235-c can be used as the authenticator in the EAP process performed by the UE 115-b and the authentication server 245-a. When the UE 115-b is connected to the non-cellular access node 410, the non-cellular access node 410 can be used as the authenticator in the EAP process performed by the UE 115-b and the authentication server 245-a.

[0082] If both the UE 115-b and the authentication server 245-a are able to perform the same EAP process and derive the same session anchor key (e.g., for performing an authentication process between the UE 115-b and the second authenticator 235-c, or for performing an authentication process between the UE 115-b and the non-cellular access node 410), an attacker including the non-cellular access node 410 may be able to obtain the session anchor key from the non-cellular access node 410 and use it to impersonate a node of the visited cellular network 205-c or the home cellular network 205-b. To address the above-mentioned issues, the UE 115-b and the authentication server 245-a may determine the network type associated with the authenticator (e.g., the type of network associated with the second authenticator 235-c or the non-cellular access node 410), and determine which key (between the MSK and the EMSK) to use to derive the session anchor key (i.e., derive the session anchor key based on the network type). In some examples, the MSK may be used when the authenticator (e.g., the non-cellular access node 410) is associated with a non-cellular access network (e.g., the non-cellular network 405), and the EMSK may be used when the authenticator (e.g., the second authenticator 235-c) is associated with a cellular access network (e.g., the visited cellular network 205-c). In addition, the session anchor key derived for the authenticator associated with the cellular network may be derived based at least in part on a set of parameters associated with the cellular network. For example, K SEAFThe key can be derived by UE 115-b and authentication server 245-a based on a key derivation formula (KDF)

[0083] K SEAF =KDF(EMSK,PLMN ID,CTX)

[0084] Wherein, PLMN ID is a public land mobile network identifier associated with the serving (e.g., visited) cellular network 205-b and provided to the authentication server 245-a during the EAP process, and CTX is a context describing the access technology (e.g., cellular network access, such as 5G (NextGen), 4G, LTE / LTE-A, or 3G network access). It should be appreciated by those skilled in the art that K SEAF It may also be derived based at least in part on other suitable parameters.

[0085] By deriving the session anchor key of the authenticator based on the network type associated with the authenticator, a network of one network type cannot obtain the session anchor key of another network type and pretend to be a node of a different network type. Therefore, the same EAP process (or authentication method) can be used for different types of networks without affecting the security of the different types of networks.

[0086] Figure 5 An exemplary message flow 500 between a UE 115-c, a cellular network 205-d, and an authentication server 245-b is shown in accordance with various aspects of the present disclosure. The UE 115-c may be a reference Figure 1 , 2 and 4. The cellular network 205-d may be a reference to an example of aspects of the UE 115. Figure 2 and 4 Examples of cellular network 205 are described, and in some cases may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof. The authentication server 245-b may be a reference Figure 2 and 4 The cellular network 205-d may include a RAN 220-b and a cellular CN 550. The RAN 220-b and the CN 550 may be referenced to Figure 2 and 4 In some examples, the RAN 220-b may include reference Figure 1 One or more of the network nodes 135, network access devices 105, or network access device controllers 125 described herein. The CN 550 may include an authenticator 235-d (e.g., a node of the CN 550), which may be a reference Figure 2 and 4 Examples of aspects of authenticator 235 are described.

[0087] At 505, UE 115-c may access cellular network 205-d, and UE 115-c or cellular network 205-d may initiate an EAP process. In some examples, UE 115-c may access cellular network 205-d via a network access device (e.g., a network node) of RAN 220-b. RAN 220-b may communicate with CN 550. Authenticator 235-d within CN 550 may facilitate performance of the EAP process. In alternative configurations of the cellular network, authenticator 235-d may be part of RAN 220-b or used in conjunction with authentication server 245-b.

[0088] At 510, cellular network 205-d may send a request to authentication server 245-b to perform an EAP process. In some examples, the request sent at 510 may be sent over a secure channel between authenticator 235-d and authentication server 245-b (e.g., the request may be sent between authenticator 235-d and authentication server 245-b using a Diameter protocol (e.g., using Diameter encapsulation)).

[0089] At 515, the UE 115-c and the authentication server 245-b may perform an EAP process via the authenticator 235-d, wherein the authenticator 235-d provides for transmission of messages sent between the UE 115-c and the authentication server 245-b. The EAP process may be based at least in part on a set of authentication credentials exchanged between the UE 115-c and the authentication server 245-b. As part of performing the EAP process, each of the UE 115-c and the authentication server 245-b may derive an MSK and an EMSK. The MSK and the EMSK may be derived based at least in part on the authentication credentials and a first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0090] Before, during, or after the operations at 505, 510, or 515, each of the UE 115-c and the authentication server 245-b may determine that the authenticator 235-d is associated with a cellular network (ie, with the cellular network 205-d).

[0091] At 520 and 525, each of the UE 115-c and the authentication server 245-b may independently derive a first security key for the cellular network 205-d. Since each of the UE 115-c and the authentication server 245-b determines that the authenticator 235-d is associated with the cellular network 205-d, each of the UE 115-c and the authentication server 245-b may derive the first security key based at least in part on the EMSK. The first security key may also be derived based at least in part on a second set of parameters. In some examples, the second set of parameters may include an identifier of the cellular network 205-d, at least one cellular network-specific parameter, at least one parameter exchanged between the UE 115-c or the authentication server 245-b and the cellular network 205-c, or a combination thereof.

[0092] At 530, authentication server 245-b may send a first security key to authenticator 235-d via a secure channel between authenticator 235-d and authentication server 245-b (e.g., the first security key may be sent between authentication server 245-b and authenticator 235-d using the Diameter protocol (e.g., using Diameter encapsulation)).

[0093] At 535, the UE 115-c and the cellular network 205-d may perform an authentication procedure. At 540 and 545, upon successful performance of the authentication procedure at 535, the UE 115-c and the cellular network 205-d may derive one or more additional security keys (e.g., second security keys) for one or more network nodes of the cellular network 205-d. In some examples, the second security key may be based at least in part on the first security key and a third set of parameters. In some examples, the third set of parameters may include an identifier of the network node, at least one network node-specific parameter, at least one parameter exchanged between the UE 115-c and the network node, or a combination thereof.

[0094] At 555 , the UE 115 - c may communicate with the cellular network 205 - d based at least in part on the derived security key.

[0095] Figure 6 A block diagram 600 of a UE 115-d is shown according to various aspects of the present disclosure. The UE 115-d may be a reference Figure 1 , 2 , 4 and 5 describe examples of aspects of UE 115. UE 115-d may include a receiver 610, a wireless communication manager 620, and a transmitter 630. UE 115-d may also include a processor. Each of these components may communicate with each other.

[0096] The receiver 610 may receive signals or information, such as reference signals, control information, or user data associated with various channels (e.g., control channels, data channels, broadcast channels, multicast channels, unicast channels, etc.). The received signals and information may be used by the receiver 610 (e.g., for frequency / time tracking) or passed to other components of the UE 115-d, including the wireless communication manager 620. The receiver 610 may be a reference signal. Figure 8 Examples of aspects of the transceiver 825 are described. The receiver 610 may include or be associated with a single antenna or multiple antennas.

[0097] The wireless communication manager 620 may be used to manage one or more aspects of wireless communications of the UE 115-d. In some examples, portions of the wireless communication manager 620 may be incorporated into or shared with the receiver 610 or the transmitter 630. The wireless communication manager 620 may include an EAP manager 635, a network type identifier 640, and a network authenticator 645. Each of these components may be in communication with each other, directly or indirectly (e.g., via one or more buses).

[0098] As above reference Figure 5 As described, the EAP manager 635 can be used to perform an EAP process via the authenticator and the authentication server. The EAP process can be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. Figure 5 As described, as part of performing the EAP process, the EAP manager 635 may also be used to derive an MSK and an EMSK, wherein the MSK and the EMSK are based at least in part on the authentication credentials and a first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0099] As above reference Figure 5 As described, the network type identifier 640 can be used to determine the network type associated with the authenticator. In some examples, the determined network type can include a cellular network type or a non-cellular network type (eg, a WLAN type).

[0100] The network authenticator 645 may be configured to perform at least one authentication process with the authenticator based at least in part on the determined network type. Figure 5 As described, the at least one authentication process may be based on an association of the MSK or EMSK with the determined network type.

[0101] The transmitter 630 may transmit signals or information received from other components of the UE 115-d, including the wireless communication manager 620. The signals or information may include, for example, reference signals associated with various channels (e.g., control channels, data channels, broadcast channels, multicast channels, unicast channels, etc.), control information, or user data. In some examples, the transmitter 630 may be used in a transceiver with the receiver 610. The transmitter 630 may be a reference signal. Figure 8 Examples of aspects of the transceiver 825 are described. The transmitter 630 may include or be associated with a single antenna or multiple antennas.

[0102] Figure 7 A block diagram 700 is shown of a wireless communication manager 720 according to various aspects of the present disclosure. The wireless communication manager 720 may be a reference Figure 6 Examples of aspects of the wireless communication manager 620 are described.

[0103] The wireless communication manager 720 may include an EAP manager 635-a, a network type identifier 640-a, a network authenticator 645-a, and a cellular network communication manager 715. The EAP manager 635-a, the network type identifier 640-a, and the network authenticator 645-a may be referenced. Figure 6 An example of an EAP manager 635, a network type identifier 640, and a network authenticator 645 is described. The network authenticator 645-a may include a network key deriver 705 and a network node key deriver 710. Each of these components may communicate with each other directly or indirectly (e.g., via one or more buses).

[0104] As above reference Figure 5 As described, the EAP manager 635-a may be used to perform an EAP process via the authenticator and the authentication server. The EAP process may be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. Figure 5 As described, as part of performing the EAP process, the EAP manager 635-a can also be used to derive an MSK and an EMSK, wherein the MSK and the EMSK are based at least in part on the authentication credentials and a first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0105] As above reference Figure 5 As described, the network type identifier 640-a can be used to determine the network type associated with the authenticator. In some examples, the determined network type can include a cellular network type or a non-cellular network type (eg, a WLAN type).

[0106] The network authenticator 645-a performs at least one authentication process with the authenticator based at least in part on the determined network type.The at least one authentication process may be based on an association of the MSK or EMSK with the determined network type.

[0107] As above reference Figure 5 As described, when the determined network type includes a cellular network type, the network key deriver 705 can be used to derive a first security key for the cellular network. The first security key can be based at least in part on the EMSK and a second set of parameters. In some examples, the second set of parameters may include an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof. When the determined network type includes a non-cellular network type, the network key deriver 705 can be used to derive a first security key for the non-cellular network.

[0108] As above reference Figure 5 As described, when the determined network type includes a cellular network type, the network node key deriver 710 can be used to derive a second security key of the network node of the cellular network. The second security key can be based at least in part on the first security key and a third set of parameters. In some examples, the third set of parameters can include an identifier of the network node, at least one network node specific parameter, at least one parameter exchanged between the UE and the network node, or a combination thereof.

[0109] As above reference Figure 5 As described, the cellular network communications manager 715 may be operable to communicate with the cellular network via the network node based at least in part on the second security key.

[0110] Figure 8 A schematic diagram of a wireless communication system 800 is shown according to various aspects of the present disclosure. The wireless communication system 800 may include a UE 115-e, which may be a reference Figure 1 , 2 Examples of aspects of UE 115 described in 4-6.

[0111] UE 115-e may include a wireless communication manager 805, a memory 810, a processor 820, a transceiver 825, and an antenna 830. Each of these components may be in communication with each other directly or indirectly (e.g., via one or more buses). The wireless communication manager 805 may be a reference Figure 6 and 7 Examples of aspects of wireless communication managers 620 and 720 are described.

[0112] The memory 810 may include a random access memory (RAM) or a read-only memory (ROM). The memory 810 may store computer-readable, computer-executable software 815, which includes instructions that, when executed, cause the processor 820 to perform various functions described in this application, including functions related to network security and authentication. In some cases, the software 815 may not be directly executed by the processor 820, but may cause the processor 820 (e.g., when compiled and executed) to perform the functions described in this application. The processor 820 may include an intelligent hardware device (e.g., a central processing unit (CPU), a microcontroller, an application-specific integrated circuit (ASIC), etc.).

[0113] As described in the present application, the transceiver 825 can communicate bidirectionally with one or more networks via one or more antennas or wired links. For example, the transceiver 825 can communicate bidirectionally with a cellular network 205-e (or one or more nodes thereof) or another UE 115-f. The transceiver 825 may include a modem for modulating packets and providing the modulated packets to an antenna for transmission, and demodulating packets received from the antenna. In some cases, the UE 115-e may include a single antenna 830. However, in some cases, the UE 115-e may have more than one antenna 830, which may be able to send or receive multiple wireless transmissions simultaneously.

[0114] Fig. 9 A block diagram 900 of an authentication server 245-c is shown in accordance with various aspects of the present disclosure. The authentication server 245-c may be a reference Figure 2 , 4 5. The authentication server 245-c may include a receiver 910, an authentication manager 920, and a transmitter 930. The authentication server 245-c may also include a processor. Each of these components may communicate with each other.

[0115] The receiver 910 may receive an authentication request from various network nodes (including nodes of a cellular network, WLAN, etc.). The receiver 910 may also receive authentication information from the UE via the network node. The received authentication request and authentication information may be passed to the authentication manager 920. The receiver 910 may be a reference Fig.10 Examples of aspects of authentication interface 1025 are described. Receiver 910 may include one or more wired and / or wireless interfaces.

[0116] The authentication manager 920 may be used to manage one or more aspects of device authentication for the authentication server 245-c. In some examples, a portion of the authentication manager 920 may be incorporated into or shared with the receiver 910 or the transmitter 930. The authentication manager 920 may include an EAP manager 935, a network type identifier 940, a network key deriver 945, and a network key installer 950. Each of these components may communicate with each other directly or indirectly (e.g., via one or more buses).

[0117] As above reference Figure 5 As described, the EAP manager 935 can be used to perform EAP procedures with the UE via the authenticator. The EAP procedures can be based at least in part on a set of authentication credentials exchanged between the authentication server and the UE. Figure 5 As described, as part of performing the EAP process, the EAP manager 935 may also be used to derive an MSK and an EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof.

[0118] As above reference Figure 5 As described, the network type identifier 940 can be used to determine the network type associated with the authenticator. In some examples, the determined network type can include a cellular network type or a non-cellular network type (eg, a WLAN type).

[0119] As above reference Figure 5 As described, the network key deriver 945 can be used to derive a security key for the determined network type based at least in part on an association of the MSK or EMSK with the network type and at least in part on a second set of parameters. When the determined network type includes a cellular network type, and in some examples, the second set of parameters can include an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the authentication server and the cellular network, or a combination thereof. In some examples, the cellular network can include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof.

[0120] As above reference Figure 5 As described, the network key installer 950 may be used to send a security key to the authenticator via a secure channel.

[0121] The transmitter 930 may transmit authentication feedback messages and security keys received from other components of the authentication server 245-c, including the authentication manager 920. The transmitter 930 may be a reference Fig.10 Examples of aspects of authentication interface 1025 are described. Transmitter 930 may include one or more wired and / or wireless interfaces.

[0122] Fig.10 Block diagram 1000 illustrates an authentication server 245-d according to various aspects of the present disclosure. The authentication server 245-d may be a reference Figure 2 , 4 , 5 and 9 describe examples of aspects of the authentication server 245.

[0123] The authentication server 245-d may include an authentication manager 1005, a memory 1010, a processor 1020, and an authentication interface 1025. Each of these components may communicate with each other directly or indirectly (e.g., via one or more buses). The authentication manager 1005 may be a reference Fig. 9 Examples of aspects of authentication manager 920 are described.

[0124] The memory 1010 may include RAM or ROM. The memory 1010 may store computer-readable, computer-executable software 1015, which includes instructions that, when executed, cause the processor 1020 to perform various functions described in this application, including functions related to network security and authentication. In some cases, the software 1015 may not be directly executed by the processor 1020, but may cause the processor 1020 (e.g., when compiled and executed) to perform the functions described in this application. The processor 1020 may include an intelligent hardware device (e.g., a CPU, a microcontroller, an ASIC, etc.).

[0125] As described in the present application, the authentication interface 1025 can communicate bidirectionally with one or more networks, network nodes, or UEs via one or more antennas or wired links. In some examples, the authentication interface 1025 can be used to establish a secure connection with a network node (e.g., using Radius or Diameter protocols) and communicate bidirectionally with the UE via the secure connection and the network node.

[0126] Fig.11 A block diagram 1100 of a network node 1105 is shown in accordance with various aspects of the present disclosure. The network node 1105 may be a reference Figure 2 , 4 and 5 describe examples of aspects of the network node, and in some examples, may be referenced Figure 2 , 4 5. The network node 1105 may include a receiver 1110, a communication manager 1120, and a transmitter 1130. The network node 1105 may also include a processor. Each of these components may communicate with each other.

[0127] Receiver 1110 may receive signals or information from other network nodes, from UEs, from authentication servers, etc. The received signals and information may be passed to other components of network node 1105, including communication manager 1120. Receiver 1110 may be a reference Fig.13 Examples of aspects of authentication interface 1325 are described. Receiver 1110 may include one or more wired and / or wireless interfaces.

[0128] The communication manager 1120 may be used to manage one or more aspects of wireless communications of the network node 1105. In some examples, portions of the communication manager 1120 may be incorporated into or shared with the receiver 1110 or the transmitter 1130. The communication manager 1120 may include a network key manager 1135 and a UE authenticator 1140. Each of these components may be in communication with each other, directly or indirectly (e.g., via one or more buses).

[0129] As above reference Figure 5 As described, the network key manager 1135 may be used to receive a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK may be based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials may be exchanged between the UE and the authentication server during the EAP process. In some examples, the first set of parameters may include an identifier of a cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof. In some examples, the second set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof. In some examples, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof.

[0130] As above reference Figure 5 As described, the UE authenticator 1140 may be configured to perform at least one authentication procedure with the UE based at least in part on the first security key.

[0131] The transmitter 1130 may transmit signals or information received from other components of the network node 1105, including the communication manager 1120. The transmitter 1130 may be a reference Fig.13 Examples of aspects of authentication interface 1325 are described. Receiver 1110 may include one or more wired and / or wireless interfaces.

[0132] Fig.12A block diagram 1200 is shown of a communication manager 1220 according to various aspects of the present disclosure. The communication manager 1220 may be a reference Fig.11 Examples of aspects of communications manager 1120 are described.

[0133] The communication manager 1220 may include a network key manager 1135-a, a UE authenticator 1140-a, and a UE communication manager 1210. The network key manager 1135-a and the UE authenticator 1140-a may be referenced. Fig.11 An example of a network key manager 1135 and a UE authenticator 1140 is depicted. The UE authenticator 1140-a may include a network node key deriver 1205. Each of these components may be in communication with one another, directly or indirectly (eg, via one or more buses).

[0134] As above reference Figure 5 As described, the network key manager 1135-a can be used to receive a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK can be based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials can be exchanged between the UE and the authentication server during the EAP process. In some examples, the first set of parameters may include an identifier of a cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof. In some examples, the second set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof. In some examples, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof.

[0135] As above reference Figure 5 As described, the UE authenticator 140-a may be used to perform at least one authentication procedure with the UE based at least in part on the first security key. The network node key deriver 1205 may be used to perform at least one authentication procedure with the UE, which may include deriving a second security key of a network node of the cellular network. The second security key may be based at least in part on the first security key and a third set of parameters. In some examples, the third set of parameters may include an identifier of the network node, at least one network node specific parameter, at least one parameter exchanged between the UE and the network node, or a combination thereof.

[0136] As above reference Figure 5 As described, the UE communication manager 1210 may be configured to communicate with the UE via the network node based at least in part on the second security key.

[0137] Fig.13 Schematic diagram 1300 of a network node 1105-a is shown in accordance with various aspects of the present disclosure. The network node 1105-a may be a reference Figure 2 , 4 , 5 and 11 describe examples of aspects of the network nodes.

[0138] The network node 1105-a may include a communication manager 1305, a memory 1310, a processor 1320, and an authentication interface 1325. Each of these components may communicate with each other directly or indirectly (e.g., via one or more buses). The communication manager 1305 may be a reference Fig.11 Or an example of aspects of the communications manager described in 12.

[0139] Memory 1310 may include RAM or ROM. Memory 1310 may store computer-readable, computer-executable software 1315, which includes instructions that, when executed, cause processor 1320 to perform various functions described in this application, including functions related to network security and authentication. In some cases, software 1315 may not be directly executed by processor 1320, but may cause processor 1320 (e.g., when compiled and executed) to perform the functions described in this application. Processor 1320 may include an intelligent hardware device (e.g., a CPU, a microcontroller, an ASIC, etc.).

[0140] As described in this application, authentication interface 1325 can communicate bidirectionally with one or more networks, network nodes, or UEs via one or more antennas or wired links. In some examples, authentication interface 1325 can be used to establish a secure connection with an authentication server (e.g., using Radius or Diameter protocols) and facilitate EAP processes performed by the UE and the authentication server.

[0141] Fig.14 A flow chart of a method 1400 for wireless communication according to various aspects of the present disclosure is shown. Figure 1-8 As described, the operations of method 1400 may be performed by UE 115 or a component thereof. In some examples, the operations of method 1400 may be performed by reference Figure 6-8 The wireless communication manager described in the embodiment of the present invention performs. In some examples, the UE may execute a set of codes for controlling the functional elements of the UE to perform the functions described below. Additionally or alternatively, the UE may use dedicated hardware to perform aspects of the functions described below.

[0142] At block 1405, as described above with reference to Figure 5As described, the UE may perform an EAP process with an authentication server via an authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. In some examples, reference Figure 6 and 7 The EAP manager 635 described above performs the operations of block 1405 .

[0143] At block 1410, as described above with reference to Figure 5 As described, as part of performing an EAP process, the UE may derive an MSK and an EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof. In some examples, reference may be used Figure 6 and 7 The EAP manager 635 described above performs the operations of block 1410 .

[0144] At block 1415, as described above with reference to Figure 5 As described, the UE may determine a network type associated with the authenticator. In some examples, the determined network type may include a cellular network type or a non-cellular network type (e.g., a WLAN type). In some examples, reference Figure 6 and 7 The network type identifier 640 described above is used to perform the operations of block 1415 .

[0145] At block 1420, the UE may perform at least one authentication procedure with the authenticator based at least in part on the determined network type. Figure 5 As described, the at least one authentication process can be based at least in part on an association of the MSK or EMSK with the determined network type. Figure 6 and 7 The network authenticator 645 described above performs the operations of block 1420 .

[0146] Fig.15 A flow chart of a method 1500 for wireless communication according to various aspects of the present disclosure is shown. Figure 1-8 As described, the operations of method 1500 may be performed by UE 115 or a component thereof. In some examples, the operations of method 1500 may be performed by reference Figure 6-8 The wireless communication manager described in the embodiment of the present invention performs. In some examples, the UE may execute a set of codes for controlling the functional elements of the UE to perform the functions described below. Additionally or alternatively, the UE may use dedicated hardware to perform aspects of the functions described below.

[0147] At block 1505, as described above with reference to Figure 5 As described, the UE may perform an EAP process with an authentication server via an authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the UE and the authentication server. In some examples, reference Figure 6 and 7 The depicted EAP manager 635 performs the operations of block 1505 .

[0148] At block 1510, as described above with reference to Figure 5 As described, as part of performing an EAP process, the UE may derive an MSK and an EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and a first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof. In some examples, reference may be used Figure 6 and 7 The depicted EAP manager 635 performs the operations of block 1510 .

[0149] At block 1515, as described above with reference to Figure 5 As described, the UE may determine a network type associated with the authenticator. In some examples, the determined network type may include a cellular network type or a non-cellular network type (e.g., a WLAN type). In some examples, reference Figure 6 and 7 The depicted network type identifier 640 performs the operations of block 1515 .

[0150] At block 1520, method 1500 may branch to block 1525 or 1540, depending on whether the determined network type includes a cellular network type or a non-cellular network type. When the determined network type includes a cellular network type, method 1500 may branch to block 1525. When the determined network type includes a non-cellular network type, method 1500 may branch to block 1540. In some examples, reference may be used. Figure 6 and 7 The network type identifier 640 described above may be used to perform the operations of block 1520. In some examples, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof.

[0151] If the UE determines that the network type includes a cellular network type, then at blocks 1525 and 1530, the UE may perform at least one authentication procedure with the authenticator based at least in part on the determined network type. The at least one authentication procedure may be based on an association of the MSK or EMSK with the determined network type. At block 1525, as described above with reference to Figure 5 As described, the UE may derive a first security key for the cellular network. The first security key may be based at least in part on the EMSK and a second set of parameters. In some examples, the second set of parameters may include an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof. In some examples, reference may be used to Figure 6 and 7 Network Authenticator 645 described herein, or reference Figure 7 The network key deriver 705 is described to perform the operation of block 1525 .

[0152] At block 1530, as described above with reference to Figure 5 As described, the UE may derive a second security key of a network node of the cellular network. The second security key may be based at least in part on the first security key and a third set of parameters. In some examples, the third set of parameters may include an identifier of the network node, at least one network node specific parameter, at least one parameter exchanged between the UE and the network node, or a combination thereof. In some examples, reference may be used Figure 6 and 7 Network Authenticator 645 described herein, or reference Figure 7 The described network node key deriver 710 performs the operation of box 1530.

[0153] At block 1535, as referenced above Figure 5 As described, the UE may communicate with the cellular network via the network node based at least in part on the second security key. In some examples, reference Figure 7 The cellular network communication manager 715 described herein performs the operations of block 1530 .

[0154] If the UE determines that the network type includes a non-cellular network, then at block 1540, the UE may derive a first security key for the non-cellular network. The first security key may be based at least in part on the MSK and a fourth set of parameters. In some examples, reference Figure 6 and 7 Network Authenticator 645 described herein, or reference Figure 7 The network key deriver 705 is described to perform the operations of block 1540 .

[0155] Fig.16A flow chart of a method 1600 for wireless communication according to various aspects of the present disclosure is shown. Figure 1-5 , 9 and 10, the operations of method 1600 may be performed by the authentication server or its components. In some examples, the operations of method 1600 may be performed by reference Fig. 9 and 10 In some examples, the authentication server may execute a set of codes for controlling the functional elements of the authentication server to perform the functions described below. Additionally or alternatively, the authentication server may use dedicated hardware to perform aspects of the functions described below.

[0156] At block 1605, as referenced above Figure 5 As described, the authentication server may perform an EAP process with the UE via the authenticator. The EAP process may be based at least in part on a set of authentication credentials exchanged between the authentication server and the UE. In some examples, reference Fig. 9 The EAP manager 935 described above performs the operations of block 1605 .

[0157] At block 1610, as described above with reference to Figure 5 As described, as part of performing the EAP process, the authentication server may derive the MSK and the EMSK, the MSK and the EMSK being based at least in part on the authentication credentials and the first set of parameters. In some examples, the first set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof. In some examples, reference may be used Fig. 9 The EAP manager 935 described above performs the operations of block 1610 .

[0158] At block 1615, as referenced above Figure 5 As described, the authentication server can determine the network type associated with the authenticator. In some examples, the determined network type can include a cellular network type or a non-cellular network type (e.g., a WLAN type). In some examples, reference Fig. 9 The network type identifier 940 described above is used to perform the operations of block 1615 .

[0159] At block 1620, as described above with reference to Figure 5As described, the authentication server may derive a security key for the determined network type based at least in part on an association of the MSK or EMSK with the network type and at least in part on a second set of parameters. When the determined network type includes a cellular network type, and in some examples, the second set of parameters may include an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the authentication server and the cellular network, or a combination thereof. In some examples, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof. In some examples, reference may be used Fig. 9 The network key deriver 945 described above is used to perform the operations of box 1620.

[0160] At block 1625, as referenced above Figure 5 As described, the authentication server may send a security key to the authenticator via a secure channel. In some examples, reference Fig. 9 The network key installer 950 described above is used to perform the operations of box 1625.

[0161] Fig.17 A flow chart of a method 1700 for wireless communication according to various aspects of the present disclosure is shown. Figure 1-5 The operations of method 1700 may be performed by a cellular network or a component thereof as described in and 11-13. In some examples, the operations of method 1700 may be performed by reference Figure 11-13 The communication manager described in the method 1700 performs the operations of method 1700. In some examples, the cellular network (or one or more nodes thereof) may execute a set of codes for controlling functional elements of the cellular network to perform the functions described below. Additionally or alternatively, the cellular network (or one or more nodes thereof) may use dedicated hardware to perform aspects of the functions described below.

[0162] At block 1705, as referenced above Figure 5As described, the cellular network can receive a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK can be based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials can be exchanged between the UE and the authentication server during the EAP process. In some examples, the first set of parameters may include an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof. In some examples, the second set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof. In some examples, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof. In some examples, reference may be used. Fig.11 The network key manager 1135 described above is used to perform the operations of box 1705.

[0163] At block 1710, as described above with reference to Figure 5 As described, the cellular network may perform at least one authentication procedure with the UE based at least in part on the first security key. In some examples, reference Fig.11 The UE authenticator 140 described above performs the operations of block 1710 .

[0164] Fig.18 A flow chart of a method 1800 for wireless communication according to various aspects of the present disclosure is shown. Figure 1-5 The operations of method 1800 may be performed by a cellular network or a component thereof as described in and 11-13. In some examples, the operations of method 1800 may be performed by reference Figure 11-13 The communication manager described in the method 1800 performs the operations of method 1800. In some examples, the cellular network (or one or more nodes thereof) may execute a set of codes for controlling functional elements of the cellular network to perform the functions described below. Additionally or alternatively, the cellular network (or one or more nodes thereof) may use dedicated hardware to perform aspects of the functions described below.

[0165] At block 1805, as referenced above Figure 5As described, the cellular network can receive a first security key from an authentication server, the first security key being based at least in part on an EMSK and a first set of parameters. The EMSK can be based at least in part on a set of authentication credentials and a second set of parameters. The authentication credentials can be exchanged between the UE and the authentication server during the EAP process. In some examples, the first set of parameters may include an identifier of the cellular network, at least one cellular network-specific parameter, at least one parameter exchanged between the UE and the cellular network, or a combination thereof. In some examples, the second set of parameters may include: at least one identifier, at least one random number, at least one network parameter, at least one UE parameter, or a combination thereof. In some examples, the cellular network may include at least one of the following: a 5G network, a 4G network, an LTE network, an LTE-A network, a 3G network, or a combination thereof. In some examples, reference may be used. Fig.11 The network key manager 1135 described above is used to perform the operations of box 1805.

[0166] At block 1810, the cellular network may perform at least one authentication procedure with the UE based at least in part on the first security key. Figure 5 As described, performing at least one authentication procedure with the UE may include deriving a second security key of a network node of the cellular network. The second security key may be based at least in part on the first security key and a third set of parameters. In some examples, the third set of parameters may include an identifier of the network node, at least one network node-specific parameter, at least one parameter exchanged between the UE and the network node, or a combination thereof. In some examples, reference may be used Fig.11 UE Authenticator 140 described herein, or reference Fig.12 The network node key deriver 1205 described is used to perform the operation of box 1810.

[0167] At block 1815, as referenced above Figure 5 As described, the cellular network can communicate with the UE via the network node based at least in part on the second security key. In some examples, reference Fig.12 The UE communication manager 1210 described above performs the operation of box 1815.

[0168] It should be noted that the method described above illustrates possible implementations of the technology described in this disclosure. In some examples, the operations of the method may be performed in a different order or include different operations.

[0169] The technology described in this application can be used in various wireless communication systems, such as CDMA, TDMA, FDMA, OFDMA, SC-FDMA and other systems. The terms "system" and "network" are usually used interchangeably. A CDMA system can implement wireless technologies such as CDMA 2000, Universal Terrestrial Radio Access (UTRA), etc. CDMA 2000 covers IS-2000, IS-95 and IS-856 standards. IS-2000 version 0 and A can be referred to as CDMA2000 1X, 1X, etc. IS-856 (TIA-856) can be referred to as CDMA 20001xEV-DO, High Speed ​​Packet Data (HRPD), etc. UTRA includes Wideband CDMA (W-CDMA) and other variants of CDMA. A TDMA system can implement wireless technologies such as Global System for Mobile Communications (GSM). OFDMA systems can implement, for example, Ultra Mobile Broadband (UMB), Evolved UTRA (E-UTRA), IEEE 802.11 (Wi-Fi), IEEE 802.16 (WiMAX), IEEE802.20, Flash OFDM TM The wireless technologies of the present invention include the wireless technologies of the present invention and the wireless technologies of the present invention. UTRA and E-UTRA are part of the Universal Mobile Telecommunications System (UMTS). 3GPP LTE and LTE-A are new versions of UMTS that use E-UTRA. UTRA, E-UTRA, UMTS, LTE, LTE-A and GSM are described in documents from an organization named 3GPP. CDMA 2000 and UMB are described in documents from an organization named "3rd Generation Partnership Project 2" (3GPP2). The techniques described in this application can be used for the systems and wireless technologies mentioned above and other systems and wireless technologies, including cellular (e.g., LTE) communications on unlicensed bandwidth or shared bandwidth. However, the above description describes the LTE / LTE-A system for example purposes, and LTE terminology is used in most of the above descriptions, but these techniques are applicable to applications other than LTE / LTE-A.

[0170] The detailed description set forth above in conjunction with the accompanying drawings describes examples, but does not represent all examples that can be implemented or within the scope of the claims. The term "exemplary" when used in this specification means "used as an example, instance, or illustration," rather than "preferred" or "more advantageous than other examples." The detailed description includes specific details for the purpose of providing an understanding of the described techniques. However, these techniques may be practiced without these specific details. In some instances, well-known structures and devices are shown in block diagram form to avoid obscuring the concepts of the described examples.

[0171] Information and signals may be represented using any of a variety of different techniques and methods. For example, data, instructions, commands, information, signals, bits, symbols, and chips that may be mentioned throughout the above description may be represented by voltage, current, electromagnetic waves, magnetic fields or particles, optical fields or particles, or any combination thereof.

[0172] The various illustrative blocks and components described in conjunction with the disclosure of the present application may be implemented or executed using a general purpose processor, digital signal processor (DSP), ASIC, FPGA or other programmable logic device, discrete gate or transistor logic device, discrete hardware components, or any combination thereof designed to perform the functions described in the present application. The general purpose processor may be a microprocessor, or the processor may be any conventional processor, controller, microcontroller, or state machine. The processor may also be implemented as a combination of computing devices, for example, a combination of a DSP and a microprocessor, a plurality of microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such structure.

[0173] The functions described in this application can be implemented with hardware, software executed by a processor, firmware, or any combination thereof. If implemented with software executed by a processor, these functions can be stored on a computer-readable medium as one or more instructions or codes or sent via a computer-readable medium. Other examples and embodiments are within the scope and spirit of the present disclosure and the appended claims. For example, due to the nature of software, the functions described above can be implemented using software, hardware, firmware, hard wiring, or any combination thereof executed by a processor. The components that implement the functions can also be physically located at various locations, including being distributed, so that part of the functions are implemented at different physical locations. In addition, as used in this application, including in the claims, the term "or" when used in a list of two or more items means that it can adopt any one of the listed items by itself, or can adopt any combination of two or more of the listed items. For example, if a combination is described as containing components A, B, and / or C, the combination can contain only A; only B; only C; jointly containing A and B; jointly containing A and C; jointly containing B and C or jointly containing A, B, and C. Additionally, as used in this application, including in the claims, "or" used in a list of items (e.g., a list of items described with phrases such as "at least one of" or "one or more of") indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C or AB or AC or BC or ABC (i.e., A and B and C).

[0174] Computer readable medium includes both computer storage medium and communication medium, wherein, communication medium includes any medium that is convenient to transmit computer program from one place to another place. Storage medium can be any available medium that general-purpose computer or special-purpose computer can access. By way of example and not limitation, computer readable medium can include RAM, ROM, EEPROM, flash memory, CD-ROM or other optical disk storage device, disk storage device or other magnetic storage device, or can be used for carrying or storing the program code unit with the expectation of instruction or data structure form and can be accessed by general-purpose computer or special-purpose computer or general processor or special-purpose processor any other medium. In addition, any connection can be appropriately referred to as computer readable medium. For example, if software is to send from website, server or other remote source using coaxial cable, optical fiber cable, twisted pair, digital subscriber line (DSL) or wireless technology such as infrared, radio and microwave, then the coaxial cable, optical fiber cable, twisted pair, DSL or wireless technology such as infrared, radio and microwave are included in the definition of medium. As used herein, disk and disc include compact disc (CD), laser disc, optical disc, digital versatile disc (DVD), floppy disk and Blu-ray disc, wherein disks usually reproduce data magnetically, while discs reproduce data optically with lasers. Combinations of the above should also be included within the scope of computer readable media.

[0175] The above description of the disclosure is provided to enable those skilled in the art to implement or use the disclosure. It will be apparent to those skilled in the art that various modifications to the disclosure will be apparent, and the general principles defined in the present application may be applied to other variations without departing from the spirit or scope of the disclosure. Therefore, the disclosure is not intended to be limited to the examples and designs described in the present application, but to conform to the broadest scope consistent with the principles and novel features disclosed in the present application.

Claims

1. A method for wireless communication at a user equipment UE, comprising: Access a network with a network type; As part of the Extensible Authentication Protocol (EAP) process, the authenticator authenticates with the authentication server. At the UE, deriving at least one of a master session key MSK or an extended master session key EMSK according to the EAP procedure, wherein the at least one of the MSK or the EMSK is derived based at least in part on one or more authentication credentials and at least in part on one or more parameters selected from the group consisting of: an identifier, a random number, a first network parameter, and a UE parameter; and At least one authentication procedure is performed with the network, wherein the at least one authentication procedure is based on an association of the MSK or the EMSK with the network type, and wherein the MSK and the EMSK are respectively associated with different network types.

2. The method of claim 1, wherein: Performing the at least one authentication procedure with the network includes performing the at least one authentication procedure with the authenticator, the authenticator being separate from the authentication server.

3. The method of claim 1, wherein: Performing the at least one authentication procedure with the network comprises performing the at least one authentication procedure with the authenticator, the authenticator being separate from a security anchor function, SEAF.

4. The method of claim 1, wherein: The network type is a 3GPP network type, and wherein the at least one authentication procedure is based on an association of the EMSK with the 3GPP network type.

5. The method of claim 1, wherein: The network type is a non-3GPP network type, and wherein the at least one authentication procedure is based on an association of the MSK with the non-3GPP network type.

6. The method of claim 1, wherein: Performing the at least one authentication procedure with the network includes deriving a session key based on the MSK or the EMSK.

7. The method of claim 6, wherein: The network type is a 3GPP network type, and wherein the session key is a session anchor key derived based on the EMSK and a second network parameter.

8. An apparatus for wireless communication at a user equipment UE, comprising: a transceiver configured to access a network having a network type; Memory; as well as processor; wherein the processor and the memory are configured to perform the following operations: Authenticating with an authentication server via an authenticator as part of an Extensible Authentication Protocol (EAP) process; and Based on the network type being a first network type, a master session key MSK is used for an authentication process, wherein the MSK and an extended master session key EMSK are respectively associated with different network types, and wherein the MSK is derived at the UE according to the EAP process, and the MSK is derived at least in part based on one or more first authentication credentials and at least in part based on one or more parameters selected from the group consisting of: a first identifier, a first random number, a first network parameter, and a first UE parameter.

9. The device of claim 8, wherein: The processor and the memory are configured to: based on the network type being a second network type, use an extended master session key EMSK for a second authentication process, wherein the EMSK is derived at the UE according to the EAP process, and the EMSK is derived at least in part based on one or more second authentication credentials and at least in part based on one or more parameters selected from the group consisting of: a second identifier, a second random number, a second network parameter, and a second UE parameter.

10. The device of claim 8, wherein: The processor and the memory are configured to perform at least the authentication process with the authenticator, the authenticator being separate from the authentication server.

11. The device of claim 8, wherein: The processor and the memory are configured to perform at least the authentication process with the authenticator, the authenticator being separate from a security anchor function, SEAF.

12. The device of claim 8, wherein: The processor and the memory are configured to use an extended master session key EMSK for a second authentication process based on the network type being a 3GPP network type different from the first network type, and the processor and the memory are configured to perform at least the second authentication process based on an association of the EMSK with the 3GPP network type.

13. The device of claim 8, wherein: The first network type is a non-3GPP network type, and wherein the processor and the memory are configured to perform at least the authentication process based on an association of the MSK with the non-3GPP network type.

14. The device of claim 8, wherein: The processor and the memory are configured to derive a session key based on the MSK to perform at least the authentication process with the network.

15. The device of claim 8, wherein: The processor and the memory are configured to use an extended master session key EMSK for a second authentication process based on the network type being a second network type different from the first network type, and the processor and the memory are configured to derive a session key based on the EMSK to perform at least the second authentication process with the network.

16. The device of claim 15, wherein: The second network type is a 3GPP network type, and wherein the session key is a session anchor key derived based on the EMSK and network parameters.

17. A user equipment UE, comprising: a unit for accessing a network having a network type; A unit for authenticating with an authentication server via an authenticator as part of an Extensible Authentication Protocol (EAP) procedure; means for deriving, at the UE, at least one of a master session key MSK or an extended master session key EMSK according to the EAP procedure, wherein the at least one of the MSK or the EMSK is derived based at least in part on one or more authentication credentials and at least in part on one or more parameters selected from the group consisting of: an identifier, a random number, a first network parameter, and a UE parameter; and Means for performing at least one authentication procedure with the network, wherein the at least one authentication procedure is based on an association of the MSK or the EMSK with the network type, and wherein the MSK and the EMSK are respectively associated with different network types.

18. The UE according to claim 17, wherein: The means for performing the at least one authentication procedure with the network includes means for performing the at least one authentication procedure with the authenticator, the authenticator being separate from the authentication server.

19. The UE according to claim 17, wherein: The means for performing the at least one authentication procedure with the network comprises means for performing the at least one authentication procedure with the authenticator, the authenticator being separate from a security anchor function, SEAF.

20. The UE according to claim 17, wherein: The network type is a 3GPP network type, and wherein the at least one authentication procedure is based on an association of the EMSK with the 3GPP network type.

21. The UE according to claim 17, wherein: The network type is a non-3GPP network type, and wherein the at least one authentication procedure is based on an association of the MSK with the non-3GPP network type.

22. The UE according to claim 17, wherein: Means for performing the at least one authentication procedure with the network includes means for deriving a session key based on the MSK or the EMSK.

23. The UE according to claim 22, wherein: The network type is a 3GPP network type, and wherein the session key is a session anchor key derived based on the EMSK and a second network parameter.

24. An apparatus for wireless communication at a user equipment UE, comprising: a transceiver configured to access a network having a network type; Memory; as well as processor; wherein the processor and the memory are configured to perform the following operations: As part of the Extensible Authentication Protocol (EAP) process, the authenticator authenticates with the authentication server. deriving at least one of a master session key MSK or an extended master session key EMSK according to the EAP procedure, wherein the at least one of the MSK or the EMSK is derived based at least in part on one or more authentication credentials and at least in part on one or more parameters selected from the group consisting of: an identifier, a random number, a first network parameter, and a UE parameter; and At least one authentication procedure is performed with the network, wherein the at least one authentication procedure is based on an association of the MSK or the EMSK with the network type, and wherein the MSK and the EMSK are respectively associated with different network types.

25. The device of claim 24, wherein: The processor and the memory are configured to perform the at least one authentication process with the authenticator, the authenticator being separate from the authentication server.

26. The apparatus of claim 24, wherein: The processor and the memory are configured to perform the at least one authentication process with the authenticator, the authenticator being separate from a security anchor function, SEAF.

27. The apparatus of claim 24, wherein: The network type is a 3GPP network type, and wherein the at least one authentication procedure is based on an association of the EMSK with the 3GPP network type.

28. The apparatus of claim 24, wherein: The network type is a non-3GPP network type, and wherein the at least one authentication procedure is based on an association of the MSK with the non-3GPP network type.

29. The apparatus of claim 24, wherein: The processor and the memory are configured to derive a session key based on the MSK or the EMSK to perform the at least one authentication procedure with the network.

30. The apparatus of claim 29, wherein: The network type is a 3GPP network type, and wherein the session key is a session anchor key derived based on the EMSK and a second network parameter.

31. A non-transitory computer readable medium storing code for wireless communication at a user equipment (UE), the code comprising instructions executable by a processor to: Access a network with a network type; As part of the Extensible Authentication Protocol (EAP) process, the authenticator authenticates with the authentication server. deriving at least one of a master session key MSK or an extended master session key EMSK according to the EAP procedure, wherein the at least one of the MSK or the EMSK is derived based at least in part on one or more authentication credentials and at least in part on one or more parameters selected from the group consisting of: an identifier, a random number, a first network parameter, and a UE parameter; and At least one authentication procedure is performed with the network, wherein the at least one authentication procedure is based on an association of the MSK or the EMSK with the network type, and wherein the MSK and the EMSK are respectively associated with different network types.

32. The non-transitory computer readable medium of claim 31, wherein: The code includes instructions executable by the processor to perform the at least one authentication process with the authenticator, the authenticator being separate from the authentication server.

33. The non-transitory computer readable medium of claim 31, wherein: The code comprises instructions executable by the processor to perform the at least one authentication process with the authenticator, the authenticator being separate from a security anchor function, SEAF.

34. The non-transitory computer readable medium of claim 31, wherein: The network type is a 3GPP network type, and wherein the at least one authentication procedure is based on an association of the EMSK with the 3GPP network type.

35. The non-transitory computer readable medium of claim 31, wherein: The network type is a non-3GPP network type, and wherein the at least one authentication procedure is based on an association of the MSK with the non-3GPP network type.

36. The non-transitory computer readable medium of claim 31, wherein: The code includes instructions executable by the processor to derive a session key based on the MSK or the EMSK to perform the at least one authentication procedure with the network.

37. The non-transitory computer readable medium of claim 36, wherein: The network type is a 3GPP network type, and wherein the session key is a session anchor key derived based on the EMSK and a second network parameter.

38. A method of wireless communication at a user equipment UE, comprising: As part of the Extensible Authentication Protocol (EAP) process, the authenticator authenticates with the authentication server. as well as Based on the network type being the first network type, using a master session key MSK for an authentication process, wherein the MSK and an extended master session key EMSK are respectively associated with different network types, and wherein the MSK is derived at the UE according to the EAP process, and the MSK is derived at least in part based on one or more authentication credentials and at least in part based on one or more parameters selected from the group consisting of: an identifier, a random number, a network parameter, and a UE parameter.

39. The method of claim 38, further comprising: At least the authentication process is performed with the authenticator, which is separate from the authentication server.

40. The method of claim 38, further comprising: At least the authentication process is performed with the authenticator, which is separate from the security anchor function SEAF.

41. The method of claim 38, wherein: The first network type is a non-3GPP network type, and the method further comprises: Based on the association of the MSK with the non-3GPP network type, at least the authentication process is performed.

42. The method of claim 38, further comprising: At the UE, a session key is derived based on the MSK to perform at least the authentication process.

43. A user equipment UE, comprising: A unit for authenticating with an authentication server via an authenticator as part of an Extensible Authentication Protocol (EAP) procedure; as well as A means for using a master session key MSK for an authentication procedure based on the network type being a first network type, wherein the MSK and an extended master session key EMSK are respectively associated with different network types, and wherein the MSK is derived at the UE according to the EAP procedure, the MSK being derived at least in part based on one or more first authentication credentials and at least in part based on one or more parameters selected from the group consisting of: a first identifier, a first random number, a first network parameter, and a first UE parameter.

44. The UE of claim 43, further comprising: means for using an extended master session key EMSK for a second authentication procedure based on the network type being a second network type, wherein the EMSK is derived at the UE according to the EAP procedure, the EMSK being derived based at least in part on one or more second authentication credentials and at least in part on one or more parameters selected from the group consisting of: a second identifier, a second random number, a second network parameter, and a second UE parameter.

45. The UE of claim 43, further comprising: means for performing at least the authentication process with the authenticator, the authenticator being separate from the authentication server.

46. ​​The UE of claim 43, further comprising: means for performing at least said authentication procedure with said authenticator, said authenticator being separate from a security anchor function, SEAF.

47. The UE of claim 43, further comprising: means for using an extended master session key EMSK for a second authentication procedure based on the network type being a 3GPP network type different from the first network type; as well as Means for performing at least the second authentication procedure based on the association of the EMSK with the 3GPP network type.

48. The UE of claim 43, wherein: The first network type is a non-3GPP network type, and the UE further includes: Means for performing at least the authentication process based on the association of the MSK with the non-3GPP network type.

49. The UE of claim 43, further comprising: A unit for deriving a session key based on the MSK at the UE to at least perform the authentication process.

50. The UE of claim 43, further comprising: means for using an extended master session key EMSK for a second authentication procedure based on the network type being a second network type different from the first network type; as well as means for deriving a session key based on the EMSK at the UE to perform at least one authentication procedure.

51. The UE of claim 50, wherein: The second network type is a 3GPP network type, and wherein the session key is a session anchor key derived based on the EMSK and a second network parameter.

52. A non-transitory computer readable medium storing code for wireless communication at a user equipment (UE), the code comprising instructions executable by a processor to: Authenticating with an authentication server via an authenticator as part of an Extensible Authentication Protocol (EAP) process; and Based on the network type being the first network type, the master session key MSK is used for the authentication process, wherein, The MSK and the extended master session key EMSK are respectively associated with different network types, and wherein the MSK is derived at the UE according to the EAP process, and the MSK is derived at least in part based on one or more first authentication credentials and at least in part based on one or more parameters selected from the group consisting of: a first identifier, a first random number, a first network parameter, and a first UE parameter.

53. The non-transitory computer readable medium of claim 52, wherein: The code includes instructions executable by the processor to use an extended master session key EMSK for a second authentication process based on the network type being a second network type, wherein the EMSK is derived at the UE according to the EAP process, and the EMSK is derived at least in part based on one or more authentication credentials and at least in part based on one or more parameters selected from the group consisting of: a second identifier, a second random number, a second network parameter, and a second UE parameter.

54. The non-transitory computer readable medium of claim 52, wherein: The code includes instructions executable by the processor to perform at least the authentication process with the authenticator, the authenticator being separate from the authentication server.

55. The non-transitory computer readable medium of claim 52, wherein: The code comprises instructions executable by the processor to perform at least the authentication process with the authenticator, the authenticator being separate from a security anchor function, SEAF.

56. The non-transitory computer readable medium of claim 52, wherein: The code includes instructions executable by the processor to use an extended master session key EMSK for a second authentication procedure based on the network type being a 3GPP network type different from the first network type, and is configured to perform at least the second authentication procedure based on an association of the EMSK with the 3GPP network type.

57. The non-transitory computer readable medium of claim 52, wherein: The first network type is a non-3GPP network type, and wherein the code includes instructions executable by the processor to perform at least the authentication process based on an association of the MSK with the non-3GPP network type.

58. The non-transitory computer readable medium of claim 52, wherein: The code includes instructions executable by the processor to derive a session key based on the MSK to perform at least the authentication process.

59. The non-transitory computer readable medium of claim 52, wherein: The code includes instructions executable by the processor to use an extended master session key EMSK for a second authentication process based on the network type being a second network type different from the first network type; And deriving a session key based on the EMSK to perform at least the second authentication process.

60. The non-transitory computer readable medium of claim 59, wherein: The second network type is a 3GPP network type, and wherein the session key is a session anchor key derived based on the EMSK and a second network parameter.

61. A method of wireless communication at a user equipment UE, comprising: As part of the Extensible Authentication Protocol (EAP) process, the authenticator authenticates with the authentication server. as well as Based on the network type being the first network type, using an extended master session key EMSK for an authentication process, wherein the EMSK and the master session key MSK are respectively associated with different network types, and wherein the EMSK is derived at the UE according to the EAP process, and the EMSK is derived at least in part based on one or more authentication credentials and at least in part based on one or more parameters selected from the group consisting of: an identifier, a random number, a network parameter, and a UE parameter.

62. The method of claim 61, further comprising: At least the authentication process is performed with the authenticator, which is separate from the authentication server.

63. The method of claim 61, further comprising: At least the authentication process is performed with the authenticator, which is separate from the security anchor function SEAF.

64. The method of claim 61, wherein: The first network type is a 3GPP network type, and the method further comprises: Based on the association of the EMSK with the 3GPP network type, at least the authentication process is performed.

65. The method of claim 61, further comprising: At the UE, a session key is derived based on the EMSK to perform at least the authentication process.

66. A non-transitory computer readable medium storing code for wireless communication at a user equipment (UE), the code comprising instructions executable by a processor to: Authenticating with an authentication server via an authenticator as part of an Extensible Authentication Protocol (EAP) process; and Based on the network type being the first network type, the extended master session key EMSK is used for the authentication process, wherein, The EMSK and the master session key MSK are respectively associated with different network types, and wherein the EMSK is derived at the UE according to the EAP process, and the EMSK is derived at least in part based on one or more authentication credentials and at least in part based on one or more parameters selected from the group consisting of: an identifier, a random number, a network parameter, and a UE parameter.

67. The non-transitory computer readable medium of claim 66, wherein: The code includes instructions executable by the processor to perform at least the authentication process with the authenticator, the authenticator being separate from the authentication server.

68. The non-transitory computer readable medium of claim 66, wherein: The code comprises instructions executable by the processor to perform at least the authentication process with the authenticator, the authenticator being separate from a security anchor function, SEAF.

69. The non-transitory computer readable medium of claim 66, wherein: The first network type is a 3GPP network type, and wherein the code comprises instructions executable by the processor to perform at least the authentication process based on an association of the EMSK with the 3GPP network type.

70. The non-transitory computer readable medium of claim 66, wherein: The code includes instructions executable by the processor to derive a session key based on the EMSK to perform at least the authentication process.

71. A user equipment UE, comprising: A unit for authenticating with an authentication server via an authenticator as part of an Extensible Authentication Protocol (EAP) procedure; as well as A unit for using an extended master session key EMSK for an authentication process based on the network type being a first network type, wherein the EMSK and the master session key MSK are respectively associated with different network types, and wherein the EMSK is derived at the UE according to the EAP process, and the EMSK is derived at least in part based on one or more authentication credentials and at least in part based on one or more parameters selected from the group consisting of: an identifier, a random number, a network parameter, and a UE parameter.

72. The UE of claim 71, further comprising: means for performing at least the authentication process with the authenticator, the authenticator being separate from the authentication server.

73. The UE of claim 71, further comprising: means for performing at least said authentication procedure with said authenticator, said authenticator being separate from a security anchor function, SEAF.

74. The UE of claim 71, wherein: The first network type is a 3GPP network type, and the UE further includes: Means for performing at least the authentication procedure based on the association of the EMSK with the 3GPP network type.

75. The UE of claim 71, further comprising: A unit for deriving, at the UE, a session key based on the EMSK to at least perform the authentication process.

76. An apparatus for wireless communication at a user equipment UE, comprising: Memory; as well as processor; wherein the processor and the memory are configured to perform the following operations: Authenticating with an authentication server via an authenticator as part of an Extensible Authentication Protocol (EAP) process; and Based on the network type being the first network type, using an extended master session key EMSK for an authentication process, wherein the EMSK and the master session key MSK are respectively associated with different network types, and wherein the EMSK is derived at the UE according to the EAP process, and the EMSK is derived at least in part based on one or more authentication credentials and at least in part based on one or more parameters selected from the group consisting of: an identifier, a random number, a network parameter, and UE parameters.

77. The apparatus of claim 76, wherein: The processor and the memory are configured to perform at least the authentication process with the authenticator, the authenticator being separate from the authentication server.

78. The apparatus of claim 76, wherein: The processor and the memory are configured to perform at least the authentication process with the authenticator, the authenticator being separate from a security anchor function, SEAF.

79. The apparatus of claim 76, wherein: The first network type is a 3GPP network type, and wherein the processor and the memory are configured to perform at least the authentication process based on an association of the EMSK with the 3GPP network type.

80. The apparatus of claim 76, wherein: The processor and the memory are configured to derive a session key based on the EMSK to at least perform the authentication process.

Images