3GPP AAA Server Authentication Mode Indication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In 3GPP systems, the AAA server cannot identify and process authentication modes correctly when multiple interfaces are supported concurrently, leading to incomplete authentication processing.

Innovation Solution

The method and system include an authentication request message with authentication mode indication information, allowing the 3GPP AAA server to determine and process authentication modes such as EAP-SIM, EAP-AKA, and EAP-AKA′ by using user identifier parameters in NAI formats or user-defined identifiers, enabling accurate authentication processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the 3GPP AAA server supports multiple authentication modes concurrently through different interfaces, then the system's adaptability and versatility are improved, but the AAA server's ability to identify and process authentication modes correctly deteriorates

Engineering Contradiction:

Improveauthentication mode supportVSAvoidauthentication processing accuracy

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces an intermediary mechanism in the form of authentication mode indication information that mediates between the multiple authentication modes and the AAA server's processing logic. This intermediary element allows the server to correctly identify and route different authentication modes (EAP-SIM, EAP-AKA, EAP-AKA') through a standardized indication mechanism, resolving the identification problem while maintaining multi-mode support

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the parameter structure of authentication request messages by adding authentication mode indication information as a new parameter field. This parameter change enables the AAA server to distinguish between different authentication modes based on the value of this indication parameter, allowing reliable processing of multiple authentication modes concurrently without confusion

Inventive Principle:

Principle #35Parameter changes

2Ease of operation

If the AAA server receives authentication requests from multiple interfaces with different authentication modes, then the system's ease of operation is improved, but the difficulty of detecting and measuring authentication modes increases

Engineering Contradiction:

Improveinterface access flexibilityVSAvoidauthentication mode identification

Core Design Contradiction:

Ease of operationVSDifficulty of detecting and measuring

Solution Approach 1:

The patent implements a universal authentication request message structure that can handle multiple authentication modes through a single standardized interface. The authentication mode indication information field serves as a universal indicator that works across all authentication modes (EAP-SIM, EAP-AKA, EAP-AKA'), eliminating the need for different message formats for different modes and simplifying the server's detection logic

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS9137660B2Method and system for authentication processing, 3GPP AAA server and user equipment

Publication Date: 2015.09.15 HUAWEI TECH CO LTD

AI summary

The present invention relates to a method and a system for authentication processing, a 3rd Generation Partnership Project (3GPP) Authentication, and Authorization Accounting (AAA) server, and a User Equipment (UE). The method includes: receiving an authentication request message that carries authentication mode indication information; determining an authentication mode according to the authentication mode indication information; and performing authentication processing according to the authentication mode. The system for authentication processing includes the 3GPP AAA server and a network device which enables the UE to access the 3GPP AAA server through the network device. Through the method and the system for authentication processing, the 3GPP AAA server and the UE provided herein, the authentication request message sent by the UE carries the authentication mode indication information which has different parameter values so that the 3GPP AAA server can distinguish different authentication modes and perform the authentication processing according to the determined authentication mode.