Gateway, Client Device and Methods for Facilitating Communication between a Client Device and an Application Server

Patent metadata

Field	Value
Publication number	US-2016119343-A1
Application number	US-201314894142-A
Country	US
Kind code	A1
Filing date	May 29, 2013
Priority date	May 29, 2013
Publication date	Apr 28, 2016
Grant date	—

Abstract

According to a first aspect, it is presented a method, executed in a gateway, the gateway being arranged to facilitate communication between a client device and an application server. The method comprises the steps of: receiving a client request from the client device, the client request comprising at least a portion being bound for the application server; sending an application server request to the application server; receiving an application server response from the application server, the application server response indicating a need to provide authentication; establishing at least one authentication credential using an authentication server for a connection between the client device and the application server; and sending a client response to the client device, the client response being based on the application server response and comprising the at least one authentication credential. An associated gateway, client device, vehicle, computer program and computer program product are also presented.

First claim

1 - 22 . (canceled)

23 . A method, executed in a gateway, the gateway being arranged to facilitate communication between a client device and an application server, the method comprising the steps of:
receiving a client request from the client device, the client request comprising at least a portion being bound for the application server; sending an application server request to the application server; receiving an application server response from the application server, the application server response type unconditionally indicating a need to provide authentication; establishing at least one authentication credential of the gateway, using an authentication server, for a connection between the client device and the application server; and sending a client response to the client device, the client response being based on the application server response and comprising the at least one authentication credential, thereby enabling the client device to authenticate itself, using the at least one authentication credential.

24 . The method according to claim 23 , wherein the step of establishing at least one authentication credential comprises the use of a generic bootstrapping architecture.

25 . The method according to claim 23 , wherein the step of establishing at least one authentication credential comprises receiving a context identifier from the authentication server, and deriving a shared key.

26 . A gateway arranged to facilitate communication between a client device and an application server, the gateway comprising:
a processor; and a memory storing instructions that, when executed by the processor, causes the gateway to:
receive a client request from the client device, the client request comprising at least a portion being bound for the application server;
send an application server request to the application server;
receive an application server response from the application server, the application server response type unconditionally indicating a need to provide authentication;
establish at least one authentication credential of the gateway, using an authentication server for a connection between the client device and the application server; and
send a client response to the client device, the client response being based on the application server response and comprising the at least one authentication credential, thereby enabling the client device to authenticate itself, using the at least one authentication credential.

27 . The gateway according to claim 26 , wherein the instructions to establish at least one authentication credential comprises instructions to use a generic bootstrapping architecture.

28 . The gateway according to claim 26 , wherein the instructions to establish at least one authentication credential comprises instructions to receive a context identifier from the authentication server and deriving a shared key.

29 . The gateway according to claim 26 , further comprising instructions to generate a new fully qualified domain name (FQDN) for the application server based on an original FQDN for the application server and an identity associated with the client device, and wherein the instructions to establish comprises instructions to use the new FQDN for identification of the application server.

30 . The gateway according to claim 29 , wherein the instructions to generate a new FQDN comprise instructions to generate the new FQDN as a subdomain of the original FQDN, and the specification of the new FQDN, in relation to the original FQDN, is based on the identity associated with the client device.

31 . The gateway according to claim 29 , wherein the identity associated with the client device comprises an identifier of the client device.

32 . The gateway according to claim 29 , wherein the identity associated with the client device comprises an identifier of an application executing on the client device.

33 . The gateway according to claim 26 , further comprising instructions to: generate a new Internet Protocol version 6 (IPv6) address for the application server based on an original IPv6 address for the application server and an identity associated with the client device.

34 . The gateway according to claim 33 , wherein the instructions to generate a new IPv6 address comprise instructions to generate a new IPv6 address comprising an interface identifier of the new IPv6 address being based on the identity associated with the client device.

35 . The gateway according to claim 26 , comprising instructions to communicate the client request, application server request, application server response and client response using any one or more of the following protocols: Hypertext Transport Protocol and Constrained Application Protocol either protocol being with or without transport layer security.

36 . A non-transitory computer-readable medium storing a computer program that, when executed by a processor of a gateway, configures the gateway for facilitating communication between a client device and an application server, the computer program comprising program instructions configuring the gateway to:
receive a client request from the client device, the client request comprising at least a portion being bound for the application server; send an application server request to the application server; receive an application server response from the application server, the application server response type unconditionally indicating a need to provide authentication; establish at least one authentication credential of the gateway, using an authentication server for a connection between the client device and the application server; and send a client response to the client device, the client response being based on the application server response and comprising the at least one authentication credential, thereby enabling the client device to authenticate itself, using the at least one authentication credential.

37 . A method being executed in a client device arranged to set up a connection between the client device and an application server, the method comprising the steps of:
sending a client request to a gateway, the client request comprising at least a portion being bound for the application server; receiving a client response from the gateway, the client response type unconditionally indicating a need to provide authentication and comprising at least one authentication credential of the gateway; generating a new client request based on the at least one authentication credential; and sending the new client request to the gateway intended for the application server, thereby authenticating the client device, using the at least one authentication credential.

38 . The method according to claim 37 , wherein all the client requests and the client response are communicated using any one or more of the following protocols: Hypertext Transport Protocol and Constrained Application Protocol, either protocol being with or without transport layer security.

39 . A client device arranged to set up a connection between the client device and an application server, the client device comprising:
a processor; and a memory storing instructions that, when executed by the processor, causes the client device to:
send a client request to a gateway to connect to the application server;
receive a client response type unconditionally from the gateway, the client response indicating a need to provide authentication and comprising at least one authentication credential of the gateway;
generate a new client request based on the at least one authenti

Assignees

• Ericsson Telefon Ab L M

Inventors

• Salmela Patrik
• Lehtovirta Vesa
• Sethi Mohit
• Slavov Kristian

Classifications

• H04L63/0876 Primary

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/0884 Primary

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04L63/029

  Firewall traversal, e.g. tunnelling or, creating pinholes · CPC title

• H04L61/6059

  Electricity · mapped topic

• H04W12/06

  Authentication · CPC title