Generic key-decision mechanism for GAA

Patent metadata

Field	Value
Publication number	US-8990897-B2
Application number	US-201113239246-A
Country	US
Kind code	B2
Filing date	Sep 21, 2011
Priority date	Apr 11, 2005
Publication date	Mar 24, 2015
Grant date	Mar 24, 2015

Abstract

A method and apparatus provide generic mechanism for a network application server. A receiver receives a request from a user equipment to provide authentication information to a network application function. A determining unit determines a key of a generic authentication architecture to integrate additional network application servers by extending an existing standard for user security settings. A providing unit provides the authentication information to the network application function.

First claim

What is claimed:

1. An apparatus comprising:
a receiver unit configured to receive a request from a user equipment to provide authentication information to a network application function;
a determiner unit configured to determine a key of a generic authentication architecture to integrate additional network application servers by extending an existing standard for user security settings, wherein determining the key includes determining from provided data a key type the network application function is required to use, the provided data being based, at least in part, on data indicating the key type included in the extended user security settings provided by a home subscriber server; and
a provider unit configured to provide the authentication information to the network application function.

2. The apparatus as recited in claim 1 , further comprising:
a second provider unit configured to provide a type of secure environment in the user equipment in the user security settings.

3. The apparatus as recited in claim 1 , further comprising:
a second provider unit configured to provide first and second flag fields in the user security settings that are transported in an authorization header of a specification, wherein in the first flag field, a first derived key in integrated circuit based enhancements is used, and in the second flag field, a second derived key or a third derived key are used.

4. The apparatus as recited in claim 1 , further comprising:
a second provider unit configured to provide a flag field indicative of whether a generic bootstrapping architecture with integrated circuit based enhancements enables a universal subscriber identity module, subscriber identity module, secure environment, or a subscriber identity module card.

5. A method comprising:
sending, by a user equipment, a request to provide authentication information to a network application function, wherein the request initiates a determination of a key of a generic authentication architecture to integrate additional network application servers by extending an existing standard for user security settings, wherein the request further initiates the determination of, based on at least in part data indicating the key type included in the extended user security settings provided by a home subscriber server, a key type for use by the network application function.

6. An apparatus comprising:
at least one processor;
at least one memory including computer program code which when executed by the at least one processor is configured to at least send a request to provide authentication information to a network application function, wherein the request initiates a determination of a key of a generic authentication architecture to integrate additional network application servers by extending an existing standard for user security settings, wherein the request further initiates the determination of, based on at least in part data indicating the key type included in the extended user security settings provided by a home subscriber server, a key type for use by the network application function.

7. A non-transitory computer-readable medium including code, which when executed by a processor, provides operations comprising:
sending, by a user equipment, a request to provide authentication information to a network application function, wherein the request initiates a determination of a key of a generic authentication architecture to integrate additional network application servers by extending an existing standard for user security settings, wherein the request further initiates the determination of, based on at least in part data indicating the key type included in the extended user security settings provided by a home subscriber server, a key type for use by the network application function.

Assignees

• Holtmanns Silke
• Laitinen Pekka
• Nokia Corp

Inventors

• Holtmanns Silke
• Laitinen Pekka

Classifications

• H04L63/062 Primary

  for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819) · CPC title

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title

• H04L9/32 Primary

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• H04W12/122

  Counter-measures against attacks; Protection against rogue devices · CPC title