[go: up one dir, main page]

MX2009006380A - Manejo de acceso de usuario en una red de comunicaciones. - Google Patents

Manejo de acceso de usuario en una red de comunicaciones.

Info

Publication number
MX2009006380A
MX2009006380A MX2009006380A MX2009006380A MX2009006380A MX 2009006380 A MX2009006380 A MX 2009006380A MX 2009006380 A MX2009006380 A MX 2009006380A MX 2009006380 A MX2009006380 A MX 2009006380A MX 2009006380 A MX2009006380 A MX 2009006380A
Authority
MX
Mexico
Prior art keywords
session key
identifier
node
user
access network
Prior art date
Application number
MX2009006380A
Other languages
English (en)
Inventor
Mats Naeslund
Jari Arkko
Original Assignee
Ericsson Telefon Ab L M
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ericsson Telefon Ab L M filed Critical Ericsson Telefon Ab L M
Publication of MX2009006380A publication Critical patent/MX2009006380A/es

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/067—Network architectures or network communication protocols for network security for supporting key management in a packet data network using one-time keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0892—Network architectures or network communication protocols for network security for authentication of entities by using authentication-authorization-accounting [AAA] servers or protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/162—Implementing security features at a particular protocol layer at the data link layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H04W12/041—Key generation or derivation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/062—Pre-authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W80/00—Wireless network protocols or protocol adaptations to wireless operation
    • H04W80/04—Network layer protocols, e.g. mobile IP [Internet Protocol]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Eye Examination Apparatus (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Un método para operar un nodo (proxy AAA) para efectuar la transferencia entre redes de acceso en donde un usuario se ha autenticado para acceso de red en una primera red de acceso (AN1). El método comprende recibir desde una red local una primera clave de sesión y un identificador temporal asignado al usuario para la duración de una sesión de comunicación. El identificador es mapeado para la primera clave de sesión, y el identificador mapeádo y la clave son almacenados en el nodo. Una segunda clave de sesión .es derivada a partir de la primera clave de sesión y la segunda clave de sesión es enviada a una red de acceso, y el identificador enviado a una terminal de usuario, cuando el usuario se mueve de manera subsecuente hacia una segunda red de acceso (AN2), el nodo recibe el identificador desde la terminal de usuario. El nodo recupera entonces la primera clave de sesión mapeada para el identificador recibido, deriva una tercera clave de sesión y envía la tercera clave de sesión hacia la segunda red de acceso.
MX2009006380A 2006-12-19 2006-12-19 Manejo de acceso de usuario en una red de comunicaciones. MX2009006380A (es)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/EP2006/069906 WO2008074366A1 (en) 2006-12-19 2006-12-19 Managing user access in a communications network

Publications (1)

Publication Number Publication Date
MX2009006380A true MX2009006380A (es) 2009-06-23

Family

ID=38487305

Family Applications (1)

Application Number Title Priority Date Filing Date
MX2009006380A MX2009006380A (es) 2006-12-19 2006-12-19 Manejo de acceso de usuario en una red de comunicaciones.

Country Status (7)

Country Link
US (4) US8462947B2 (es)
EP (1) EP2095596B1 (es)
JP (1) JP5144679B2 (es)
AT (1) ATE460817T1 (es)
DE (1) DE602006012888D1 (es)
MX (1) MX2009006380A (es)
WO (1) WO2008074366A1 (es)

Families Citing this family (38)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8332912B2 (en) * 2007-01-04 2012-12-11 Telefonaktiebolaget Lm Ericsson (Publ) Method and apparatus for determining an authentication procedure
US10171998B2 (en) * 2007-03-16 2019-01-01 Qualcomm Incorporated User profile, policy, and PMIP key distribution in a wireless communication network
US8331906B2 (en) * 2007-12-19 2012-12-11 Nokia Corporation Methods, apparatuses, system, and related computer program products for handover security
US8750506B2 (en) * 2008-07-31 2014-06-10 Telefonaktiebolaget Lm Ericsson (Publ) Methods, nodes, system, computer programs and computer program products for secure user subscription or registration
GB2464260B (en) * 2008-10-02 2013-10-02 Motorola Solutions Inc Method, mobile station, system and network processor for use in mobile communications
US20100172500A1 (en) * 2009-01-05 2010-07-08 Chih-Hsiang Wu Method of handling inter-system handover security in wireless communications system and related communication device
KR101655264B1 (ko) * 2009-03-10 2016-09-07 삼성전자주식회사 통신시스템에서 인증 방법 및 시스템
US10057239B2 (en) * 2009-12-17 2018-08-21 Pulse Secure, Llc Session migration between network policy servers
CN102131191A (zh) * 2010-01-15 2011-07-20 中兴通讯股份有限公司 实现密钥映射的方法及认证服务器、终端、系统
US8737354B2 (en) * 2011-01-10 2014-05-27 Alcatel Lucent Method of data path switching during inter-radio access technology handover
US20130291083A1 (en) * 2011-05-31 2013-10-31 Feitian Technologiesco., Ltd Wireless smart key device and signing method thereof
US9240984B2 (en) * 2011-07-25 2016-01-19 Qterics, Inc. Configuring an electronic device based on a transaction
TWI428031B (zh) 2011-10-06 2014-02-21 Ind Tech Res Inst 區域網協存取網路元件與終端設備的認證方法與裝置
US9277589B2 (en) * 2012-05-15 2016-03-01 Telefonaktiebolaget L M Ericsson (Publ) Wireless access point connected to two communication networks
JP5464232B2 (ja) * 2012-05-23 2014-04-09 沖電気工業株式会社 セキュア通信システム及び通信装置
US9167050B2 (en) * 2012-08-16 2015-10-20 Futurewei Technologies, Inc. Control pool based enterprise policy enabler for controlled cloud access
US9167427B2 (en) * 2013-03-15 2015-10-20 Alcatel Lucent Method of providing user equipment with access to a network and a network configured to provide access to the user equipment
WO2014185832A1 (en) * 2013-05-13 2014-11-20 Telefonaktiebolaget L M Ericsson (Publ) Mobility in mobile communications network
US9930613B2 (en) * 2013-07-08 2018-03-27 Convida Wireless, Llc Connecting IMSI-less devices to the EPC
US9124563B2 (en) * 2013-08-19 2015-09-01 Gemalto Sa Method for asynchronously provisioning keys from one secure device to another
WO2015056009A1 (en) * 2013-10-17 2015-04-23 Arm Ip Limited Method of establishing a trusted identity for an agent device
US9860235B2 (en) 2013-10-17 2018-01-02 Arm Ip Limited Method of establishing a trusted identity for an agent device
US10069811B2 (en) 2013-10-17 2018-09-04 Arm Ip Limited Registry apparatus, agent device, application providing apparatus and corresponding methods
US9307405B2 (en) * 2013-10-17 2016-04-05 Arm Ip Limited Method for assigning an agent device from a first device registry to a second device registry
GB2529838B (en) 2014-09-03 2021-06-30 Advanced Risc Mach Ltd Bootstrap Mechanism For Endpoint Devices
GB2530028B8 (en) 2014-09-08 2021-08-04 Advanced Risc Mach Ltd Registry apparatus, agent device, application providing apparatus and corresponding methods
WO2017015752A1 (en) * 2015-07-24 2017-02-02 Radio Ip Software Inc. Mobile communication system and pre-authentication filters
GB2540989B (en) 2015-08-03 2018-05-30 Advanced Risc Mach Ltd Server initiated remote device registration
GB2540987B (en) 2015-08-03 2020-05-13 Advanced Risc Mach Ltd Bootstrapping without transferring private key
CN107040922B (zh) * 2016-05-05 2019-11-26 腾讯科技（深圳）有限公司 无线网络连接方法、装置及系统
US11206251B2 (en) * 2018-05-11 2021-12-21 Sony Mobile Communications Inc. System and method for communicating information about a serviceable item
US11082838B2 (en) * 2018-08-06 2021-08-03 Charter Communications Operating, Llc Extensible authentication protocol with mobile device identification
GB2579571B (en) 2018-12-03 2021-05-12 Advanced Risc Mach Ltd Device bootstrapping
GB2579574B (en) 2018-12-03 2021-08-11 Advanced Risc Mach Ltd Bootstrapping with common credential data
US11475134B2 (en) 2019-04-10 2022-10-18 Arm Limited Bootstrapping a device
EP3944581A1 (en) * 2020-07-21 2022-01-26 Mastercard International Incorporated Authentication method and system
US20230319545A1 (en) * 2020-07-31 2023-10-05 Lenovo (Singapore) Pte. Ltd. Dynamic user equipment identifier assignment
US11722893B2 (en) * 2021-04-27 2023-08-08 Charter Communications Operating Llc Anonymous network access in a network environment

Family Cites Families (45)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5943424A (en) * 1996-06-17 1999-08-24 Hewlett-Packard Company System, method and article of manufacture for processing a plurality of transactions from a single initiation point on a multichannel, extensible, flexible architecture
US6002767A (en) * 1996-06-17 1999-12-14 Verifone, Inc. System, method and article of manufacture for a modular gateway server architecture
US5915021A (en) * 1997-02-07 1999-06-22 Nokia Mobile Phones Limited Method for secure communications in a telecommunications system
US20030140007A1 (en) * 1998-07-22 2003-07-24 Kramer Glenn A. Third party value acquisition for electronic transaction settlement over a network
FI20000760A0 (fi) * 2000-03-31 2000-03-31 Nokia Corp Autentikointi pakettidataverkossa
US7305478B2 (en) * 2000-06-08 2007-12-04 Symbol Technologies, Inc. Bar code symbol ticketing for authorizing access in a wireless local area communications network
US8996698B1 (en) 2000-11-03 2015-03-31 Truphone Limited Cooperative network for mobile internet access
JP2002247047A (ja) * 2000-12-14 2002-08-30 Furukawa Electric Co Ltd:The セッション共有鍵共有方法、無線端末認証方法、無線端末および基地局装置
US20050198379A1 (en) * 2001-06-13 2005-09-08 Citrix Systems, Inc. Automatically reconnecting a client across reliable and persistent communication sessions
US8140845B2 (en) * 2001-09-13 2012-03-20 Alcatel Lucent Scheme for authentication and dynamic key exchange
JP4170912B2 (ja) * 2001-11-29 2008-10-22 シーメンス アクチエンゲゼルシヤフト ネットワークプロバイダ及びビジネスパートナーに対する遠隔通信加入者の認証及び許可のための端末における公開鍵ペアの利用
US8630414B2 (en) * 2002-06-20 2014-01-14 Qualcomm Incorporated Inter-working function for a communication system
GB2392590B (en) * 2002-08-30 2005-02-23 Toshiba Res Europ Ltd Methods and apparatus for secure data communication links
US20050044385A1 (en) * 2002-09-09 2005-02-24 John Holdsworth Systems and methods for secure authentication of electronic transactions
GB0221674D0 (en) * 2002-09-18 2002-10-30 Nokia Corp Linked authentication protocols
KR100480258B1 (ko) * 2002-10-15 2005-04-07 삼성전자주식회사 무선 근거리 네트워크에서 고속 핸드오버를 위한 인증방법
US7318235B2 (en) * 2002-12-16 2008-01-08 Intel Corporation Attestation using both fixed token and portable token
JP4270888B2 (ja) * 2003-01-14 2009-06-03 パナソニック株式会社 Ｗｌａｎ相互接続におけるサービス及びアドレス管理方法
US20040236939A1 (en) 2003-02-20 2004-11-25 Docomo Communications Laboratories Usa, Inc. Wireless network handoff key
KR100581590B1 (ko) * 2003-06-27 2006-05-22 주식회사 케이티 이중 요소 인증된 키 교환 방법 및 이를 이용한 인증방법과 그 방법을 포함하는 프로그램이 저장된 기록매체
EP1531645A1 (en) 2003-11-12 2005-05-18 Matsushita Electric Industrial Co., Ltd. Context transfer in a communication network comprising plural heterogeneous access networks
US7551914B2 (en) * 2003-12-24 2009-06-23 Telefonaktiebolaget Lm Ericsson (Publ) Authentication in a communication network
KR100606063B1 (ko) * 2004-03-16 2006-07-26 삼성전자주식회사 고속 데이터 전용 시스템에서 단말의 서브넷 이동에 따른임시식별자 할당방법 및 장치
GB0409496D0 (en) * 2004-04-28 2004-06-02 Nokia Corp Subscriber identities
GB0409704D0 (en) * 2004-04-30 2004-06-02 Nokia Corp A method for verifying a first identity and a second identity of an entity
US7836305B2 (en) * 2004-05-06 2010-11-16 Telefonaktiebolaget L M Ericsson (Publ) Method of and system for storage of I-WLAN temporary identities
US7502331B2 (en) * 2004-11-17 2009-03-10 Cisco Technology, Inc. Infrastructure-less bootstrapping: trustless bootstrapping to enable mobility for mobile devices
KR100762644B1 (ko) 2004-12-14 2007-10-01 삼성전자주식회사 Ｗｌａｎ-ｕｍｔｓ 연동망 시스템과 이를 위한 인증 방법
JP4703238B2 (ja) * 2004-12-15 2011-06-15 パナソニック株式会社 無線網制御装置、無線ｌａｎ中継装置、無線通信システム及び無線通信システムの通信方法
US8726023B2 (en) * 2005-02-03 2014-05-13 Nokia Corporation Authentication using GAA functionality for unidirectional network connections
US7715822B2 (en) * 2005-02-04 2010-05-11 Qualcomm Incorporated Secure bootstrapping for wireless communications
FI20050384A0 (fi) * 2005-04-14 2005-04-14 Nokia Corp Geneerisen todentamisarkkitehtuurin käyttö Internet-käytäntöavainten jakeluun matkaviestimissä
FI20050393A0 (fi) * 2005-04-15 2005-04-15 Nokia Corp Avainmateriaalin vaihto
CN1870808A (zh) * 2005-05-28 2006-11-29 华为技术有限公司 一种密钥更新方法
US8621201B2 (en) * 2005-06-29 2013-12-31 Telecom Italia S.P.A. Short authentication procedure in wireless data communications networks
WO2007004051A1 (en) * 2005-07-06 2007-01-11 Nokia Corporation Secure session keys context
US7725717B2 (en) * 2005-08-31 2010-05-25 Motorola, Inc. Method and apparatus for user authentication
US9066344B2 (en) * 2005-09-19 2015-06-23 Qualcomm Incorporated State synchronization of access routers
US8910271B2 (en) * 2005-10-27 2014-12-09 Samsung Electronics Co., Ltd System and method for handover between interworking WLAN and EUTRAN access systems
US9473265B2 (en) * 2005-12-22 2016-10-18 Qualcomm Incorporated Methods and apparatus for communicating information utilizing a plurality of dictionaries
DE602006009846D1 (de) * 2006-01-24 2009-11-26 British Telecomm Public Ltd Co Verfahren und system zur rekursiven authentifikation in einem mobilnetz
US8006089B2 (en) * 2006-02-07 2011-08-23 Toshiba America Research, Inc. Multiple PANA sessions
US7571471B2 (en) * 2006-05-05 2009-08-04 Tricipher, Inc. Secure login using a multifactor split asymmetric crypto-key with persistent key security
ATE538581T1 (de) * 2006-06-20 2012-01-15 Ericsson Telefon Ab L M Verfahren und anordnung zum sicherstellen von präfix-einheitlichkeit zwischen mehreren mobil- routern
DE102014202826A1 (de) * 2014-02-17 2015-08-20 Robert Bosch Gmbh Teilnehmerstation für ein Bussystem und Verfahren zur Erhöhung der Datenrate eines Bussystems

Also Published As

Publication number Publication date
US20150026458A1 (en) 2015-01-22
US20090313466A1 (en) 2009-12-17
EP2095596A1 (en) 2009-09-02
US9553875B2 (en) 2017-01-24
US20140023194A1 (en) 2014-01-23
JP2010514288A (ja) 2010-04-30
EP2095596B1 (en) 2010-03-10
US8885831B2 (en) 2014-11-11
WO2008074366A1 (en) 2008-06-26
DE602006012888D1 (de) 2010-04-22
US10425808B2 (en) 2019-09-24
JP5144679B2 (ja) 2013-02-13
ATE460817T1 (de) 2010-03-15
US20170134941A1 (en) 2017-05-11
US8462947B2 (en) 2013-06-11

Similar Documents

Publication Publication Date Title
MX2009006380A (es) Manejo de acceso de usuario en una red de comunicaciones.
MX2020013800A (es) Metodos que proporcionan cambio de anclaje para sesiones de pdu de ethernet y entidades/nodos de red relacionados.
JP5123407B2 (ja) アドホック無線通信網におけるピアツーピア通信
JP6068648B2 (ja) トランキングサービスを迅速に確立するための方法、関連する装置及びシステム
CA2940534A1 (en) Secure and simplified procedure for joining a social wi-fi mesh network
WO2009114643A3 (en) Providing multiple levels of service for wireless communication
TW200503495A (en) Provisioning server information in a mobile station
EP4561135A3 (en) User equipment (ue) identifier request
ATE358934T1 (de) Paketdatenprotokoll-kontextaktivierung für umherstreifende teilnehmer
WO2008110902A3 (en) Method and system for global anchor registration
WO2007102702A3 (en) Fast re-authentication method in umts
US10129208B2 (en) Methods providing public reachability and related systems and devices
JP2010537481A5 (es)
MY152719A (en) Method for providing a roaming service between heterogenous networks and system therefor.
WO2009065923A3 (en) Method and apparatus for establishing a cryptographic relationship in a mobile communications network
CN101707773B (zh) Wlan接入网关、移动网与无线宽带网的融合方法和系统
CN102026364A (zh) 精确时间协议报文处理方法和时钟设备
GB0321416D0 (en) Charging for multimedia services
EP4539550A3 (en) Configuring access control parameters in wireless communications
CN108601093B (zh) 一种无线通信方法及系统
EP2456156B1 (en) Attachment method and system with identifier and location splitting in next generation network
DE60138414D1 (de) Aoc in ganz ip netze
EP3758401A1 (en) Method and device for obtaining local domain name
MX2024007817A (es) Metodo de autenticacion y/o gestion de claves, primer dispositivo, terminal y dispositivo de comunicacion.
CN108429628A (zh) 一种无线网络配置方法和装置

Legal Events

Date Code Title Description
FG Grant or registration