Identity management with generic bootstrapping architecture

摘要

A federated management identity protocol may be used with various protocols such as, for example, the Generic Bootstrapping Architecture (GBA). For example, OpenID Connect may be integrated with GBA such that the GBA protocol implements the authentication functionality of OpenID Connect. In various example embodiments, functionality of the OpenID Connect protocol and GBA may be implemented locally, such as by a secure module within a user equipment.

主权项

1. A method performed by user equipment (UE) in a system comprising the UE a service provider (SP), and an authentication endpoint (AEP), which communicate with each other via a network, the method comprising:
requesting access to a service that is provided by the SP; in response to requesting access to the service, receiving a request for a token; receiving a request that the UE use a generic bootstrapping architecture (GBA) protocol for authentication of the UE; in response to the request for the token, creating an identity (ID) token; and signing the ID token using a token key in accordance with the GBA protocol to create a signature of the ID token, wherein the signature is verified to provide the UE access to the service, and the ID token includes a header indicating that the ID token was created locally at the UE.