Authentication and secure channel setup for communication handoff scenarios

摘要

Persistent communication layer credentials generated on a persistent communication layer at one network may be leveraged to perform authentication on another. For example, the persistent communication layer credentials may include application-layer credentials derived on an application layer. The application-layer credentials may be used to establish authentication credentials for authenticating a mobile device for access to services at a network server. The authentication credentials may be derived from the application-layer credentials of another network to enable a seamless handoff from one network to another. The authentication credentials may be derived from the application-layer credentials using reverse bootstrapping or other key derivation functions. The mobile device and/or network entity to which the mobile device is being authenticated may enable communication of authentication information between the communication layers to enable authentication of a device using multiple communication layers.

主权项

1. A method for generating an authentication credential for use in an authentication of a mobile device, the method comprising:
establishing, via an application layer between the mobile device and a network server, an application-layer credential that is shared with the network server, wherein the application-layer credential is configured to authenticate the mobile device on the application layer for receiving a service from the network server using a first network; discovering a network communication entity on a second network; and generating, based on the application-layer credential, the authentication credential for performing authentication on a communication layer of the second network, wherein the authentication at the second network enables the mobile device to switch from the first network to the second network and receive the service from the network server using the second network, the application-layer credential surviving the switch from the first network to the second network.