SERVING NETWORK AUTHENTICATION

摘要

A method, an apparatus, and a computer program product for wireless communication are provided. The method may include establishing a connection with a serving network, transmitting an encrypted authentication credential that includes a randomly selected key encryption key (KEK) and a serving network identifier to the serving network, receiving authentication information and a signature from the serving network, and authenticating the serving network by verifying the signature based on the KEK. The encrypted authentication credential may be operative to identify the serving network. The signature may be generated using the KEK.

主权项

1. A method for wireless communication at a user equipment (UE), comprising:
establishing by the UE a connection with a serving network; transmitting by the UE a first message comprising an authentication credential that includes a randomly selected key encryption key (KEK) and a serving network identifier to the serving network, wherein the authentication credential is encrypted using an encryption key associated with a home network; receiving by the UE a second message responsive to the first message, wherein the second message includes an authentication request from the serving network and a signature generated by a node of the serving network using the KEK; and authenticating by the UE the serving network based on the signature.