Authentication of access terminal identities in roaming networks

摘要

Various methods of authenticating an access terminal are presented in the case where the access terminal is roaming within a visited network. An access terminal sends a device authentication message to a visited validation server or a home validation server, where the device authentication message includes an access terminal identifier and authentication data generated at least in part using the validation key. In some embodiments, the authentication data may include a digital signature by a validation key associated with the access terminal identifier. Such a signature can be authenticated by either the visited validation server or the home validation server. In other embodiments, the authentication data may include an access terminal authentication token sent to the visited validation server. The visited validation server can authenticate the device authentication message by comparing the access terminal authentication token with an access terminal authentication token obtained from the home validation server.

主权项

1. A method operational on an access terminal for facilitating device authentication of the access terminal while roaming within a visited network, comprising:
obtaining a validation key associated with an access terminal equipment identifier of the access terminal, wherein the access terminal equipment identifier includes an International Mobile Equipment Identity (IMEI) or a Mobile Equipment Identity (MEID); generating a device authentication message including the access terminal equipment identifier, at least one nonce, and authentication data generated at least in part using the validation key; obtaining limited access to the visited network fro the purposes of transmitting the device authentication message through the visited network to a home validation server of a home network of the access terminal and then transmitting the device authentication message through the visited network to the home validation server to authenticate the access terminal as an authorized access terminal for accessing the visited network; and receiving a notification granting or denying the access terminal access to the visited network based on validation of the device authentication message.