Authenticating a communication device and a user of the communication device in an IMS network

摘要

IMS networks and methods are disclosed for authenticating a communication device and a user of the communication device. When a communication device attempts to register with an IMS network, the IMS network receives a register message from the device that includes device authentication information, such as a public or private identifier for the device. The IMS network processes the device authentication information to authenticate the communication device. The IMS network also receives user authentication information from the device, such as a password. The IMS network processes the user authentication information to authenticate the user of the device. The device and the user are both authenticated by the IMS network. Authentication of the user may also occur when originating a session or terminating a session over the IMS network with the device.

主权项

1. A system comprising:
a Serving-Call Session Control Function (S-CSCF) of an IP Multimedia Subsystem (IMS) network; the S-CSCF is configured to receive a first message from a device to register the device with the IMS network, wherein the first message includes a Public Identifier (PUID) for the device; the S-CSCF is configured to transmit a second message to a Home Subscriber Server (HSS) of the IMS network with the PUID for the device, to receive a third message from the HSS with passwords that are mapped to the PUID, and to transmit a fourth message to the device to challenge the device for an authentication check; the S-CSCF is configured to receive a fifth message from the device with an authentication response to authenticate the device; the S-CSCF is configured to transmit a sixth message to the device to challenge a user of the device for a password, to receive a seventh message from the device that includes the password input by the user, to compare the password input by the user with the passwords mapped to the PUID, to authenticate the user as an authorized user of the device only when the password input by the user matches the passwords mapped to the PUID, and to register both the user and the device when the user is authenticated.