| 摘要 |
A method and apparatus for performing device authentication and user authentication in a mobile communication network are provided. A connection is established between an MS and an SRNC that controls communications of the MS through a BS. The SRNC receives a D-MSK for device authentication of the MS from an AAA server that has completed an EAP negotiation with the MS and stores the D-MSK by the SRNC, when the BS triggers an EAP authentication after the connection establishment. The SRNC receives an R-MSK from an AG and stores the R-MSK after the connection establishment. The R-MSK is generated using a U-MSK for user authentication of the MS received from the AAA server by the AG. The SRNC generates a PMK for use during a session using at least one of the D-MSK and the R-MSK, and one of the BS and the SRNC generate a key set using the PMK, for use in at least one of data encryption, data integrity check, and session management during the session. |
