| 摘要 |
A device/user authentication method using a single EAP(Extensible Authentication Protocol) message in a mobile communication system and an apparatus thereof are provided to execute both device authentication and user authentication simultaneously by processing a device authentication medium and a user authentication medium together using a single EAP message. An authentication server, which executes device/user authentication for a terminal executing mobile packet communication, includes a storage part(660), a message creation part(630), a message processing part(670), and an authentication part(680). The storage part(660) stores a device authentication medium and a user authentication medium for the terminal. The message creation part(630) creates a random value to be sent to the terminal, creates a request message containing the information of the random value, and transmits it to the terminal. The message processing part(670) receives a response message for the request message from the terminal, and extracts a terminal authentication code from the received response message. The authentication part(680) creates a terminal authentication code using the random value, the device authentication medium, and the user authentication medium, compares the created terminal authentication code with the extracted terminal authentication code, and executes device/user authentication for the terminal. |
