Patent ID: 9641525
Date: 2017-05-02
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method comprising creating, during a first authentication procedure, a first authentication request for authenticating a user equipment towards a communication network providing connectivity for the user equipment across an unsecured access network, wherein the authentication request is an authentication request of a key information exchange mechanism and authentication data is inserted in the authentication request, the authentication data comprising identity information of the user equipment, sending, during the first authentication procedure, the first authentication request for authenticating the user equipment with the communication network based on the authentication data, sending, during a second authentication procedure, after authentication with the communication network, a second authentication request for authenticating the user equipment towards a packet data network external to the communications network, sending, during the second authentication procedure, a third authentication request comprising the identity information of user equipment obtained during the first authentication procedure, to be authenticated and authorized with the packet data network external to the communications network, and sending, during the second authentication procedure, a fourth authentication request comprising a challenge handshake authentication protocol password and challenge handshake authentication protocol attributes of the user equipment to be authenticated and authorized with the packet data network external to the communication network, wherein the fourth authentication request triggers a gateway of the communication network to generate a proxy binding update message comprising the identity information of the user equipment from the first authentication procedure, and the challenge handshake authentication protocol password and the challenge handshake authentication protocol attributes from the second authentication procedure, wherein the second authentication request comprises additional authentication parameters in dedicated information elements other than protocol configuration options information elements, and wherein the additional authentication parameters comprise at least a password authentication protocol password information element, and a username information element that is different from the identity information of the user equipment, and wherein the method further comprises inserting in the first authentication request an indication that multiple authentications are supported.