Patent ID: 8185091
Filing Date: 2012-05-22
Classification: H04L,H04W

Abstract:
1. A network access authentication and authorization method comprising: constructing an access and authorization request packet and sending the access and authorization request packet to a base station, BS, by a mobile station, MS, when the MS is connected to the BS; constructing a certificate authentication request packet and sending the certificate authentication request packet to an authentication server unit, ASU, by the BS, after the BS receives the access and authorization request packet; authenticating validity of a MS certificate, or authenticating validity of the MS certificate and a BS certificate, and constructing a certificate authentication response packet according to an authentication result and sending the certificate authentication response packet to the BS, by the ASU, after the ASU receives the certificate authentication request packet; constructing an access and authorization response packet that includes encrypted text E deriving an authorization key AK with a plain text of an authorization key material AKM that is decrypted with a private key of the MS and random numbers selected by the MS and the BS, deriving a key encryption key and an integrity check key from the authorization key AK, constructing an access and authorization acknowledgement packet that includes a message integrity code MIC calculated with the derived integrity check key, and sending the access and authorization acknowledgement packet to the BS, by the MS, after the MS receives the access and authorization response packet.