Patent ID: 8949944
Filing Date: 2015-02-03
Classification: H04L,H04W

Abstract:
1. A method for multi-access authentication in Next Generation Network (NGN), a network side authentication center and an access node being provided at a network side, and the access node comprising an access forwarding functional module and an access managing functional module; the method comprising: generating, by the network side authentication center, an authentication vector after receiving user terminal information from a user terminal; wherein the user terminal information comprises subscription information and multi-access information of the user terminal; performing, by the user terminal, authentication on the network side after receiving an authentication request from the network side authentication center, and generating keying material and network side authentication information according to the multi-access information of the user terminal itself upon successful authentication, and sending the network side authentication information to the network side authentication center; wherein the authentication request comprises authentication information; performing, by the network side authentication center, authentication on the network side authentication information using the authentication vector; generating keying material according to the multi-access information of the user terminal upon successful authentication; and acquiring, by the access forwarding functional module, the keying material from the network side authentication center or the access managing functional module, and encrypting and decrypting access service information of the user terminal using the keying material, wherein generating keying material according to the multi-access information of the user terminal itself comprises: generating, by the user terminal, keying material for each access interface according to the multi-access information of the user terminal itself; generating keying material according to the multi-access information of the user terminal upon successful authentication comprises: generating, by the network side authentication center, keying material for each access interface according to the multi-access information of the user terminal; and acquiring, by the access forwarding functional module, the keying material from the network side authentication center comprises: sending, by the network side authentication center, the keying material directly to the access forwarding functional module, or sending the keying material to the access forwarding functional module via the access managing functional module.