Patent ID: 8230213
Filing Date: 2012-07-24
Classification: H04L,H04W

Abstract:
1. A method for protecting a bootstrapping service function (BSF) entity from attack, comprising: sending, by a user equipment (UE), an authentication request to a BSF entity, wherein the authentication request carries an initial temporary identity, wherein the BSF entity checks whether the BSF entity stores a user's private identity correlatively with the initial temporary identity, and wherein the BSF entity requests a home subscriber server (HSS) for authentication information through the user's private identity if the BSF entity stores the user's private identity; performing, by the UE, a mutual authentication with the BSF entity by using the authentication information returned by the HSS; obtaining, by the UE, a first temporary identity and a second temporary identity after the UE performs the mutual authentication with the BSF entity, wherein the first temporary identity is different from the second temporary identity, and wherein the first and second temporary identities are different than the initial temporary identity; sending, by the UE, a request carrying the first temporary identity to the BSF entity; and sending, by the UE, a service request carrying the second temporary identity to a network application function (NAF) entity.