Patent ID: 7735126
Filing Date: 2010-06-08
Classification: G06Q,H04L,H04W

Abstract:
1. A method for providing authentication, authorization, and accounting (AAA) in a first network for a mobile device that is associated with a second network, the first and second networks having respective AAA schemes, comprising the steps of: receiving, by the first network and the mobile device, a first key from the second network; receiving, by the mobile device, a first certificate from the second network, the first certificate includes an identifier (ID) associated with the second network, a public key associated with the mobile device, and a subscription level of the mobile device with the first network, the subscription level indicating whether the mobile device is a subscriber of an interworking service; receiving, by the first network, from the second network, a second certificate which includes a public key associated with the first network, the second certificate signed with a second key of the second network; receiving, by the first network, the first certificate from the mobile device; authenticating, at the first network, the first certificate using the first key, and if the first certificate is authenticated, generating a session key by the first network, the session key having a signature using a private key of the first network, transmitting the session key and the second certificate to the mobile device by the first network, at the mobile device, validating the second certificate using the first key, extracting the public key from the second certificate, and verifying the signature of the session key using the extracted public key, and allowing the mobile device to access the first network using the session key.