Patent ID: 8006089
Filing Date: 2011-08-23
Classification: H04L,H04W

Abstract:
1. A method for establishing multiple concurrent and independent data traffic sessions between an authentication client outside an access network and an authentication agent inside said access network, said data traffic sessions involving concurrent and independent data traffic sessions from separate user devices connected to said authentication client or to separate providers within said access network, comprising: establishing multiple concurrent and independent data traffic sessions between a PANA Authentication Client (PaC) and a PANA Authentication Agent (PAA), said data traffic sessions involving concurrent and independent data traffic sessions from separate user devices connected to said authentication client or to separate providers within said access network; said data traffic sessions being established employing two extensible authentication protocol (EAP) runs concurrently to reduce an overall authentication delay; wherein said two EAP runs are each employed for authenticating a particular device identifier of the PANA Authentication Client (PaC); wherein said two extensible authentication protocol (EAP) runs are employed for authenticating a particular device identifier of a PANA Authentication Client (PaC) in relation to connecting to multiple Service Providers at the same time or for authenticating a particular device identifier of a PANA Authentication Client (PaC) in relation to multiple users on a PaC; further including establishing multiple PANA sessions between a PANA Authentication Client (PaC) and a PANA Authentication Agent (PAA) for the same device identifier of the PaC, including 1) establishing a cryptographic binding among the multiple PANA sessions and sharing a same PaC-EP-Master-Key for an Enforcement Point for each of the multiple PANA sessions; or 2) generating a distinct PaC-EP-Master-Key for an Enforcement Point for each of the multiple PANA sessions, and establishing a distinct Security Association for each of said sessions.