Patent ID: 8875236
Filing Date: 2014-10-28
Classification: H04L

Abstract:
1. A method comprising: receiving a session setup request initiated by an application server on behalf of a user terminal; providing information from the user terminal to an interrogation server via the application server in connection with said session setup request, the information comprising a first instance of a token derived by the user terminal and pertaining to the user terminal and the application server, and a shared secret specified for the user terminal, wherein the information from the user terminal to the interrogation server via the application server comprises an identifier specified for the authentication where the identifier is associated with a second instance of the token at a bootstrapping server; requesting and receiving from the bootstrapping server the second instance of the token pertaining to the user terminal and the application server on a basis of said identifier, verifying validity of the first instance of the token derived by the user terminal on the basis of the second instance of the token received by the bootstrapping server; responsive to the first instance of the token derived by the user terminal being valid, using at least the first instance of the token derived by the user terminal, implementing mechanisms of a generic peer authentication procedure and enabling authentication of the application server to the interrogating server, wherein the authentication comprises comparing a shared secret as provided to the user terminal to the shared secret specified for the user terminal provided in the information via the application server for the authentication; and based on the authentication, setting up a session with the application server on behalf of the user terminal, the authentication based at least in part on said information being valid.