Patent ID: 8433286

Claim:
A method for performing device authentication and user authentication of a Mobile Station (MS) in a mobile communication network, comprising the steps of: establishing a connection between the MS and a Signaling Radio Network Controller (SRNC) that controls communications of the MS through a Base Station (BS); receiving a Device-Master Session Key (D-MSK) for device authentication of the MS from an Authentication, Authorization and Accounting (AAA) server that has completed an Extensible Authentication Protocol (EAP) negotiation with the MS and storing the D-MSK by the SRNC, when the BS triggers an EAP authentication after the connection establishment; receiving a Root-MSK (R-MSK) from an Access Gateway (AG) and storing the R-MSK by the SRNC after the connection establishment, the R-MSK being generated using a User-MSK (U-MSK) for user authentication of the MS received from the AAA server by the AG; generating a Pairwise Master Key (PMK) for use during a session using at least one of the D-MSK and the R-MSK by the SRNC; generating a key set using the PMK by one of the BS and the SRNC, for use in at least one of data encryption, data integrity check, and session management during the session; transmitting a path setup request message for a bearer setup to the AG by the BS, after the key set generation; and completing signaling for the bearer setup in response to the path setup message and transmitting a path setup response message to the BS by the AG.