Patent ID: 8353011

Claim:
A method, comprising: receiving from a mobile node by a bootstrapping server function of a wireless network a first message that is comprised of a list of authentication mechanisms supported by a mobile node and, in association with each authentication mechanism, a corresponding identity of a user; determining by the bootstrapping server function an authentication mechanism to be used for bootstrapping, based at least on the list received from the mobile node; sending a second message to the mobile node by the bootstrapping server function, the second message comprising the determined authentication mechanism in conjunction with a corresponding identity; receiving by the bootstrapping server function from the mobile node a third message that is at least partially integrity protected based on the determined authentication mechanism, the third message comprising at least the list of authentication mechanisms that the mobile node supports, and corresponding identities, in an integrity protected form; and if authentication is successful, and if the list received in the third message matches the list received in the first message, responding to the mobile node with a second response message that is at least partially integrity protected, where the second response message comprises an indication of the selected authentication mechanism, and corresponding identities, in an integrity protected form.