Patent ID: 8639929

Claim:
A method for authenticating a gateway, a node and a server, comprising: receiving, by the node, a request message from the gateway, the request message comprising a number T 3 shared by the gateway and the server, and a gateway identification; encrypting, by the node with a key K 1 shared by the node and the server, first data to be encrypted, including the number T 3 , the gateway identification, an indication of requiring one of the group consisting of (a) end-to-end confidentiality and (b) integrity protection and a random number T 1 generated by the node, and sending the encrypted first data and a node identification to the server through the gateway; decrypting second data, by the node, with the key K 1 , wherein the second data is data encrypted by the server and forwarded to the node by the gateway, determining, by the node, that the server is a valid server according to a T 1 -related number obtained by the decryption, and establishing a security channel with the gateway according to a new key K 2 obtained through the decryption; generating, by the node, a key K 3 which is required by the one of the group consisting of (a) end-to-end confidentiality and (b) integrity protection according to a random number T 2 obtained through the decryption, wherein the random number T 2 is generated by the server based on the indication of requiring one of the group consisting of (a) end-to-end confidentially and (b) integrity protection in the encrypted first data.