Patent ID: 8583923

Claim:
A process for authentication of a method between a client and a server, comprising: a) employing a method which has no authentication mechanism between a client and a server; b) performing a capabilities exchange between the client and the server regarding employing an extended EAP functionality; c) upon confirmation of the client and the server's extended EAP functionality capability having said method rely on an inner authentication method in order to authenticate the client; d) wherein said method is a first EAP method having no authentication mechanism that carries a second EAP method inside, said second EAP method being used to authenticate the client; e) creating a cryptographic binding between said first and second EAP methods by deriving EAP keying material for said first EAP method based on EAP keying material generated by said second EAP method, and f) wherein the process includes employing multiple inner EAP methods that are sequentially run inside the EAP extension method and generating a new EAP extension key each time an inner EAP method in the sequence generates keying material.