Patent ID: 8707041

Claim:
A method for protecting a bootstrapping service function (BSF) entity from attack, comprising: performing, by a BSF entity, a mutual authentication with a user equipment (UE) by using an initial temporary identity sent from the UE; generating, by the BSF entity, a first temporary identity and a second temporary identity, wherein the first temporary identity is different from the second temporary identity, and the first and second temporary identities are different from the initial temporary identity; sending, by the BSF entity, either of the first temporary identity and the second temporary identity to the UE; sending, by the BSF entity, a temporary identity generation indication to the UE, wherein the temporary identity generation indication is used for instructing the UE to generate an other of the first temporary identity and the second temporary identity by using an algorithm also used by the BSF to generate the other of the first temporary identity and the second temporary identity; and receiving, by the BSF entity, a re-authentication request carrying the first temporary identity from the UE; wherein, the UE sends a service request carrying the second temporary identity to a network application function (NAF) entity.