Patent ID: 8656171

Claim:
A method for configuring a key, comprising: generating, by a mobile node (MN) and an authentication authorization accounting home server (AAAH), a visited domain specific root key (DSRK) respectively; sending, by the authentication authorization accounting home server (AAAH), the visited domain specific root key (DSRK) to an authentication authorization accounting server in a visited domain (AAAV); generating, by the mobile node (MN) and the authentication authorization accounting server in the visited domain (AAAV), a domain specific media independent handover service root key (DS-MIHS-RK) by using the visited domain specific root key (DSRK) respectively; and sending, by the authentication authorization accounting server in the visited domain (AAAV), the DS-MIHS-RK to a visited domain media independent handover (MIH) authenticator.