Support of UICC-less calls

1. A method comprising:

initiating a session from a subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module;

forming a temporary identification of the subscriber terminal;

based at least in part on the temporary identification, performing a server authentication without performing client authentication,

wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the subscriber terminal,

wherein the user identifier is created based at least in part on one of an international mobile equipment identity, a media access control address of the subscriber terminal, and an internet address assigned by an access network element to the subscriber terminal.

2. The method according to claim 1 , wherein the server authentication comprises the use of an extensible authentication protocol transport level security (EAP/TLS) protocol or internet key exchange (IKE) protocol.

3. The method according to claim 1 , wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the subscriber terminal.

4. The method according to claim 3 , wherein the specific indication indicates an emergency.

5. The method according to claim 3 , wherein the user identifier is created based on at least one of:

a terminal identifier;

a media access control address of the subscriber terminal; and

an internet protocol address assigned by an access network element to the subscriber terminal.

6. A method comprising:

initiating a session from a subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module;

forming a temporary identification of the subscriber terminal;

based at least in part on the temporary identification, performing a server authentication without performing client authentication,

wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the subscriber terminal

wherein the user identifier is created based at least in part on a combination of at least one of:

a media access control address of the subscriber terminal and a network identifier; and a hashed combination of the media access control address and the network identifier.

7. A method comprising:

sending an authentication request to a subscriber terminal for authenticating a session initiated from the subscriber terminal;

receiving an authentication response/identity message from the subscriber terminal, wherein the authentication response/identity message comprises a temporary identification of the subscriber terminal; and

authenticating the session based at least in part on the temporary identification of the subscriber terminal, wherein a server authentication is performed but client authentication is omitted,

wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for the session initiated by the subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module,

wherein the user identifier is created based at least in part on one of an international mobile equipment identity, a media access control address and an internet address assigned by an access network element to the subscriber terminal.

8. The method according to claim 7 , further comprising generating a shared master session key which can be used for user data ciphering.

9. The method according to claim 7 , wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for the session initiated by the subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module.

10. The method according to claim 7 , further comprising:

checking whether there is already a session for the subscriber terminal; and rejecting a new session in case there is already a session.

11. An apparatus, comprising:

at least one processor; and

at least one memory including computer program code

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:

initiating a session, wherein the apparatus does not comprise a specific user identification module;

forming a temporary identification; and

based at least in part on the temporary identification, performing a server authentication without performing client authentication,

wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the apparatus,

wherein the user identifier is created based at least in part on one of an international mobile equipment identity, a media access control address of the subscriber terminal, and an internet address assigned by an access network element to the apparatus.

12. The apparatus according to claim 11 , wherein the authentication comprises the use of an extensible authentication protocol transport level security (EAP/TLS) protocol or internet key exchange (IKE) protocol.

13. The apparatus according to claim 11 , wherein a master session key is generated which can be used for user data ciphering.

14. The apparatus according to claim 11 , wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the apparatus.

15. The apparatus according to claim 14 , wherein the specific indication indicates an emergency.

16. An apparatus, comprising:

at least one processor; and

at least one memory including computer program code

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:

sending an authentication request to a subscriber terminal;

receiving an authentication response/identity message from the subscriber terminal,

wherein the authentication response/identity message comprises a temporary identification of the subscriber terminal; and

carrying out an authentication based at least in part on the temporary identification,

wherein a server authentication is performed but client authentication is omitted,

wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module,

wherein the user identifier is based at least in part on one of an international mobile equipment identity, a media access control address of the subscriber terminal and an internet protocol address assigned by an access network element to the subscriber terminal.

17. The apparatus according to claim 16 , wherein the processor is further configured to generate a master session key, wherein the master session key is generated for user data ciphering.

18. The apparatus according to claim 16 , wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module.

19. The apparatus according to claim 18 , wherein the specific indication indicates an emergency.

20. The apparatus according to claim 16 , wherein the processor is configured to check whether there is already a session for the subscriber terminal, and to reject a new session in case there is already a session.

21. A computer-readable medium encoded with instructions that, when executed by a computer, perform:

initiating a session for emergency service from a subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module;

creating a temporary identification of the subscriber terminal;

based at least in part on the temporary identification, performing a server authentication without performing client authentication,

wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for a session initiated by the subscriber terminal,

wherein the user identifier is created based at least in part on one of an international mobile equipment identity, a media access control address of the subscriber terminal, and an internet address assigned by an access network element to the subscriber terminal.

22. A computer-readable medium encoded with instructions that, when executed by a computer, perform:

sending an authentication request to a subscriber terminal for authenticating a session for emergency service initiated from the subscriber terminal;

receiving an authentication response/identity message from the subscriber terminal, wherein the authentication response/identity message comprises a temporary identification of the subscriber terminal; and

authenticating the session based at least in part on the temporary identification of the subscriber terminal, wherein a server authentication is performed but client authentication is omitted,

wherein the temporary identification comprises a user identifier and a realm, the realm comprising a specific indication for the session initiated by the subscriber terminal, wherein the subscriber terminal does not comprise a specific user identification module,

wherein the user identifier is created based at least in part on one of an international mobile equipment identity, a media access control address and an internet address assigned by an access network element to the subscriber terminal.