Authentication

1. A method of authenticating a user in a communication network, comprising:

contacting an authentication entity in a first authentication of a user seeking access to the communication network;

supplying to the user first information comprising a first sub-fraction and a second sub-fraction, the first and second sub-fractions of the first information each being separately generated based on privacy information of the user and shared information, the shared information being shared among all access nodes of a group of access nodes and including a first shared key and a second shared key, the first shared key to provide encryption for the first information while the second shared key is to provide integrity check or other trustiness checks of the first information, the group of access nodes including at least a first access node and a second access node; and

verifying the privacy information in a second authentication of the user by applying the second shared key to the second sub-fraction of the first information to provide the integrity check or the other trustiness checks.

2. The method according to claim 1 , wherein the first authentication of the user is performed when the user seeks to connect to the communication network at the first access node and wherein the second authentication is performed when the user seeks to connect to the communication network at the second access node.

3. The method according to claim 1 , further comprising: transferring the privacy information from the user to the second access node during a hand-off of the user from the first access node to the second access node; and authenticating the user for the second access node based on the verifying of the privacy information.

4. The method according to claim 1 , wherein the privacy information is a first key generated during the authenticating of the user and wherein generating the first information comprises encrypting at least the first key by using the first shared key.

5. The method according to claim 4 , wherein generating the first information comprises encrypting the first key and a first identifier of the user.

6. The method according to claim 5 , wherein verifying the privacy information comprises:

decrypting the first information by using the first shared key, thereby retrieving the first key and the first identifier;

decrypting with the retrieved first key second encoded information thereby retrieving a second identifier included in the second encoded information; and

verifying whether the first identifier retrieved from decrypting the first information matches the second identifier retrieved from the second encoded information.

7. The method according to claim 6 , wherein the second encoded information is part of a message of a 4-way handshake protocol.

8. The method according to claim 6 , wherein the second encoded information further includes at least one of the following:

a Nonce for generating a master key pair; and

a timestamp.

9. The method according to claim 1 , wherein the privacy information is a part of a transient key pair.

10. The method according to claim 1 , further comprising:

generating a new first information, the newly generated first information being different than a previous the first information; and

transferring the newly generated first information to the user, the method further comprising:

verifying the user based on the newly generated first information.

11. The method according to claim 1 , further comprising:

generating a master key pair when the first information is verified;

generating a transient key pair based on the master key pair;

newly generating the privacy information based on the transient key pair;

newly generating the first information based on the newly generated privacy information and the shared information;

transferring the newly generated first information to the user;

authenticating the user based on the newly generated information by verifying the newly generated information.

12. The method according to claim 1 , wherein the first information is generated by using a secret key and wherein in the second authentication the secret key is retrieved from the first information by decrypting the first information using the shared information.

13. The method according to claim 12 , further comprising using the retrieved secret key in the second authentication mode to decrypt further information transmitted from the user.

14. The method according to claim 13 , wherein the further information from the user comprises an identifier of the user.

15. The method according to claim 1 , wherein the verifying of the privacy information indicates to the access node that the user has been authenticated by the first authentication.

16. A communication system, comprising:

a first access node; and

a second access node;

wherein the first access node is configured to provide a first authentication to a user, the first authentication being based on utilizing an authentication entity;

the first access node being further configured to supply to the user first information comprising a first sub-fraction and a second sub-fraction, the first sub-fraction and the second sub-fraction of the first information each being separately generated based on privacy information of the user and shared information, the shared information being shared among at least the first access node and the second access node of the communication system and including a first shared key and a second shared key, the first shared key to provide encryption for the first information while the second shared key is to provide integrity check or other trustiness checks of the first information; and

wherein the second access node is configured to authenticate the user in a second authentication, the second access node comprising an entity to verify the first information based on applying the second shared key to the second sub-fraction of the first information to provide the integrity check or the other trustiness checks.