Security integration between a wireless and a wired network using a wireless gateway proxy

1. A method in a wireless gateway to provide secured communications over a wireless network and a wired network, comprising:

receiving a first authentication credential from a wireless device;

mapping the first authentication credential to a second authentication credential;

transmitting the second authentication credential to an authentication server;

receiving a first authentication response from the authentication server;

generating a first shared secret and a second shared secret if the first authentication response indicates that authentication is successful; and

transmitting a second authentication response to the wireless device;

wherein the first shared secret is used to set up a first secure channel for communications with a service provider over a wired network and the second shared secret is used to set up a second secure channel for communications with the wireless device.

2. The method of claim 1 , further comprising:

decrypting a message received from the service provider to generate a decrypted message using a first session key that is generated using the first shared secret;

encrypting the decrypted message to generate an encrypted message using a second session key that is generated using the second shared secret; and

transmitting the encrypted message to the wireless device.

3. The method of claim 1 , the generating comprising:

generating a first nonce or receiving a first nonce from the authentication server if the second authentication credential is verified by the authentication server; and

generating the first shared secret using the first nonce, the second authentication credential, and confidential data from a credential server;

wherein the first shared secret is used to generate a first session key used to encrypt or decrypt communications with the service provider.

4. The method of claim 3 , further comprising:

generating a second nonce or using a second nonce received from the wireless device; and

generating the second shared secret based on the first shared secret;

wherein the second shared secret is used to generate a second session key used to encrypt or decrypt communications with the wireless device; and

transmitting the second nonce to the wireless device if the second nonce is not received from the wireless device in the first authentication credential.

5. The method of claim 4 , wherein one or more of the second nonce, the first authentication credential, and the confidential data are used by the wireless device to generate the second shared secret.

6. The method of claim 1 , prior to the receiving the first authentication credential, comprising:

receiving an authentication request from the wireless device; and

transmitting an authentication response to the wireless device;

wherein the authentication request from the wireless device is an Extensible Authentication Protocol (EAP) request and the authentication response is an EAP response.

7. The method of claim 1 , wherein the service provider is a PacketCable™ network, the authentication server is in the PacketCable™ network and is configured to authenticate the wireless device for both a PacketCable™ service and a WiFi™ service based on the second authentication credential.

8. The method of claim 1 , wherein the first authentication credential is mapped to a second authentication credential using a credential server that is local to the wireless gateway or is remote to the wireless gateway and is accessed via the Internet.

9. The method of claim 1 , wherein the second authentication credential is used by the authentication server to generate the first shared secret.

10. The method of claim 1 , wherein the first shared secret and the second shared secret are generated using a hash algorithm.

11. The method of claim 1 , wherein the first shared secret is used to generate a first set of session keys to encrypt communications with the service provider and wherein the second shared secret is used to generate a second set of session keys to encrypt communications with the wireless device.

12. A wireless gateway authentication proxy, comprising:

a memory; and

a processor coupled to the memory, wherein the processor is configured to, based on instructions stored in the memory:

receive a first authentication credential from a wireless device;

map the first authentication credential to a second authentication credential;

transmit the second authentication credential to an authentication server;

receive a first authentication response from the authentication server;

generate a first shared secret and a second shared secret if the first authentication response indicates that authentication is successful; and

transmit a second authentication response to the wireless device;

wherein the first shared secret is used to set up a first secure channel for communications with a service provider over a wired network and the second shared secret is used to set up a second secure channel for communications with the wireless device.

13. The wireless gateway authentication proxy of claim 12 , wherein the service provider is a PacketCable™ network, the authentication server is in the PacketCable™ network and is configured to authenticate the wireless device for both a PacketCable™ service and a WiFi™ service based on only the second authentication credential.

14. The wireless gateway authentication proxy of claim 12 , wherein the processor is configured to, based on instructions stored in the memory, generate a first session key using the first shared secret to encrypt or decrypt communications with the service provider and generate a second session key using the second shared secret to encrypt or decrypt communications with the wireless device.