Machine-to-machine network assisted bootstrapping
The service layer may leverage the access network infrastructure so that applications on a device may bootstrap with a machine-to-machine server without requiring provisioning beyond what is already required by the access network.
1. A user equipment comprising:
a processor; and
a memory coupled to the processor, the memory having stored thereon executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
providing a first Extensible Authentication Protocol (EAP) message to a network node, the first EAP message comprising a machine to machine service provider identifier and a proposed user equipment machine-to-machine service layer identifier; and
receiving a second EAP message from the network node, the second EAP message comprising an assigned user equipment machine-to-machine service layer identifier and a network service layer identifier.
2. The user equipment of claim 1 , wherein the memory further comprises executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
deriving an encryption key based on the second EAP message, the encryption key used when the user equipment communicates with the machine-to-machine server service layer.
3. The user equipment of claim 1 , wherein the service provider identifier comprises:
a name of the company that provides service layers that the user equipment wants to connect with; or
a name of a service layer that the user equipment wants to connect with.
4. The user equipment of claim 1 , wherein the network node is a trusted non-3GPP access point.
5. The user equipment of claim 1 , wherein the first EAP message further comprises an access network identifier of the user equipment, or a request for a particular application identifier to be assigned to the user equipment.
6. The user equipment of claim 1 , wherein the data comprises a random challenge, a network authentication vector, or a message authentication code.
7. The user equipment of claim 1 , wherein the second EAP message further comprises:
an identifier of an application on the user equipment, the identifier of the application assigned to the application by a machine-to-machine server.
8. The user equipment of claim 1 , wherein the providing of the first EAP messages is responsive to receiving a request for the identity of the user equipment from the network node.
9. A method comprising:
providing a first Extensible Authentication Protocol (EAP) message to a network node, the first EAP message comprising a machine to machine service provider identifier and proposed user equipment service layer identifier; and
receiving a second EAP message from the network node, the second EAP message comprising an assigned user equipment machine-to-machine service layer identifier and a network service layer identifier.
10. The method of claim 9 , wherein the memory further comprises executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
deriving an encryption key based on the second EAP message, the encryption key used when the user equipment communicates with the a machine-to-machine server service layer.
11. The method of claim 9 , wherein the service provider identifier comprises:
a name of the company that provides service layers that the device wants to connect with; or
a name of a service layer that the device wants to connect with.
12. The method of claim 9 , wherein the network node is a trusted non-3GPP access point.
13. The method of claim 9 , wherein the first EAP message further comprises an access network identifier of the device, or a request for a particular application identifier to be assigned to the device.
14. The method of claim 9 , wherein the data comprises a random challenge, a network authentication vector, or a message authentication code.
15. The method of claim 9 , wherein the second EAP message further comprises:
an identifier of an application on the device, the identifier of the application assigned to the application by a machine-to-machine server.
16. The method of claim 9 , wherein the providing of the first EAP messages is responsive to receiving a request for the identity of the device from the network node.
17. A computer readable storage medium comprising computer executable instructions that when executed by a computing device cause the computing device to perform the instructions comprising:
providing a first Extensible Authentication Protocol (EAP) message to a network node, the first EAP message comprising a machine to machine service provider identifier and a proposed user equipment machine-to-machine service layer identifier; and
receiving a second EAP message from the network node, the second EAP message comprising an assigned user equipment machine-to-machine service layer identifier and a network service layer identifier.
18. The computer readable storage medium of claim 17 , wherein the first EAP message further comprises an access network identifier of the computing device, or a request for a particular application identifier to be assigned to the computing device.
19. The computer readable storage medium of claim 17 , wherein the data comprises a random challenge, a network authentication vector, or a message authentication code.
20. The computer readable storage medium of claim 17 , wherein the second EAP message further comprises:
an identifier of an application on the computing device, the identifier of the application assigned to the application by a machine-to-machine server.