Methods for authentication and key management in a wireless communications network and related apparatuses

1. A method for authentication and key management for applications, AKMA, for a terminal device in a wireless communication network, the method being performed by an Authentication Server Function, AUSF, the method comprising:

authenticating the terminal device during a primary authentication session for the terminal device;

responsive to a successful authentication of the terminal device, obtaining a first key; and

generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters;

communicating an authentication response message to the terminal device, wherein the authentication response message comprises at least one of the bootstrapping security parameters;

providing the bootstrapping security parameters to an AKMA Authentication Function, AauF, to establish a channel that is authenticated and secure.

2. The method of claim 1 , wherein the authenticating the terminal device uses 5G authentication and key agreement protocol signaling during a primary authentication session for the terminal device.

3. The method of claim 1 , wherein the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, protocol signaling during a primary authentication session for the terminal device.

4. The method of claim 1 , further comprising:

storing the bootstrapping security parameters in the network server.

5. The method of claim 1 , further comprising:

communicating an authentication response message to the terminal device.

6. The method of claim 5 , wherein the bootstrapping security parameters comprises at least one or more of: the temporary identifier and an indication of successful bootstrapping security parameters generation.

7. A network server for authentication and key management for applications, AKMA, for a terminal device in a wireless communication network, the network server comprising processing circuitry, the processing circuitry being configured to cause the network server to perform operations comprising:

authenticate the terminal device during a primary authentication session for the terminal device;

responsive to a successful authentication of the terminal device, obtain a first key; and

generate bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters; and

communicate an authentication response message to the terminal device, wherein the authentication response message comprises at least one of the bootstrapping security parameters; and

provide the bootstrapping security parameters to an AKMA Authentication Function, AauF, to establish a channel that is authenticated and secure.

8. The network server of claim 7 , wherein authentication of the terminal device uses 5G authentication and key agreement protocol signaling during a primary authentication session for the terminal device.

9. The network server of claim 7 , wherein authentication of the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, protocol signaling during a primary authentication session for the terminal device.

10. The network server of claim 7 , wherein the processing circuitry being configured to cause the network server to perform operations further comprising:

store the bootstrapping security parameters in the network server.

11. A computer program product comprising:

a non-transitory computer readable medium storing program code configured for execution by processing circuitry of a network server to cause the processing circuitry to perform operations for authentication and key management for applications, AKMA, for a terminal device in a wireless communication network, the operations comprising:

authenticating the terminal device during a primary authentication session for the terminal device;

responsive to a successful authentication of the terminal device, obtaining a first key; and

generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters; and

communicating an authentication response message to the terminal device, wherein the authentication response message comprises at least one of the bootstrapping security parameters; and

providing the bootstrapping security parameters to an AKMA Authentication Function, AAuF, to establish a channel that is authenticated and secure.

12. A method for authentication and key management for applications, AKMA, for a terminal device in a wireless communication network, the method being performed by a terminal device, the method comprising:

responsive to a successful authentication of the terminal device, obtaining a first key;

generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters; and

communicating an authentication response message to the terminal device, wherein the authentication response message comprises at least one of the bootstrapping security parameters; and

providing the bootstrapping security parameters to an AKMA Authentication Function, AAuF, to establish a channel that is authenticated and secure.

13. The method of claim 12 , wherein the authenticating the terminal device uses 5G authentication and key agreement protocol signaling during a primary authentication session for the terminal device.

14. The method of claim 12 , wherein the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, protocol signaling during a primary authentication session for the terminal device.

15. The method of claim 12 , further comprising:

receiving an authentication response message from a network server, wherein the network server is an Authentication Server Function, AUSF, server.

16. The method of claim 15 , wherein the authentication response message comprises at least one or more of: the temporary identifier and an indication of successful bootstrapping security parameters generation.

17. A terminal device in a wireless communication network, the terminal device comprising processing circuitry, the processing circuitry being configured to cause the terminal device to perform operations comprising:

responsive to a successful authentication of the terminal device, obtain a first key;

generate bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters; and

communicate an authentication response message to the terminal device, wherein the authentication response message comprises at least one of the bootstrapping security parameters; and

provide the bootstrapping security parameters to an authentication and key management for applications, AKMA, Authentication Function, AAuF, to establish a channel that is authenticated and secure.

18. The terminal device of claim 17 , wherein the authenticating the terminal device uses 5G authentication and key agreement protocol signaling during a primary authentication session for the terminal device.

19. The terminal device of claim 17 , wherein the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, protocol signaling during a primary authentication session for the terminal device.

20. A computer program product comprising:

a non-transitory computer readable medium storing program code configured for execution by processing circuitry of a terminal device to cause the processing circuitry to perform operations for authentication and key management for applications, AKMA, for a terminal device in a wireless communication network, the operations comprising:

responsive to a successful authentication of the terminal device, obtaining a first key;

generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters; and

communicating an authentication response message to the terminal device, wherein the authentication response message comprises at least one of the bootstrapping security parameters; and

providing the bootstrapping security parameters to AKMA Authentication Function, AAuF, to establish a channel that is authenticated and secure.