Machine-to-machine network assisted bootstrapping
The service layer may leverage the access network infrastructure so that applications on a device may bootstrap with a machine-to-machine server without requiring provisioning beyond what is already required by the access network.
1. A network node comprising:
a processor; and
a memory coupled to the processor, the memory having stored thereon executable instructions that when executed by the processor cause the processor to effectuate operations comprising:
sending a request from a server to authenticate a mobile device, the first request comprises a user equipment (UE) external identifier, a server identifier, and Extensible Authentication Protocol (EAP) payload attribute value pair (AVP);
responsive to the sending of the request to authenticate the mobile device, receiving a response from the second network node, the response comprises an expected authentication response (XRES) and random challenge (AT_RAND) corresponding to the EAP payload AVP of the request; and
based on the XRES and AT_RAND corresponding to the EAP payload AVP of the request, sending a message to the server, the message comprises EAP AKA key material, wherein the EAP AKA key material comprises the AT_RAND.
2. The network node of claim 1 , wherein the EAP payload AVP comprises an identifier of the mobile device.
3. The network node of claim 1 , wherein the EAP payload AVP is equal to an EAP Response message.
4. The network node of claim 1 , wherein the EAP payload AVP is equal to authentication and key agreement (AKA) Identity Message.
5. The network node of claim 1 , the operations further comprise:
receiving a second request from the server to check a response (RES), the second request comprises the UE external identifier, the server identifier, and the RES; and
based on the second request from the server, sending a second message to the server indicating whether the RES value was correct.
6. The network node of claim 5 , the operations further comprise determining whether the RES value was correct based on comparing the RES to the XRES.
7. The network node of claim 5 , wherein the network node is an EAP server.
8. A computer readable storage medium comprising computer executable instructions that when executed by a computing device cause the computing device to perform the instructions comprising:
sending a request from a server to authenticate a mobile device, the first request comprises a user equipment (UE) external identifier, a server identifier, and Extensible Authentication Protocol (EAP) payload attribute value pair (AVP);
responsive to the sending of the request to authenticate the mobile device, receiving a response from the second network node, the response comprises an expected authentication response (XRES) and random challenge (AT_RAND) corresponding to the EAP payload AVP of the request; and
based on the XRES and AT_RAND corresponding to the EAP payload AVP of the request, sending a message to the server, the message comprises EAP AKA key material, wherein the EAP AKA key material comprises the AT_RAND.
9. The computer readable storage medium of claim 8 , wherein the EAP payload AVP comprises an identifier of the mobile device.
10. The computer readable storage medium of claim 8 , wherein the EAP payload AVP is equal to an EAP Response message.
11. The computer readable storage medium of claim 8 , wherein the EAP payload AVP is equal to authentication and key agreement (AKA) Identity Message.
12. The computer readable storage medium of claim 8 , the operations further comprise:
receiving a second request from the server to check a response (RES), the second request comprises the UE external identifier, the server identifier, and the RES; and
based on the second request from the server, sending a second message to the server indicating whether the RES value was correct.
13. The computer readable storage medium of claim 8 , the operations further comprise determining whether the RES value was correct based on comparing the RES to the XRES.
14. A method comprising:
sending a request from a server to authenticate a mobile device, the first request comprises a user equipment (UE) external identifier, a server identifier, and Extensible Authentication Protocol (EAP) payload attribute value pair (AVP);
responsive to the sending of the request to authenticate the mobile device, receiving a response from the second network node, the response comprises an expected authentication response (XRES) and random challenge (AT_RAND) corresponding to the EAP payload AVP of the request; and
based on the XRES and AT_RAND corresponding to the EAP payload AVP of the request, sending a message to the server, the message comprises EAP AKA key material, wherein the EAP AKA key material comprises the AT_RAND.
15. The method of claim 14 , wherein the EAP payload AVP comprises an identifier of the mobile device.
16. The method of claim 14 , wherein the EAP payload AVP is equal to an EAP Response message.
17. The method of claim 14 , wherein the EAP payload AVP is equal to authentication and key agreement (AKA) Identity Message.
18. The method of claim 14 , further comprises:
receiving a second request from the server to check a response (RES), the second request comprises the UE external identifier, the server identifier, and the RES; and
based on the second request from the server, sending a second message to the server indicating whether the RES value was correct.
19. The method of claim 14 , further comprises determining whether the RES value was correct based on comparing the RES to the XRES.