IP Library Granted Patent US 12,452,657
Granted Patent B2
US 12,452,657 · App. 17/916,960 · Granted Oct 21, 2025

Authentication between wireless devices and edge servers

Inventors: Shu Guo (Beijing, CN); Dawei Zhang (Saratoga, CA); Huarui Liang (Beijing, CN); Haijing Hu (Beijing, CN)
Assignee: Apple Inc.
H04W12/041H04W12/06H04W12/69H04W60/04
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,452,657
App. No.
17/916,960
Granted
Oct 21, 2025
Kind
B2
Abstract

This disclosure relates to techniques for performing wireless communications including authentication between user equipment and edge computing servers. One or more edge enabler client(s) operating at a user equipment may authenticate with one or more edge computing server(s). The authentication may use generic bootstrapping architecture, among various possibilities.

Claims (60)

1. A method, comprising:

performing a first bootstrapping procedure with a first edge server, the first bootstrapping procedure including generating a first key;

generating a first authentication code for a first edge enabler client (EEC) operating at a user equipment (UE), wherein the first authentication code is for use with the first edge server;

transmitting a first registration request for the first EEC to the first edge server, the first registration request including the first authentication code;

receiving, from the first edge server, a first registration success message comprising first information for authenticating with a second edge server;

generating a second authentication code for the first EEC, wherein the second authentication code is for use with the second edge server;

transmitting a second registration request for the first EEC to the second edge server, the second registration request including the second authentication code;

receiving, from the second edge server, a second registration success message comprising second information for discovery of a third edge server; and

discovering the third edge server using the second information.

2. The method of claim 1 , wherein the first authentication code is based on the first key and an identifier of the first EEC.

3. The method of claim 1 , wherein at least one of the first authentication code and the second authentication code is generated using a SHA-256 hashing algorithm.

4. The method of claim 1 , wherein the first edge server comprises an edge configuration server, the second edge server comprises an edge enabler server, and the third edge server comprises an edge application server.

5. The method of claim 1 , further comprising exchanging application data of an application associated with the first EEC with the third edge server.

6. The method of claim 1 , further comprising:

establishing communication with a cellular network;

performing a primary authentication with the cellular network;

receiving a UE identifier from the cellular network after the primary authentication, wherein the UE identifier is one of an IP multimedia private identity (IMPI) or temporary IMPI (TMPI); and

including the UE identifier as a username for the first bootstrapping procedure, wherein the first bootstrapping procedure comprises a generic bootstrapping architecture (GBA) procedure.

7. The method of claim 1 , wherein the method further comprises:

performing a second bootstrapping procedure with the second edge server using the first information for authentication with the second edge server, the second bootstrapping procedure including generating a second key.

8. The method of claim 7 , wherein the second authentication code is based on the second key and an identifier of the first EEC.

9. The method of claim 7 , wherein the method further comprises:

generating a third authentication code for a second EEC operating at the UE, wherein the third authentication code is for use with the first edge server;

transmitting a third registration request for the second EEC to the first edge server, the third registration request including the third authentication code;

receiving, from the first edge server, a third registration success message comprising third information for authenticating with a fourth edge server;

generating a fourth authentication code for the second EEC, wherein the fourth authentication code is for use with the fourth edge server;

transmitting a fourth registration request for the second EEC to the fourth edge server, the fourth registration request including the fourth authentication code; and

receiving, from the fourth edge server, a fourth registration success message.

10. The method of claim 9 , wherein the fourth edge server is the same as the second edge server.

11. The method of claim 9 , wherein the fourth edge server is different from the second edge server.

12. The method of claim 9 , wherein the third authentication code is based on the first key and an identifier of the second EEC.

13. The method of claim 1 , wherein the first information for authenticating with the second edge server comprises a first token.

14. The method of claim 13 , wherein the second registration request further includes the first token.

15. The method of claim 14 , wherein the method further comprises:

generating a third authentication code for a second EEC operating at the UE, wherein the third authentication code is for use with the first edge server;

transmitting a third registration request for the second EEC to the first edge server, the third registration request including the third authentication code;

receiving, from the first edge server, a third registration success message comprising third information for authenticating with a fourth edge server;

generating a fourth authentication code for the second EEC, wherein the fourth authentication code is for use with the fourth edge server;

transmitting a fourth registration request for the second EEC to the fourth edge server, the fourth registration request including the fourth authentication code; and

receiving, from the fourth edge server, a fourth registration success message.

16. The method of claim 15 , wherein the third information for authenticating with the fourth edge server comprises a second token.

17. An apparatus, comprising:

a processor configured to, when executing instructions stored in a memory, perform operations comprising:

perform a first bootstrapping procedure with a first edge server, the first bootstrapping procedure including generating a first key;

generate a first authentication code for a first edge enabler client (EEC) operating at a user equipment (UE), wherein the first authentication code is for use with the first edge server;

transmit a first registration request for the first EEC to the first edge server, the first registration request including the first authentication code;

receive, from the first edge server, a first registration success message comprising first information for authenticating with a second edge server;

generate a second authentication code for the first EEC, wherein the second authentication code is for use with the second edge server;

transmit a second registration request for the first EEC to the second edge server, the second registration request including the second authentication code;

receive, from the second edge server, a second registration success message comprising second information for discovery of a third edge server; and

discover the third edge server using the second information.

18. The apparatus of claim 17 , further comprising:

a radio operably coupled to the processor.

19. A method, comprising:

performing a first bootstrapping procedure with a user equipment (UE) and a first edge server, the first bootstrapping procedure including generating a first key;

receiving, from the UE to the first edge server, a first registration request for a first edge enabler client (EEC) operating at the UE, the first registration reqeuest including a first authentication code, wherein the first authentication code is for use with the first edge server;

transmitting, to the UE from the first edge server, a first registration success message comprising first information for authenticating with a second edge server;

receiving, from the UE to a second edge server, a second registration request for the first EEC, the second registration request including a second authentication code, wherein the second authentication code is for use with the second edge server; and

transmitting, to the UE from the second edge server, a second registration success message comprising second information for discovery of a third edge server.

20. The method of claim 19 , wherein the first authencication code is base don the first key and an identifier of the first EEC.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 4, 2022
From: GUO, SHU; HU, HAIJING; ZHANG, DAWEI; LIANG, HUARUI
To: APPLE INC.
Reel/Frame 061308/0953 →
Continuity (1)
Related Publication 20230276231A1 · Aug 31, 2023
References Cited (9)
US 10582380B2 · Lehtovirta · 2020 [cited by examiner]
US 20140006786A1 · Campagna · 2014 [cited by applicant]
US 20190200283A1 · Graybeal · 2019 [cited by examiner]
US 20200359218A1 · Lee · 2020 [cited by applicant]
US 20220029994A1 · Choyi · 2022 [cited by examiner]
US 20230070253A1 · Rajadurai · 2023 [cited by examiner]
CN 108173882 · 2018 [cited by applicant]
CN 108810026 · 2018 [cited by applicant]
International Search Report and Written Opinion for PCT Patent Application No. PCT/CN2021/127031; 5 pages; Jul. 29, 2022. [cited by applicant]