Authentication process

1. A method comprising:

receiving, by a first network device, a request for content from a user device;

determining, by the first network device, that the user device is not authenticated based on receiving the request for the content from the user device;

sending, by the first network device, information to the user device that the user device requires authentication before the user device is permitted to receive the content;

receiving, by the first network device, a notification from a second network device that the user device is authenticated based on the second network device determining that biometric information, associated with the user device, and user device information are valid;

generating, by the first network device, a secret key when the notification indicates that the biometric information and the user device information are valid;

authenticating, by the first network device, the user device by using the secret key generated by the first network device;

requesting, by the first network device, user knowledge information from the user device based on authenticating the user device;

receiving, by the first network device, the user knowledge information from the user device based on requesting the user knowledge information;

validating, by the first network device, the user knowledge information based on receiving the user knowledge information; and

sending, by the first network device, the content to the user device based on validating the user knowledge information and authenticating the user device.

2. The method of claim 1 , where validating that the user knowledge information received from the second network device includes:

validating that the user knowledge information is from a trusted execution environment in the user device.

3. The method of claim 1 , where generating the secret key includes:

generating the secret key based on a generic bootstrapping user security setting, a cipher key, or an integrity key.

4. The method of claim 1 , where generating the secret key includes:

generating the secret key based on an international mobile subscriber identity, associated with the user device, a generic bootstrapping user security setting, or an application identifier associated with an application associated with a content provider.

5. The method of claim 1 , where receiving the user knowledge information from the user device includes:

receiving the user knowledge information from a universal integrated circuit card located in the user device.

6. The method of claim 1 , where receiving the user knowledge information from the user device includes:

receiving the user knowledge information from a trusted execution environment located in the user device.

7. The method of claim 1 , where receiving the notification from the second network device includes:

receiving information indicating that the second network device authenticated the user device by determining that the user device is using a trusted execution environment.

8. A system comprising:

a first network device to:

receive a request for content from a user device;

determine, based on receiving the request, that the user device is not authenticated;

send information to the user device that the user device requires authentication before the user device is permitted to receive the content;

receive authentication information, associated with the user device, from a second network device based on the second network device determining that biometric information, associated with the user device, is valid;

generate a secret key when the authentication information indicates that the biometric information is valid;

authenticate the user device by using the secret key generated by the first network device;

request user knowledge information from the user device based on authenticating the user device;

receive the user knowledge information from the user device based on the request for the user knowledge information;

validate the user knowledge information based on receiving the user knowledge information; and

send the content to the user device based on validating the user knowledge information, and authenticating the user device.

9. The system of claim 8 , where, when validating the user knowledge information, the first network device is to:

validate that the user knowledge information is from a trusted execution environment in the user device.

10. The system of claim 8 , where, when authenticating the user device by using the secret key generated by the first network device, the first network device is to:

receive a second secret key from the user device;

determine that the second secret key matches the secret key; and

authenticate the user device by determining that the second secret key matches the secret key.

11. The system of claim 8 , where, when receiving the authentication information from the second network device, the first network device is to:

receive information indicating that the user device is validated based on the second network device determining that the user device is sending and receiving information from a trusted execution environment.

12. The system of claim 8 , where, when determining that the user device is not authenticated, the first network device is to:

determine that the first network device has not validated the user device by using a secret key.

13. The system of claim 8 , where, when receiving the authentication information from the second network device, the first network device is to:

receive information indicating that the user device is validated based on the second network device determining that the user device is sending and receiving information from a universal integrated circuit card.

14. The system of claim 8 , where, when receiving the request for the content, the first network device is to:

receive the request for the content associated with a content provider,

the content provider using the first network device to send the content to the user device.

15. The system of claim 8 , where, when sending the content to the user device, the first network device is to:

send a notification to a content provider that the user device information, the biometric information, and the user knowledge information are validated;

receive content from the content provider based on receiving the notification; and

send the content to the user device based on receiving the content from the content provider.

16. A non-transitory computer readable medium storing instructions, the instructions comprising:

a plurality of instructions, that when executed by one or more processors of a first network device, cause the one or more processors to:

receive a request for content from a user device;

determine that the user device is not authenticated;

send information to the user device that the user device requires authentication before the user device is permitted to receive the content;

receive a notification from a second network device that the user device is authenticated based on the second network device determining that user device information is valid;

generate a secret key when the notification indicates that the user device information is valid;

authenticate the user device by using the secret key generated by the first network device;

request biometric information from the user device;

receive the biometric information from the user device based on requesting the biometric information from the user device;

validate the biometric information received from the user device;

request user knowledge information from the user device based on validating the biometric information received from the user device;

receive the user knowledge information from the user device based on requesting the user knowledge information from the user device;

validate the user knowledge information based on receiving the user knowledge information from the user device; and

send the content to the user device based on validating the user knowledge information, authenticating the user device, and validating the biometric information.

17. The non-transitory computer-readable medium of claim 16 , where one or more instructions, of the plurality of instructions, to receive the biometric information from the user device include one or more instructions to:

receive the biometric information from a trusted execution environment in the user device.

18. The non-transitory computer-readable medium of claim 16 , where one or more instructions, of the plurality of instructions, to receive the biometric information from the user device include one or more instructions to:

receive the biometric information from a universal integrated circuit card in the user device.

19. The non-transitory computer-readable medium of claim 16 , where one or more instructions, of the plurality of instructions, to receive the biometric information from the user device include one or more instructions to:

validate the biometric information by comparing the biometric information with stored information; or

validate that the biometric information is received from a trusted execution environment in the user device.

20. The non-transitory computer-readable medium of claim 16 , where one or more instructions, of the plurality of instructions, to send the content to the user device include one or more instructions to:

send, to a content provider, information indicating that the user device, the biometric information, and the user knowledge information are validated;

receive content from the content provider; and

send the content to the user device based on receiving the content from the content provider.