Methods for authentication and key management in a wireless communications network and related apparatuses

1. A host computer, comprising:

processing circuitry configured to provide user data; and

a communication interface configured to initiate transmission of the user data to a cellular network for transmission to a terminal device, wherein the cellular network comprises a network server configured to perform operations for authentication and key management for applications, AKMA, for the terminal device,

the operations comprising:

authenticating the terminal device during a primary authentication session for the terminal device;

responsive to a successful authentication of the terminal device in the primary authentication session, obtaining a first key, the first key comprising an authentication server function key KAUSF; and

generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters,

where in the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, or 5G AKA protocol signaling during the primary authentication session for the terminal device, and wherein the operations further comprise communicating an authentication response message to the terminal device.

2. The host computer of claim 1 , wherein the operations further comprise:

storing the bootstrapping security parameters in the network server.

3. The host computer of claim 1 , wherein the operations further comprise:

providing the bootstrapping security parameters to an authentication server.

4. The host computer of claim 1 , wherein the authentication response message comprises at least one of the bootstrapping security parameters comprises at least one or more of the temporary identifier and an indication of successful bootstrapping security parameters generation.

5. A non-transitory computer readable medium comprising instructions that, when executed by a processor in a host computer of a communication system, cause the host computer to perform operations comprising:

providing user data; and

initiating transmission of the user data to a cellular network, via a communication interface, for transmission to a terminal device, wherein the cellular network comprises a network server configured to perform operations for authentication and key management for applications, AKMA, for the terminal device, the operations for AKMA comprising:

authenticating the terminal device during a primary authentication session for the terminal device;

responsive to a successful authentication of the terminal device in the primary authentication session, obtaining a first key, the first key comprising an authentication server function key K AUSF ; and

generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters,

wherein the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, or 5G AKA protocol signaling during the primary authentication session for the terminal device, and wherein the operations for AKMA further comprise communicating an authentication response message to the terminal device.

6. The non-transitory computer readable medium of claim 5 , wherein the operations for AKMA further comprise:

storing the bootstrapping security parameters in the network server.

7. The non-transitory computer readable medium of claim 5 , wherein the operations for AKMA further comprise:

providing the bootstrapping security parameters to an authentication server.

8. The non-transitory computer readable medium of claim 5 , wherein at least one of the bootstrapping security parameters comprises at least one or more of: the temporary identifier and an indication of successful bootstrapping security parameters generation.

9. A method performed by a host computer in a communication system, comprising:

providing user data; and

initiating transmission of the user data to a cellular network for transmission to a terminal device, wherein the cellular network comprises a network server configured to perform operations for authentication and key management for applications, AKMA, for the terminal device, the operations comprising:

authenticating the terminal device during a primary authentication session for the terminal device;

responsive to a successful authentication of the terminal device in the primary authentication session, obtaining a first key, the first key comprising an authentication server function key K AUSF ; and

generating bootstrapping security parameters, wherein the parameters comprise a second key derived from the first key, and a temporary identifier, and wherein the temporary identifier identifies the terminal device and the bootstrapping security parameters,

wherein the authenticating the terminal device uses Extensible Authentication Protocol-Authentication and Key Agreement Prime, EAP-AKA′, or 5G AKA protocol signaling during the primary authentication session for the terminal device, and wherein the operations further comprise communicating an authentication response message to the terminal device.

10. The method of claim 9 , wherein the operations further comprise:

storing the bootstrapping security parameters in the network server.

11. The method of claim 9 , wherein the operations further comprise:

providing the bootstrapping security parameters to an authentication server.

12. The method of claim 9 , wherein at least one of the bootstrapping security parameters comprises at least one or more of: the temporary identifier and an indication of successful bootstrapping security parameters generation.