US 11,895,229 B2
States secondary authentication of a user equipment
Noamen Ben Henda, Vällingby (SE); David Castellanos Zamora, Madrid (ES); and Vesa Torvinen, Sauvo (FI)
Assigned to TELEFONAKTIEBOLAGET LM ERICSSON (PUBL), Stockholm (SE)
Filed by Telefonaktiebolaget LM Ericsson (publ), Stockholm (SE)
Filed on Jan. 4, 2023, as Appl. No. 18/149,826.
Application 18/149,826 is a continuation of application No. 16/372,751, filed on Apr. 2, 2019, granted, now 11,575,509.
Application 16/372,751 is a continuation of application No. PCT/EP2017/084383, filed on Dec. 22, 2017.
Claims priority of provisional application 62/451,645, filed on Jan. 27, 2017.
Prior Publication US 2023/0145044 A1, May 11, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/08 (2006.01); H04L 9/40 (2022.01); H04W 12/041 (2021.01); H04W 12/062 (2021.01); H04W 12/06 (2021.01); H04W 12/0431 (2021.01); H04W 76/25 (2018.01); H04W 76/11 (2018.01); H04W 80/10 (2009.01); H04W 88/02 (2009.01)
CPC H04L 9/0844 (2013.01) [H04L 63/0884 (2013.01); H04L 63/0892 (2013.01); H04L 63/16 (2013.01); H04W 12/041 (2021.01); H04W 12/0431 (2021.01); H04W 12/062 (2021.01); H04W 12/068 (2021.01); H04W 76/11 (2018.02); H04W 76/25 (2018.02); H04W 80/10 (2013.01); H04W 88/023 (2013.01); H04L 63/061 (2013.01); H04L 63/08 (2013.01); H04L 2463/082 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, implemented by a network node of a wireless communication network, the method comprising:
operating a Session Management Function (SMF) in a control plane of a core network of the wireless communication network in support of wireless communication;
authenticating a User Equipment (UE) with an Extensible Authentication Protocol (EAP) server in a secondary authentication process that uses the SMF as an EAP authenticator, the EAP server being comprised in an external network outside of the core network and the UE being separately authenticated with a further network node in the control plane of the core network via a primary authentication process, wherein authenticating the UE in the secondary authentication process comprises exchanging EAP messages between the SMF and the UE and between the SMF and the EAP server;
authorizing, by the SMF, a data session between the UE and the external network through a user plane of the core network based on the UE having successfully authenticated via both the primary authentication process and the secondary authentication process.