CHANNEL BINDING MECHANISM BASED ON PARAMETER BINDING IN KEY DERIVATION

• US 20070250706A1
• Filed: 04/20/2006
• Published: 10/25/2007
• Est. Priority Date: 04/20/2006
• Status: Active Grant

• Current Assignee: Four Batons Wireless LLC
• Original Assignee: Telcordia Technologies Incorporated (Telefonaktiebolaget LM Ericsson), Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Corporation
• Inventors: Oba, Yoshihiro
• Granted Patent: US 8,239,671 B2
• Time in Patent Office: Days
• US Class Current: 713/159
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/081 applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself cryptographic mechanisms or cryptographic arrangements for generation of secret information including derivation or calculation of cryptographic keys or passwords H04L9/0861
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

This document describes a channel binding mechanism based on parameter binding in the key derivation procedure. The method cryptographically binds access network parameters to a key without need to carry those parameters in EAP methods.

Claims

1. A channel binding method based on parameter binding in a key derivation procedure for authentication of a mobile supplicant to an access network, comprising:

cryptographically binding access network parameters to a key without needing to carry the parameters in authentication methods.

2. The method of claim 1, wherein said authentication methods include EAP methods.

3. The method of claim 1, wherein said parameters include parameters advertised by an authenticator to said supplicant.

4. The method of claim 3, wherein the identity of the authenticator is one of said parameters.

5. The method of claim 1, further including deriving a channel binding key from a channel binding master key bound to a key binding blob using a key derivation function.

6. The method of claim 5, wherein said channel binding master key is at least 64 octets long.

7. The method of claim 5, wherein said key binding blob is a string that is constructed from static parameters advertised from an authenticator.

8. The method of claim 5, wherein said key binding blob is an octet-string that is constructed from static parameters advertised from an authenticator using an authenticator-supplicant protocol.

9. The method of claim 5, including a network side authenticator and said supplicant using the channel binding master key for protecting an authenticator-supplicant protocol.

10. The method of claim 9, further including said supplicant obtaining the key binding blob from said authenticator using the authenticator-supplicant protocol.

11. The method of claim 1, further including that:

a) a server and the supplicant create a channel binding key used for an authenticator;

b) the server transfers the channel binding key to the authenticator; and

c) the supplicant and the authenticator verify proof of possession of the channel binding key over an authenticator-supplicant protocol.

12. The method of claim 11, further including that the channel binding key is derived from a channel binding master key bound to a key binding blob associated with the authenticator using a key derivation function.

13. The method of claim 1, further including creating multiple channel binding keys from a single channel binding master key for multiple authenticators.

14. The method of claim 13, further including using channel binding keys to form a hierarchical channel binding.

15. The method of claim 5, further including creating multiple channel binding keys from a single channel binding master key for multiple authenticators using different key binding blobs for different authenticators.

16. The method of claim 15, further including using channel binding keys to form a hierarchical channel binding.

17. The method of claim 13, further including creating multiple channel binding keys from a single channel binding master key for multiple authenticators using different key binding blobs for different authenticators.

18. The method of claim 17, further including using channel binding keys to form a hierarchical channel binding.

19. The method of claim 1, wherein said key derivation function is computed based on CBK=kdf+(CBMK, KBB), where CBK represents channel binding key, CBMK represents channel binding master key, and KBB represents key binding blob.

20. The method of claim 3, wherein said authenticator is an EAP authenticator, and wherein the EAP authenticator receives and processes the channel binding key as a Master Session Key (MSK).