Advertisement and distribution of notifications using extensible authentication protocol (EAP) methods

• US 8,458,279 B2
• Filed: 05/14/2010
• Issued: 06/04/2013
• Est. Priority Date: 05/14/2010
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Montemurro, Michael Peter, McCann, Stephen
• Primary Examiner(s): SALAD, ABDULLAHI ELMI
• Application Number:
  US12/780,722
• Publication Number:
  US 20110282961A1
• Time in Patent Office: 1,117 Days
• Field of Search: 709/207, 726 1- 8, 382/270
• US Class Current: 709/207
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

An Authorization, Authentication and Accounting (AAA) server acting as a first Extensible Authentication Protocol (EAP) peer advertises the availability of notifications, and this advertisement may be received and interpreted by a mobile station acting as a second EAP peer. Upon being informed of the availability of the notification message, the mobile station may take action in order to receive the notification message from the AAA server. Alternatively, the mobile station may be able to identify the notification message by analyzing the advertisement. If the contents of the notification message comprise a control message, the mobile station may act on the control message in a way that influences the mobile station'"'"'s behavior.

Claims

1. A method of advertising availability of a notification, the method comprising:

generating, at an Authorization, Authentication and Accounting (AAA) server acting as a first Extensible Authentication Protocol (EAP) peer, a notification frame encapsulated in a first EAP Type-Length-Value (TLV) data structure, wherein the notification frame includes a notification identifier corresponding to a notification message; and

including the first EAP TLV data structure in an EAP method to be transmitted in a manner receivable by a mobile station that is acting as a second EAP peer, wherein the notification identifier is used for accessing the notification message corresponding with the notification identifier.

2. The method as claimed in claim 1, wherein the notification frame includes a type value for the notification identifier indicative of a notification.

3. The method as claimed in claim 1, wherein the EAP method is to be transmitted through an EAP tunnel between the AAA server and the mobile station.

4. The method as claimed in claim 1, wherein the notification frame is received and transmitted as part of an EAP exchange response.

5. The method as claimed in claim 1, wherein the notification frame is received and transmitted as part of an EAP Initiate/Re-auth-Start response.

6. The method as claimed in claim 1, wherein the notification identifier is a 64-bit value.

7. The method as claimed in claim 1, wherein the notification identifier is chosen to minimize recurrence of a same identifier.

8. The method as claimed in claim 1, wherein the notification identifier is calculated by applying a keyed hash algorithm to a key and to the notification message, and then truncating the output of the keyed hash algorithm.

9. A method of obtaining a notification message, to be performed in a mobile station acting as a first Extensible Authentication Protocol (EAP) peer, the method comprising:

encapsulating a notification message request in a first EAP Type-Length-Value (TLV) data structure, wherein the notification message request includes a notification identifier that corresponds to the notification message;

including the first EAP TLV data structure in a first EAP method;

transmitting the first EAP method through an EAP tunnel to an Authorization, Authentication and Accounting (AAA) server acting as a second EAP peer; and

receiving through the EAP tunnel a second EAP method that includes a notification message response encapsulated in a second EAP TLV data structure, wherein the notification message response includes the notification message.

10. The method as claimed in claim 9, wherein the EAP tunnel traverses a Network Access Server (NAS) between the mobile device and the AAA server.

11. The method as claimed in claim 9, further comprising:

acting on a control message comprised in the notification message.

12. A method of delivering a notification message, the method comprising:

receiving, at an Authorization, Authentication and Accounting (AAA) server acting as a first Extensible Authentication Protocol (EAP) peer, through an EAP tunnel from a mobile station acting as a second EAP peer a first EAP method that includes a notification message request encapsulated in a first EAP Type-Length-Value (TLV) data structure, wherein the notification message request includes a notification identifier that corresponds to the notification message;

encapsulating a notification message response in a second EAP-TLV data structure,

wherein the notification message response includes the notification message;

including the second EAP-TLV data structure in a second EAP method; and

transmitting the second EAP method through the EAP tunnel in a manner receivable by the mobile station.

13. The method as claimed in claim 12, wherein the EAP tunnel traverses a Network Access Server (NAS) between the mobile device and the AAA server.

14. The method as claimed in claim 12, further comprising:

storing the notification message and the notification identifier in a list of active notifications; and

retrieving the notification message from the list by looking up the notification identifier in the list.