公开(公告)号：KR1020100034461A

公开(公告)日：2010-04-01

申请号：KR1020080093612

申请日：2008-09-24

Applicant: 삼성전자주식회사

Inventor： 레이펑 ,  김영석 ,  원정재

IPC: H04L9/32 ,  H04L9/30

CPC classification number: H04L63/0892 ,  H04L9/30

Abstract: PURPOSE: In a communications network, an authentication method and system efficiently offer the call forwarding service by implementing the selection operation of the received target terminal followed into the location of the terminal at the receiving end and the receiving action of following into the state or the location of the terminal at the receiving end. CONSTITUTION: An access server(200) transmits the authentication information of the authentication information of the user terminal(100) and privacy information and access server and privacy information with the certificate server(300). The user terminal and access server are certified respectively since the certificate server uses the authentication information of the access server and user terminal. The authentication information of the certificate server and the security key lock in which the certificate server becomes is transmitted in the access server and user terminal. The access server and user terminal certify the certificate server through the authentication information of the certificate server. The access server and user terminal hold in common the security key lock with the certificate server.

Abstract translation: 目的：在通信网络中，认证方法和系统通过实现接收到的目标终端的选择操作有效地提供呼叫转移服务，随后进入终端在接收端的位置和接收到接收到的状态或接收到的接收动作 终端在接收端的位置。 构成：访问服务器（200）向证书服务器（300）发送用户终端（100）的认证信息和隐私信息以及访问服务器和隐私信息的认证信息。 用户终端和接入服务器分别被认证，因为证书服务器使用接入服务器和用户终端的认证信息。 在接入服务器和用户终端中发送证书服务器的认证信息和证书服务器所在的安全密钥锁。 访问服务器和用户终端通过证书服务器的认证信息证明证书服务器。 访问服务器和用户终端保持与证书服务器的安全密钥锁定。

公开(公告)号：KR1020090032517A

公开(公告)日：2009-04-01

申请号：KR1020070097831

申请日：2007-09-28

Applicant: 삼성전자주식회사

Inventor： 자오정원 ,  원정재 ,  김영석 ,  황의석 ,  레이펑

IPC: H04L12/66 ,  H04B7/26 ,  H04L12/28

CPC classification number: H04W36/005 ,  H04W36/0011 ,  H04W80/04 ,  H04W36/0072 ,  H04W48/16

Abstract: A system and a method for supporting a multimedia service for no stop of a voice call based on media independent handover are provided to support an IMS(IP Multimedia Subsystem) VCC(Voice Call Continuity) service based on MIH(Media Independent Handover), thereby providing an IMS VCC service support solution. Handover is prepared by confirming each acceptable capacity of a candidate network(308). Resources for the handover are reserved by determining one target network from candidate networks(310). Domain transfer is performed by generating a handover command event(314,316).

Abstract translation: 提供了一种用于支持基于媒体无关切换的语音呼叫不停止的多媒体服务的系统和方法，以支持基于MIH（媒体独立切换）的IMS（IP多媒体子系统）VCC（语音呼叫连续性）服务 提供IMS VCC服务支持解决方案。 通过确认候选网络的每个可接受容量来准备切换（308）。 通过从候选网络（310）确定一个目标网络来保留用于切换的资源。 通过产生切换命令事件来执行域传送（314,316）。

公开(公告)号：KR1020080067078A

公开(公告)日：2008-07-18

申请号：KR1020070004209

申请日：2007-01-15

Applicant: 삼성전자주식회사

Inventor： 레이펑 ,  김영석 ,  원정재

IPC: H04L9/32 ,  H04L9/28 ,  H04L9/08 ,  H04L9/14

CPC classification number: H04W12/04 ,  H04W12/06

Abstract: A method and an apparatus for a fast re-authentication in a broadband wireless communication system are provided to reduce a roaming time between a wireless LAN and a broadband wireless communication network by performing a re-authentication using a PMKID(Pairwise Master Key IDentifier). A method for a fast re-authentication in a broadband wireless communication system includes the steps of: generating a PMK(Pairwise Master Key) necessary for the security in an initial authentication process, converting and storing the PMK into a size for a PMKID calculation(202); transmitting a message having the stored PMKID list information to a base station in a re-authentication process, and receiving a response message(214); receiving an authentication success message from the base station(216); performing an exchange of a 3way handshake authentication key with the base station(230); and performing an exchange of 2way handshake security key with the base station(240).

Abstract translation: 提供了一种用于在宽带无线通信系统中快速重新认证的方法和装置，以通过使用PMKID（成对主密钥标识符）执行重新认证来减少无线LAN和宽带无线通信网络之间的漫游时间。 一种用于在宽带无线通信系统中进行快速重新认证的方法包括以下步骤：在初始认证过程中生成安全性所需的PMK（成对主密钥），将PMK转换和存储为PMKID计算的大小（ 202）; 在重认证过程中向基站发送具有所存储的PMKID列表信息的消息，以及接收响应消息（214）; 从所述基站（216）接收认证成功消息; 执行与所述基站（230）的3路握手认证密钥的交换; 以及与所述基站（240）执行2way握手安全密钥的交换。

公开(公告)号：KR101061899B1

公开(公告)日：2011-09-02

申请号：KR1020070092409

申请日：2007-09-12

Applicant: 삼성전자주식회사

Inventor： 레이펑 ,  원정재 ,  김영석 ,  최규태 ,  황의석

IPC: H04L9/32 ,  H04L9/30 ,  H04B7/26

CPC classification number: H04L9/0844 ,  H04L9/3273 ,  H04L63/083 ,  H04L63/162 ,  H04L2209/80 ,  H04W12/06

Abstract: A method and apparatus for performing fast authentication for a vertical handover are provided. The method includes requesting a handover from a serving network to a target network and generating a derivative Master Session Key (MSK) for key generation, and transmitting the derivative MSK to the target network. Accordingly, a key negotiation process can start by skipping an access authentication process. Therefore, there is an advantage in that a fast authentication process can be achieved.

Abstract translation: 提供了用于执行垂直切换的快速认证的方法和设备。 该方法包括请求从服务网络到目标网络的切换并且生成用于密钥生成的派生主会话密钥（MSK），并且将派生MSK发送到目标网络。 因此，密钥协商过程可以通过跳过接入认证过程开始。 因此，具有可以实现快速认证过程的优点。

公开(公告)号：KR1020090027299A

公开(公告)日：2009-03-17

申请号：KR1020070092409

申请日：2007-09-12

Applicant: 삼성전자주식회사

Inventor： 레이펑 ,  원정재 ,  김영석 ,  최규태 ,  황의석

IPC: H04L9/32 ,  H04L9/30 ,  H04B7/26

CPC classification number: H04L9/0844 ,  H04L9/3273 ,  H04L63/083 ,  H04L63/162 ,  H04L2209/80 ,  H04W12/06 ,  H04W36/14

Abstract: A method and an apparatus for performing a key negotiation procedure without an access authentication procedure in a vertical handover are provided to perform a fast authentication procedure without an access authentication procedure by using a derived MSK(Master Session Key). A terminal requests a handover to a serving network(502), generates a derived MSK for authentication in the handover(503), receives a handover response message from the serving network(504), performs a network entry into a target network(506), confirms a derived MSK matched with the derived MSK generated by a corresponding target authenticator(508), generates a new authentication key in existence of a matched derived MSK(510), performs a full authentication procedure in non-existence of the derived MSK(516), performs a key negotiation with the target network(512), and completes the handover(514).

Abstract translation: 提供一种用于在垂直切换中没有接入认证过程执行密钥协商过程的方法和装置，以通过使用导出的MSK（主会话密钥）来进行无需接入认证过程的快速认证过程。 终端请求切换到服务网络（502），在切换（503）中生成用于认证的导出MSK（503），从服务网络接收切换响应消息（504），执行到目标网络（506）的网络进入， 确认与由对应的目标认证器（508）生成的导出的MSK相匹配的导出MSK，生成存在匹配的导出MSK（510）的新认证密钥，在不存在导出的MSK的情况下执行完整认证过程 516），与目标网络（512）进行密钥协商，并完成切换（514）。