User's Manual

CHAPTER 4. Message Flow
4-4 © SAMSUNG Electronics Co., Ltd.
4.1.2 Authentication
At the Time of Initial Access
The MS authentication procedure performed in ‘4.1.1 Initial Access’ is as follows:
Figure 4.2 Authentication Procedure (At the time of initial access)
Classification Description
(0)~(2) When the ACR receives MS_PreAttachment_Req_Ack for SBC-RSP from the RAS,
the ACR includes the EAP Request/Identity payload in the AuthRelay-EAP-Transfer
message and transmits the message to the RAS to start the EAP authentication. The
RAS relays the received EAP payload to the MS by using the PKMv2 EAP-
Transfer/PKM-RSP message.
(3)~(5) The MS transmits the PKMv2 EAP-Transfer/PKM-REQ message to the RAS by
including the NAI in the EAP Response/Identity, and the RAS relays this to the ACR
by using the AuthRelay-EAP-Transfer message. Then, the authenticator of the ACR
analyzes the NAI and transmits the Diameter EAP Request (DER) message to the
home AAA of the MS.
(6)~(11) The subscriber authentication procedure is performed between the MS and the AAA
server according to the EAP-method.
MS RAS ACR
AAA
Repeat
2) PKM-RSP
(PKMv2 EAP-Transfer)
3) PKM-REQ
(PKMv2 EAP-Transfer)
8) PKM-RSP
(PKMv2 EAP-Transfer)
9) PKM-REQ
(PKMv2 EAP-Transfer)
14) PKM-RSP
(PKMv2 EAP-Transfer)
17) PKM-RSP
18) PKM-REQ
(PKMv2 SA-TEK-Request)
19) PKM-RSP
20) PKM-REQ
(PKMv2 Key Request)
21) PKM-RSP
(PKMv2 Key Reply)
(PKMv2 SA-TEK-Challenge)
(PKMv2 SA-TEK-Response)
0) MS_PreAttachment_Ack
1) AuthRelay-EAP-Transfer
4) AuthRelay-EAP-Transfer
7) AuthRelay-EAP-Transfer
10) AuthRelay-EAP-Transfer
15) Key_Change_Directive
16) Key_Change_Directive_Ack
5) DER
6)
DEA
11) DER
12) DEA
13) AuthRelay-EAP-Transfer