Subject: [eap] EAP- AKA query

From: [email-masked] (Anurag Uxa)
Date: Mon, 11 Nov 2002 10:54:23 +0530

This is a multi-part message in MIME format.

------=_NextPart_000_0097_01C28970.B22AB140
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Dear all

 =20
I am going to implement ppp authentication for mobile IPv6 =
communication. I have implemented EAP ( MD5-Challenge ).

But i am not able to understand about AKA , How can i use PPP message =
format with AKA? If it is like EAP what is protocol field and length and =
optional field.

USIM will work like a client .what should be the fuctionality of =
authenticator(server)?

The use of the AKA also as a secure PPP authentication method in devices =
that already contain an USIM.=20
AKA typically runs in a UMTS Subscriber Identity Module (USIM), a smart =
card like device.=20

Five security feature groups are defined. Each of these feature groups =
meets certain threats and accomplishes certain security objectives:

- Network access security : the set of security features that provide =
users with secure access to 3G services, and which in particular protect =
against attacks on the (radio) access link;

- Network domain security: the set of security features that enable =
nodes in the provider domain to securely exchange signalling data, and =
protect against attacks on the wireline network;

- User domain security : the set of security features that secure access =
to mobile stations;

- Application domain security : the set of security features that enable =
applications in the user and in the provider domain to securely exchange =
messages;

- Visibility and configurability of security (V): the set of features =
that enables the user to inform himself whether a security feature is in =
operation or not and whether the use and provision of services should =
depend on the security feature.

Thanks

Regards
Anurag Uxa
iWave systems Technologies Pvt. Ltd.
Bangalore
ph.6786243/5 extn :205
www.iwavesystems.com

DISCLAIMER:

This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. 
------=_NextPart_000_0097_01C28970.B22AB140
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2600.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>Dear all</FONT><FONT =
face=3DArial=20
size=3D2></FONT></DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV>&nbsp;=20
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial color=3D#000080 size=3D2>I am going to implement ppp =
authentication for=20
mobile IPv6 communication. I have implemented EAP ( <FONT =
size=3D2>MD5-Challenge=20
).</FONT></FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial color=3D#000080 size=3D2><FONT size=3D2>But i am not able =
to understand=20
about AKA , How can i use PPP message format with AKA? If it is like EAP =
what is=20
protocol field and length and optional field.</FONT></FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial color=3D#000080 size=3D2>USIM will work like a client .what =
should be the=20
fuctionality of authenticator(server)?</FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial color=3D#000080 size=3D2><FONT =
size=3D2></FONT></FONT>&nbsp;</P><FONT=20
face=3DArial color=3D#000080 size=3D2><FONT size=3D2><FONT =
color=3D#000000><FONT=20
size=3D2><FONT color=3D#000080>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>The use of the AKA also =
as a secure=20
PPP authentication method in devices that already contain an USIM. =
</FONT></DIV>
<P>AKA typically runs in a UMTS Subscriber Identity </FONT><FONT=20
color=3D#000080>Module (USIM), a smart card like device</FONT>.=20
</P></FONT></FONT></FONT></FONT>
<P style=3D"MARGIN-BOTTOM: 0cm; page-break-inside: avoid"><FONT =
face=3DArial=20
color=3D#000080 size=3D2>Five security feature groups are defined. Each =
of these=20
feature groups meets certain threats and accomplishes certain security=20
objectives:</FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial><FONT size=3D2><FONT color=3D#000080><B>- Network access =
security :</B>=20
the set of security features that provide users with secure access to 3G =

services, and which in particular protect against attacks on the (radio) =
access=20
link;</FONT></FONT></FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial><FONT size=3D2><FONT color=3D#000080><B>- Network domain =
security:</B>=20
the set of security features that enable nodes in the provider domain to =

securely exchange signalling data, and protect against attacks on the =
wireline=20
network;</FONT></FONT></FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial><FONT size=3D2><FONT color=3D#000080><B>- User domain =
security :</B> the=20
set of security features that secure access to mobile=20
stations;</FONT></FONT></FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial><FONT size=3D2><FONT color=3D#000080><B>- Application =
domain=20
security&nbsp;:</B> the set of security features that enable =
applications in the=20
user and in the provider domain to securely exchange=20
messages;</FONT></FONT></FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial><FONT size=3D2><FONT color=3D#000080><B>- Visibility and =
configurability=20
of security (V):</B> the set of features that enables the user to inform =
himself=20
whether a security feature is in operation or not and whether the use =
and=20
provision of services should depend on the security=20
feature.</FONT></FONT></FONT></P>
<P style=3D"MARGIN-BOTTOM: 0cm; MARGIN-LEFT: 1cm; TEXT-INDENT: =
-0.5cm"><FONT=20
face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</P></DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>Thanks</FONT></DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Regards</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Anurag Uxa<BR>iWave systems =
Technologies Pvt.=20
Ltd.<BR>Bangalore<BR>ph.6786243/5 extn :205</FONT></DIV>
<DIV><FONT face=3DArial size=3D2><A=20
href=3D"http://www.iwavesystems.com">www.iwavesystems.com</A></FONT></DIV=
<DIV><FONT face=3DArial =
size=3D2></FONT>&nbsp;</DIV></FONT></DIV><H6><BR><HR>
DISCLAIMER:

This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. 
<BR><HR><BR></H6></BODY></HTML>

------=_NextPart_000_0097_01C28970.B22AB140--

---

From: [email-masked] (Jari Arkko)
Date: Mon, 11 Nov 2002 07:10:13 +0200

Anurag Uxa wrote:

> I am going to implement ppp authentication for mobile IPv6 
> But i am not able to understand about AKA , How can i use PPP message 
> format with AKA? If it is like EAP what is protocol field and length and 
> optional field.

I think draft-arkko-pppext-eap-aka-06.txt answers most of your
questions. EAP AKA is an authentication method, similar to MD5 Challenge,
under the general EAP protocol framework.  For message format see
Section 8 of the above draft. EAP AKA type number is 23. Length depends
on the particular message.

Are you really using PPP or running EAP over something else, e.g. PANA?
If you are only using EAP then you don't need PPP protocol fields etc.

If there's something unclear in the documents let the authors or the list know.

Hope this helps,

Jari