METHODS AND APPARATUS FOR AUTHENTICATED USER-ACCESS TO KERBEROS-ENABLED APPLICATIONS BASED ON AN AUTHENTICATION AND KEY AGREEMENT (AKA) MECHANISM

摘要

Methods and apparatus are provided for authenticated user-access to Kerberos-enabled applications based on an Authentication and Key Agreement mechanism. A user is first authenticated using an Authentication and Key Agreement mechanism based on a bootstrapping protocol that mutually authenticates the user and one or more servers; and, once the user is authenticated, the user is enabled to derive a session key and is provided with a first ticket to a Ticket Granting Server. The first ticket can establish an identity of the user and include the session key. The bootstrapping protocol can be based on a Generic Bootstrapping Architecture.