Authentication and key agreement in communication network

Abstract

A method for authentication and key agreement in a communication network is disclosed. In the method, a network node generates a common public key and a master secret key, assigns to a first user equipment a first set of one or more pseudonym identifications corresponding to a real identity of the first user equipment, the common public key and a first private key specific to the first user equipment, and assigns to a second user equipment a second set of one or more pseudonym identifications corresponding to a real identity of the second user equipment, the common public key and a second private key specific to the second user equipment. In response to a request for establishing a communication session between the first user equipment with a first pseudonym identification and the second user equipment with a second pseudonym identification, the network node generates a first intermediate key for the first user equipment based on the common public key and a second secret key shared between the second user equipment and the network node, and a second intermediate key for the second user equipment based on the common public key and a first secret key shared between the first user equipment and the network node. Upon successfully authenticate each other based on the common public key, the first and second user equipments generate a session key to be used for securing the communication session based on the first and second intermediate keys respectively.