Praise for Fundamentals of WiMAX

10.6 Authentication and Security Architecture 347AAA Server and the authenticator in ASN. Depending on the type of credential, a variety of EAPASNVisited CSNHome CSNMS14NAS2a3bAAA ProxyServer2b3aAAA ServerFigure 10.5 Generic AAA roaming modelSupplicantAuthenticationRelayAuthenticatorAuthenticationServerMSBS(ASN)NAS(ASN)AAAProxy(s)AAA Server(Home CSN)EAP-TLS, PEAP, EAP-TTLS, EAP-AKA, etc.EAPPKMv2Authentication RelayProtocolAAA Protocol802.16Authentication RelayEncapsulating ProtocolUDP/IPFigure 10.6 Protocol stack for user authentication in WiMAXschemes, including EAP-AKA (authentication and key agreement), EAP-TLS, EAP-SIM, andEAP-PSK (preshared key), may be supported. It is also possible to optionally secure the transportof end-to-end user authentication within a tunnel by using protocols such as tunneled transportlayersecurity (TTLS). Figure 10.6 depicts the protocol stack for PKMv2 user authentication.When both user and device authentications need to be performed and both authenticationsterminate in different AAA servers, PKMv2 double-EAP mode is used. Here, user EAP authenticationfollows device authentication before the MS is allowed access to IP services. If the sameAAA server is used for both, the process could be shortened by doing joint device and userauthentication.