Using EAP Instead of PPP for Authentication

Abstract

Various embodiments are described for Point-to-Point Protocol-free (PPP-free) access and service authentication in a wireless network. An HRPD connection/session is established between an access terminal and the access network. Instead of setting up a PPP session and performing access (i.e., device access) authentication and service authentication using PPP, the Extensible Authentication Protocol (EAP) is utilized.

1 . A method comprising:
 receiving a wireless connection request from an access terminal;   establishing a High Rate Packet Data (HRPD) connection between the access terminal and an access network; and   performing access authentication of the access terminal using one or more Extensible Authentication Protocol (EAP) processes over the HRPD connection.   
     
     
         2 . The method of  claim 1 , wherein the access authentication of the access terminal is performed without using a Point-to-Point-Protocol (PPP) process. 
     
     
         3 . The method of  claim 1 , further comprising:
 establishing a connection between the access network and a packet data serving node; and   performing an EAP service authentication process between the packet data serving node and the access terminal over the HRPD connection.   
     
     
         4 . The method of  claim 1 , further comprising sending an EAP success message to the access terminal responsive to authenticating the access terminal. 
     
     
         5 . The method of  claim 1 , wherein the performing access authentication further comprises:
 sending an EAP request identity message to the access terminal;   receiving an EAP response identity message from the access terminal; and   sending information in the received EAP response identity message to an authentication device operable for authenticating the access terminal.   
     
     
         6 . The method of  claim 5 , wherein the sending the information in the received EAP response identity message to the authentication device further comprises sending the information to a home authentication device of the access terminal if it is determined that the access terminal is visiting. 
     
     
         7 . The method of  claim 5 , wherein the sending information in the received EAP response identity message to the authentication device further comprises sending one or more EAP messages to the authentication device over a RADIUS protocol. 
     
     
         8 . The method of  claim 5 , wherein the sending information in the received EAP response identity message to the authentication device further comprises sending one or more EAP messages to the authentication device over a DIAMETER protocol. 
     
     
         9 . A computing device comprising:
 one or more processors; and   a memory comprising instructions stored thereon that, responsive to execution by the one or more processors, perform operations comprising:
 receiving a wireless connection request from an access terminal; 
 establishing a High Rate Packet Data (HRPD) connection between the access terminal and an access network; 
 sending a request identity message to the access terminal; 
 receiving a response identity message from the access terminal; and 
 authenticating the access terminal by performing one or more Extensible Authentication Protocol (EAP) processes over the HRPD connection. 
   
     
     
         10 . The computing device of  claim 9 , wherein the authenticating comprises authenticating the access terminal without using a Point-to-Point-Protocol (PPP) process. 
     
     
         11 . The computing device of  claim 9 , wherein the instructions, responsive to execution by the one or more processors, perform operations further comprising:
 establishing a connection between the access network and a packet data serving node; and   performing an EAP service authentication process between the packet data serving node and the access terminal over the HRPD connection.   
     
     
         12 . The computing device of  claim 9 , wherein the instructions, responsive to execution by the one or more processors, perform operations further comprising sending an EAP success message to the access terminal responsive to authenticating the access terminal. 
     
     
         13 . The computing device of  claim 9 , wherein the instructions, responsive to execution by the one or more processors, perform operations further comprising, responsive to receiving the response identity message from the access terminal, sending information in the received response identity message to an authentication device operable for authenticating the access terminal. 
     
     
         14 . The computing device of  claim 13 , wherein the sending information in the received response identity message to the authentication device further comprises sending one or more EAP messages to the authentication device over a RADIUS protocol. 
     
     
         15 . The computing device of  claim 13 , wherein the sending information in the received response identity message to the authentication device further comprises sending one or more EAP messages to the authentication device over a DIAMETER protocol. 
     
     
         16 . A computer-readable storage device comprising instructions stored thereon that, responsive to execution by a processor, perform operations comprising:
 receiving a wireless connection request from a supplicant;   establishing a High Rate Packet Data (HRPD) connection between the supplicant and an authenticator; and   performing access authentication between the supplicant and the authenticator using one or more Extensible Authentication Protocol (EAP) processes over the HRPD connection to authenticate the supplicant.   
     
     
         17 . The computer-readable storage device of  claim 16 , wherein the instructions, responsive to execution by the processor, perform operations further comprising establishing a connection between the authenticator and a packet data serving node. 
     
     
         18 . The computer-readable storage device of  claim 16 , wherein the instructions, responsive to execution by the processor, perform operations further comprising performing one or more EAP service authentication processes between the packet data serving node and the supplicant over the HRPD connection responsive to performing the access authentication processes. 
     
     
         19 . The computer-readable storage device of  claim 16 , wherein the instructions, responsive to execution by the processor, perform operations further comprising sending an EAP authentication success message to the supplicant responsive to authenticating the supplicant. 
     
     
         20 . The computer-readable storage device of  claim 16 , wherein the access authentication is performed without using a Point-to-Point-Protocol (PPP) process.