Abstract: A method for establishing a new security association between a mobile node and a network source, the method comprising creating a first token comprising a security association between a network source and a mobile node, the first token being encrypted using a first key known to the mobile node and a first trust authority within a home network associated with the mobile node, and creating a second token comprising the same security association between the network source and the mobile node, the second token being encrypted using a second key known to the first trust authority and a second trust authority associated with the network source, wherein the first token and the second token are sent to the second trust authority using a chain of trust infrastructure.

Abstract: A method for generating and distributing keys based on the Diameter server in the mobile communication field is disclosed herein. The MN sends the NAR identifier to the PAR; after receiving the identifier, the PAR sends the NAR identifier and the MN identifier to the Diameter server; after receiving the identifiers, the Diameter server generates a random number first, then generates a shared key according to the random key, and then sends the shared key to the NAR and sends the random number to the MN; after receiving the random number, the MN generates a shared key. An apparatus and system for generating and distributing keys based on the Diameter server are also disclosed herein. The technical solution under the present invention avoids the domino effect and enhances security of the shared key.

Abstract: A method for establishing a new security association between a mobile node and a network source, the method comprising creating a first token comprising a security association between a network source and a mobile node, the first token being encrypted using a first key known to the mobile node and a first trust authority within a home network associated with the mobile node, and creating a second token comprising the same security association between the network source and the mobile node, the second token being encrypted using a second key known to the first trust authority and a second trust authority associated with the network source, wherein the first token and the second token are sent to the second trust authority using a chain of trust infrastructure.