ZXUN Generic Bootstrapping Architecture(GBA V5) Certified

ZXUN GBA product is a security infrastructure based on mobile communication network. It contains BSF and AP entities and performs bootstrapping and authentication proxy functions and thus ensures validity and security of user access and operation. The deployment of BSF and AP on physical hardware can be independent or integrated.

l BSF performs the bootstrapping function. It obtains user security and authentication information by message exchange with HSS, authenticates UE validity, and generates the shared key between AP and UE which provides security protection for service application.

Deployed between UE and AS, AP performs the authentication proxy function. It obtains the shared key negotiated between UE and BSF from BSF, authenticates UE on behalf of AS, and forwards UE's request to AS, to avoid each AS from interacting with BSF and reduce the processing on AS.