Bootstrapping Server Function
From Wikipedia, the free encyclopedia
A Bootstrapping Server Function (BSF) is an intermediary element in Cellular networks which provides application-independent functions for mutual authentication of user equipment and servers unknown to each other and for 'bootstrapping' the exchange of secret session keys afterwards. This allows the use of additional services like Mobile TV and PKI, which need authentication and secured communication.
The setup and function to deploy a generic security relation as described is called Generic Bootstrapping Architecture (GBA) or Generic Authentication Architecture (GAA). In short, it consists of the following elements.
- user equipment (UE), e. g. a mobile cellular telephone; needs access to a specific service
- application server (NAF: Network Application Function), e. g. for mobile TV; provides the service
- BSF (Bootstrapping Server Function); arranges security relation between UE and NAF
- mobile network operator's Home Subscriber Server (HSS); hosts user profiles.
In this case, the term 'bootstrapping' is related to building a security relation with a previously unknown device first and to allow installing security elements (keys) in the device and the BSF afterwards.