RADIUS Access Accept Protocol Overview MN AR1 HKReq AR2 AAA Server MN Handoff To AR2 Validate MAC Generate HK1 ([MN ID, Msg ID, Seq #], MN-AAA MAC) RADIUS Access Request ([Nonce, Lifetime] AAA-MN MAC, [HK1], , ARn-AAA Key) HKResp FNA([FBU], HK1) FBAck Generate HK1 ([Nonce, Lifetime] AAA-MN MAC) Validate FBU ([[MN ID, Msg ID, Seq #], MN-AAA MAC, NAS IP], AR-AAA MAC) HMK Generated HMK Generated Decrypt HK1 [FBU], HK1 FBAck |