Authentication & key agreement for off-portal mobile applications

This paper identifies serious user privacy concerns with the 3GPP Generic Bootstrapping Architecture protocol when used as the basis for security for certain Off-portal applications such those encountered in e-health environments. A possible alternative approach avoiding these concerns is also outlined.