1

A method of performing authorisation between a first device and a second device in a wireless communications network, the method comprising the steps of:sending a request for authorisation from the first device to the second device;

sending a first query message from the second device to at least one third device;

returning a first response message from the at least one third device to the second device;

wherein the first response message contains first authorisation data for use by the second device in determining whether to authorise the first device.

View Prior Art for Claim

2

A method as claimed in Claim 1, further comprising the steps of:forwarding a second query message from a third device to a fourth device;

returning a second response message from the fourth device to the second device;

wherein the second response message from the fourth device contains second authorisation data for use by the second device in determining whether to authorise the first device.

View Prior Art for Claim

3

A method as claimed in Claim 2, wherein the second response message is returned from the fourth device to the second device via the third device.

View Prior Art for Claim

4

A method as claimed in Claim 1, wherein the first authorisation data comprises one or more predetermined assertions relating to the first device.

View Prior Art for Claim

5

A method as claimed in Claim 4, wherein a predetermined assertion relates to historical data between a device and the first device.

View Prior Art for Claim

6

A method as claimed in Claim 4, wherein a predetermined assertion comprises at least one trust value.

View Prior Art for Claim

7

A method as claimed in Claim 4, wherein a predetermined assertion comprises a first trust value and a second trust value.

View Prior Art for Claim

8

A method as claimed in Claim 6, further comprising the steps of:determining a trust score at the second device based on one or more trust values received in one or more response messages; and

performing an authorisation decision at the second device using the determined trust score.

View Prior Art for Claim

9

A method as claimed in Claim 8, wherein the authorisation decision comprises the step of comparing the trust score with a threshold value, and authorising the first device if the trust score is higher than, or equal to, the threshold value.

View Prior Art for Claim

10

A method as claimed in Claim 1, further comprising the steps of:including authentication data in a second response message sent from a device to the second device;

sending corresponding authentication data from said device to the first device; and

using the authentication data at the second device to perform authentication between the first device and the second device.

View Prior Art for Claim