Methods, systems, and computer readable media for remote authentication dial in user service (RADIUS) proxy and diameter agent address resolution

• US 10,084,755 B2
• Filed: 10/31/2015
• Issued: 09/25/2018
• Est. Priority Date: 08/14/2015
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: McCann, Thomas Matthew
• Primary Examiner(s): Patel, Ashokkumar B
• Assistant Examiner(s): Tran, Vu V
• Application Number:
  US14/929,283
• Publication Number:
  US 20170048202A1
• Time in Patent Office: 1,060 Days
• CPC Class Codes: H04L 2101/395 Internet protocol multimedia private identity [IMPI]; Internet protocol multimedia public identity [IMPU]
• CPC Class Codes: H04L 2101/65 Telephone numbers
• CPC Class Codes: H04L 2101/654 International mobile subscriber identity [IMSI] numbers
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/4588 containing mobile subscriber information, e.g. home subscriber server [HSS]
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54

Abstract

A method for RADIUS proxy or Diameter agent address resolution is disclosed. The method may be implemented in a network node including a plurality of message processors. The method includes receiving an inbound RADIUS or Diameter message. The method further includes determining whether address resolution is required for the inbound message. The method further includes, in response to determining that address resolution is required for the inbound message, performing the address resolution. The method further includes routing an outbound message to a destination based on a result of the address resolution, where at least one of the inbound message and the outbound message comprises a RADIUS message.

Claims

1. A method for remote authentication dial in user service (RADIUS) proxy or Diameter agent address resolution, the method comprising:

in a network node including a plurality of message processors;

receiving an inbound RADIUS message;

determining that address resolution is required for the RADIUS message, wherein determining whether address resolution is required for the RADIUS message includes performing a lookup in an application routing table that maps a RADIUS message type of RADIUS Access Request requesting authentication challenge information to applications within the network node for processing the RADIUS message, wherein one of the applications mapped by the application routing table to the RADIUS message type of RADIUS Access Request is an address resolution application within the network node;

in response to determining that address resolution is required for the RADIUS message, performing the address resolution using the address resolution application within the network node, wherein performing the address resolution includes mapping a non-routable identifier in the message to a routable address for a destination; and

routing an outbound message to the destination using the routable address for the destination obtained from the address resolution application, wherein the outbound message comprises a RADIUS or Diameter message.

2. The method of claim 1 wherein receiving an inbound message includes receiving a RADIUS message requesting authentication challenge information and wherein routing the outbound message using the routable address for the destination obtained from the address resolution application includes routing a Diameter message to obtain the authentication challenge information.

3. The method of claim 1 wherein receiving an inbound message includes receiving a RADIUS message requesting authentication, authorization, and accounting (AAA) server authentication or accounting and wherein routing the outbound message includes routing the RADIUS message to an AAA server.

4. The method of claim 1 wherein receiving an inbound message includes receiving a RADIUS message requesting authentication, authorization, and accounting (AAA) server authentication and wherein routing the outbound message includes routing an outbound Diameter message to an AAA server corresponding to the address for the destination obtained from the address resolution application.

5. The method of claim 1 wherein performing the address resolution includes performing a lookup using an international mobile station identifier (IMSI), a mobile subscriber integrated services digital network (MSISDN) number, a subscriber Internet protocol (IP) address, or an IP multimedia subsystem (IMS) public or private identity in the inbound message.

6. The method of claim 1 wherein performing the address resolution includes performing range based address resolution.

7. The method of claim 1 wherein performing the address resolution includes performing address resolution based on full subscriber address.

8. The method of claim 1 wherein the network node comprises a Diameter signaling router functioning as a RADIUS proxy.

9. A system for remote authentication dial in user service (RADIUS) proxy or Diameter agent address resolution, the system comprising:

a network node including a plurality of hardware message processors;

the hardware message processors including a first hardware message processor for receiving an inbound RADIUS message and for determining that address resolution is required for the RADIUS message, wherein determining whether address resolution is required for the RADIUS message includes performing a lookup in an application routing table that maps a RADIUS message type of RADIUS Access Request requesting authentication challenge information to applications within the network node for processing the RADIUS message, wherein one of the applications mapped to the RADIUS message type is an address resolution application;

wherein the address resolution application, in response to a determination that address resolution is required for the RADIUS message, performs the address resolution and wherein performing the address resolution includes mapping a non-routable identifier in the message to a routable address for a destination; and

a routing layer for routing an outbound message to the destination using the routable address for the destination obtained from the address resolution, wherein the outbound message comprises a RADIUS or Diameter message.

10. The system of claim 9 wherein the inbound message comprises a RADIUS message requesting authentication information and wherein the outbound message comprises a Diameter message for obtaining the authentication challenge information.

11. The system of claim 9 wherein the inbound message includes a RADIUS message requesting authentication, authorization, and accounting (AAA) server authentication or accounting, wherein the outbound message comprises a RADIUS message and wherein the destination comprises an AAA server.

12. The system of claim 9 wherein the inbound message comprises a RADIUS message requesting authentication, authorization, and accounting (AAA) server authentication, the outbound message comprises a Diameter message, and the destination comprises an AAA server corresponding to the address identified by the address resolution application.

13. The system of claim 9 wherein the address resolution application is configured to perform an address resolution lookup using an international mobile station identifier (IMSI), a mobile subscriber integrated services digital network (MSISDN) number, a subscriber Internet protocol (IP) address, and an IP multimedia subsystem (IMS) public or private identity in the inbound message.

14. The system of claim 9 wherein the address resolution application is configured to perform range based address resolution.

15. The system of claim 9 wherein the address resolution application is configured to perform address resolution based on a full subscriber address.

16. The system of claim 9 wherein the network node comprises a Diameter signaling router functioning as a RADIUS proxy.

17. A non-transitory computer readable medium having stored thereon executable instructions that when executed by a processor of a computer control the computer to perform steps comprising:

in a network node including a plurality of message processors;

receiving an inbound remote authentication dial in user service (RADIUS) message;

determining that address resolution is required for the RADIUS, wherein determining whether address resolution is required for the RADIUS message includes performing a lookup in an application routing table that maps a RADIUS message type of RADIUS Access Request requesting authentication challenge information to applications within the network node for processing the RADIUS message, wherein one of the applications mapped to the RADIUS message type is an address resolution application within the network node;

in response to determining that address resolution is required for the RADIUS message, performing the address resolution using the address resolution application within the network node, wherein performing the address resolution includes mapping a non-routable identifier in the message to a routable address for a destination; and

routing an outbound message to a destination using the routable address for the destination obtained from the address resolution application, wherein the outbound message comprises a RADIUS or Diameter message.