System and method for concurrent address allocation and authentication

• US 10,284,536 B2
• Filed: 12/17/2012
• Issued: 05/07/2019
• Est. Priority Date: 12/16/2011
• Status: Active Grant

• Current Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Futurewei Technologies Incorporated (Huawei Investment & Holding Co., Ltd.)
• Inventors: Barber, Phillip
• Primary Examiner(s): Shaifer Harriman, Dant B
• Application Number:
  US13/717,423
• Publication Number:
  US 20130160081A1
• Time in Patent Office: 2,332 Days
• Field of Search: 726 3
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method for coordinating network entry of a device includes authenticating the device coupled to the controller, and allocating an address for the device, wherein allocating the address for the device occur concurrently with but independently of authenticating the device. The method also includes completing the network entry of the device upon successful completion of authenticating the device and allocating the address for the device.

Claims

1. A method for coordinating network entry of a device, the method comprising:

authenticating, by a controller, in a first process, the device coupled to the controller;

allocating, by the controller, in a second process, an address for the device, the first process performed independently of the second processes, and the first process performed in parallel with the second process; and

completing, by the controller, the network entry of the device upon successful completion of authenticating the device and allocating the address for the device.

2. The method of claim 1, wherein the controller comprises a media access control layer controller.

3. The method of claim 2, wherein the controller is located in one of a gateway and an access point serving the device.

4. The method of claim 1, further comprising receiving a first indication of successful completion of authenticating the device and receiving a second indication of successful completion of allocating the address for the device prior to completing the network entry of the device.

5. The method of claim 1, further comprising receiving a first message including a first indication of successful completion of authenticating the device and receiving a second message including a second indication of successful completion of allocating the address for the device prior to completing the network entry of the device.

6. The method of claim 1, wherein authenticating the device comprises exchanging messages in one of an IEEE 802.1X, a protocol for carrying authentication for network access, an Internet key exchange, a host identity protocol, and an extensible authentication protocol.

7. The method of claim 1, wherein allocating the address comprises exchanging message in a dynamic host configuration protocol.

8. The method of claim 1, further comprising enabling data traffic for the device.

9. A method for coordinating network entry of a device, the method comprises:

receiving, by a controller, an authentication request message in a single time instance from the device;

receiving, by the controller, an address assignment request message in the single time instance from the device;

processing, by the controller, the authentication request message;

processing, by the controller, the address assignment request message independently of processing of the authentication request message, and the processing of the address assignment request message is performed in parallel with the processing of the authentication request message; and

enabling, by the controller, data traffic upon successful completion of processing of the authentication request message and processing of the address assignment request message.

10. The method of claim 9, wherein the single time instance comprises one of a single frame, an encapsulated protocol data unit, a resource allocation, and a processing time window.

11. The method of claim 9, wherein processing the authentication request message comprises transmitting one or more authentication messages, and wherein the address assignment request message is constrained to any one of the one or more authentication messages.

12. The method of claim 9, further comprising detecting a first indication of successful completion of authenticating the device and detecting a second indication of successful completion of allocating the address for the device prior to enabling the data traffic.

13. A controller comprising:

a processor; and

a non-transitory computer readable storage medium storing programming for execution by the processor, the programming including instructions to;

authenticate a device coupled to the controller,

allocate an address for the device, wherein the instructions to authenticate the device are performed in parallel with and independently of the instructions to allocate the address, and

complete a network entry of the device upon successful completion of authenticating the device and allocating the address for the device.

14. The controller of claim 13, wherein the controller comprises a media access control layer controller.

15. The controller of claim 14, wherein the controller is located in one of a gateway and an access point serving the device.

16. The controller of claim 13, further comprising a receiver operatively coupled to the processor, the receiver configured to receive a first indication of successful completion of authenticating the device and receiving a second indication of successful completion of allocating the address for the device prior to completing the network entry of the device.

17. The controller of claim 13, further comprising a receiver operatively coupled to the processor, the receiver configured to receive a first message including a first indication of successful completion of authenticating the device and receiving a second message including a second indication of successful completion of allocating the address for the device prior to completing the network entry of the device.

18. The controller of claim 13, wherein the processor is configured to enable data traffic for the device.

19. A controller comprising:

a receiver configured to receive an authentication request message in a single time instance from a device, and to receive an address assignment request message in the single time instance from the device; and

a processor operatively coupled to the receiver; and

a non-transitory computer readable storage medium storing programming for execution by the processor, the programming including instructions to;

operate on the authentication request message,

operate on the address assignment request message, wherein the instructions to operate on the authentication request message are performed in parallel with and independently of the instructions to operate on the address assignment request message, and

enable data traffic upon successful completion of processing of the authentication request message and processing of the address assignment request message.

20. The controller of claim 19, wherein the single time instance comprises one of a single frame, an encapsulated protocol data unit, a resource allocation, and a processing time window.

21. The controller of claim 19, further comprising a transmitter operatively coupled to the processor, the transmitter configured to transmit one or more authentication messages, and wherein the address assignment request message is constrained to any one of the one or more authentication messages.

22. The controller of claim 19, wherein the processor is configured to detect a first indication of successful completion of authenticating the device and detecting a second indication of successful completion of allocating the address for the device prior to enabling the data traffic.