Authenticated dynamic address assignment

• US 20010047484A1
• Filed: 03/05/2001
• Published: 11/29/2001
• Est. Priority Date: 03/07/2000
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Medvinsky, Alexander, Lalwaney, Poornima
• Granted Patent: US 7,451,312 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 2101/604 Address structures or formats
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5053 Lease time; Renewal aspects
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method for an uninitialized client to obtain credentials from a server which are then used to provide authenticated exchange for network configuration parameter assignment. The obtained credentials can be applied to an authentication option when a dynamic host configuration protocol (DHCP) is being used for address assignment.

Claims

1. A method of providing configuration parameters to an uninitialized client in a client-server network, said method comprising:

utilizing a trusted third party to provide credentials to said uninitialized client;

prior to

utilizing said credentials to obtain a network address from said server via an authenticated address assignment protocol.

2. The method as described in

claim 1

and further comprising:

utilizing a proxy to obtain said credentials from said trusted third party for said uninitialized client.

3. The method as described in

claim 1

and wherein said utilizing said credentials to obtain a network address comprises:

sending an authenticated first message in said authenticated address assignment protocol from said uninitialized client to said server.

4. The method as described in

claim 3

wherein said authenticated first message is authenticated with said credentials.

5. The method as described in

claim 1

wherein said utilizing a trusted third party to provide credentials to said uninitialized client comprises:

utilizing a Kerberos key management protocol.

6. The method as described in

claim 1

wherein said utilizing said credentials to obtain a network address from said server via an authenticated address assignment protocol comprises:

utilizing the Dynamic Host Configuration Protocol.

7. The method as described in

claim 1

wherein said utilizing said credentials to obtain a network address from said server via an authenticated address assignment protocol comprises:

utilizing said authenticated address assignment protocol selected from a set of a plurality of address assignment protocols.

8. The method as described in

claim 7

wherein said plurality of authenticated address assignment protocols comprises:

the Dynamic Host Configuration Protocol; and

the RSIP.

9. The method as described in

claim 1

wherein said utilizing said credentials to obtain a network address from said server via an authenticated address assignment protocol comprises:

obtaining an IP address.

10. The method as described in

claim 1

wherein said act of utilizing a trusted third party to provide credentials to said uninitialized client is not embedded in said authenticated address assignment protocol.

11. A method of configuring a client in a client-server network wherein said client has no address in said network, said method comprising:

allowing said client to communicate with a proxy, said proxy having an address in said client-server network;

allowing said proxy to obtain credentials from a Key Distribution Center of a Kerberos secure key management mechanism;

allowing said proxy to convey said credentials to said client for use by said client;

allowing said client to utilize said credentials so as to obtain an address from said server via an address assignment protocol.

12. The method as described in

claim 11

and further comprising:

conveying said credentials to said client;

prior to

initiating said address assignment protocol.

13. The method as described in

claim 11

and further comprising:

sending an authenticated first message in said authenticated address assignment protocol from said uninitialized client to said server.

14. The method as described in

claim 13

wherein said authenticated first message is authenticated with said credentials.

15. The method as described in

claim 11

and further comprising:

utilizing a Kerberos key management protocol.

16. The method as described in

claim 11

and further comprising:

utilizing a dynamic host configuration protocol as said address assignment protocol.

17. The method as described in

claim 11

wherein said allowing said client to utilize said credentials so as to obtain an address from said server via an address assignment protocol comprises:

allowing said client to utilize said address assignment protocol selected from a set of a plurality of address assignment protocols.

18. The method as described in

claim 17

wherein said plurality of address assignment protocols comprises:

the dynamic host configuration protocol; and

the RSIP.

19. The method as described in

claim 11

and further comprising:

providing an IP address for said client from said server.

20. A method of configuring an uninitialized client in a client-server network, said method comprising:

providing said uninitialized client with credentials for use in an address assignment protocol;

said address assignment protocol comprising a plurality of messages transmitted from said client to said server;

authenticating by said server a first message of said plurality of messages transmitted by said client to said server during said address assignment protocol.

21. The method as described in

claim 20

wherein said providing said uninitialized client with credentials is accomplished independently from performing said address assignment protocol.

22. The method as described in

claim 20

and further comprising:

utilizing said credentials to authenticate said first message.

23. The method as described in

claim 20

and further comprising:

utilizing a Kerberos key management protocol.

24. The method as described in

claim 20

and further comprising:

utilizing the dynamic host configuration protocol.

25. The method as described in

claim 20

and further comprising:

utilizing said address assignment protocol selected from a set of a plurality of address assignment protocols.

26. The method as described in

claim 20

and wherein said plurality of address assignment protocols comprises:

the dynamic host configuration protocol; and

the realm specific IP.

27. The method as described in

claim 20

and further comprising:

providing an IP address for said client from said server.