Secure system and method for providing a robust radius accounting server

• US 20040073651A1
• Filed: 10/07/2003
• Published: 04/15/2004
• Est. Priority Date: 10/10/2002
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Beaulieu, Annette, Livigni, Fabrice, Marmigere, Gerard
• Application Number:
  US10/680,849
• Publication Number:
  US 20040073651A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 12/1403 Architecture for metering, charging or billing
• CPC Class Codes: H04L 43/0805 by checking availability
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method for providing robustness to the accounting function of user sessions established by at least one NAS in an IP network, the accounting function being performed on a RADIUS server storing an ID, IP address and secret code for each NAS and information identifying each established session. The method includes identifying for the RADIUS server, the agent as a RADIUS client of the RADIUS server, polling from the agent all the NAS identified in said RADIUS server and, if no answer is received from at least one NAS, sending from the agent a RADIUS stop accounting request to the RADIUS server for all the sessions established by each non-responding NAS.

Claims

1. A method executed by an agent on a computing system, providing robustness to an accounting function of user sessions established by at least one NAS in an IP network, the accounting function being performed on a RADIUS server storing an ID, IP address and secret code for each of the at least one NAS and information identifying each established session, said method comprising the steps of:

identifying for the RADIUS server, the agent as a RADIUS client of the RADIUS server,

polling from the agent the at least one NAS and, if no answer is received from at least one non-responding NAS,

sending from the agent a RADIUS stop accounting request to the RADIUS server for all sessions established by the at least one non-responding NAS.

2. The method of claim 1, wherein the identifying step comprises the step of storing the ID, the IP address and the secret code of the agent.

3. The method of claim 1, wherein the polling step comprises the step of waiting for an expiration of a timer which is a first parameter defined during an installation of the agent.

4. The method of claim 1, wherein the polling step is repeated n times, n being an integer defined at an installation of the agent.

5. The method of claim 1, wherein the polling step and the sending step further comprise a step of reading a table owned by the RADIUS server containing one entry per established session and, for each entry, information to identify the NAS and prepare parameters for the RADIUS stop accounting request.

6. The method of claim 5, wherein the sending step comprises a preliminary step, after reading the established session table, of, including as parameters of the RADIUS stop accounting request:

accounting status, accounting session time, a NAS identifier;

a session identifier and an authenticator.

7. The method of claim 6 further comprising the steps of:

computing the accounting session time by subtracting the session start time read in the established session table from a current computing system timestamp; and

,

computing the authenticator as a function of the secret code read with the ID and the IP address stored for the corresponding NAS.

8. A computer program product comprising programming code instructions for executing the steps of the method according to of claim 1 when said program is executed on a computing system.

9. A computing system comprising means adapted for carrying out the method according to of claim 1.