Network system, information processing device, repeater, and method of building network system

• US 20040073793A1
• Filed: 09/22/2003
• Published: 04/15/2004
• Est. Priority Date: 10/10/2002
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Takeda, Jun
• Application Number:
  US10/666,341
• Publication Number:
  US 20040073793A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

An access point (AP), upon receipt of a request to commence authentication from a station (STA), obtains supplicant identification information (EAP-Response/Identity) from the station (STA) and refers to a rule table (RT) to thereby identify a RADIUS server that is to authenticate the access point (AP).

Claims

1. A network system comprising:

a terminal which makes access to a network;

a server which, when an access request is made by a terminal, authenticates the requesting terminal; and

a processing device which receives an authentication request from a terminal, identifies a server which authenticates the terminal based on information received from the terminal at the time of reception of the request, and connects the requesting terminal to the identified server.

2. The network system according to claim 1, wherein the server exists for each domain and the terminal exists without being set to the domains.

3. The network system according to claim 1, wherein the processing device, upon receipt of the request from the terminal, identifies a domain to which the requesting terminal belongs and, when the requesting terminal belongs to the domain to which it belongs, performs the process of identifying a server and the process of connecting the requesting terminal to the identified server.

4. The network system according to claim 1, wherein the processing device and the terminal are connected via a wireless LAN.

5. An information processing device comprising:

a receiving unit configured to receive a request for authentication from a terminal which makes access to a network;

an identifying unit configured to identify a device which verifies the eligibility of the requesting terminal to make access to the network based on the received authentication request; and

a connecting unit configured to connect the requesting terminal to the identified device.

6. The information processing device according to claim 5, wherein the identifying unit obtains the identification name of the requesting terminal from information received from the terminal when the authentication request is received, recognizes a domain to which the requesting terminal belongs through a matching operation on the identification name, and identifies the device which verifies the eligibility of the requesting terminal to make access to the network based on the result of the recognition.

7. A repeater for use in a network system having servers each of which authenticates a terminal upon receipt of an access request therefrom, comprising:

an identifying unit configured to identify a server which is to authenticate a requesting terminal, upon reception of a request for authentication from the terminal; and

a connecting unit configured to connect the requesting terminal to the identified server.

8. The repeater according to claim 7, wherein the identifying unit has a table which manages a plurality of network connectable domains and servers each of which is placed in one of the domains in a mapped form and identifies a server which is to authenticate the requesting terminal based on information from the terminal at the time of reception of the request and the table.

9. The repeater according to claim 7, wherein the repeater performs the authentication procedure with the requesting terminal according to the definitions specified in the IEEE 802.1x.

10. The repeater according to claim 7, wherein the repeater performs the authentication procedure with the requesting terminal according to the EAP authentication protocol.

11. A network system comprising:

one supplicant which needs authentication when making access to a network;

authentication server which perform authentication; and

an authenticator which, in response to receipt of a request for authentication from a supplicant, identifies an authentication server which is to authenticate the requesting supplicant and connects the requesting supplicant to the identified authentication server.

12. The network system according to claim 11, wherein the authenticator has a table which manages a plurality of network connectable domains and authentication servers each of which is placed in one of the domains and identifies a server which is to authenticate the requesting terminal by obtaining identification information of the requesting terminal at the time of reception of the request and performing pattern matching between the domain set in the table and the identification information.

13. The network system according to claim 11, wherein the authenticator performs the authentication procedure with the requesting supplicant according to the definitions specified in the IEEE 802.1x.

14. The network system according to claim 11, wherein the authenticator performs the authentication procedure with the requesting supplicant according to the EAP authentication protocol.

15. A method of building a network system having a terminal each of which make access to a network, a repeater which allows a terminal to make access to the network according to an access request from it, and one server, when an access request is made by a terminal, authenticates the requesting terminal,

the allowing the terminal to make access includes receiving an authentication request from a terminal, identifying a server which is to authenticate that terminal based on information received from the terminal, and connecting the requesting terminal to the identified server.

16. The method according to claim 15, wherein the identifying the server identifies a server which is to authenticate the requesting terminal based on a table which manages a plurality of network connectable domains and servers each of which is placed in a respective one of the domains in a mapped form and identification information obtained from the terminal at the time of receipt of the request.