METHODS, SYSTEMS, AND COMPUTER PROGRAM PRODUCTS FOR CONTROLLING SERVER ACCESS USING AN AUTHENTICATION SERVER

• US 20110107410A1
• Filed: 11/02/2009
• Published: 05/05/2011
• Est. Priority Date: 11/02/2009
• Status: Abandoned Application

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Dargis, Anthony B.
• Application Number:
  US12/610,411
• Publication Number:
  US 20110107410A1
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

An access request message is received at an authentication server computer, the access request message identifying an address of an access requesting client device. The authentication server authenticates the access request message and transmits an access authorization message from the authentication server computer to a blocking device that controls access to the protected server computer, the access authorization message identifying the address of the access requesting client device. Access to the protected server computer via the blocking device is controlled responsive to the access authorization message.

Claims

1. A method of controlling access to a protected server computer, the method comprising:

receiving an access request message at an authentication server computer, the access request message identifying an address of an access requesting client device;

authenticating the access request message at the authentication server computer; and

responsive to authentication of the access request message, transmitting an access authorization message from the authentication server computer to a blocking device that controls access to the protected server computer, the access authorization message identifying the address of the access requesting client device.

2. The method of claim 1, further comprising controlling access to the protected server computer via the blocking device responsive to the access authorization message.

3. The method of claim 2, wherein controlling access to the protected server computer via the blocking device responsive to the access authorization message comprises modifying an access control list (ACL) at the blocking device based on the access authorization message.

4. The method of claim 2, wherein controlling access to the protected server computer via the blocking device responsive to the access authorization message comprises controlling access to a network comprising the protected server computer responsive to the access authorization message.

5. The method of claim 1, wherein transmitting an access authorization message from the authentication server computer to a blocking device that controls access to the protected server computer comprises transmitting a secure access authorization message.

6. The method of claim 1, wherein transmitting a secure access authorization message comprises transmitting a Simple Network Management Protocol version 3 (SNMPv3) message.

7. The method of claim 1, wherein authenticating the access request message comprises authenticating the access request message using a security token, a password, a pass-phrase and/or an identifier.

8. The method of claim 1, wherein the protected server comprises customer equipment served by network provider infrastructure that comprises the blocking device.

9. A computer-readable medium having computer code configured to perform the method of claim 1 embodied therein.

10. A system comprising:

an authentication server computer configured to receive an access request message identifying an address of an access requesting client device, to authenticate the access request message and to transmit an access authorization message responsive to authentication of the access request message, the access authorization message identifying the address of the access requesting client device; and

a blocking device configured to receive the access authorization message from authentication server computer and to control access to a protected server computer by the access requesting client device responsive to the received access authorization message.

11. The system of claim 10, wherein the blocking device is configured to modify an access control list (ACL) responsive to the access authorization message.

12. The system of claim 10, wherein the blocking device is configured to control access to a network comprising the protected server computer responsive to the access authorization message.

13. The system of claim 10, wherein the access authorization message comprises a secure access authorization message.

14. The system of claim 13, wherein the access authorization message comprises a SNMPv3 message.

15. The system of claim 10, wherein the authentication server computer is configured to authenticate the access request message using a security token, a password, a pass-phrase and/or an identifier.

16. The system of claim 10, wherein the protected server comprises customer equipment served by network provider infrastructure that comprises the blocking device.

17. An authentication server comprising:

a communications interface circuit configured to receive an access request message identifying an address of an access requesting client device; and

an authenticator circuit configured to authenticate the access request message,

wherein the communications interface circuit is further configured to transmit an access authorization message from the authentication server computer to a blocking device that controls access to the protected server computer responsive to authentication of the access request message, the access authorization message identifying the address of the access requesting client device.

18. The authentication server of claim 17, wherein the access authorization message comprises a secure access authorization message.

19. The authentication server of claim 18, the secure access authorization message comprises a SNMPv3 message.

20. The authentication server of claim 17, wherein the authenticator circuit is configured to authenticate the access request message using a security token, a password, a pass-phrase and/or an identifier.