CLIENT DEVICE RE-AUTHENTICATION

• US 20200137056A1
• Filed: 10/31/2018
• Published: 04/30/2020
• Est. Priority Date: 10/31/2018
• Status: Abandoned Application

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Havaralu Rama Chandra Adiga, Badrish, Sankaran, Balaji, Bhargava, Bhupesh, Vishwakarma, Vinay Kumar
• Application Number:
  US16/176,934
• Publication Number:
  US 20200137056A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/61 Time-dependent

Abstract

A system and method authenticating a client device transmitting a request to access a network that includes an authentication server to implement an authentication protocol for access to the network, and an authenticator to transmit identity credentials of the client device using the authentication protocol to the authentication server to perform authentication of the client device at the authentication server. The authenticator downloads credentials of the authenticated client device from the authentication server, determines, during a re-authentication period, whether the authentication server is available, and performs re-authentication of the client device using the downloaded credentials when the authentication server is determined not to be available.

Claims

1. A method, comprising

performing authentication of a client device requesting to access a network;

downloading credentials of the authenticated client device from an authentication server to an authenticator;

determining, during a re-authentication period, whether the authentication server is available; and

performing re-authentication during the re-authentication period using the downloaded credentials in response to the authentication server being unavailable.

2. The method of claim 1, wherein authentication is performed according to the IEEE 802.1X standard.

3. The method of claim 1, further comprising:

transmitting an access request from the client device to the authenticator; and

transmitting a corresponding access request using an access request protocol from the authenticator to the authentication server in response to the access request from the client, wherein the access request protocol comprises a remote authentication dial-in user service (RADIUS) protocol.

4. The method of claim 1, further comprising transmitting a connection response from the authentication server to the authenticator, wherein credentials of the authenticated client device are downloaded from the authentication server to the authenticator in response to the connection response.

5. The method of claim 1, further comprising:

transmitting a re-authentication request for the client device from the authenticator to the authentication server;

determining whether a reply is received from the authentication server in response to the re-authentication request; and

performing the re-authentication using the downloaded credentials in response to the reply not being received.

6. The method of claim 5, further comprising performing the re-authorization at the authentication server in response to the reply being received.

7. The method of claim 1, further comprising:

transmitting a re-authentication request for the client device from the authenticator to the client device;

transmitting an identity response that includes the credentials from the client device to the authenticator in response to the re-authentication request;

translating, at the authenticator, the re-authentication request to conform to an access protocol utilized between the authenticator and the authentication server; and

transmitting the translated re-authentication request and the credentials from the authenticator to the authentication server, wherein the access request protocol comprises a remote authentication dial-in user service (RADIUS) protocol.

8. The method of claim 7, further comprising;

determining whether a reply to the translated re-authentication request is received from the authentication server in response to the translated re-authentication request; and

performing the re-authentication using the downloaded credentials in response to the reply not being received.

9. The method of claim 7, comprising performing the re-authentication at the authentication server in response to the reply being received.

13. The method of claim 1, wherein the authenticator is to:

translates the re-authentication request to conform to an access protocol utilized between the authenticator and the authentication server; and

transmits the translated re-authentication request to the authentication server,

wherein the access request protocol comprises a remote authentication dial-in user service (RADIUS) protocol.

14. The system of claim 13, wherein the authenticator is to:

determine whether a reply to the translated re-authentication request is received from the authentication server in response to the translated re-authentication request; and

perform the re-authentication using the downloaded credentials in response to the reply not being received.

15. The system of claim 14, wherein the re-authorization is performed by the authentication server in response to the reply being received.

10. A system for authenticating a client device transmitting a request to access a network, comprising:

an authentication server to implement an authentication protocol for access to the network; and

an authenticator to transmit identity credentials of the client device to the authentication server to perform authentication of the client device at the authentication server using the authentication protocol,

wherein the authenticator is to;

download credentials of the authenticated client device from the authentication server;

determine, during a re-authentication period, whether the authentication server is available; and

perform re-authentication of the client device using the downloaded credentials in response to the authentication server being determined to not be available.

11. The system of claim 10, wherein the authenticator is to:

transmit a re-authentication request for the client device to the authentication server;

determine whether a reply is received from the authentication server in response to the re-authentication request; and

perform the re-authentication using the downloaded credentials in response to the reply not being received.

12. The system of claim 11, wherein the re-authentication is performed by the authentication server in response to the reply being received.

16. A device, comprising:

an authenticator to transmit identity credentials of a client device requesting to access a network to perform authentication of the client device; and

a memory positioned within the authenticator;

wherein the authenticator is to;

download credentials associated with the client device within the memory;

transmit a re-authentication request for re-authenticating the client device;

determine whether a reply is received in response to the re-authentication request; and

perform the re-authentication using the downloaded credentials

17. The device of claim 16, wherein the authenticator performs the re-authentication using the downloaded credentials in response to the reply not being received.

18. The device of claim 16, wherein the authenticator is to:

translate the re-authentication request to conform to an access protocol utilized between the authenticator and an authentication server; and

transmit the translated re-authentication request to the authentication server;

wherein the access request protocol comprises a remote authentication dial-in user service (RADIUS) protocol.

19. The device of claim 18, wherein the authenticator is to:

determine whether a reply to the translated re-authentication request is received in response to the translated re-authentication request; and

perform the re-authentication using the downloaded credentials in response to the reply not being received.

20. The device of claim 19, wherein the re-authorization is performed by the authentication server in response to the reply being received.