System and method for network user authentication

• US 7,716,723 B1
• Filed: 10/07/2002
• Issued: 05/11/2010
• Est. Priority Date: 10/07/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Taylor, Wayne N., Salowey, Joseph A., Dommety, Gopal K., Wright, Michael A., Gossman, William C., Das, Amitava
• Primary Examiner(s): Henning; Matthew T
• Application Number:
  US10/266,819
• Time in Patent Office: 2,773 Days
• Field of Search: 713/153, 726/7, 380/273
• US Class Current: 726/7
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04Q 3/0025 Provisions for signalling
• CPC Class Codes: H04Q 3/0045 involving hybrid, i.e. a mixture of public and private, or multi-vendor systems

Abstract

A system for user authentication includes a gateway operable to receive a user authentication request in an Internet Protocol format from a server. The gateway communicates the user authentication request in a Signaling System 7 protocol to a user registry. The gateway is also operable to receive a user authentication response in the Signaling System 7 protocol from the user registry. The gateway communicates the user authentication response in the Internet Protocol format to the server.

Claims

1. A system for user authentication, comprising:

a gateway operable to receive a user authentication request associated with a network user in a Remote Authentication Dial-In User Service format of an Internet Protocol from a server, the gateway operable to generate a registry authentication request by converting the Remote Authentication Dial-In User Service format to a Mobile Application Part format of a Signaling System 7 protocol, the gateway operable to communicate the registry authentication request in the Signaling System 7 protocol to a user registry, the gateway further operable to receive a registry authentication response in the Mobile Application Part format of the Signaling System 7 protocol from the user registry, the gateway operable to generate a user authentication response by converting the Mobile Application part format to the Remote Authentication Dial-In User Service format of the Internet Protocol, the gateway operable to communicate the user authentication response in the Internet Protocol to the server, wherein the user authentication response comprises zero or more sets of authentication triplets compatible with a Global System for Mobile Communications network, wherein the gateway is operable to store any received authentication triplets in the registry authentication response in a memory cache for subsequent reuse of authentication triplets, the gateway operable to allow reuse of authentication triplets when the gateway fails to have any fresh authentication triplets and the network user is valid, wherein reuse of authentication triplets is initiated by the server in accordance with a reuse limit indicating a number of times an authentication triplet can be reused.

2. The system of claim 1, wherein the user authentication response comprises three authentication triplets.

3. The system of claim 1, wherein at least one authentication triplet is used to authenticate a user more than one time.

4. A method for authenticating a user, comprising:

receiving a user authentication request associated with a network user in a Remote Authentication Dial-In User Service format of an Internet Protocol format from a server;

generating a registry authentication request by converting the Remote Authentication Dial-In User Service format to a Mobile Application Part format of a Signaling System 7 protocol;

communicating the registry authentication request in the Signaling System 7 protocol to a user registry;

receiving a registry authentication response in the Mobile Application Part format of the Signaling System 7 protocol from the user registry;

generating a user authentication response by converting the Mobile Application part format to the Remote Authentication Dial-In User Service format of the Internet Protocol; and

communicating the user authentication response in the Internet Protocol format to the server, wherein the user authentication response comprises zero or more sets of authentication triplets compatible with a Global System for Mobile Communications network;

storing any authentication triplets in the user authentication response in a memory cache for subsequent reuse of authentication triplets;

allowing reuse of authentication triplets when there are no fresh authentication triplets and the network user is valid, wherein reuse of authentication triplets is initiated by the server in accordance with a reuse limit indicating a number of times an authentication triplet can be reused.

5. The method of claim 4, wherein the user authentication response comprises three authentication triplets.

6. The method of claim 4, further comprising using at least one authentication triplet to authenticate a user more than one time.

7. A system for user authentication, comprising:

means for receiving a user authentication request associated with a network user in a Remote Authentication Dial-In User Service format of an Internet Protocol format from a server;

means for generating a registry authentication request by converting the Remote Authentication Dial-In User Service format to a Mobile Application Part format of a Signaling System 7 protocol;

means for communicating the registry authentication request in the Signaling System 7 protocol to a user registry;

means for receiving a registry authentication response in the Mobile Application Part format of the Signaling System 7 protocol from the user registry;

means for generating a user authentication response by converting the Mobile Application part format to the Remote Authentication Dial-In User Service format of the Internet Protocol; and

means for communicating the user authentication response in the Internet Protocol format to the server, wherein the user authentication response comprises zero or more sets of authentication triplets compatible with a Global System for Mobile Communications network;

means for storing any authentication triplets in the user authentication response for subsequent reuse of authentication triplets;

means for allowing reuse of authentication triplets when there are no fresh authentication triplets and the network user is valid, wherein reuse of authentication triplets is initiated by the server in accordance with a reuse limit indicating a number of times an authentication triplet can be reused.

8. The system of claim 7, wherein the user authentication response comprises three authentication triplets.

9. The system of claim 7, further comprising using at least one authentication triplet to authenticate a user more than one time.