Dynamic routing of authentication requests

• US 9,838,493 B2
• Filed: 08/21/2012
• Issued: 12/05/2017
• Est. Priority Date: 08/21/2012
• Status: Active Grant

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Extreme Networks, Inc.
• Inventors: Bhayankara, Ranganath Prativadi, Patel, Shailesh, Menon, Sunil
• Primary Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US13/591,105
• Publication Number:
  US 20140059650A1
• Time in Patent Office: 1,932 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Methods, systems, and computer readable media for dynamically routing authentication requests are described. An embodiment can include receiving, at one or more computing devices, a network authentication request. An embodiment can also include creating, at the one or more computing devices, an authentication context based on information in the authentication request. An embodiment can also include dynamically routing, using the one or more computing devices, the authentication request to an authentication server.

Claims

1. A method for dynamically routing authentication requests, the method comprising:

receiving, at one or more computing devices, a network authentication request;

learning information from the authentication request, wherein the information includes three or more of a device location, a mode of access, a service set identifier (SSID), a current load on one or more authentication servers, health information, security information, and device type;

creating, at the one or more computing devices, an authentication context based on the information in the authentication request such that the authentication context includes three or more of the device location, the mode of access, the SSID, the current load on the one or more authentication servers, the health information, the security information, and the device type;

determining a routing for the network authentication request based on the authentication context; and

dynamically routing, using the one or more computing devices, the authentication request to an authentication server based on the determined routing.

2. The method of claim 1, wherein dynamically routing includes determining a routing for the authentication request based on the authentication context.

3. The method of claim 1, further comprising receiving a response to the authentication request, wherein the response includes user authentication.

4. The method of claim 3, further comprising authorizing access to one or more systems based on the user authentication.

5. The method of claim 1, wherein the mode of access includes one of wired or wireless access.

6. The method of claim 1, further comprising setting a threshold for each item of information used to create the authentication context.

7. A system comprising:

a processor coupled to a non-transitory computer readable medium having stored thereon software instructions that, when executed by the processor, cause the processor to perform a series of operations including;

receiving a network authentication request;

learning information from the authentication request, wherein the information includes three or more of a device location, a mode of access, a service set identifier (SSID), a current load on one or more authentication servers, health information, security information, and device type;

creating an authentication context based on the information in the authentication request such that the authentication context includes three or more of the device location, the mode of access, the SSID, the current load on the one or more authentication servers, the health information, the security information, and the device type;

determining a routing for the network authentication request based on the authentication context; and

dynamically routing the authentication request to an authentication server, wherein the dynamically routing includes determining a routing for the authentication request based on the authentication context.

8. The system of claim 7, wherein the operations further include receiving a response to the authentication request, wherein the response includes user authentication.

9. The system of claim 8, wherein the operations further comprise authorizing access to one or more systems based on the user authentication.

10. The system of claim 7, wherein the mode of access includes one of wired or wireless access.

11. The system of claim 7, further comprising setting a threshold for each portion of the authentication context.

12. A non-transitory computer readable medium having stored thereon software instructions that, when executed by a processor, cause the processor to perform operations comprising:

receiving a network authentication request;

learning information from the authentication request, wherein the information includes three or more of a device location, a mode of access, a service set identifier (SSID), a current load on one or more authentication servers, health information, security information, and device type;

creating an authentication context based on the information in the authentication request such that the authentication context includes three or more of the device location, the mode of access, the SSID, the current load on the one or more authentication servers, the health information, the security information, and the device type;

determining a routing for the network authentication request based on the authentication context; and

dynamically routing the authentication request to an authentication server, wherein the dynamically routing includes determining a routing for the authentication request based on the authentication context.

13. The computer readable medium of claim 12, wherein the operations further comprise receiving a response to the authentication request, wherein the response includes user authentication.

14. The computer readable medium of claim 13, wherein the operations further comprise authorizing access to one or more systems based on the user authentication.

15. The computer readable medium of claim 12, wherein the mode of access includes one of wired or wireless access.

16. The computer readable medium of claim 12, wherein the operations further comprise setting a threshold for each portion of the authentication context.