Network and wireless LAN authentication method used therein

• US 20030120767A1
• Filed: 12/23/2002
• Published: 06/26/2003
• Est. Priority Date: 12/26/2001
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Morimoto, Shinichi
• Application Number:
  US10/326,403
• Publication Number:
  US 20030120767A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 60/00 Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 84/20 Master-slave selection or change arrangements

Abstract

It is an object of the present invention to provide a network which can be connected to the network without making a management operation difficult even when a wireless LAN terminal moves. In a plurality of wireless LANs in which authentication servers are arranged, when authentication information of the wireless LAN serving as a slave is changed, the contents of the change are noticed to a wireless LAN serving as a master, and the changed authentication information is automatically sent from a management server of the wireless LAN serving as a master to a management server of the wireless LAN. The management server writes the sent authentication information in an authentication table of an authentication server.

Claims

1. A network which comprises a first wireless LAN (Local Area Network) serving as a master of a wireless LAN management system and a second wireless LAN serving as a slave of the wireless LAN management system and which includes an authentication server for authenticating a wireless LAN terminal and a management server for performing management control in the network of the management server in each of the first and second wireless LANs,

wherein the management server of the first wireless LAN comprises:

means for integrally managing the authentication registration data in which information related to a wireless LAN terminal to be authenticated and registered is described; and

means for sending the integrally managed authentication registration data to the management server of the second wireless LAN, and

wherein each of the management servers comprises an authentication table which is searched by the authentication server to check whether authentication of the wireless LAN terminal is permitted or not and which includes information of the wireless LAN terminals of all the wireless LANs.

2. The network according to claim 1, wherein

in the second wireless LAN, the management server writes the authentication registration data in the authentication table of the network of the management server when authentication registration of the wireless LAN terminal is performed and transmits the authentication registration data to the management server of the first wireless LAN, and

the management server of the first wireless LAN writes the authentication registration data in the authentication table of the network of the management server.

3. The network according to claim 1, wherein the management server of the second wireless LAN updates authentication registration data in the authentication table except for authentication registration data of the network of the management server of the second wireless LAN when the management server of the second wireless LAN receives the authentication registration data from the management server of the first wireless LAN.

4. The network according to claim 1, wherein the management server of the first wireless LAN updates only authentication registration data of the second wireless LAN in the authentication table when the management server of the first wireless LAN receives the authentication registration data from the management server of the second wireless LAN.

5. A wireless LAN authentication method for a network which comprises a first wireless LAN (Local Area Network) serving as a master of a wireless LAN management system and a second wireless LAN serving as a slave of the wireless LAN management system and which includes an authentication server for authenticating a wireless LAN terminal and a management server for performing management control in the network of the management server in each of the first and second wireless LANs, comprising the steps of:

causing the management server of the first wireless LAN to integrally manage the authentication registration data in which information related to a wireless LAN terminal to be authenticated and registered is described;

causing the management server of the first wireless LAN to send the integrally managed authentication registration data to the management server of the second wireless LAN,

causing each of the management servers to have an authentication table which is searched by the authentication server to check whether authentication of the wireless LAN terminal is permitted or not and which includes information of the wireless LAN terminals of all the wireless LANs.

6. The wireless LAN authentication method according to claim 5, wherein

in the second wireless LAN, the management server writes the authentication registration data in the authentication table of the network of the management server when authentication registration of the wireless LAN terminal is performed and transmits the authentication registration data to the management server of the first wireless LAN, and

the management server of the first wireless LAN writes the authentication registration data in the authentication table of the network of the management server.

7. The wireless LAN authentication method according to claim 5, wherein the management server of the second wireless LAN updates authentication registration data in the authentication table except for authentication registration data of the network of the management server of the second wireless LAN when the management server of the second wireless LAN receives the authentication registration data from the management server of the first wireless LAN.

8. The wireless LAN authentication method according to claim 5, wherein the management server of the first wireless LAN updates only authentication registration data of the second wireless LAN in the authentication table when the management server of the first wireless LAN receives the authentication registration data from the management server of the second wireless LAN.