Method and apparatus for allocating and obtaining IP address

• US 8,713,659 B1
• Filed: 09/03/2013
• Issued: 04/29/2014
• Est. Priority Date: 11/02/2012
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Chen, Manna
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US14/017,020
• Publication Number:
  US 20140130125A1
• Time in Patent Office: 238 Days
• Field of Search: 726/8, 726/5, 726/14, 713/153
• US Class Current: 726/8
• CPC Class Codes: H04L 61/503 using an authentication, authorisation and accounting [AAA] protocol, e.g. remote authentication dial-in user service [RADIUS] or Diameter
• CPC Class Codes: H04L 61/5053 Lease time; Renewal aspects
• CPC Class Codes: H04L 61/5061 Pools of addresses
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols

Abstract

A switch sends an authentication request message to a client at intervals of a preset duration. A response message sent by the client is received. The response message carries authentication information of a user carried on the client. An authentication message is sent to a server according to the response message. An authentication reply message sent by the server is received. The authentication reply message carries information about an authentication domain authorized by the server to the user. It is determined, according to the authentication reply message, whether the authentication domain of the user is changed. If the authentication domain of the user is changed, an authentication domain change message is sent to the client according to the authentication reply message, so that the client obtains an IP address again.

Claims

1. A method for allocating an IP address, the method comprising:

sending an authentication request message to a client at intervals of a preset duration, wherein the authentication request message is used to instruct the client to re-send authentication information of a user;

receiving a response message sent by the client, wherein the response message carries authentication information of the user;

sending an authentication message to a server according to the response message, wherein the authentication message carries the authentication information of the user;

receiving an authentication reply message sent by the server, wherein the authentication reply message carries information about an authentication domain authorized by the server to the user, wherein the authentication domain comprises a database that can be accessed by the user;

determining, according to the authentication reply message, whether the authentication domain of the user is changed; and

if the authentication domain of the user is changed, sending an authentication domain change message to the client according to the authentication reply message, wherein the authentication domain change message is used to enable the client to obtain a new IP address according to the authentication domain change message.

2. The method according to claim 1, wherein no authentication domain change message is sent to the client when the authentication domain of the user is not changed.

3. The method according to claim 1, wherein the authentication domain change message carries an IP address identifier allocated to the client.

4. The method according to claim 1, wherein the authentication domain change message carries an identifier instructing the client to obtain the new IP address.

5. The method according to claim 4, wherein the authentication reply message indicates that user authentication succeeds and wherein the authentication domain change message is an EAPo1 Success message of a LAN-based Extensible Authentication Protocol and the identifier is an option identifier in a type-length-value (TLV) format.

6. The method according to claim 4, wherein the authentication reply message indicates that user authentication fails and wherein the authentication domain change message is an EAPo1 Failure message of a LAN-based Extensible Authentication Protocol and the identifier is an option identifier in a type-length-value (TLV) format.

7. The method according to claim 1, wherein the preset duration is pre-configured according to a re-authentication time interval authorized by the server.

8. A method for obtaining an IP address, the method comprising:

receiving an authentication request message sent by a switch at intervals of a preset duration, wherein the authentication request message is used to instruct a client to re-send authentication information of a user;

sending a response message to the switch, wherein the response message carries authentication information of the user;

if an authentication domain of the user is changed, receiving an authentication domain change message sent by the switch, wherein the authentication domain change message is generated by the switch according to an authentication reply message sent by a server, the authentication domain comprising a database that can be accessed by the user; and

obtaining a new IP address according to the authentication domain change message.

9. The method according to claim 8, wherein the authentication domain change message carries an identifier instructing the client to obtain the new IP address and wherein obtaining the new IP address according to the authentication domain change message comprises establishing a DHCP process according to the identifier so as to obtain the new IP address.

10. The method according to claim 9, wherein the authentication reply message indicates that user authentication succeeds and wherein the authentication domain change message is an EAPo1 Success message and the identifier is an option identifier in a TVL format.

11. The method according to claim 9, wherein the authentication reply message indicates that user authentication fails and wherein the authentication domain change message is an EAPo1 Failure message and the identifier is an option identifier in a TVL format.

12. The method according to claim 8, wherein the authentication domain change message carries an IP address identifier allocated to the client and wherein the obtaining the new IP address according to the authentication domain change message comprises obtaining the new IP address from the IP address identifier allocated to the client.

13. An apparatus for allocating an IP address, the apparatus comprising:

a first sending unit, configured to send an authentication request message to a client at intervals of a preset duration, wherein the authentication request message is used to instruct the client to re-send authentication information of a user;

a first receiving unit, configured to receive a response message sent by the client, wherein the response message carries authentication information of the user;

a second sending unit, configured to send an authentication message to a server according to the response message, wherein the authentication message carries the authentication information of the user;

a second receiving unit, configured to receive an authentication reply message sent by the server, wherein the authentication reply message carries information about an authentication domain authorized by the server to the user, wherein the authentication domain comprises a database that can be accessed by the user; and

a determining unit, configured to determine, according to the authentication reply message, whether the authentication domain of the user is changed;

wherein the first sending unit is further configured to send an authentication domain change message to the client according to the authentication reply message if the authentication domain of the user is changed, wherein the authentication domain change message is used to enable the client to obtain a new IP address according to the authentication domain change message.

14. The apparatus according to claim 13, wherein the authentication domain change message carries an identifier instructing the client to obtain the new IP address.

15. The apparatus according to claim 13, wherein the authentication domain change message carries an IP address identifier allocated to the client.

16. The apparatus according to claim 13, further comprising:

a configuring unit, configured to pre-configure the preset duration according to a re-authentication time interval authorized by the server.

17. An apparatus for obtaining an IP address, the apparatus comprising:

a receiving unit, configured to receive an authentication request message sent by a switch at intervals of a preset duration, wherein the authentication request message is used to instruct a client to re-send authentication information of a user; and

a sending unit, configured to send a response message to the switch, wherein the response message carries authentication information of the user;

wherein the receiving unit is further configured to, if an authentication domain of the user is changed, receive an authentication domain change message sent by the switch, wherein the authentication domain change message is generated by the switch according to an authentication reply message sent by a server, the authentication domain comprises a database that can be accessed by the user; and

an obtaining unit, configured to obtain a new IP address according to the authentication domain change message.

18. The apparatus according to claim 17, wherein when the authentication domain change message carries an identifier instructing the client to obtain the new IP address, the obtaining unit is specifically configured to:

establish a DHCP process according to the identifier so as to obtain the new IP address.

19. The apparatus according to claim 17, wherein when the authentication domain change message carries an IP address identifier allocated to the client, the obtaining unit is specifically configured to:

obtain the new IP address from the IP address identifier allocated to the client.