# US 10,320,788 B2 · Method for transferring authorization information, relay device, and server > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,320,788 B2 - Document ID: US10320788B2 - Status: Granted - Kind: B2 - Application number: 16/101,142 - Filed: 2018-08-10 - Published: 2018-12-06 - Granted: 2019-06-11 - Earliest claimed: 2011-11-08 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Yuxu Ye; Min Zha - Web page: https://patentgrep.com/patent/US10320788B2 ## CPC - H04L 63/0892: {by using authentication-authorization-accounting [AAA] servers or protocols} - H04L 61/5014: using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP] - H04L 61/5061: Pools of addresses - H04L 2101/659: Internet protocol version 6 [IPv6] addresses - H04L 2101/668: Internet protocol [IP] address subnets - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for transferring authorization information, a relay device, and a server are provided. The method includes: receiving, by a DHCPv6 relay device, authorization information delivered by an AAA server; and inserting an option into a DHCPv6 Relay-Forward message, encapsulating the authorization information in the option, and sending the option to a DHCPv6 server. By using the technical solutions of the present application, a DHCPv6 relay device sends authorization information delivered by an AAA server to a DHCPv6 server, so that the DHCPv6 server can provide a correct configuration for a DHCPv6 client according to the authorization information delivered by the AAA server. ## Claims ### Claim 1 A method for transferring authorization information comprising: receiving, by a dynamic host configuration protocol (DHCP) relay device, a solicit message from a DHCP client; receiving, by the DHCP relay device, at least one piece of authorization information delivered by an authentication-authorization-accounting (AAA) server, wherein the at least one piece of authorization information comprises a designated IP prefix as one piece of authorization information; encapsulating, by the DHCP relay device, the solicit message and the at least one piece of authorization information in a relay-forward message; sending, by the DHCP relay device, the relay-forward message to a DHCP server; and receiving, by the DHCP relay device, a specific IP prefix from the DHCP server, wherein the specific IP prefix is designated according to the designated IP prefix. ### Claim 2 (depends on 1) The method for transferring authorization information according to claim 1, wherein when the at least one piece of authorization information comprises multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information, encapsulating the at least one piece of the authorization information in the relay-forward message comprises: encapsulating the multiple pieces of authorization information in multiple options, wherein the multiple pieces of authorization information and the multiple options are in a one-to-one correspondence. ### Claim 3 (depends on 1) The method for transferring authorization information according to claim 1, wherein when the at least one piece of authorization information comprises multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information, encapsulating the at least one piece of authorization information in the relay-forward message comprises: encapsulating the multiple pieces of authorization information in one option. ### Claim 4 (depends on 3) The method for transferring authorization information according to claim 3, wherein encapsulating the multiple pieces of authorization information in the one option comprises: encapsulating the multiple pieces of authorization information in multiple sub-options, wherein the multiple pieces of authorization information and the multiple sub-options are in a one-to-one correspondence. ### Claim 5 A dynamic host configuration protocol (DHCP) relay device comprising a processor and a non-transitory computer readable medium containing instructions that when executed by the processor cause the DHCP relay device to: receive a solicit message from a DHCP client; receive at least one piece of authorization information delivered by an authentication-authorization-accounting (AAA) server, wherein the at least one piece of authorization information comprises a designated IP prefix as one piece of authorization information; encapsulate the solicit message and the at least one piece of authorization information in a relay-forward message; send the relay-forward message to a DHCP server; and receive a specific IP prefix from the DHCP server, wherein the specific IP prefix is designated according to the designated IP prefix. ### Claim 6 (depends on 5) The DHCP relay device according to claim 5, when the at least one piece of authorization information comprises multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information, the processor is configured to: encapsulate the multiple pieces of authorization information in multiple options, wherein the multiple pieces of authorization information and the multiple options are in a one-to-one correspondence. ### Claim 7 (depends on 5) The DHCP relay device according to claim 5, when the at least one piece of authorization information comprises multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information, the processor is configured to: encapsulate the multiple pieces of authorization information in one option. ### Claim 8 (depends on 7) The DHCP relay device according to claim 7, wherein the processor is configured to: encapsulate the multiple pieces of authorization information in multiple sub-options, wherein the multiple pieces of authorization information and the multiple sub-options are in a one-to-one correspondence. ### Claim 9 A dynamic host configuration protocol (DHCP) server comprising a processor and a non-transitory computer readable medium containing instructions that when executed by the processor cause the DHCP server to: receive a relay-forward message from a DHCP relay device, wherein the relay-forward message comprises a solicit message and at least one piece of authorization information, the solicit message is sent from a DHCP client to the DHCP relay device, the at least one piece of authorization information is sent from an authentication-authorization-accounting (AAA) server to the DHCP relay device and the at least one piece of authorization information comprises a designated IP prefix as one piece of authorization information; and designate a specific IP prefix for the DHCP client according to the designated IP prefix. ### Claim 10 (depends on 9) The DHCP server according to claim 9, wherein multiple pieces of authorization information are carried in multiple options, wherein the multiple pieces of authorization information and the multiple options are in a one-to-one correspondence, the at least one piece of authorization information comprises the multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information. ### Claim 11 (depends on 9) The DHCP server according to claim 9, wherein multiple pieces of authorization information are carried in one option, wherein the at least one piece of authorization information comprises the multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information. ### Claim 12 (depends on 11) The DHCP server according to claim 11, wherein the multiple pieces of authorization information are carried in multiple sub-options, wherein the multiple pieces of authorization information and the multiple sub-options are in a one-to-one correspondence. ### Claim 13 A system comprising a dynamic host configuration protocol (DHCP) relay device and an authentication-authorization-accounting (AAA) server, wherein the DHCP relay device comprises a processor and a non-transitory computer readable medium containing instructions that when executed by the processor cause the DHCP relay device to: receive a solicit message from a DHCP client; receive at least one piece of authorization information delivered by the AAA server, wherein the at least one piece of authorization information comprises a designated IP prefix as one piece of authorization information; encapsulate the solicit message and the at least one piece of authorization information in a relay-forward message; send the relay-forward message to a DHCP server; and receive a specific IP prefix from the DHCP server, wherein the specific IP prefix is designated according to the designated IP prefix. ### Claim 14 (depends on 13) The system according to claim 13, wherein the system further comprises the DHCP server. ### Claim 15 (depends on 14) The system according to claim 14, wherein multiple pieces of authorization information are carried in multiple options, wherein the multiple pieces of authorization information and the multiple options are in a one-to-one correspondence, the at least one piece of authorization information comprises the multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information. ### Claim 16 (depends on 14) The system according to claim 14, wherein multiple pieces of authorization information are carried in one option, wherein the at least one piece of authorization information comprises the multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information. ### Claim 17 (depends on 13) The system according to claim 13, wherein the system further comprises the DHCP client. ### Claim 18 (depends on 13) The system according to claim 13, wherein when the at least one piece of authorization information comprises multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information, encapsulating the at least one piece of the authorization information in the relay-forward message comprises: encapsulating the multiple pieces of authorization information in multiple options, wherein the multiple pieces of authorization information and the multiple options are in a one-to-one correspondence. ### Claim 19 (depends on 13) The system according to claim 13, wherein when the at least one piece of authorization information comprises multiple pieces of authorization information which comprise the designated IP prefix as one piece of authorization information, encapsulating the at least one piece of authorization information in the relay-forward message comprises: encapsulating the multiple pieces of authorization information in one option. ### Claim 20 (depends on 19) The system according to claim 19, wherein encapsulating the multiple pieces of authorization information in the one option comprises: encapsulating the multiple pieces of authorization information in multiple sub-options, wherein the multiple pieces of authorization information and the multiple sub-options are in a one-to-one correspondence.