Loading patent…
AssigneeAT&T Intellectual Property I, L.P.
InventorsPaul R. Hancock, Ryan Blossom
Estimating the term…
Aspects of the subject disclosure may include, for example, a device that includes a processing system and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations such as receiving an extensible authentication protocol (EAP) authentication message addressed to an EAP authentication server from a communication device; extracting information from the EAP authentication message; determining whether to reject a request in the EAP authentication message of the communication device based on the information extracted; and sending an EAP Failure message to the communication device based on the determining indicating that the request should be rejected. Other embodiments are disclosed.
An access point, comprising:
A machine-readable medium comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
A method, comprising:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
From the US filing history. Foreign family members aren’t listed.
Security arrangements; Authentication; Protecting privacy or anonymity: authentication
Of different types: across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
Network architectures or network communication protocols for network security: for authentication of entities
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal
About 11 years 10 months of term left · ends 30 Aug 2038 (estimated)
The subject disclosure relates to a system and method for policy-based extensible authentication protocol (EAP) authentication.
EAP is an authentication framework frequently used in wireless networks and point-to-point connections. There are many methods defined by RFCs and a number of vendor specific methods and new proposals exist. EAP is not a wire protocol; instead it only defines message formats. Each protocol that uses EAP defines a way to encapsulate EAP messages within that protocol's messages.
In EAP, a multi-way authentication, secure, handshake protocol exchanges messages between a device (supplicant) and an authentication server that results in EAP Success or EAP Failure responses. The supplicant has secure information (e.g., stored in a SIM card) and the authentication server has secure information (e.g., stored in an LTE Home Subscriber Server (HSS)). In EAP, the supplicant and the authentication server initiate a secure communication channel to exchange information, to preventing snooping of information exchanged or forgery (spoofing) of the responses.
Reference will now be made to the accompanying drawings, which are not necessarily drawn to scale, and wherein:
FIG. 1 is a block diagram illustrating an exemplary, non-limiting embodiment of a communications network in accordance with various aspects described herein;
FIG. 2A is a block diagram illustrating an example, non-limiting embodiment of a system functioning within the communication network of FIG. 1 in accordance with various aspects described herein;
The subject disclosure describes, among other things, illustrative embodiments for a system and method for implementing policy-based extensions to an extensible authentication protocol (EAP). Other embodiments are described in the subject disclosure.
One or more aspects of the subject disclosure include a device that includes a processing system and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations such as receiving an extensible authentication protocol (EAP) authentication message addressed to an EAP authentication server from a communication device; extracting information from the EAP authentication message; determining whether to reject a request in the EAP authentication message of the communication device based on the information extracted; and sending an EAP Failure message to the communication device based on the determining indicating that the request should be rejected.
One or more aspects of the subject disclosure include a machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising: identifying a location of a communications device from an EAP authentication message sent by the communications device; determining whether to reject a request in the EAP authentication message based in part on the location of the communication device; and sending an EAP Failure message to the communication device based on the determining indicating that the request should be rejected.