Using authentication server accounting to create a common security database
AssigneeCisco Technology, Inc.
InventorsRamesh Ponnapalli, Vandateshwar Pullela
Life of this patent
Estimating the term…
Abstract
A common security database is maintained by a RADIUS server based on the attributes the RADIUS server receives through accounting packets. When the common security database has conflicting entries, for example a MAC address and/or IP address appearing at two different network devices such as switches or routers, the RADIUS server can notify the associated network access devices to take corrective action.
Claims19
A system for providing network security, comprising:
- a plurality of network access devices;
- an authentication server communicatively coupled to the plurality of network access devices;
- and
- a common security database coupled to the authentication RADIUS server;
- wherein the plurality of network access devices responsive to a request from a user to access the network to obtain parameters from the user and send the parameters to the authentication server;
- wherein the authentication server is responsive to receipt of the parameters from the plurality of network access devices to store the parameters in the common security database;
- and
- wherein the parameters are at least one of username, network access service internet protocol address, network access service port, framed internet protocol address, calling station identifier and network access service port type.
A method for providing network security using a centralized common security database, comprising:
- obtaining connection parameters for a user accessing the network from a network access device communicatively coupled to the centralized common security database;
- searching the centralized common security database for a conflicting entry;
- wherein the connection parameters are at least one of username, network access service internet protocol address, network access service port, framed internet protocol address, calling station identifier and network access service port type.
A computer-readable medium of instructions comprising:
- means for obtaining parameters from a user attempting to associate with a network;
- and
- means for searching for a conflicting entry in a database responsive to the means for obtaining parameters;
- wherein the parameters stored in the database are at least one of username, network access service internet protocol address, network access service port, framed internet protocol address, calling station identifier and network access service port type.
Dependencies are inferred from the claim text.