System for using an authorization token to separate authentication and authorization services
AssigneeFuturewei Technologies, Inc.
InventorsMadjid F. Nakhjiri, Grant Rodolph
Life of this patent
Estimating the term…
Abstract
A novel system for utilizing an authorization token to separate authentication and authorization services. The system authenticates a client to an authenticating server; generates an authorization token with the authenticating server and the client; and authorizes services for the client using the generated authorization token. The authorization token may be transferred via a third party, or may be utilized to extend an initial session without re-authentication.
Claims24
A method of separating authentication and authorization services in a communications system, comprising the steps of:
- authenticating a client node to an authenticating server utilizing extensible authentication protocol;
- generating an authorization token;
- and
- authorizing services rendered to the client node via an authorizing server, based upon information in the authorization token.
A method by which a Handover Keying authorization request for a client, and authentication of the client, comprising the steps of:
- authenticating a client node to an authenticating server utilizing extensible authentication protocol;
- generating an authorization token;
- and
- authorizing services rendered to the client node via an authorizing server, based upon information in the authorization token.
A communications system comprising:
- an authenticating network component;
- an authorizing network component;
- and
- a client network component, adapted to:
- exchange authentication messages with the authenticating network component utilizing extensible authentication protocol;
- generate an authorization token;
- and
- transfer the authorization token to the authorizing server to request a service.
A client network device for use in a communications system, comprising:
- a first component adapted to exchange authentication messages with an authenticating network component, utilizing extensible authentication protocol;
- a second component adapted to generate an authorization token;
- and
- a third component adapted to transfer the authorization token to the authorizing server to request a service.
An authenticating network device for use in a communications system, comprising:
- a first component adapted to receive authentication messages from a client network device, utilizing extensible authentication protocol;
- a second component adapted to generate an authorization token;
- a third component adapted to receive a service authentication message from a network service device;
- and
- a fourth component adapted to authenticate the service authentication message utilizing the authorization token.
Dependencies are inferred from the claim text.