Back to results
US 2009/0213733 A1Published application
Role determination for network devices
AssigneeCisco Technology, Inc.
InventorsPadmanabha Nallur, Wilson Kok, Rajesh Bhandari
Life of this patent
Estimating the term…
Abstract
Techniques for selecting authentication roles when establishing a link between devices in a secure network are provided. By assigning role levels to devices, devices may be more likely to assume a preferred role when establishing a link. For example, during a negotiation process, each device may establish a timer value based on their role level. Each device may initiate a timer with the timer value and, the device whose timer value expires first may assume a role as authenticator.
Claims22
A method comprising:
- receiving a message indicating the beginning of an authentication process to admit a device to a secure network;
- determining a timer value based, at least in part, on an assigned role level;
- initiating a timer using the timer value;
- if the timer expires prior to receiving a logoff message from the device, assuming a role of authenticator for the authentication process;
- and
- if a logoff message is received from the device prior to the timer expiring, assuming a role of supplicant for the authentication process.
3 more elements
An apparatus, comprising:
- supplicant logic for performing operations of a supplicant role during an authentication process for admission to a secure network;
- authenticator logic for performing operations of an authenticator role during the authentication process;
- and
- selection logic configured to, in response to receiving a message indicating the beginning of the authentication process, determine a timer value based, at least in part, on an assigned role level, initiate a timer using the timer value, if the timer expires prior to receiving a logoff message from the device, assume the authenticator role for the authentication process, and, if a logoff message is received from the device prior to the timer expiring, assume the supplicant role for the authentication process.
1 more element
An apparatus, comprising:
- means for performing operations of a supplicant role during an authentication process for admission to a secure network;
- means for performing operations of an authenticator role during the authentication process;
- and
- means for selecting between the supplicant role and the authenticator role during the authentication process by determining a timer value based, at least in part, on an assigned role level, initiating a timer using the timer value, assuming the authenticator role for the authentication process if the timer expires prior to receiving a logoff message from the device, and assume the supplicant role for the authentication process if a logoff message is received from the device prior to the timer expiring.
1 more element
Dependencies are inferred from the claim text.