Network authorization in web-based or single sign-on authentication environments
AssigneeCisco Technology, Inc.
InventorsVictor Moreno, Sridhar Subramanian, Sanjay Kumar Hooda
Life of this patent
Estimating the term…
Abstract
Systems and methods for network authorization are described herein. An example method can include receiving a user credential from a host device connected to a network, authenticating the user credential, and in response to authenticating the user credential, determining an authorization policy associated with the host device. The method can also include polling a network overlay control plane of the network to obtain a network location information associated with the host device, identifying at least one network device of the network using the network location information, and transmitting the authorization policy to the at least one network device.
Claims20
A method for network authorization, comprising:
- receiving, at a computing device, a user credential from a host device connected to a network;
- authenticating, using the computing device, the user credential;
- in response to authenticating the user credential, determining, using the computing device, an authorization policy associated with the host device;
- polling, using the computing device, a network overlay control plane of the network to obtain a network location information associated with the host device, wherein the network overlay control plane is configured to maintain a network mapping system for the network, and wherein the network location information comprises a network attachment point for the host device;
- identifying, using the computing device and the network location information, at least one network device of the network to enforce the authorization policy;
- and
- transmitting from the computing device the authorization policy to the at least one network device, wherein the computing device is configured to perform authentication of host devices in a web-based or single sign-on environment.
An authentication authority system, comprising:
- a processor and a memory operably coupled to the processor, the memory having computer-executable instructions stored thereon that, when executed by the processor, cause the processor to:
- receive a user credential from a host device connected to a network;
- authenticate the user credential;
- in response to authenticating the user credential, determine an authorization policy associated with the host device;
- poll a network overlay control plane of the network to obtain a network location information associated with the host device, wherein the network overlay control plane is configured to maintain a network mapping system for the network, and wherein the network location information comprises a network attachment point for the host device;
- identify, using the network location information, at least one network device of the network to enforce the authorization policy;
- and
- transmit the authorization policy to the at least one network device, wherein the authentication authority system is configured to perform authentication of host devices in a web-based or single sign-on environment.
Dependencies are inferred from the claim text.