Back to results
US 8,151,338 B2Granted
Method and system for continuously serving authentication requests
AssigneeCisco Technology, Inc.
InventorsIlan Frenkel, Arthur Zavalkovsky, Alexey Kobozev, Ilan Bronshtein
Life of this patent
Estimating the term…
Abstract
A method and system for continuously serving the authentication requests of networked computers is disclosed. The authentication requests of computers are served and the services for the computers are reserved for a predefined time interval. The authentication service for a computer is reserved by an authentication server, which receives authentication requests of the computer.
Claims15
A method comprising:
- receiving, on an intermediate system, an authentication request for authenticating a client, the client being one of a plurality of clients;
- identifying, using the intermediate system, a server for servicing the authentication request, the server being one of a plurality of servers, wherein the identifying comprises determining, based on information provided by the plurality of servers, whether at least one server from the plurality of servers is reserved for servicing requests from the client;
- based on identifying the server for servicing the authentication request, forwarding, using the intermediate system, the authentication request to the identified server;
- based on receiving the authentication request from the intermediate system, servicing the authentication request using the identified server;
- reserving a service for the client for a specified term of use using the identified server such that authentication requests from the client during the specified term of use are forwarded to the identified server;
- configuring the intermediate system to route subsequent authentication requests from the client to the identified server for the specified term of use, wherein the configuring comprises receiving, at the intermediate system, information indicating reservation of the service for the client;
- and
- terminating the reservation using the identified server upon expiration of the specified term of use.
5 more elements
A method comprising:
- identifying, using an intermediate system, a first authentication server to serve an authentication request for a first client, the first client being one of a plurality of clients, the first authentication server being one of a plurality of authentication servers in a network;
- based on the identifying, forwarding, using the intermediate system, the authentication request to the first authentication server, the first authentication server reserving a first service for the first client for a specified term of use;
- receiving a list from the first authentication server in response to forwarding the authentication request, the list comprising information relating to the plurality of authentication servers, the information including a number of services reserved by the plurality of authentication servers;
- configuring the intermediate system to route subsequent communications from the first client to the first authentication server for the specified term of use, wherein the configuring comprises receiving, at the intermediate system, information indicating reservation of the first service for the first client by the first authentication server;
- identifying one or more of the plurality of authentication servers to serve one or more authentication requests for remaining clients, the remaining clients being the plurality of clients excluding the first client, the identifying being performed based on information included in the list;
- and
- terminating the first service upon conclusion of the specified term of use.
4 more elements
A system comprising:
- one or more processors;
- a transceiver module including instructions encoded in a non-transitory storage medium for execution by the one or more processors and configured to cause the one or more processors to perform operations including:
- receiving, on an intermediate system, an authentication request for authenticating a client, the client being one of a plurality of clients;
- and
- a reservation module including instructions encoded in a non-transitory storage medium for execution by the one or more processors and configured to cause the one or more processors to perform operations including:
- identifying, using the intermediate system, a server for servicing the authentication request, the server being one of a plurality of servers, wherein the identifying comprises determining, based on information provided by the plurality of servers, whether at least one server from the plurality of servers is reserved for servicing requests from the client;
- based on identifying the server for servicing the authentication request, forwarding, using the intermediate system, the authentication request to the identified server;
- based on receiving the authentication request from the intermediate system, servicing the authentication request using the identified server;
- reserving a service for the client for a specified term of use using the identified server such that authentication requests from the client during the specified term of use are forwarded to the identified server;
- configuring the intermediate system to route subsequent authentication requests from the client to the identified server for the specified term of use, wherein the configuring comprises receiving at the intermediate system information indicating reservation of the service for the client;
- and
- terminating the reservation using the identified server upon expiration of the specified term of use.
9 more elements
A system comprising:
- one or more processors;
- a transceiver module including instructions encoded in a non-transitory storage medium for execution by the one or more processors and configured to cause the one or more processors to perform operations including:
- identifying, using an intermediate system, a first authentication server to serve an authentication request for a first client, the first client being one of a plurality of clients, the first authentication server being one of a plurality of authentication servers in a network;
- based on the identifying, forwarding, using the intermediate system, the authentication request to the first authentication server, the first authentication server reserving a first service for the first client for a specified term of use;
- receiving a list from the first authentication server in response to forwarding the authentication request, the list comprising information relating to the plurality of authentication servers, the information including a number of services reserved by the plurality of authentication servers;
- a storage module including a non-transitory computer-readable medium for storing the received list;
- and
- a decision module including instructions encoded in a non-transitory storage medium for execution by the one or more processors and configured to cause the one or more processors to perform operations including:
- deciding, based on information included in the list, which client is a reserved client of an authentication server, the decision module also deciding which authentication server is serving a least number of authentication requests;
- configuring the intermediate system to route subsequent communications from the first client to the first authentication server for the specified term of use, wherein the configuring comprises receiving at the intermediate system information indicating reservation of the first service for the first client by the first authentication server;
- identifying one or more of the plurality of authentication servers to serve one or more authentication requests for remaining clients, the remaining clients being the plurality of clients excluding the first client, the identifying being performed based on information included in the list;
- and
- terminating the first service upon conclusion of the specified term of use.
10 more elements
A non-transitory machine-readable medium including one or more instructions executable by a processor and when executed by the processor cause the processor to perform actions including:
- receiving, on an intermediate system, an authentication request for authenticating a client, the client being one of a plurality of clients;
- identifying, using the intermediate system, a server for servicing the authentication request, the server being one of a plurality of servers, wherein the identifying comprises determining, based on information provided by the plurality of servers, whether at least one server from the plurality of servers is reserved for servicing requests from the client;
- based on identifying the server for servicing the authentication request, forwarding, using the intermediate system, the authentication request to the identified server;
- based on receiving the authentication request from the intermediate system, servicing the authentication request using the identified server;
- reserving a service for the client for a specified term of use using the identified server such that authentication requests from the client during the specified term of use are forwarded to the identified server;
- configuring the intermediate system to route subsequent authentication requests from the client to the identified server for the specified term of use, wherein the configuring comprises receiving, at the intermediate system, information indicating reservation of the service for the client;
- and
- terminating the reservation using the identified server upon expiration of the specified term of use.
5 more elements
An apparatus comprising:
- a processor for executing instructions;
- and
- a non-transitory machine readable medium including one or more instructions executable by the processor, the one or more instructions when executed by the processor cause the processor to perform operations including:
- receiving, on an intermediate system, an authentication request for authenticating a client, the client being one of a plurality of clients;
- identifying, using the intermediate system, a server for servicing the authentication request, the server being one of a plurality of servers, wherein the identifying comprises determining, based on information provided by the plurality of servers, whether at least one server from the plurality of servers is reserved for servicing requests from the client;
- based on identifying the server for servicing the authentication request, forwarding, using the intermediate system, the authentication request to the identified server;
- based on receiving the authentication request from the intermediate system, servicing the authentication request using the identified server;
- reserving a service for the client for a specified term of use using the identified server such that authentication requests from the client during the specified term of use are forwarded to the identified server;
- configuring the intermediate system to route subsequent authentication requests from the client to the identified server for the specified term of use, wherein the configuring comprises receiving at the intermediate system information indicating reservation of the service for the client;
- and
- terminating the reservation using the identified server upon expiration of the specified term of use.
8 more elements
Dependencies are inferred from the claim text.