Method, apparatus, and system for network security via network wall plate

A communications network, comprising:

• an authentication device operable to receive authentication information;
• a wall plate assembly coupled to the authentication device, the wall plate assembly having a first port adapted to be coupled to a user device and a second port, the wall plate assembly operable to execute a first stage of authentication by obtaining the authentication information from the authentication device and determining from the obtained authentication information whether a user associated with the authentication information should be granted or denied access to the communications network, and the wall plate assembly operable when the determination indicates the user should be granted access to execute a second stage of authentication by providing endpoint location identification information associated with the wall plate assembly and the authentication information to the second port, and operable, responsive to an acknowledgement signal received via the second port that confirms the user should be granted access, to grant access to the network via the first port, and the wall plate assembly further operable when either the acknowledgement signal indicates the user should not be granted access or the determination indicates the user should be denied access to isolate the first port from the network;
• and
• a master authenticator component coupled to the second port of the wall plate assembly, the master authenticator component operable during the second stage of authentication to receive the authentication and endpoint location identification information from the wall plate assembly and operable to process the authentication information to determine whether the user should be granted access, and when this determination is positive to provide the acknowledgement signal indicating the user should be granted access to the wall plate assembly, and operable to utilize the endpoint location identification information to associate a physical location with the user corresponding to the authentication information.

A method of granting or denying a user access to a communication network including a wall plate assembly through which a device is connected to the network, the wall plate assembly being contained at a first physical location, the method comprising:

• obtaining authentication information at the first physical location of the wall plate assembly;
• performing a first level of authentication in the wall plate assembly by determining from the obtained authentication information whether the user should be granted or denied access to the network;
• when the determination indicates the user should be granted access, performing a second level of authentication by,
• communicating endpoint location identification information associated with the first physical location of the wall plate assembly and the authentication information to a second physical location;
• and
• determining at the second physical location using the authentication information whether the user should be granted or denied access to the network;
• when the first and second levels of authentication indicate the user should be granted access, granting the user access to the network and otherwise denying the user access to the network;
• and
• determining at the second physical location the first location of the wall plate assembly corresponding to the endpoint location identification information.