System and method for ensuring persistent communications between a client and an authentication server

A method comprising:

• obtaining authentication information in an initial authentication response message from a selected of a plurality of servers that are fronted by a server load balancer (SLB) in an unlicensed mobile access system such that authentication messages between a client on a network and the plurality of servers pass through the SLB, wherein the SLB, comprising one or more hardware processor is configured to receive a request for an initial authentication from the client that includes a pseudo-initial International Mobile Subscriber Identity (IMSI), and send an initial authentication response message generated from a selected one of the plurality of servers that performed the initial authentication to the client;
• determining that a reauthentication request is to be subsequently received from the client in order to facilitate the persistent communications via a fast reauthentication;
• receiving a message with a Remote Authentication Dial-In User Service (RADIUS) access request from the client, wherein the RADIUS access request includes, in fields of the RADIUS access request message, sub-realm information associated with the selected server to which the reauthentication request is to be sent and a pseudo-IMSI that is derived from the initial IMSI, and wherein the client stores the pseudo-IMSI and identifying information associated with the selected server that received the initial authentication from the client;
• parsing a Remote Authentication Dial-In User Service (RADIUS) access request message from the client and match sub-realm information with server information maintained by the SLB that includes the previously stored sub-realm information associated with the selected server that received the initial authentication from the client;
• and directing the RADIUS access request message from the SLB to the selected server using the field with the identifying information from the RADIUS access request message to perform a fast reauthentication of the client to facilitate the persistent communications, inserting identification information that identifies a selected server of the plurality of servers into an initial authentication response message wherein the initial authentication response message includes fields that identify the selected server and that identify a pseudo-IMSI, which is derived from the initial IMSI,
• wherein the sub-realm information identifies the selected server and the pseudo-IMSI represents an identification number usable for fast reauthentication, and wherein the RADIUS access request message is encrypted to prevent intermediary devices from deciphering the message and obtaining accompanying information,
• wherein the selected server is selected by the SLB to satisfy the initial authentication request based on load balancing from among the plurality of servers.

A server group for facilitating persistent communications between entities in a network, the server group comprising:

• a plurality of servers fronted by a server load balancer (SLB) in an unlicensed mobile access system such that authentication messages between a client on the network and the plurality of servers pass through the SLB, wherein the SLB, comprising one or more hardware processor is configured to receive a request for an initial authentication from the client that includes an initial International Mobile Subscriber Identity (IMSI), and send an initial authentication response message generated from a selected one of the plurality of servers that performed the initial authentication to the client, and
• a first module adapted to insert identification information that identifies a selected server of the plurality of servers into an initial authentication response message wherein the initial authentication response message includes fields that identify the selected server and that identify a pseudo-IMSI, which is derived from the initial IMSI, and wherein a Remote Authentication Dial-In User Service (RADIUS) access request message is received from the client as part of a fast reauthentication of the client to facilitate the persistent communication,
• an expression matching module in the SLB adapted to parse a Remote Authentication Dial-In User Service (RADIUS) access request message from the client and match sub-realm information with server information maintained by the SLB that includes the previously stored sub-realm information associated with the selected server that received the initial authentication from the client, the expression matching module being further configured to use the fields from the RADIUS access request message from the client to selectively route the RADIUS access request message to the selected server for a fast reauthentication of the client to facilitate the persistent communications, wherein the sub-realm information identifies the selected server and the pseudo-IMSI represents an identification number usable for fast reauthentication, and wherein the RADIUS access request message is encrypted to prevent intermediary devices from deciphering the message and obtaining accompanying information
• wherein sub-realm information identifies the selected server and the pseudo-IMSI represents an identification number usable for fast reauthentication, and wherein the RADIUS access request message is encrypted to prevent intermediary devices from deciphering the message and obtaining accompanying information,
• wherein the selected server is selected by the SLB to satisfy the initial authentication request based on load balancing from among the plurality of servers.