US 9,521,119 B2 · Extensible access control architecture

Abstract

Software for managing access control functions in a network. The software includes a host that receives access control commands or information and calls one or more methods. The methods perform access control functions and communicate access control results or messages to be transmitted. The host may be installed in a network peer seeking access to the network or in a server controlling access to the network. When installed in a peer, the host receives commands and exchanges information with a supplicant. When installed in an access control server, the host receives commands and exchanges information with an authenticator. The host has a flexible architecture that enables multiple features, such as allowing the same methods to be used for authentication by multiple supplicants, providing ready integration of third party access control software, simplifying network maintenance by facilitating upgrades of authenticator software and enabling access control functions other than peer authentication.

Claims20

Dependent claims

A method comprising:

receiving, by a second process of a computing device across a process boundary from a first process, a message that is part of an access control exchange;
and
invoking, by a proxy manager of the second process in response to the receiving and across another process boundary, a access method in a third process where the invoked access method performs at least a portion of the access control exchange.

Dependencies are inferred from the claim text.

Facts

Application

14/883,332Filed 14 Oct 2015 · continuation

Priority

8 Jul 2005

Published

US 2016/0036781 A14 Feb 2016

Granted

13 Dec 2016

Term ends

Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/0281
For separating internal from external traffic, e.g. firewalls: proxies
H04L 63/105
For controlling access to devices or network resources: multiple levels of security
H04L 63/162
Implementing security features at a particular protocol layer: at the data link layer

Family

Application11/177,757Parent of this continuation · filed 8 Jul 2005

Application13/630,184Parent of this continuation · filed 28 Sep 2012

US 8,286,223 B2Parent of this continuation · filed 9 Oct 2012

US 2016/0036781 A1Pre-grant publication · published 4 Feb 2016

US 9,185,091 B2Parent of this continuation

US 2007/0016939 A1Published application

US 2013/0024911 A1Published application

US 9,521,119 B2This patent

From the US filing history. Foreign family members aren’t listed.

Extensible access control architecture

Life of this patent

Extensible access control architecture

Life of this patent

Abstract

Claims20