Reduced authentication times in constrained computer networks
AssigneeCisco Technology, Inc.
InventorsSukrit Dasgupta, Jean-Philippe Vasseur
Life of this patent
Estimating the term…
Abstract
In one embodiment, a capable node in a low power and lossy network (LLN) may monitor the authentication time for one or more nodes in the LLN. The capable node may dynamically correlate the authentication time with the location of the one or more nodes in the LLN in order to identify one or more authentication-delayed nodes. The node may then select, based on the location of the one or more authentication-delayed nodes, one or more key-delegation nodes to receive one or more network keys so that the key-delegation nodes may perform localized authentication of one or more of the authentication-delayed nodes. The capable node may then distribute the one or more network keys to the one or more key-delegation nodes.
Claims13
A method, comprising:
- logging authentication requests received from an authentication requesting node at an authenticated node in a computer network, wherein the computer network is a Low-power and Lossy Network;
- determining a priority level for the authentication requests based on a number of authentication requests received from the authentication requesting node, wherein a higher priority is given to the authentication requests in response to the number being greater than a threshold, and a standard priority is given to the authentication requests in response to the number being below the threshold;
- and
- forwarding the authentication requests toward an authentication server according to the determined priority level.
An apparatus, comprising:
- one or more network interfaces to communicate with a computer network, wherein the computer network is a Low-power and Lossy Network;
- a processor coupled to the network interfaces and adapted to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed operable to:
- log authentication requests received from an authentication requesting node;
- determine a priority level for the authentication requests based on a number of authentication requests received from the authentication requesting node, wherein a higher priority is given to the authentication requests in response to the number being greater than a threshold, and a standard priority is given to the authentication requests in response to the number being below the threshold;
- and
- forward the authentication requests toward an authentication server according to the determined priority level.
A tangible, non-transitory, computer-readable media having software encoded thereon, the software when executed by a processor operable to:
- log authentication requests received from an authentication requesting node in a computer network, wherein the computer network is a Low-power and Lossy Network;
- determine a priority level for the authentication requests based on a number of authentication requests received from the authentication requesting node, wherein a higher priority is given to the authentication requests in response to the number being greater than a threshold, and a standard priority is given to the authentication requests in response to the number being below the threshold;
- and
- forward the authentication requests toward an authentication server according to the determined priority level.
Dependencies are inferred from the claim text.