Patent ID: 11962585
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method for use in facilitating an authentication of a device by an identity provider to permit guest access of the device in a Third Generation Partnership Project (3GPP) based network, the method comprising:
at one or more control plane functions of the 3GPP-based network,
receiving, from the device, a message which requests access to the 3GPP-based network;
obtaining, from the message, an identity associated with the device;
deriving a realm name of a realm from information in the identity, wherein the realm differs from a realm of the 3GPP-based network;
obtaining, from a response to one or more queries to a domain name system (DNS) server, an address of a server that is mapped to the realm name and provides an authentication service for the authentication, the server being external to the 3GPP-based network and associated with the identity provider which is registered in an identity federation;
subsequent to obtaining the address of the server, establishing a secure connection with the server using the address obtained from the DNS server;
participating in an authentication procedure over the secure connection using the authentication service of the server for authenticating the device based on credentials associated with the identity, for permitting the guest access of the device in the 3GPP-based network; and
applying one or more policies for the guest access or communications of the device in the 3GPP-based network based on the identity or a permanent identity or other attributes received from the identity provider in the authentication procedure.