Patent ID: 11962585
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 12:
13. A computer program product comprising:
a non-transitory computer readable medium; and
instructions stored in the non-transitory computer readable medium;
the instructions being executable by one or more processors for facilitating an authentication of a device by an identity provider to permit or deny guest access of the device in a Third Generation Partnership Project (3GPP) based network, by:
receiving, from the device, a message which requests access to the 3GPP-based network;
obtaining, from the message, an identity associated with the device;
deriving a realm name of a realm from information in the identity, wherein the realm differs from a realm of the 3GPP-based network;
obtaining, from a response to one or more queries to a domain name system (DNS) server, an address of a server that is mapped to the realm name and provides an authentication service for the authentication, the server being external to the 3GPP-based network and associated with the identity provider which is registered in an identity federation;
subsequent to obtaining the address of the server, establishing a secure connection with the server using the address obtained from the DNS server;
participating in an authentication procedure over the secure connection using the authentication service of the server, for authenticating the device based on credentials associated with the identity; and
permitting or denying the guest access of the device in the 3GPP-based network based on a result of the authentication procedure and the identity, a permanent identity or other attributes received from the identity provider in the authentication procedure.