Patent ID: 9497179
Filing Date: 2016-11-15
CPC Classification: H04L

Claim Text:
1. A method comprising: applying, by a device and based on a layer two identification, one or more authentication rules to authenticate an endpoint device seeking access to a network; determining, by the device, to grant the endpoint device access to the network based on applying the one or more authentication rules; determining, by the device and based on determining to grant the endpoint device access to the network, one or more permissions associated with the endpoint device accessing the network; providing, by the device and to the endpoint device, information identifying that access to the network is granted; receiving, by the device, information identifying a layer three address of the endpoint device from an external device, the external device being different than the endpoint device, the layer three address being assigned from a pool of layer three addresses to the endpoint device after application of the one or more authentication rules, the layer three address being associated with the one or more permissions, and the layer three address being valid only for a particular amount of time that is determined based on an estimated amount of time layer three access for the endpoint device to the network is needed, the particular amount of time being different for different endpoint devices associated with other layer three addresses from the pool; and provisioning, by the device, layer three access for the endpoint device to the network for the particular amount of time based on the layer three address and the one or more permissions, after the particular amount of time, the endpoint device being denied access to the network.