Patent ID: 9350703
Filing Date: 2016-05-24
CPC Classification: H04L

Claim Text:
1. A method implemented in an edge router, the method comprising: receiving an authentication request from an application implemented on a device, wherein the request comprises context information including a device characteristic of the device or of a user of the device and an application characteristic of the application; forwarding the authentication request to an authentication and policy server; receiving an authentication response from the authentication and policy server, wherein the authentication response comprises an indication of a device tag selected based on the device characteristic and an indication of an application tag selected based on the application characteristic; forwarding the authentication response to the device; receiving a policy associated with the device tag or the application tag from the authentication and policy server; receiving a packet from the device; embedding the device tag and the application tag in the packet to form a tagged packet such that the tagged packet comprises the device tag and the application tag, wherein the application tag comprises the context information; executing the policy; and forwarding the tagged packet according to the policy associated with the device tag and the application tag.