Patent ID: 8051464
Filing Date: 2011-11-01
Classification: G06Q,H04L,H04W

Abstract:
1. A method of granting network access to an un-provisioned client in a communications network, the method comprising: receiving information from the client for determining a network access policy decision; routing the information from the client to an authentication server through a network access device acting as an authenticator; setting up a secure and authenticated channel between the client and the authentication server through the network access device; authenticating the client at the authentication server; determining provisioning information and a network access policy relative to granting access to the network to the client; sending the provisioning information via the secure and authenticated channel to the client through the network access device; tearing down the secure and authenticated channel; pushing the network access policy for the client from the authentication server to the network access device; and providing client access to the network without further authentication from the authentication server; wherein the network access policy and the provisioning information are such that the client has authorized access to the network after the secure and authenticated channel is torn down.