Patent ID: 7809003
Filing Date: 2010-10-05
Classification: H04L,H04W

Abstract:
1. A method, comprising: initiating an establishment of a security association between a client node and a first gateway node, where initiating comprises at least one authentication message communicated between the client node and the first gateway node indicating a name of an access point; obtaining at least one user identity and user authentication data for a user of the client node from an authentication server; authenticating the user with the authentication data and establishing the security association; providing said at least one user identity and an indication of said access point to a second gateway node; obtaining for the user an authorization pertaining to said access point and an address allocated from said access point; providing said address to said client node from said first gateway node; receiving a packet from said client node, said packet comprising said address as a source address; allowing said packet based on said authorization pertaining to said at least one access point and firewall rules allowing communication by said access point for said source address to a destination address indicated in said packet; and routing, by the first gateway node, said packet toward a destination node based on at least said destination address.