Patent ID: 8776181
Filing Date: 2014-07-08
Classification: H04L,H04W

Abstract:
1. A method, comprising: establishing a transport layer security (TLS) tunnel between a visited TLS AAA server in a visited network and a client; receiving an access request from the client at the visited TLS AAA server within the TLS tunnel; evaluating at least one attribute received in the access request at the visited TLS AAA server against a local policy for identifying one of a plurality of home AAA servers storing user authentication information associated with a user of the client; and selecting the home AAA server to route the access request to based at least in part on the evaluation of the at least one attribute received in the access request against the local policy, such that the home AAA server storing the user authentication information associated with the user authenticates the user in response to the receipt of the access request; wherein the visited TLS AAA server is a first home AAA server evaluating the at least one attribute against the local policy; wherein the access request is routed to the selected home AAA server which is a second home AAA server based on the evaluation, where the second home AAA server is a preferred server over the first home AAA server for authenticating the user in that the second home AAA server stores the user authentication information associated with the user and the first home AAA server does not store the user authentication information associated with the user.