Patent ID: 8281371
Filing Date: 2012-10-02
Classification: G06F,H04L

Abstract:
1. A method comprising: receiving, by a first device and from a second device, identification information associated with a user of a node, the first device being different than the second device and the node, the first device including a policy server, and the second device being different than the node; authenticating, by the first device, the node, over layer 2 in a network, based on the identification information associated with the user of the node; determining, by the first device and based on the identification information, one or more resources, in the network, that the user is authorized to access; sending to the node and when the node is authenticated: receiving, by the first device and from the node using the network address, a request to verify the identity of the first device after sending the second code, the request to verify the identity of the first device including a request for the second code; providing, by the first device and to the node, the second code to verify the identity of the first device, after receiving the request to verify the identity of the first device; receiving, by the first device, a third code from the node, after providing the second code to verify the identity of the first device; determining, by the first device, that the third code, received from the node, corresponds to the first code; and providing, by the first device and to the node, layer 3 network access, in the network, based on determining that the third code, received from the node, corresponds to the first code.