Patent ID: 9112861
Filing Date: 2015-08-18
Classification: H04L

Abstract:
1. A computer-implemented method at a network interface device that includes an authenticator server, the method comprising: receiving a network access request from a client device to access a secure network; replying with an identity request to the client device that responds with an identity, and initiating authentication of the client device to an authentication service; receiving a security token request directed to the authentication service from the client device, the security token request communicated to the authentication service; receiving an encrypted token that includes a response to the security token request and a proof key, the encrypted token directed from the authentication service to the client device that stores the proof key; receiving the encrypted token and a random number from the client device; communicating a validation request to the network authorization service, the validation request including an encrypted security token, the random number received from the client device, and a device identifier of the network interface device that is included in the validation request by the network interface device; and receiving validation from the network authorization service, the validation including a master session key generated by the network authorization service and the validation indicating that the network interface device allow the client device access to the secure network.