Patent ID: 7469294
Filing Date: 2008-12-23
Classification: H04L

Abstract:
1. A method for providing authorization, authentication, and accounting (AAA) in a virtual private network having a first AAA server, the method comprising: receiving a request from a remote user for connection with a virtual private network at a virtual home gateway, said virtual home gateway in communication with a second AAA server wherein the second AAA server is a service provider server and is not located within said virtual private network; associating the remote user with the virtual private network at the virtual home gateway, wherein associating the remote user comprises receiving a virtual private network identification (ID) and address of the first AAA server; performing a lookup of the address of the first AAA server at the virtual home gateway; sending a request to authenticate the remote user with said virtual private network from the virtual home gateway to the first AAA server located within said virtual private network; and sending a request to the second AAA server to authorize the remote user with said virtual private network from the virtual home gateway; connecting the remote user to the virtual private network if the first AAA server successfully authenticates the remote user and the second AAA server successfully authorizes the remote user; and sending accounting information directly to the first AAA server and the second AAA server from the virtual home gateway; wherein authentication of the remote user is performed at the first AAA server without contacting the second AAA server associated with the virtual home gateway.