Patent ID: 9038151
Filing Date: 2015-05-19
Classification: G06F,H04L,H04W

Abstract:
1. A method comprising: programming, by a controller device for a software defined network (SDN), interconnected network devices forming the SDN to identify and forward packets to the controller device when the packets include credentials from client devices in accordance with a public key infrastructure (PKI)-based authentication protocol; receiving, by the controller device, a packet including credentials from one of the client devices in accordance with the PKI-based authentication protocol via one of the network devices forming the SDN; determining, by the controller device, one or more policies that are applicable to the one of the client devices based on the received credentials; and programming, by the controller device, one or more of the network devices of the SDN to enforce the determined policies on a per-packet-flow basis for packet flows including the one of the client devices.