Patent ID: 8955090
Filing Date: 2015-02-10
Classification: H04L,H04W

Abstract:
1. In a communication network including a firewall residing between an access network and a core network, a method comprising the firewall: monitoring registration message traffic relative to one or more thresholds, the registration message traffic including registration requests issued from a plurality of user devices attempting to gain access to the core network; responsive to the registration message traffic exceeding any of the one or more thresholds, challenging a number of the registration requests with fake authentication challenges; receiving a number of challenge responses responsive to the fake authentication challenges; confirming an association between the challenge responses and the corresponding fake authentication challenges for one or more of the plurality of user devices; and opening a registration window to the core network from the one or more user devices having a confirmed association between the challenge responses and the corresponding fake authentication challenges such that the core network performs an actual authentication for the one or more user devices; and removing an authorization header used by the one or more user devices to respond to the corresponding fake authentication challenges prior to the core network performing the actual authentication for the one or more user devices.