Patent ID: 8799998

Claim:
A method for controlling traffic of an authentication server, the method comprising: receiving a request message from an authentication client in a local area network, wherein the authentication client belongs to a sub local area network of the local area network; detecting, by a processor, a priority of the authentication client and determining a sub local area network token bucket corresponding to the sub local area network to which the authentication client belongs; in response to the authentication client having a high priority, allocating a token from a high priority token bucket of the sub local area network and redirecting the request message to the authentication server; in response to the authentication client having a low priority, allocating a token from a low priority token bucket of the sub local area network if the token is available in the low priority token bucket and redirecting the request message to the authentication server; in response to the token not being available in the low priority bucket, one of: allocating a token from a shared token bucket of the local area network if the token is available in the shared token bucket and redirecting the request message to the authentication server, and discarding the request message in response to a token not being available in the shared token bucket; and recovering the allocated token after a successful authentication of the authentication client.