Registration and network access control

摘要

In embodiments of registration and network access control, an initially unconfigured network interface device can be registered and configured as an interface to a public network for a client device. In another embodiment, a network interface device can receive a network access request from a client device to access a secure network utilizing extensible authentication protocol (EAP), and the request is communicated to an authentication service to authenticate a user of the client device based on user credentials. In another embodiment, a network interface device can receive a network access request from a client device to access a Web site in a public network utilizing a universal access method (UAM), and the request is redirected to the authentication service to authenticate a user of the client device based on user credentials.

主权项

1. A computer-implemented method at a network interface device, the method comprising:
receiving a network access request from a client device to access a Web site in a public network; replying to the client device with a redirect to an authentication service; receiving a credential request directed to the client device from the authentication service, the credential request communicated to the client device; receiving user credentials directed to the authentication service from the client device, the user credentials communicated to the authentication service; receiving an encrypted token directed to the client device from the authentication service, the encrypted token communicated to the client device that posts the encrypted token back to the network interface device; communicating a validation request to a network authorization service, the validation request including the encrypted token and a device identifier of the network interface device; receiving validation from the network authorization service, the validation indicating that the network interface device allow the client device access to the public network; and communicating a redirect to the client device to access the Web site in the public network.