Embedded Authentication in a Service Provider Network

摘要

Systems and methods are described for extending the trust relationship established with a network interface device that provides access to a service provider network that includes an IP-based overlay network. The trust relationship is extended to a consumer premises equipment (CPE) device operating on the overlay network. A network element of the service provider network may authenticate the CPE device when communicating via the overlay network. The service provider network may store an association between network configuration data of the network interface device and the CPE device provisioned via the network interface device and may provide the CPE device with an identity token that encodes this network configuration data. The CPE device may provide the identity token to a network element of the service provider network, and the service provider network may authenticate the identity of the CPE device using the identity token provided.

主权项

1. A method comprising:
associating, in computer memory, first network configuration data of a first device with second network configuration data of a second device in order to obtain associated network configuration data, wherein the second device is configured to access a network via the first device; receiving, from a third device, a request to authenticate the first device responsive to receipt, at the third device, of a network access request from the first device; comparing the associated network configuration data to data provided to the third device by the first device; and authenticating the first device responsive to determining that at least a portion of the data provided to the third device by the first device matches at least a portion of the associated network configuration data.