DISTRIBUTED AUTHENTICATION, AUTHORIZATION AND ACCOUNTING

摘要

In some embodiments, computer systems, storage mediums, and methods are provided for controlling a connecting device's access to a plurality of computer networks. In other embodiments, the provided computer systems, storage mediums, and methods may provide for authentication, authorization, and accounting of connecting devices connecting to a plurality of computer networks. In other embodiments, the provided computer systems, storage mediums, and methods may provide for the distribution of authentication routing data and authorization policies among a plurality of computer networks. In yet other embodiments, the provided computer systems, storage mediums, and methods may provide for the distribution of accounting among a plurality of computer networks.

主权项

1. A method of controlling access to a plurality of computer networks at a first computer network of the plurality of computer networks, the method comprising, at the first computer network:
receiving a first credential from a network access controller on the first computer network, the first credential being associated with a first connecting device requesting access to the plurality of computer networks at the network access controller; selecting, using a criterion, at least one authentication routing policy from a plurality of authentication routing policies, each authentication routing policy of the plurality of authentication routing policies comprising address information associated with at least two authentication databases against which the first credential associated with the first connecting device is to be authenticated; selecting a first authentication database of the at least two authentication databases against which the the first credential is to be authenticated; communicating the first credential to the first authentication database using the address information; receiving an authentication response from the first authentication database; and communicating the authentication response to the network access controller.