Method to authenticate a network access server to an authentication server

摘要

A method of authentication between servers in a three party network protocol network includes first providing at least one network access server (NAS) in communication with at least one user of the network and also in communication with at least one remote authentication server (RAS) coupled to the network. An access request message including a user password is sent from the user to the NAS. The NAS encrypts the password with a shared secret between the NAS and the RAS. The NAS subsequently tags a message authentication code (MAC) using the shared secret to the encrypted password. The encrypted password and MAC are then sent to the RAS. The RAS first authenticates the NAS by verifying the MAC before decrypting the encrypted user password.