公开(公告)号：US11558379B2

公开(公告)日：2023-01-17

申请号：US16511808

申请日：2019-07-15

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Mohammed Salman ,  Rajarao Bhagya Prasad Nittur ,  Ram Tripathi ,  Mohit Goyal ,  Rajesh Kumar Ganapathy Achari

IPC: H04L29/06 ,  H04L9/40 ,  H04L9/32 ,  G06Q20/06 ,  G06Q20/38 ,  H04L9/00

Abstract: Some implementations of the disclosure are directed to receiving, at an authentication server system, a distributed ledger address transmitted by a client device to identify itself during an authentication process for accessing a network, where the distributed ledger address corresponds to a distributed ledger network; transmitting an authentication challenge message from the authentication server to the client device; in response to transmitting the authentication challenge message from the authentication server to the client device, receiving at the authentication server, a response to the challenge message including a signature; and using at least the distributed ledger network to determine if the signature used to sign the response to the challenge message is associated with the distributed ledger address transmitted by the client device.

公开(公告)号：US11553007B2

公开(公告)日：2023-01-10

申请号：US16539549

申请日：2019-08-13

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Antoni Milton ,  Mohit Goyal ,  Pattabhi Attaluri

IPC: G06F7/04 ,  G06F15/16 ,  G06F17/30 ,  H04L29/06 ,  H04L9/40

Abstract: A method may include receiving a digital certificate through a secure connection from a network access server, the secure connection passing through a network address translation device, validating the digital certificate with a policy management system, and establishing a secure tunnel between the network access server and the policy management system when the digital certificate is validated. Also, receiving, through the secure tunnel and from the network access server, a remote authentication dial-in user service access request having a network access server internet protocol address, validating the network access server with the network access server internet protocol address by the policy management system, and allowing a remote authentication dial-in user service traffic when the internet protocol address of the network access server is validated and closing the secure tunnel when the validating the network access server fails.

公开(公告)号：US20210051182A1

公开(公告)日：2021-02-18

申请号：US16539549

申请日：2019-08-13

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Antoni Milton ,  Mohit Goyal ,  Pattabhi Attaluri

IPC: H04L29/06

Abstract: A method may include receiving a digital certificate through a secure connection from a network access server, the secure connection passing through a network address translation device, validating the digital certificate with a policy management system, and establishing a secure tunnel between the network access server and the policy management system when the digital certificate is validated. Also, receiving, through the secure tunnel and from the network access server, a remote authentication dial-in user service access request having a network access server internet protocol address, validating the network access server with the network access server internet protocol address by the policy management system, and allowing a remote authentication dial-in user service traffic when the internet protocol address of the network access server is validated and closing the secure tunnel when the validating the network access server fails.

公开(公告)号：US20210021597A1

公开(公告)日：2021-01-21

申请号：US16511808

申请日：2019-07-15

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Mohammed Salman ,  Rajarao Bhagya Prasad Nittur ,  Ram Tripathi ,  Mohit Goyal ,  Rajesh Kumar Ganapathy Achari

IPC: H04L29/06 ,  H04L9/32 ,  G06Q20/06 ,  G06Q20/38

Abstract: Some implementations of the disclosure are directed to receiving, at an authentication server system, a distributed ledger address transmitted by a client device to identify itself during an authentication process for accessing a network, where the distributed ledger address corresponds to a distributed ledger network; transmitting an authentication challenge message from the authentication server to the client device; in response to transmitting the authentication challenge message from the authentication server to the client device, receiving at the authentication server, a response to the challenge message including a signature; and using at least the distributed ledger network to determine if the signature used to sign the response to the challenge message is associated with the distributed ledger address transmitted by the client device.