9 results about "Supplicant" patented technology

Systems and methods for a virtual machine executing on a host device to establish a secured wireless connection and control a wireless network device without being exposed to the wireless network credentials are provided. A supplicant proxy is provided at the virtual machine to route authentication requests generated at the virtual machine through a supplicant and receive session keys from the supplicant, where the supplicant is at another virtual machine executing on the host device and has access to the network credentials.

Example embodiments of the present disclosure relate to cloud-native function (CNF) authentication during the instantiation and bootstrapping of the CNF. According to embodiments, a method may be provided, including sending, by a supplicant to an authenticator during an instantiation and bootstrapping stage of a CNF, a message to initiate an Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) protocol sequence, wherein an EAP-TLS authentication is performed with an authentication server based on the message; receiving, by the supplicant, a result of the EAP-TLS authentication from the authenticator, wherein the result of the EAP-TLS authentication originates from the authentication server, and wherein the authenticator is configured to control traffic of the CNF based on the result of the EAP-TLS authentication.

A wireless communication method for data plane service, performed by a network node, includes receiving, from a data plane service supplicant (DPSS), a data plane service request, wherein the data plane service request comprises one or more of the following: a data plane network data service descriptor identifier indicating a type of a data-driven network operation, a data plane service supplicant correlation identifier to correlate the data plane service request between the DPSS and the network node, a DPSS identifier (DPSSID), a digital signature of the DPSS, or a public key of the DPSS, verifying the DPSS based on the data plane service request, and transmitting a data pipeline service subscribe request to one or more functional entities, wherein the data pipeline service subscribe request comprises data plane service parameters corresponding to each respective functional entity.

In one embodiment, a method includes detecting, at a virtual authenticator in an endpoint device, a linkup event, transmitting, to a supplicant in the endpoint device, a request for an identity associated with the endpoint device, receiving, at the virtual authenticator, a response from the supplicant, wherein the response comprises the identity, receiving, from an authentication server, an authorization result, wherein the authorization result is based on authenticating the endpoint device using the received identity, and enforcing, by the virtual authenticator, the authorization result at the endpoint device.

Provided are system and method for establishing a topology for advertising supplicants a network. According to embodiments, the system may include: a memory storage storing computer-executable instructions; and at least one processor communicatively coupled to the memory storage, wherein the at least one processor may be configured to execute the instructions to: create a first authentication list for a first network entity, wherein the first authentication list specify one or more network entities that are authenticated with the first network entity; and advertise the first authentication list to a second agent deployed in a second network entity, wherein the second network entity is authenticated with the first network entity.

Provided are system, method, and device for enabling network entities to view authenticated supplicants in a network. According to embodiments, the system may include: a memory storage storing computer-executable instructions; and at least one processor communicatively coupled to the memory storage, wherein the at least one processor may be configured to execute the instructions to: create a first authentication list for a first network entity; receive a second authentication list from a second network entity; and create a trust list for the first network entity based on the first authentication list and the second authentication list, wherein the trust list for the first network entity specifies a trust level between the first network entity and one or more network entities in the first and second authentication lists.

Embodiments of this disclosure relate to Cloud Native Functionality (CNF) authentication during CNF instantiation and bootstrapping. Embodiments may provide a method that includes: a supplicant sending a message to an authentication unit during the CNF instantiation and bootstrapping stage to initiate an Extensible Authentication Protocol Transport Layer Security (EAP-TLS) protocol sequence, wherein EAP-TLS authentication is performed on an authentication server based on the message; and the supplicant receiving the result of EAP-TLS authentication from the authentication unit, the result of EAP-TLS authentication being generated on an authentication server, and the authentication unit being configured to control CNF traffic based on the result of EAP-TLS authentication.

A wireless communication method for data plane service, performed by a network node, includes receiving, from a data plane service supplicant (DPSS), a service request, wherein the service request comprises a data plane network data service descriptor identifier indicating a type of a data-driven network operation, a data plane service supplicant correlation identifier to correlate the service request between the DPSS and the data plane node, a DPSS identifier (DPSSID) identifying the DPSS, a digital signature of the DPSS, and / or a public key associated with the DPSS, verifying the DPSS, and initiating metadata collection to support the data-driven network operation based on the service request.

To provide an authentication system and an authentication server that allow for the flexible setting of authentication strength for each of a plurality of wireless LAN access points.SOLUTION: A communication terminal 14 operates as a supplicant based on the IEEE802.1X standard. An authentication server 11 authenticates the communication terminal 14 based on the IEEE802.1X standard. A wireless LAN controller 12 operates as an authenticator based on the IEEE802.1X standard, and communicates EAPOL frames with the communication terminal 14 and RADIUS packets with the authentication server 11. The authentication server 11 selects one of multiple authentication methods based on identification information APID that identifies a wireless LAN access point 13 and that is included in the RADIUS packets from the wireless LAN controller 12, and proposes use of the selected authentication method to the communication terminal 14.SELECTED DRAWING: Figure 1