Diameter Proxy Routing for Flexible NAS Authentication

The patent introduces a proxy server as an intermediary component between network access servers and the DRA. The proxy server receives Diameter messages from network access servers, performs IP address mapping to translate dynamic IP addresses to static proxy IP addresses, and forwards the translated messages to the DRA. This intermediary mechanism enables flexible adaptation to growing numbers of communication devices while maintaining efficient communication without requiring pre-configuration at the DRA for each device.

The patent merges the authentication function for multiple network access servers into a single proxy server. Instead of configuring each network access server individually at the DRA, the proxy server consolidates the configuration with a single static IP address mapping. This merging approach maintains authentication reliability while significantly reducing device complexity and infrastructure requirements, as the proxy server handles authentication for all network access servers through centralized IP address translation.

The proxy server acts as a security intermediary that validates IP address mappings before forwarding messages to the DRA. It maintains a mapping table that correlates dynamic IP addresses with authorized network access servers, performing verification to prevent spoofing attacks. This intermediary mechanism enables the network to scale with dynamic IP address assignment while enhancing security by filtering and validating addresses, thereby blocking spoofing attempts before they reach the authentication system.