TH92872A - Systems and methods for the secure acquisition of end-users. - Google Patents

Abstract

DC60 (04/10/16) This revealed mechanism will be used to procure clients. By verifying the identity of the client during Dynamic setting process Instead of relying on a post-setup verification plan This invention also Combine security with dynamic settings into one plan. Any client device attempting to access the network will request setup information from the server providing setup service for that network, but the server will not respond until the client has completed authentication. And allowed to be The device receives the setup information for that network. The server providing the setup service may provide the client with temporary configuration information that allows the client to perform the authentication process. But also denied full access to the network When identity verification has been completed The server will provide the client with permanent new settings information, or may change the state of the information already provided from temporary to fully network accessible state. This will be used to supply clients. By verifying the identity of the client during Dynamic setting process Instead of relying on a post-setup verification plan This invention also Combine security with dynamic settings into one plan. Any client device attempting to access the network will request setup information from the server providing setup service for that network, but the server will not respond until the client has completed authentication. And allowed to be The device receives the setup information for that network. The server providing the setup service may provide the client with temporary configuration information that allows the client to perform the authentication process. But also denied full access to the network When identity verification has been completed The server will provide the client with new, permanent settings, or may change the state of the information already provided from temporary to full network access state --------- -------------------------------------------------- ------ This disclosure mechanism will be used to acquire clients. By verifying the identity of the client during Dynamic setting process Instead of relying on a post-setup verification plan This invention also Combine security with dynamic settings into one plan. Any client device attempting to access the network will request setup information from the server providing setup service for that network, but the server will not respond until the client has completed authentication. And allowed to be The device receives the setup information for that network. The server providing the setup service may provide the client with temporary configuration information that allows the client to perform the authentication process. But also denied full access to the network When identity verification has been completed The server will provide the client with new, permanent settings, or may change the state of the information already provided from temporary to full network access state.

Claims (6)

Disclaimer (all) which will not appear on the advertisement page: EDIT 04/10/2016 1. Method for securely supplying client computer equipment (106) with a valid network address. Used in client / host computer environments Method which consists of Request for network address (300) by client device (106) request of client for network address by host computer device (104) attempt to authenticate client device (106) ) Connect the server's computer device (308) (104), where the temporary network address will be used by the client computer device (106) during the authentication attempt. Where the request contains the use of DHCP, where the authentication attempt consists of the use of messages contained in the DHCP Options field (502), Quarantine the Client Computer. Where a temporary network address will protect computer devices Client from changes to any device In other networks In addition to the host computer equipment and if the workstation device (106) is verified as an authorized person, Network address number in the client / server environment. Network address assignment that is appropriate for the client / host computer environment and is not assigned to the current computer device by the host computer device (104). The host computer device (106) by the host computer device (104) the provision of a network address assigned to the client computer device (312) by the host computer device (104) and the acquisition of the network address. A network defined by a client computer device (106) 2. Claim Method 1 where the network address is assigned an Internet Protocol address (IP: Internet Protocol), IP, Address number 3. Method of claim 1 where the attempt to verify the identity consists of Use of protocols Extensible Authentication Protocol (EAP: Extensible Authentication Protocol) 4. Claim Method 1 where the request consists of the use of DHCP where the authentication attempt is made. The person comprising the use of the EAP and where the EAP message (504) is contained in the DHCP option information scope (502) 5. Claim Method 1 where the authentication attempt is initiated by the client computer device. (106) 6. Claim Method 1 where an attempt to verify the identity is initiated by the host computer device (104) 7. Claim Method 1 where network address identification will Was executed even though the device The client computer (106) has not been verified as an authorized person to obtain a network address in Client / host computer environment 8. Claim Method 1 where the temporary network address is assigned by the host computer device (104) to the client computer device (106) for limited use 9. The method of claim 1, where the client computer equipment (106) is confirmed to be The person who is authorized to obtain a network address in the client / host computer environment, the network address assigned will be the same as the temporary address 1 0. The media readable by the computer with Computer executable commands for method execution To provide a workstation (106) device with a network address in a client / host computer environment by means of: Request for network address (300) by client device (106) request of client for network address by host computer device (104) attempt to authenticate client device (106) ) Connect the server's computer device (308) (104), where the temporary network address will be used by the client computer device (106) during the authentication attempt. Where the request contains the use of DHCP, where the authentication attempt consists of the use of messages contained in the DHCP Options field (502), Quarantine the Client Computer. Where a temporary network address will protect computer devices Client from changes to any device In other networks In addition to the host computer equipment and if the workstation device (106) is verified as an authorized person, Network address number in the client / server environment. Network address assignment that is appropriate for the client / host computer environment and is not assigned to the current computer device by the host computer device (104). Client computer equipment (106) by host computer device (104) provision of network address assigned to client computer equipment (312) (106) by host computer device (104) and receiving Network address assigned by workstation (106) 1 1. Method for host computer device (104) to securely provide workstation device (106) with a valid network address. Used in client / host computer environments.Methods that include receiving a client DHCP request for a network address (300), an attempt to authenticate a client computer device against a host computer device (308), where A temporary network address is assigned to the client computer device (106) for use in While trying to verify someone Where attempts to verify the identity consist of Using the text contained in DHCP Option field (502) Quarantining a workstation device. Where a temporary network address will protect computer devices Client from changes to any device In other networks In addition to the host computer equipment and if the workstation device is verified as an authorized person, the address is Networks in the environment of the client computer / server, then Network addressing that is appropriate for the client / host computer environment and is not assigned to the current computer equipment. Assigning a assigned network address to a client device and assigning a network address assigned to a client device (312) 1 2. Method of claim 11, where Network address assigned to IP address 1 3. Claim Method 11 where identity verification attempt is made includes the use of EAP 1. 4. Claim Method 13 where EAP message ( 504) will be included in the DHCP option information scope (502) 1 5. Claim Method 11 where child authentication attempts are initiated by the host computer device (104) 1 6. Clause Method Rights 11 where network address assignment will be performed even if the device The client computer (106) has not been verified as an authorized person to obtain a network address in Client / Server Environment 1 7. Clause 11 Methods where the client computer equipment (106) is confirmed A person who is already authorized to obtain a network address in a client / host computer environment, the network address assigned will be the same as the temporary address 1 8. Computer readable media containing Computer executable commands for method execution For host computer equipment (104) to secure a workstation (106) with The network address used by the child in the client / host computer environment. Method which consists of Accepting client DHCP requests for network address (300) Attempting to authenticate a client device against a host computer device (308) where a temporary network address is assigned to the child computer device. Net (106) for use during Try to verify the person Where attempts to verify the identity consist of Using the text contained in the field DHCP Option Information (502) Quarantine a workstation. Where a temporary network address will protect computer devices Client from changes to any device In other networks In addition to the host computer equipment and the client computer equipment, it is confirmed that the person is authorized to obtain an address. Networks in the environment of the client computer / server, then Network addressing that is appropriate for the client / host computer environment and is not assigned to the current computer equipment. Assigning a network address assigned to a workstation and assigning a network address assigned to a client device (312) 1 9. Systems for the provision of child computer equipment. Network (106) securely with a network address. In a client / server environment System which consists of The client computer device (106) is configured for requesting a network address (300) for attempting to verify the client computer device's identity against the host computer device (308), where the request consists of using. DHCP where the authentication attempt consists of using a message that is populated in the DHCP Option field (502) and if the client device is verified as Is the person who is already authorized to obtain a network address in the client / host computer environment. It is for receiving the assigned network address and the host computer device (104) is configured to receive client requests for Network address number For trying to verify the identity of the client computer device against the device Host computer (308) where a temporary network address is assigned to the client computer device (106) for use during authentication attempts. Quarantine of client computer equipment Where address number The temporary network prevents the client computer equipment from changing to any device on the network other than the host computer device. And if the client computer equipment is verified as The person who has already been authorized to obtain a network address in the client / host computer environment. For specifying a network address appropriate for the client / host computer environment and not assigned to the current computer device. For determining the network address that has been specified with Workstation equipment And for the provision of a network address assigned to a client device (312) 2 0. Claim system 19 where the network address assigned is an IP address 2 1. Media Computer-readable, contains instructions that are executable by the computer for the execution of the method. To provide a workstation (106) securely with a network address in the environment. Client computer / server Method consisting of steps By client computer device (106): request for network address (300), authentication attempt. The person of the client computer device to the host computer device (308) where the request consists of the use of DHCP, where the authentication attempt consists of Using a message that was populated in the DHCP Option field (502) and the client computer device has been verified as an authorized person. The network address has been received in the client / host computer environment. Obtaining a network address assigned and by the host computer device (104): Acquiring a client request for a network address. Attempting to verify the identity of the client computer device against the host computer device (308) where the address A temporary network will be assigned to the workstation device (106) for use during the attempt. Verify identity And the quarantine of the client computer equipment Where the temporary network address is! The client computer from any changes to the device In other networks In addition to the host computer device and if the workstation device is verified as an authorized person, the address is Networks In a client / host computer environment, specifying a network address that is appropriate to Client computer / server environment And is not currently assigned to a computer device, the network address assigned to the workstation device And providing a network address that (312) 2 2. Claim Method 4 or 14 Where the Option field (502) is part of the data structure, the data structure consists of. The first data region contains information that presents DHPC messages (500). DHPC messages contain scope. The second information; The second data region contains information that presents the DHPC option data region (502). The DHPC option data region consists of a third data region and the third data region contains information that presents the EAP message (504) 2. Rights 22 where the DHCP message in the first scope is selected from a group consisting of DHCPDISCOVER, DHCPOFFER and DHCPREQUEST 2. 4. Method of claim 22 where EAP statements in the third scope are selected from the group. It consists of requests, responses, success and failure. -------------------------------------------------- -------------------------------------------------- --------- 1. In the computer environment of the client / server Method for assigning network addresses to Secure client computer equipment This method consists of Requesting a network address by a client computer device Accepting client requests for a network address By the computer equipment of the host Attempts to verify the identity of the client's computer equipment against the host's computer device; And if the client's computer equipment is verified as an authorized person A network address has been obtained in the client / host computer environment: the host computer device identifies a network address appropriate to Computer environment of the client / server And is a number that has not been assigned to Other computer equipment at that time The host computer device assigns the network address specified above to the Client computer equipment The host computer device gives the network address assigned above to the client computer device; And the client's computer equipment will receive the network address assigned above. 2. Method of claim 1 where the network address is assigned above. It is an Internet Protocol address (IP: Internet Protocol) number. 3. Clause 1 method in which the request includes the use of the dynamic server's configuration protocol. (DHCP: Dynamic Host Configuration Protocol) 4. Claim Method 1, in which identity verification is attempted using an authentication protocol. Expandable (EAP: Extensible Authentication Protocol) 5. Claim Method 1 in which the request includes the use of DHCP which attempts to authenticate using EAP, the EAP message is contained in the DHCP option data scope. Claim 1 in which an attempt to verify the identity is initiated by the client's computer device 7. Method of claim 1 in which an attempt to verify the identity is initiated by the server's computer device 8. Claim 1, in which the network address is specified, takes place. Although your child's computer equipment The network is not verified as an individual authorized to obtain a network address in the environment. Using the Client / Host's Computer 9. Method of Claim 1 which includes: Temporary use of network address during device authentication attempt. Client's Computer 1 0. Claim Method 9 In which a temporary network address is assigned by the host computer device to the client's computer device for limited use 1 1. Claim Method. 9 when the client's computer equipment is verified as an individual For those who have permission to obtain a network address in the client / host computer environment, the network address assigned to use will be the same as the temporary address 1. 2. Readable media. By computers which have commands to be executed by computers For the implementation of the method To provide a secure network address number to the client computer equipment In the use environment Client's computer / server This includes: Requesting a network address by a client's computer device. Accepting client requests for a network address By the computer equipment of the host Attempts to verify the identity of the client's computer equipment against the host's computer device; And if the client computer equipment has been verified as an authorized person. Network address number In a client / host computer environment: the host computer device specifies a network address that is appropriate to Computer environment of the client / server And is a number that has not been assigned to Computer equipment at that time The host computer device will assign the network address to be specified above with the Client computer equipment The host computer device gives the network address assigned above to the client computer device; And the host computer device will receive the network address specified above In the computer environment of the client / server Methods for computer equipment. The server to securely assign the network address to the client computer equipment. This includes: Accepting client requests for network addresses. Attempts to verify the identity of the client's computer equipment against the host's computer device; And if the client's computer equipment is verified as an authorized person Get network address In the client / host computer environment, there is: a network address that is appropriate for the client / host computer environment and a number that has not yet been assigned to a computer device. Another at that time Assigning the network address specified above to the client computer device; And giving the network address set above To the client's computer equipment 1 4. Method of claim 13 in which the network address is assigned Is an IP address 1 5. Claim Method 13 where identity verification is attempted using EAP 1 6. Claim Method 15 in which the EAP message is contained in the DHCP Option Information Scope 1 7. The method of claim 13, in which the attempt to verify the identity of the individual Is initiated by the server's computer equipment 1 8. Clause 13 method in which the network address is specified. Although your child's computer equipment The network is not verified as an individual authorized to obtain a network address in the environment. Using the Client's Computer / Server 1 9. Claim Method 13 Including: Providing a temporary network address to the Client's computer device to use during authentication attempts 2 0. Method Clause 19, which when the client's computer equipment is verified as A person who is already authorized to obtain a network address in the client / host computer environment, the network address assigned to use will be the same as the temporary address. 2. 1. Read media. Can be done by computer which has commands that can be executed by the computer. For the implementation of the method For computer equipment of the host To give the device a secure network address Client computer In the computer environment of the client / server This includes: Accepting client requests for network addresses. Attempts to verify the identity of the client's computer equipment against the host's computer device; And if the client computer equipment has been verified as an authorized person. Network address number In the client / host computer environment, there is: a network address that is appropriate for the client / host computer environment and a number that has not yet been assigned to a computer device. Another at that time Assigning the network address specified above to the client computer device; And giving the network address set above To the computer equipment of the client 2 2. In the environment of using the computer of the client / server Methods for computer equipment. A client to receive a network address By the way, this includes Requesting a Network Address Attempts to verify the identity of the client's computer equipment against the host's computer device; And if the client computer equipment has been verified as an authorized person. Network address number In the environment of using the computer of the client / server then Therefore receiving a number Assigned Network Address 2. 3. Claim Method 22 in which the number of the assigned network address. 2. Claim Method 22, which is requested by using EAP 2. 5. Claim Method 22 where identity is attempted by using EAP 2. 6. Claim Method 22. Claim 22, which is requested by the use of DHCP, where an attempt to authenticate using an EAP, in which the EAP message is contained in the DHCP option information scope 2 7. Claim Method 22, in which the attempt to verify that Initialized by Client Computer Device 2. 8. Claim 22 Method also includes: Using a temporary network address during device authentication attempts. Client's Computer 2 9. Method of Claim 28 whereby the Client's computer equipment is The person who is authorized to obtain a network address in the client / host computer environment and the network address assigned to use will be the same as the temporary address 3 0. Read media. Can be by computer which has commands that can be executed by the computer For the implementation of the method Client computer equipment To get a network address In the computer environment Of client / server This includes: requesting a network address. Attempts to authenticate a client's computer device against a host computer device: and if the client's computer device is verified as an authorized person. Get network address In the client / host computer environment, the assigned network address 3 is obtained. 1. System for secure network addressing to client computer equipment in client / host computer environments. Such a system includes Client computer equipment It is set up for requesting a network address for attempting to authenticate a client's computer device against a host computer device. And if the client's computer equipment is verified as an authorized person, Network address number In the environment of using the computer of the client / server then Therefore receiving a number The network address that is assigned to; And computer equipment of the host It is set up for accepting client network address requests for attempts to authenticate the client's computer device against the device. Host's computer And if the client computer equipment is verified as the person who Is allowed to get a network address In the client / host computer environment, the network address that is appropriate for the client / host computer environment is then assigned a number that has not yet been assigned to other computer equipment in the At that time, for assigning the network address that was assigned to the client computer device. And for the numbering The network address that is assigned to the client computer device 3. 2. System of claim 31 in which the network address is assigned It is IP address 3. 3. Computer-readable media containing commands that can be executed by the computer. In order to have a system that provides address numbers Network securely with client computer equipment. In the computer environment Of client / server This system includes: computer equipment of the client. It is set up for requesting a network address for attempting to authenticate a client's computer device against a host computer device. And if the client's computer equipment is verified as an authorized person, Network address number In the environment of using the computer of the client / server then Therefore receiving a number The network address that is assigned to; And computer equipment of the host It is set up for accepting client network address requests for attempts to authenticate the client's computer device against the device. Host's computer And if the client computer equipment is verified as the person who Is allowed to get a network address In the client / host computer environment, a network address that is appropriate for the client / host computer environment is then assigned a number that has not yet been assigned to another computer device. At that time, for assigning the network address specified to the client computer device. And for the numbering The network address that is assigned to the client computer device 3. 4. Computer readable media that has stored a secure network address. This defines the data structure of the secure network address message, which defines the message's data structure, including: The first field contains information that represents the DHCP message. The DHCP message contains the second data region. The second data region presents the DHCP option data region. The DHCP option scope contains a third data region; And a third region of information containing information that presents the EAP 3 message. 5. Computer-readable media of Clause 34. DHCP messages in the first scope will be Select from a group consisting of DHCPDISCOVER, DHCPOFFER and DHCPREQUEST 3. 6. Computer-readable media of Claim 34 EAP statements in the third scope will be Choose from a group that includes Request, Response, Success and Failure.