Dynamic distribution of authentication sessions
View Patent ↗This disclosure relates to authenticating and providing transport security over unsecured IP networks to network subscribers. The system includes an authentication service that authenticates network subscribers. The authentication service can dynamically define expiry times for network authentication.
1. A computer-implemented method for management of authentication sessions, the computer-implemented method comprising:
receiving an authentication request for an authentication session, wherein an authentication service receives the authentication request from a telecommunication device associated with a subscriber;
analyzing a distribution of subscriber expiry times over a time frame wherein the time frame can be characterized into a plurality of time periods;
determining an expiry time for the authentication session based, at least in part, on the distribution of subscriber expiry times over the time frame, wherein the expiry time is one of the plurality of time periods;
generating an authentication token with the determined expiry time; and
sending the authentication token to a telecommunication device responsive to the authentication request.
2. The computer-implemented method of claim 1 further comprising:
analyzing historical data related to the distribution of subscriber expiry times; and
determining the expiry time based, at least in part, the historical data in addition to the distribution of subscriber expiry times.
3. The computer-implemented method of claim 2 , wherein the historical data is associated with the subscriber.
4. The computer-implemented method of claim 1 , wherein the authentication service comprises a bootstrapping server function.
5. The computer-implemented method of claim 1 , wherein the defined time frame is twenty-four hours.
6. The computer-implemented method of claim 1 , wherein the defined time frame is eight hours.
7. The computer-implemented method of claim 1 , wherein the determined expiry time is greater than twenty-four hours after generating the authentication token.
8. The computer-implemented method of claim 1 , wherein the determined expiry time is less than twenty-four hours after generating the authentication token.
9. The computer-implemented method of claim 1 , wherein each of the plurality of time periods are equal.
10. The computer-implemented method of claim 1 , wherein each of the plurality of time periods is one hour.
11. The computer-implemented method of claim 1 , wherein the determined expiry time is the time period with the least number of subscriber expiry times.
12. The computer-implemented method of claim 1 , wherein the determined expiry time is based, at least in part, on an algorithm.
13. A telecommunication system, the system comprising:
an authentication server configured to:
communicate with a telecommunication device;
receive an authentication request for an authentication session;
analyze a distribution of subscriber expiry times over a time frame;
determine an expiry time for the authentication session based, at least in part, on the distribution of subscriber expiry times over the time frame;
generate an authentication token comprising the expiry time; and
send the authentication token to a telecommunication device responsive to the authentication request.
14. The system of claim 13 , wherein the authentication service is configured to communicate with the telecommunication device over a bootstrapping interface.
15. The system of claim 13 , wherein the authentication service comprises a bootstrapping service function.
16. The system of claim 13 , wherein the authentication service is a network application function.
17. The system of claim 13 , further comprising an application gateway configured to communicate with the authentication service.