Managing access to a network
One embodiment of the invention is directed to managing access of a host computer to a network. A first communication session with the host computer may be conducted to authenticate the host computer's identity. A second communication session with the host computer may be conducted to determine the health status of the host computer.
1. A method of managing network access of a computer in a computer system comprising a network access server, an authentication server, and a health credential server, the method comprising acts of:
conducting a first communication session between the network access server and the computer to determine an identity of the computer;
conducting a second communication session between the network access server and the authentication server to verify the identity of the computer;
in response to verifying the identity of the computer, conducting a third communication session between the authentication server and the network access server to configure the network access server to allow the computer to communicate with the health credential server;
conducting a fourth communication session between the computer and the health credential server, via the network access server, to determine a health status of the computer; and
in response to verifying the identity and health status of the computer, granting network access to the computer.
2. The method of claim 1 , wherein the first communication session and fourth communication session are conducted using a same protocol.
3. The method of claim 1 , wherein the first communication session and fourth communication session are conducted using different protocols.
4. The method of claim 1 , wherein the first communication session is conducted using a protocol that does not provide flow control functionality between devices that are not directly connected.
5. The method of claim 1 , wherein the first communication session is conducted using a layer two protocol.
6. The method of claim 1 , wherein the fourth communication session is conducted using a protocol that provides flow control functionality between devices that are not directly connected.
7. The method of claim 1 , wherein the fourth communication session is conducted using a protocol above layer 2.
8. At least one computer readable medium, encoded with instructions that, when executed on a computer system, perform a method of managing network access of a computer in a computer system comprising a network access server, an authentication server, and a health credential server, the method comprising acts of:
conducting a first communication session between the network access server and the computer to determine an identity of the computer;
conducting a second communication session between the network access server and the authentication server to verify the identity of the computer;
in response to verifying the identity of the computer, conducting a third communication session between the authentication server and the network access server to configure the network access server to allow the computer to communicate with the health credential server;
conducting a fourth communication session between the computer and the health credential server, via the network access server, to determine a health status of the computer; and
in response to verifying the identity and health status of the computer, granting network access to the computer.
9. The at least one computer readable medium of claim 8 , wherein the first communication session and fourth communication session are conducted using a same protocol.
10. The at least one computer readable medium of claim 8 , wherein the first communication session and fourth communication session are conducted using different protocols.
11. The at least one computer readable medium of claim 8 , wherein the first communication session is conducted using a protocol that does not provide flow control functionality between devices that are not directly connected.
12. The at least one computer readable medium of claim 8 , wherein the first communication session is conducted using a layer two protocol.
13. The at least one computer readable medium of claim 8 , wherein the fourth communication session is conducted using a protocol that provides flow control functionality between devices that are not directly connected.
14. The at least one computer readable medium of claim 8 , wherein the fourth communication session is conducted using a protocol above layer 2.
15. A computer system for managing access to a network by a computer, the computer system comprising:
an authentication server;
a health credential server; and
a network access server having:
a network interface for sending and receiving data; and
at least one controller, coupled to the network interface, that:
conducts a first communication session with the computer, through the network interface, to determine an identity of the computer;
conducts a second communication with the authentication server to verify the identity of the computer;
when the authentication server verifies the identity of the computer, conducts a third communication session with the authentication server, whereby the authentication server configures the network access server to allow the computer to communicate with the health credential server;
conducts a fourth communication session whereby the computer communicates with the health credential server, through the network access server, to determine a health status of the computer; and
in response to verifying the identity and health status of the computer, grants network access to the computer.
16. The computer system of claim 15 , wherein the first communication session and fourth communication session are conducted using a same protocol.
17. The computer system of claim 15 , wherein the first communication session and fourth communication session are conducted using different protocols.
18. The computer system of claim 15 , wherein the first communication session is conducted using a protocol that does not provide flow control functionality between devices that are not directly connected.
19. The computer system of claim 15 , wherein the first communication session is conducted using a layer two protocol.
20. The computer system of claim 15 , wherein the fourth communication session is conducted using a protocol that provides flow control functionality between devices that are not directly connected.