Network entity id AAA
Techniques for passively providing AAA support for an IoT device in a network are disclosed. A set of data packets transmitted by an IoT device is obtained. At least one packet included in the set of data packets is analyzed. A message, including information associated with the IoT device, is transmitted on behalf of the IoT device.
1. A system, comprising:
a processor configured to:
obtain a set of data packets transmitted by an IoT device incapable of transmitting Authentication, Authorization and Accounting (AAA) messages;
analyze at least one packet included in the set of data packets; and
transmit, on behalf of the IoT device, an AAA message including information associated with the IoT device; and
a memory coupled to the processor and configured to provide the processor with instructions.
2. The system of claim 1 , wherein obtaining the set of data packets includes performing passive monitoring.
3. The system of claim 1 , wherein analyzing the at least one packet includes using deep packet inspection to identify transaction data.
4. The system of claim 1 , wherein the processor is further configured to obtain a set of attributes associated with the IoT device.
5. The system of claim 4 , wherein obtaining the set of attributes includes querying a remote IoT module.
6. The system of claim 1 , wherein analyzing the at least one packet includes determining that the at least one packet is associated with the IoT device.
7. The system of claim 1 , wherein analyzing the at least one packet includes determining that the at least one packet is associated with a device not previously seen in a network environment.
8. The system of claim 1 , wherein analyzing the at least one packet includes determining that the at least one packet is associated with a new connection.
9. The system of claim 1 , wherein the AAA message is a RADIUS access request message.
10. The system of claim 1 , wherein the AAA message is a RADIUS accounting start message.
11. The system of claim 1 , wherein the AAA message is a RADIUS accounting stop message.
12. The system of claim 1 , wherein the AAA message is transmitted in response to receipt of initial attribute information associated with the IoT device.
13. The system of claim 1 , wherein the AAA message is transmitted in response to receipt of subsequent attribute information associated with the IoT device.
14. A method, comprising:
obtaining a set of data packets transmitted by an IoT device incapable of transmitting Authentication, Authorization and Accounting (AAA) messages;
analyzing at least one packet included in the set of data packets; and
transmitting, on behalf of the IoT device, an AAA message including information associated with the IoT device.
15. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
obtaining a set of data packets transmitted by an IoT device incapable of transmitting Authentication, Authorization and Accounting (AAA) messages;
analyzing at least one packet included in the set of data packets; and
transmitting, on behalf of the IoT device, an AAA message including information associated with the IoT device.
16. The method of claim 14 , wherein obtaining the set of data packets includes performing passive monitoring.
17. The method of claim 14 , wherein analyzing the at least one packet includes using deep packet inspection to identify transaction data.
18. The method of claim 14 , further comprising obtaining a set of attributes associated with the IoT device.
19. The method of claim 18 , wherein obtaining the set of attributes includes querying a remote IoT module.
20. The method of claim 14 , wherein analyzing the at least one packet includes determining that the at least one packet is associated with the IoT device.
21. The method of claim 14 , wherein analyzing the at least one packet includes determining that the at least one packet is associated with a device not previously seen in a network environment.
22. The method of claim 14 , wherein analyzing the at least one packet includes determining that the at least one packet is associated with a new connection.
23. The method of claim 14 , wherein the AAA message is a RADIUS access request message.
24. The method of claim 14 , wherein the AAA message is a RADIUS accounting start message.
25. The method of claim 14 , wherein the AAA message is a RADIUS accounting stop message.
26. The method of claim 14 , wherein the AAA message is transmitted in response to receipt of initial attribute information associated with the IoT device.
27. The method of claim 14 , wherein the AAA message is transmitted in response to receipt of subsequent attribute information associated with the IoT device.