Change-of-authorization synchronization via cloud service
Implementations of the present disclosure relate to change-of-authorization (CoA) synchronization via a cloud service. A method at a server comprises receiving a CoA message indicating a CoA role of a mobile station from a first access point (AP) and storing the CoA role of the mobile station. The method further comprises receiving, from a second AP, an authentication message indicating the mobile station has been authenticated at the second AP. The method further comprises obtaining the CoA role of the mobile station and transmitting a CoA request, including the CoA role to the second AP. Implementations of the present disclosure can help the mobile station to obtain its correct CoA role automatically when roaming from a home AP to a target AP.
1. A method, comprising:
receiving, by a server and from a first access point (AP), a Change-of-Authorization (CoA) message including a CoA role of a mobile station
storing, by the server, the CoA role of the mobile station;
receiving, by the server and from a second AP, an authentication message indicating that the mobile station has been authenticated at the second AP;
in response to receiving the authentication message, obtaining, by the server, the CoA role of the mobile station; and
transmitting, by the server and to the second AP, a CoA request including the CoA role.
2. The method of claim 1 , wherein the authentication message is transmitted from the second AP to the server in response to the mobile station having been authenticated at the second AP.
3. The method of claim 1 , wherein a role of the mobile station at the second AP is updated with the CoA role in response to the CoA request being transmitted from the server.
4. The method of claim 3 , further comprising:
determining whether a CoA Acknowledgement (ACK) message is received from the second AP; and
in response to a determination that no CoA ACK is received during a time interval, retransmitting the CoA request including the CoA role to the second AP.
5. The method of claim 1 , wherein the CoA message is received from the first AP in response to a role of the mobile station at the first AP having been changed to the CoA role.
6. The method of claim 1 , wherein the first AP has a group identity, and storing the CoA role of the mobile station comprises:
storing the CoA role together with the group identity of the first AP.
7. The method of claim 1 , wherein the first and second APs are located in a same geographic area, or belong to a same virtual local area network.
8. The method of claim 6 , wherein obtaining the CoA role of the mobile station comprises:
determining a group identity of the second AP and an identity of the mobile station; and
retrieving the CoA role of the mobile station based on the group identity of the second AP and the identity of the mobile station.
9. The method of claim 1 , wherein the CoA message includes one or more of:
a filter-ID attribute indicating the CoA role and corresponding to an identifier of a pre-defined access control list (ACL); or
a vendor specific attribute (VSA).
10. The method of claim 1 , wherein the CoA message includes one or more of:
a media access control (MAC) address of the mobile station;
an equipment identity of the mobile station; or
a username logged on the mobile station.
11. A server comprising:
at least one processor; and
a memory coupled to the at least one processor, the memory storing instructions to cause the at least one processor to implement acts comprising:
receiving, from a first access point (AP), a Change-of-Authorization (CoA) message including a CoA role of a mobile station;
storing the CoA role of the mobile station;
receiving, from a second AP, an authentication message indicating the mobile station has been authenticated at the second AP;
obtaining, in response to receiving the authentication message, the CoA role of the mobile station; and
transmitting a CoA request including the CoA role to the second AP.
12. The server of claim 11 , wherein the authentication message is transmitted from the second AP to the server in response to the mobile station having been authenticated at the second AP.
13. The server of claim 11 , wherein a role of the mobile station at the second AP is updated with the CoA role in response to the CoA request being transmitted from the server.
14. The server of claim 13 , the acts further comprising:
determining whether a CoA Acknowledgement (ACK) message is received from the second AP; and
in response to a determination that no CoA ACK is received during a time interval, retransmitting the CoA request including the CoA role to the second AP.
15. The server of claim 11 , wherein the CoA message is received from the first AP in response to a role of the mobile station at the first AP having been changed to the CoA role.
16. The server of claim 11 , wherein the first AP has a group identity, and storing the CoA role of the mobile station comprises:
storing the CoA role together with the group identity of the first AP.
17. The server of claim 11 , wherein the first and second APs are located in a same geographic area, or belong to a same virtual local area network.
18. The server of claim 16 , wherein obtaining the CoA role of the mobile station comprises:
determining a group identity of the second AP and an identity of the mobile station; and
retrieving the CoA role of the mobile station based on the group identity of the second AP and the identity of the mobile station.
19. The server of claim 11 , wherein the CoA message includes one or more of:
a filter-ID attribute indicating the CoA role and corresponding to an identifier of a pre-defined access control list (ACL); or
a vendor specific attribute (VSA).
20. A non-transitory computer-readable medium comprising instructions stored thereon which, when executed by a server, cause the server to:
receive a Change-of-Authorization (CoA) message including a CoA role of a mobile station from a first Access Point (AP);
store the CoA role of the mobile station;
receive, from a second AP, an authentication message indicating the mobile station has been authenticated at the second AP;
obtain, in response to reception of the authentication message, the CoA role of the mobile station; and
transmit a CoA request including the CoA role to the second AP.