Apparatus and system effectively using a plurality of authentication servers

Abstract

An authentication system and apparatus having an authentication process distributing function for individually setting an authenticating method and an authentication server on a port unit basis of a network apparatus and selecting an authentication processing unit which authenticates every port are provided. More specifically speaking, there is provided a packet transfer apparatus or system having: a plurality of connecting ports; a plurality of authentication processing units for authenticating apparatuses connected through the connecting ports; and an authentication process distributing unit for selecting the authentication processing unit to be authenticated every connecting port, wherein any one of the plurality of authentication processing units is made to correspond to each of the plurality of connecting ports, and when a packet is received from the apparatus connected to one of the connecting ports, the authentication process distributing unit selects the authentication processing unit which was made to correspond to the connecting port to which the apparatus to which the packet was transmitted has been connected and allows an authenticating process of the packet-transmitted apparatus to be executed.

1 . A packet transfer apparatus comprising:
 a plurality of connecting ports;   a plurality of authentication processing units for authenticating apparatuses connected through said connecting ports; and   an authentication process distributing unit for selecting the authentication processing unit to be authenticated every said connecting port,   wherein any one of said plurality of authentication processing units is made to correspond to each of said plurality of connecting ports, and   when a packet is received from said apparatus connected to one of said connecting ports, said authentication process distributing unit selects the authentication processing unit which was made to correspond to said connecting port to which said apparatus to which the packet was transmitted has been connected and allows an authenticating process of said packet-transmitted apparatus to be executed.   
     
     
         2 . An apparatus according to  claim 1 , wherein said plurality of authentication processing units execute the authentication of said packet-transmitted apparatus by using different authentication servers. 
     
     
         3 . An apparatus according to  claim 2 , wherein
 said connecting ports are made to correspond to one or more authenticating methods, and   said authentication process distributing unit selects said authentication processing unit which performs the authentication by the authenticating method which was made to correspond to said connecting port which received said packet.   
     
     
         4 . An apparatus according to  claim 3 , wherein
 said authenticating methods are made to correspond to one or more said authentication servers, and   when said received packet and information of said connecting port which received said packet are received from said authentication process distributing unit, said authentication processing unit transmits an authenticating request to said authentication server which performs the authentication of said authenticating method corresponding to said received connecting port information.   
     
     
         5 . An apparatus according to  claim 4 , wherein
 in the case where two or more said authentication servers are made to correspond to said authenticating methods,   said authentication processing unit transmits said authenticating request to said authentication server of a high priority.   
     
     
         6 . An apparatus according to  claim 5 , wherein said plurality of authentication processing units execute any one of Web authentication, MAC authentication, and 802.1X authentication. 
     
     
         7 . An apparatus according to  claim 2 , wherein when the apparatus has been moved to said connecting port different from said connecting port to which said authenticated apparatus was connected, if said corresponding authentication server at said connecting port before the movement and that after the movement differ, an authenticated state of said moved apparatus is reset and the authentication is performed again. 
     
     
         8 . A network authentication system comprising a packet transfer apparatus and a plurality of authentication servers, wherein
 said packet transfer apparatus has a plurality of connecting ports and, when a packet is received from an apparatus connected to one of said connecting ports, said packet transfer apparatus transmits an authenticating request to said authentication server corresponding to the connecting port which received said packet, and   when said authenticating request is received, said authentication server makes authentication of the apparatus which transmitted said packet and returns an authentication result to said packet transfer apparatus.   
     
     
         9 . A system according to  claim 8 , wherein said plurality of authentication servers make authentication of said packet-transmitted apparatus by using different authenticating methods. 
     
     
         10 . A system according to  claim 9 , wherein
 said connecting ports are made to correspond to one or more said authenticating methods, and   said packet transfer apparatus transmits said authenticating request to said authentication server which makes the authentication by the authenticating method which was made to correspond to said connecting port which received said packet.   
     
     
         11 . A system according to  claim 10 , wherein
 in the case where two or more said authentication servers are made to correspond to said authenticating methods,   said packet transfer apparatus transmits said authenticating request to said authentication server of a high priority.   
     
     
         12 . A system according to  claim 11 , wherein said packet transfer apparatus executes any one of Web authentication, MAC authentication, and 802.1X authentication. 
     
     
         13 . A system according to  claim 9 , wherein when the apparatus has been moved to said connecting port different from said connecting port to which said authenticated apparatus was connected, if said corresponding authentication server at said connecting port before the movement and that after the movement differ, said packet transfer apparatus resets an authenticated state of said moved apparatus and transmits said authenticating request again to said authentication server corresponding to the connecting port of a movement destination.