Controlling access to a network using a central AAA platform and local AAA platforms synchronised with the central AAA platform.

摘要

A network contains a number of sub-networks, each provided with a network access gateway (NAG) and a local authentication authorisation and accounting platform (AAA). A user can communicate with at least a selected number of the sub-networks, preferably using a wireless communication method. The network also contains a central AAA platform (CAP). The CAP is connected to the local AAA platforms (LAP) (preferably by the internet) to allow the central AAA and the local AAAs to synchronize authentication information. A user can obtain authorisation to access a sub-network from that sub-network's local AAA. In one embodiment the user may select between using a local AAA or the central AAA. The central AAA is preferably provided at a "secure internet location".