Network address allocation using a user identity

Abstract

The apparatuses and methods described herein may generate an identifier associated with a user identity responsive to detecting access to a network by a node associated with the user identity. The node may be assigned a temporary network address. The identifier associated with the user identity may be sent to the node. At least one permanent network address may be allocated to the node as a replacement for the temporary network address responsive to receiving an allocation request including the identifier from the node. The at least one permanent network address may be selected from one or more permanent network addresses previously assigned to the user identity.

1 . An apparatus comprising:
 memory to store one or more permanent network addresses assigned to a user identity; and   one or more processors to execute an allocation module, the allocation module configured to:
 generate an identifier associated with the user identity responsive to detecting access to a network by a node associated with the user identity, the node being assigned a temporary network address; 
 send the identifier associated with the user identity to the node; and 
 allocate at least one permanent network address of the one or more permanent network addresses to the node as a replacement for the temporary network address responsive to receiving an allocation request including the identifier from the node. 
   
     
     
         2 . The apparatus of  claim 1 , wherein the allocation module is configured to:
 receive a release request from the node to release the temporary network address.   
     
     
         3 . The apparatus of  claim 1 , wherein the allocation module is configured to:
 assign the at least one permanent network address to another node responsive to detecting that a user associated with the user identity moves from the node and logs on to the other node.   
     
     
         4 . The apparatus of  claim 1 , wherein the allocation module is configured to:
 assign the one or more permanent network addresses to the user identity responsive to receiving an indication that a user account associated with the user identity has been created.   
     
     
         5 . The apparatus of  claim 1 , wherein the allocation module is configured to:
 select the one or more permanent network addresses from a plurality of network addresses associated with a same subnet of the network.   
     
     
         6 . The apparatus of  claim 1 , wherein the one or more permanent network addresses comprise a first permanent network address and a second permanent network address, and wherein the allocation module is configured to:
 select an address associated with a first subnet of the network as the first permanent network address, and an address associated with a second subnet of the network as the second permanent network address.   
     
     
         7 . The apparatus of  claim 1 , wherein the allocation module is configured to:
 generate the identifier responsive to receiving an indication that the user identity has been authenticated.   
     
     
         8 . The apparatus of  claim 1 , wherein the identifier comprises a random identifier, wherein the allocating module is configured to:
 select a different random identifier for each permanent network address request.   
     
     
         9 . The apparatus of  claim 1 , wherein the apparatus comprises a Dynamic Host Configuration Protocol (DHCP) server. 
     
     
         10 . The apparatus of  claim 1 , wherein the apparatus comprises a directory service server. 
     
     
         11 . A method comprising:
 generating, using one or more processors, an identifier associated with a user identity responsive to detecting access to a network by a node associated with the user identity, the node being assigned a temporary network address;   sending the identifier associated with the user identity to the node; and   allocating at least one permanent network address to the node as a replacement for the temporary network address responsive to receiving an allocation request including the identifier from the node, the at least one permanent network address selected from one or more permanent network addresses previously assigned to the user identity.   
     
     
         12 . The method of  claim 11 , wherein the detecting comprises:
 authenticating the user identity.   
     
     
         13 . The method of  claim 12 , wherein the authenticating comprises:
 determining that log-in credentials received from the node are associated with the user identity.   
     
     
         14 . The method of  claim 11 , further comprising:
 assigning the one or more permanent network addresses to the user identity responsive to identifying that a user account associated with the user identity has been created by a directory service.   
     
     
         15 . The method of  claim 11 , further comprising:
 receiving an address mapping list, including the one or more permanent network addresses, from a directory service.   
     
     
         16 . The method of  claim 15 , further comprising:
 transmitting a request for the address mapping list to the directory service, the request including the identifier.   
     
     
         17 . The method of  claim 11 , wherein the allocating of the at least one permanent network address comprises:
 receiving a release request from the node to release the temporary network address.   
     
     
         18 . The method of  claim 11 , wherein the allocating of the at least one permanent network address comprises:
 refraining from allocating the at least one permanent network address to the node responsive to determining that a subnet address of the at least one permanent network address does not match a subnet of the network accessed by the node.   
     
     
         19 . The method of  claim 11 , wherein the node comprises one of a physical machine or a virtual machine. 
     
     
         20 . A non-transitory computer-readable storage device storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:
 generating an identifier associated with a user identity responsive to detecting access to a network by a node associated with the user identity, the node being assigned a temporary network address;   sending the identifier associated with the user identity to the node; and   allocating at least one permanent network address to the node as a replacement for the temporary network address responsive to receiving an allocation request including the identifier from the node, the at least one permanent network address selected from one or more permanent network addresses previously assigned to the user identity.