Network system for retrieval of configuration related data

• US 10,397,048 B2
• Filed: 02/12/2015
• Issued: 08/27/2019
• Est. Priority Date: 02/12/2014
• Status: Active Grant

• Current Assignee: regify SA
• Original Assignee: regify SA
• Inventors: Kammerer, Kurt, Schmid, Volker
• Primary Examiner(s): Lee, Gil H.
• Application Number:
  US14/620,222
• Publication Number:
  US 20150229517A1
• Time in Patent Office: 1,657 Days
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 41/5051 Service on demand, e.g. definition and deployment of services in real time
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

There is provided a network system comprising, in accordance with an embodiment, a lookup unit, a clearing unit having a storage device and a client unit. The client unit is adapted for providing user-related data to the lookup unit, wherein the user-related data is based on user-specific data, the user-specific data is associated with a user, and the user-related data allows for unambiguous identification of the user-specific data. Further, the lookup unit is adapted for retrieving identification data from the clearing unit by using the user-related data, wherein the identification data is associated with the user-specific data, and the clearing unit is adapted for retrieving from the storage device the identification data associated with the user-specific data. The clearing unit is adapted for providing the identification data to the lookup unit. The lookup unit is adapted for retrieving configuration related data for a service provided to the user, wherein the configuration related data are retrieved by using the identification data.

Claims

1. A network system capable of separating a retrieval of configuration related data for a user-specific service and an identification of a corresponding user, the network system comprising:

a lookup unit;

a clearing unit having a storage device;

a provider unit; and

a client unit being adapted for transmitting user-related data to the lookup unit, the user-related data being based on user-specific data, the user-specific data being associated with a user and unambiguously identifying the user, and the user-related data allowing for unambiguous identification of the user-specific data, and the user-related data being a first fingerprint of the user-specific data;

the lookup unit being further adapted for transmitting a second fingerprint of the user-specific data to the clearing unit, the second fingerprint being based on the first fingerprint of the user-specific data, the second fingerprint allowing for unambiguous identification of the user-specific data;

the lookup unit being adapted for retrieving identification data from the clearing unit by using the second fingerprint, the identification data unambiguously identifying the provider unit associated with the user-specific data;

the clearing unit being adapted for selecting and retrieving from the storage device the identification data by using the second fingerprint of the user-specific data;

the clearing unit being adapted for transmitting the identification data to the lookup unit;

the lookup unit being adapted for retrieving the configuration related data from the provider unit for a service provided to the user by using the identification data, the configuration related data including address information of the provider unit;

the lookup unit further being adapted for transmitting the configuration related data to the client unit;

the client unit being adapted for using the configuration related data to establish connection to the provider unit;

the clearing unit and the lookup unit being different from each other; and

the lookup unit, the clearing unit, the provider unit, and the client unit each being implemented by respective processor device having at least one processor.

2. The network system according to claim 1, further comprising

the lookup unit being further adapted for providing a third fingerprint of the user-specific data to the provider unit for verifying, by the provider unit, validity of the user-specific data by using the third fingerprint;

the provider unit being implemented by a processor device having at least one processor; and

the provider unit being optionally adapted for providing a status information regarding the validity of the user-specific data to the lookup unit;

wherein optionally the third fingerprint is identical to the first fingerprint.

3. The network system according to claim 1, further comprising

the client unit being further adapted for providing further user-related data to the lookup unit, the further user-related data being based on further user-specific data, the further user-specific data being associated with the user, and the further user-related data allowing for unambiguous identification of the further user-specific data;

the lookup unit being further adapted for providing data, which is based on the further user-related data, to the provider unit and receiving in response hereto a status information regarding the validity of the further user-specific data.

4. The network system according to claim 1, further comprising

the provider unit being adapted for providing a registration request to the lookup unit, the registration request including at least part of the identification data and a verification-related data, the verification-related data being based on verification data and wherein the verification-related data allows for unambiguous identification of the verification data;

the lookup unit being further adapted for receiving the registration request;

the lookup unit being further adapted for providing to the clearing unit the at least part of the provider identification data and data which is based on the verification-related data and allows for unambiguous identification of the verification data.

5. The network system according to claim 1,

the client unit being further adapted for initiating a configuration of the service provided to a user by providing the user-related data to the lookup unit.

6. The network system according to claim 1, the clearing unit being further adapted for receiving the second fingerprint from the lookup unit of the network system.

7. The network system according to claim 2,

the provider unit being adapted for receiving the third fingerprint of the user-related data from the lookup unit;

the provider unit being further adapted for

verifying validity of the user-specific data by using the third fingerprint and/or

retrieving the configuration related data associated with the user-specific data.

8. A lookup unit of a network system which is capable of separating a retrieval of configuration related data for a user-specific service and an identification of a corresponding user,

the lookup unit being adapted for receiving user-related data from a client unit, wherein the user-related data is based on user-specific data, the user-specific data is associated with a user and unambiguously identifying the user, the user-related data allows for unambiguous identification of the user-specific data, and the user-related data being a first fingerprint of the user-specific data;

the lookup unit being further adapted for transmitting a second fingerprint of the user-specific data to a clearing unit having a storage device, the second fingerprint being based on the first fingerprint of the user-specific data, the second fingerprint allowing for unambiguous identification of the user-specific data;

the lookup unit being adapted for retrieving identification data from the clearing unit, which is different from the lookup unit, by using the second fingerprint, the identification data unambiguously identifying a provider unit associated with the user-specific data, wherein the clearing unit selects and retrieves from the storage device the identification data by using the second fingerprint of the user-specific data;

the lookup unit being adapted for retrieving the configuration related data from the provider unit for a service provided to the user by using the identification data, the configuration related data including address information of the provider unit; and

the lookup unit further being adapted for transmitting the configuration related data to the client unit, wherein the client unit uses the configuration related data to establish connection to the provider unit;

the lookup unit, the clearing unit, the provider unit, and the client unit each being implemented by respective processor device having at least one processor.

9. A method of operating a network system capable of separating a retrieval of configuration related data for a user-specific service and an identification of a corresponding user, the network system comprising a lookup unit, a clearing unit having a storage device, a provider unit, and a client unit, the clearing unit and the lookup unit being different from each other, the method comprising:

transmitting user-related data from the client unit to the lookup unit, the user-related data being based on user-specific data, the user-specific data being associated with a user and unambiguously identifying the user, the user-related data allowing for unambiguous identification of the user-specific data, and the user-related data being a first fingerprint of the user-specific data;

operating the lookup unit so as to transmit a second fingerprint of the user-specific data to the clearing unit, the second fingerprint being based on the first fingerprint of the user-specific data, the second fingerprint allowing for unambiguous identification of the user-specific data;

operating the lookup unit so as to retrieve identification data from the clearing unit by using the second fingerprint, the identification data unambiguously identifying the provider unit associated with the user-specific data;

operating the clearing unit so as to select and retrieve from the storage device the identification data by using the second fingerprint of the user-specific data;

transmitting the identification data from the clearing unit to the lookup unit;

operating the lookup unit so as to retrieve configuration related data from the provider unit for a service provided to the user by using the identification data, the configuration related data including address information of the provider unit; and

operating the lookup unit so as to transmit the configuration related data to the client unit;

operating the client unit so as to use the configuration related data to establish connection to the provider unit;

the lookup unit, the clearing unit, the provider unit, and the client unit each being implemented by respective processor device having at least one processor.

10. The method of according to claim 9, the method further comprising operating the client unit, wherein the operating of the client unit comprises:

initiating a configuration of the service provided to the user by providing the user-related data to the lookup unit; and

receiving from the lookup unit the configuration related data for the service.

11. The method according to claim 9, the method further comprising operating the clearing unit, wherein the operating of the clearing unit comprises:

receiving the second fingerprint from the lookup unit of the network system;

selecting the identification data associated with the user-specific data by using the second fingerprint of the user-specific data;

providing the identification data to the lookup unit.

12. The method according to claim 9, the method further comprising operating the provider unit, wherein the operating of the provider unit comprises:

receiving the third fingerprint from the lookup unit;

verifying validity of the user-specific data by using the third fingerprint and/or retrieving the configuration related data associated with the user-specific data; and

optionally providing a status information and/or the configuration related data to the lookup unit, the status information being indicative of a validity of the user-specific data corresponding to the third fingerprint.

13. A method of operating a lookup unit of a network system which is capable of separating a retrieval of configuration related data for a user-specific service and an identification of a corresponding user, the method comprising:

receiving user-related data from a client unit, wherein the user-related data is based on user-specific data, the user-specific data is associated with a user and unambiguously identifying the user, the user-related data allows for unambiguous identification of the user-specific data, and the user-related data is a first fingerprint of the user-specific data;

transmitting a second fingerprint of the user-specific data to a clearing unit having a storage device, the clearing unit being different from the lookup unit, the second fingerprint being based on the first fingerprint of the user-specific data, the second fingerprint allowing for unambiguous identification of the user-specific data;

retrieving identification data from the clearing unit by using the second fingerprint, the identification data unambiguously identifying a provider unit associated with the user-specific data, wherein the clearing unit selects and retrieves from the storage device the identification data by using the second fingerprint of the user-specific data;

retrieving the configuration related data from the provider unit for a service provided to the user by using the identification data, the configuration related data including address information of the provider unit; and

transmitting the configuration related data to the client unit, wherein the client unit uses the configuration related data to establish connection to the provider unit;

the lookup unit, the clearing unit, the provider unit, and the client unit each being implemented by respective processor device having at least one processor.

14. A non-transitory computer readable medium containing instructions for, when executed by a processor device, controlling a method of operating a network system capable of separating a retrieval of configuration related data for a user-specific service and an identification of a corresponding user, the network system comprising a lookup unit, a clearing unit having a storage device, a provider unit, and a client unit, the clearing unit and the lookup unit being different from each other, the method comprising:

transmitting user-related data from the client unit to the lookup unit, the user-related data being based on user-specific data, the user-specific data being associated with a user and unambiguously identifying the user, the user-related data allowing for unambiguous identification of the user-specific data, and the user-related data being a first fingerprint of the user-specific data;

operating the lookup unit so as to transmit a second fingerprint of the user-specific data to the clearing unit, the second fingerprint being based on the first fingerprint of the user-specific data, the second fingerprint allowing for unambiguous identification of the user-specific data;

operating the lookup unit so as to retrieve identification data from the clearing unit by using the second fingerprint, the identification data unambiguously identifying the provider unit associated with the user-specific data;

operating the clearing unit so as to select and retrieve from the storage device the identification data by using the second fingerprint of the user-specific data;

transmitting the identification data from the clearing unit to the lookup unit;

operating the lookup unit so as to retrieve configuration related data from the provider unit for a service provided to the user by using the identification data, the configuration related data including address information of the provider unit; and

operating the lookup unit so as to transmit the configuration related data to the client unit;

operating the client unit so as to use the configuration related data to establish connection to the provider unit;

the lookup unit, the clearing unit, the provider unit, and the client unit each being implemented by respective processor device having at least one processor.

15. A non-transitory computer readable medium according to claim 14, the instructions being further configured for, when executed by a processor device, controlling operating the client unit, wherein the operating of the client unit comprises:

initiating a configuration of the service provided to the user by providing the user-related data to the lookup unit; and

receiving from the lookup unit the configuration related data for the service.

16. The non-transitory computer readable medium according to claim 14, the instructions being further configured for, when executed by a processor device, controlling operating the clearing unit, wherein the operating of the clearing unit comprises:

receiving the second fingerprint from the lookup unit of the network system;

selecting the identification data associated with the user-specific data by using the second fingerprint of the user-specific data;

providing the identification data to the lookup unit.

17. The non-transitory computer readable medium according to claim 14, the instructions being further configured for, when executed by a processor device, controlling operating the provider unit, wherein the operating of the provider unit comprises:

receiving the third fingerprint from the lookup unit;

verifying validity of the user-specific data by using the third fingerprint and/or retrieving the configuration related data associated with the user-specific data; and

optionally providing a status information and/or the configuration related data to the lookup unit, the status information being indicative of a validity of the user-specific data corresponding to the third fingerprint.

18. A non-transitory computer readable medium containing instructions for, when executed by a processor device, controlling a method of operating a lookup unit of a network system which is capable of separating a retrieval of configuration related data for a user-specific service and an identification of a corresponding user, the method comprising:

receiving user-related data from a client unit, wherein the user-related data is based on user-specific data, the user-specific data is associated with a user and unambiguously identifying the user, the user-related data allows for unambiguous identification of the user-specific data, and the user-related data is a first fingerprint of the user-specific data;

transmitting a second fingerprint of the user-specific data to a clearing unit having a storage device, the clearing unit being different from the lookup unit, the second fingerprint being based on the first fingerprint of the user-specific data, the second fingerprint allowing for unambiguous identification of the user-specific data;

retrieving identification data from the clearing unit by using the second fingerprint, the identification data unambiguous identifying a provider unit associated with the user-specific data, wherein the clearing unit selects and retrieves from the storage device the identification data by using the second fingerprint of the user-specific data;

retrieving the configuration related data from the provider unit for a service provided to the user by using the identification data, the configuration related data including address information of the provider unit; and

transmitting the configuration related data to the client unit, wherein the client unit uses the configuration related data to establish connection to the provider unit;

the lookup unit, the clearing unit, the provider unit, and the client unit each being implemented by respective processor device having at least one processor.