Automatic network connection using a smart card

• US 20010008014A1
• Filed: 01/26/2001
• Published: 07/12/2001
• Est. Priority Date: 07/28/1998
• Status: Abandoned Application

• Current Assignee: Blackcoat Limited
• Original Assignee: Blackcoat Limited
• Inventors: Farrell, Brendan, OʼDonnell, Patrick
• Application Number:
  US09/769,351
• Publication Number:
  US 20010008014A1
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06F 1/1616 with folding flat displays, e.g. laptop computers or notebooks having a clamshell configuration, with body parts pivoting to an open position around an axis parallel to the plane they define in closed position
• CPC Class Codes: G06F 1/1643 the display being associated to a digitizer, e.g. laptops that can be used as penpads details related to the relative motion of the display enclosure with respect to the body enclosure, e.g. to move between laptop and tablet PC configuration G06F1/1615
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2200/1632 Pen holder integrated in the computer
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A portable communication device (1) automatically accesses a network server such as an ISP upon insertion of a card (30). The card (30) stores user-specific data setting conditions for controlled access to the server. This allows different users to have controlled access according to their situation. For example a child may use a card for access confined to children'"'"'s Web sites. The device (1) updates the card and encrypts the user data. Proxy servers are used to control access.

Claims

1. A communication apparatus comprising a processor connected to a memory, to a user interface, and to a communication interface, characterised in that,

the apparatus further comprises a card reader connected to the processor, and

the processor comprises means for accessing a network server only by initially reading user data setting user-specific controlled access conditions from a card inserted in the card reader.

2. An apparatus as claimed in

claim 1

, wherein the processor comprises means for modifying displayed user options according to the user data.

3. An apparatus as claimed in

claim 2

, wherein said modifying means comprises means for disabling a browser program display field for input of server addresses.

4. An apparatus as claimed in any preceding claim, wherein the processor accessing means comprises means for reading a proxy server address in the user data and for accessing the proxy server.

5. An apparatus as claimed in

claim 4

, wherein the processor accessing means comprises means for accessing a closed proxy server providing a confined launch site for a communications session.

6. An apparatus as claimed in claims 4 or 5, wherein the processor accessing means comprises means for accessing an open proxy server providing a confined launch site and confined linked sites.

7. An apparatus as claimed in

claim 6

, wherein the processor comprises means for updating a user-specific access list on a remote access server, and for reading from said list to determine allowed links for the proxy server.

8. An apparatus as claimed in any preceding claim, wherein the processor comprises means for storing updated user data on the card according to a communication session

9. An apparatus as claimed in

claim 8

, wherein the processor comprises means for generating from the user data a temporary access file for a particular access session.

10. An apparatus as claimed in

claim 9

, wherein the processor comprises means for generating a dialler configuration file including address data for a remote network server.

11. An apparatus as claimed in claims 9 or 10, wherein the processor comprises means for generating a browser configuration file including browser display control parameters to control addressing inputs.

12. An apparatus as claimed in any preceding claim, wherein the processor comprises means for encrypting user data stored on a card.

13. An apparatus as claimed in

claim 12

, wherein said encryption means comprises means for prompting user input of a password and using a received password as an encryption key.

14. An apparatus as claimed in claims 12 or 13, wherein the processor comprises means for reading a status flag on a card indicating if the card is being used for the first time, and for prompting user input of a password if the card is being used for the first time.

15. An apparatus as claimed in any preceding claim, wherein the processor comprises means for allowing user selection of a set of user data for a card storing a plurality of sets of user data.

16. An apparatus as claimed in

claim 15

, wherein said selection means comprises a plurality of function keys, each associated with a set of user data.

17. An apparatus as claimed in

claim 16

, wherein the function keys are coded by indicia on the keys corresponding to indicia marked on a card.

18. An apparatus as claimed in

claim 17

, wherein the function keys are colour coded.

19. An apparatus as claimed in any preceding claim, wherein the processor comprises means for operating without a fixed disk.

20. An apparatus as claimed in any preceding claim, wherein the apparatus is portable.

21. An apparatus as claimed in any preceding claim, wherein the user interface comprises a touch screen.

22. An apparatus as claimed in any preceding claim, wherein the communication interface comprises a PCMCIA modem.

24. A communication system comprising a communication apparatus as claimed in any preceding claim and a card storing user data setting controlled access conditions.

23. A communication apparatus substantially as described with reference to the accompanying drawings

25. A machine-readable card storing user data setting controlled access conditions for user-specific network server access.