System, method, and computer program product for end-user self-authentication

• US 20010019559A1
• Filed: 02/16/2001
• Published: 09/06/2001
• Est. Priority Date: 02/16/2001
• Status: Abandoned Application

• Current Assignee: Gemini Networks, Inc.
• Original Assignee: Gemini Networks, Inc.
• Inventors: Handler, Michael Brandt, Dobes, Ronald Keith
• Application Number:
  US09/784,075
• Publication Number:
  US 20010019559A1
• Time in Patent Office: Days
• US Class Current: 370/468
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A system, method, and computer program product for self-authenticating an end-user of one of multiple service providers, each of the service providers having end-users connected to a common network. A digital repository is populated with information regarding the service providers, the end-users and service description information for the end-users. New devices are detected as they are connected to the high-speed network, and are allocated a limited amount of bandwidth. The end-user is given access to an authentication application. Based on the information entered by the end-user, the database is queried to determine a level of service purchased by the end-user from their service provider. The end-user is then allocated the appropriate level of service.

Claims

1. A system for self-authenticating a first end-user connected to a common network and a second end-user connected to the common network, the first end-user being a customer of a first service provider of multiple service providers and the second end-user being a customer of a second service provider of multiple service providers, comprising:

a digital repository populated with

service provider entries including information about the first service provider and other information about the second service provider,

end-user entries including information about the first end-user and other information about the second end-user, each of the end-user entries being associated with at least one service provider entry, and

service description entries including information about a level of service purchased by an end-user from a service provider, each of the service description entries being associated with an end-user entry;

a processor; and

a computer readable medium encoded with processor readable instructions that when executed by the processor implement,

a new device detection mechanism configured to detect a new device connected to the common network, the new device being associated with one of the first end-user and the second end-user,

a bandwidth allocation mechanism configured to allocate limited bandwidth on the common network to the new device and to provide access to an end-user authentication mechanism,

the end-user authentication mechanism configured to obtain identification information from the one of the first end-user and the second end-user,

a service determination mechanism configured to query the digital repository to determine the level of service purchased by the one of the first end-user and the second end-user from a respective one of the multiple service providers based on information obtained by the end-user authentication mechanism,

a service allocation mechanism configured to provide the level of service purchased to the one of the first end-user and the second end-user authenticated by the end-user authentication mechanism.

2. The system of

claim 1

, wherein the digital repository comprises a database.

3. The system of

claim 1

, wherein the common network comprises a network dedicated to broadband data transport services.

4. The system of

claim 3

, wherein the data transport services comprise at least one of Internet access, voice over IP, and video on demand.

5. The system of

claim 1

, wherein the common network comprises an open access network.

6. The system of

claim 1

, wherein at least a portion of the common network comprises an Internet protocol network.

7. The system of

claim 1

, wherein at least a portion of the common network comprises a hybrid fiber optic coaxial network.

8. The system of

claim 1

, wherein at least one of the multiple service providers comprises an Internet service provider.

9. The system of

claim 1

, wherein at least a portion of the common network comprises a Data Over Cable Service Interface Specification network.

10. The system of

claim 1

, wherein at least a portion of the common network comprises a European Data Over Cable Service Interface Specification network.

11. The system of

claim 1

, wherein the bandwidth allocation mechanism is further configured to direct an end-user to the end-user authentication mechanism using a wildcard Domain Name System technique to resolve an end-user Domain Name System address resolution request to an IP address of the end-user authentication mechanism.

12. The system of

claim 1

, wherein the bandwidth allocation mechanism is further configured to use a policy-based routing to direct an end-user to the end-user authentication mechanism.

13. The system of

claim 1

, wherein the bandwidth allocation mechanism is further configured to use at least one of a Layer Two Tunneling Protocol and policy-based routing to direct an end-user to the end-user authentication mechanism.

14. The system of

claim 1

wherein the bandwidth allocation mechanism is further configured to set IP address filters at an end-user device to block addresses other than an IP address of the end-user authentication mechanism.

15. A method for self-authenticating a first end-user connected to a common network and a second end-user connected to the common network, the first end-user being a customer of a first service provider of multiple service providers and the second end-user being a customer of a second service provider of multiple service providers, comprising:

populating a digital repository with

service provider entries including information about the first service provider and other information about the second service provider,

end-user entries including information about the first end-user and other information about the second end-user, each of the end-user entries being associated with at least one service provider entry, and

service description entries including information about a level of service purchased by an end-user, each of the service description entries being associated with an end-user entry;

detecting a new device connected to the common network, the new device being associated with one of the first end-user and the second end-user;

allocating limited bandwidth on the common network to the new device to provide access to an end-user authentication mechanism;

authenticating the one of the first end-user and the second end-user via the end-user authentication mechanism;

querying the digital repository to determine the level of service purchased by the one of the first end-user and the second end-user from a respective one of the multiple service providers based on information obtained in the obtaining step; and

providing the level of service purchased to the one of the first end-user and the second end-user authenticated in the authenticating step.

16. The method of

claim 15

, wherein the common network comprises a network dedicated to broadband data transport services.

17. The method of

claim 16

, wherein the data transport services comprise at least one of Internet access, voice over IP, and video on demand.

18. The method of

claim 15

, wherein the common network comprises an open access network.

19. The method of

claim 15

, wherein at least a portion of the common network comprises an Internet protocol network.

20. The method of

claim 15

, wherein at least a portion of the common network comprises a hybrid fiber optic coaxial network.

21. The method of

claim 15

, wherein at least one of the multiple service providers comprises an Internet service provider.

22. The method of

claim 15

, wherein at least a portion of the common network comprises a Data Over Cable Service Interface Specification network.

23. The method of

claim 15

, wherein at least a portion of the common network comprises a European Data Over Cable Service Interface Specification network.

24. A system for self-authenticating a first end-user connected to a common network and a second end-user connected to the common network, the first end-user being a customer of a first service provider of multiple service providers and the second end-user being a customer of a second service provider of multiple service providers, comprising:

means for populating a digital repository with

service provider entries including information about the first service provider and other information about the second service provider,

end-user entries including information about the first end-user and other information about the second end-user, each of the end-user entries being associated with at least one service provider entry, and

service description entries including information about a level of service purchased by an end-user, each of the service description entries being associated with an end-user entry;

means for detecting a new device connected to the common network, the new device being associated with one of the first end-user and the second end-user;

means for allocating limited bandwidth on the common network to the new device and providing access to an end-user authenticating means;

means for authenticating the one of the first end-user and the second end;

means for querying the digital repository to determine the level of service purchased by the one of the first end-user and the second end-user from a respective one of the multiple service providers based on information obtained by the means for authenticating; and

means for providing the level of service purchased to the one of the first end-user and the second end-user authenticated by the means for authenticating.

25. A computer program product, comprising:

a computer storage medium; and

a computer program code mechanism embedded in the computer storage medium for causing a processor to self-authenticate a first end-user connected to a common network and a second end-user connected to the common network, the first end-user being a customer of a first service provider of multiple service providers and the second end-user being a customer of a second service provider of multiple service providers, the computer program code mechanism having,

a first computer code device configured to maintain service provider information, end-user information, and service description information in a database,

the service provider information including information about the first service provider and other information about the second service provider,

the end-user information including information about the first end-user and other information about the second end-user and including an association between each end-user and at least one service providers, and

the service description information including information about a level of service purchased by an end-user, and an association with an end-user;

a second computer code device configured to detect a new device connected to the common network, the new device being associated with one of the first end-user and the second end-user;

a third computer code device configured to allocate limited bandwidth on the common network to the new device and to provide access to a fourth computer code device;

the fourth computer code device configured to authenticate an end-user based on identification information obtained from the one of the first end-user and the second end-user;

a fifth computer code device configured to query the database to determine the level of service purchased by the one of the first end-user and the second end-user from a respective one of the multiple service providers based on information obtained by the fourth computer code device; and

a sixth computer code device configured to provide the level of service purchased to the one of the first end-user and the second end-user.

26. The computer program product of

claim 25

, wherein the common network comprises a network dedicated to broadband data transport services.

27. The computer program product of

claim 26

, wherein the data transport services comprise at least one of Internet access, voice over IP, and video on demand.

28. The computer program product of

claim 25

, wherein the common network comprises an open access network.

29. The computer program product of

claim 25

, wherein at least a portion of the common network comprises an Internet protocol network.

30. The computer program product of

claim 25

, wherein at least a portion of the common network as a hybrid fiber optic coaxial network.

31. The computer program product of

claim 25

, wherein at least one of the multiple service providers comprises an Internet service provider.

32. The computer program product of

claim 25

, wherein at least a portion of the common network comprises a Data Over Cable Service Interface Specification network.

33. The computer program product of

claim 25

, wherein at least a portion of the common network comprises a European Data Over Cable Service Interface Specification network.

34. The computer program product of

claim 25

, wherein the third computer code device is further configured to direct an end-user to the end-user authentication mechanism using a wildcard Domain Name System technique to resolve an end-user Domain Name System address resolution request to an IP address of the fourth computer code device.

35. The computer program product of

claim 25

, wherein the third computer code device is further configured to use policy-based routing to direct an end-user to the fourth computer code device.

36. The computer program product of

claim 25

, wherein the third computer code device is further configured to use at least one of a Layer Two Tunneling Protocol and policy-based routing to direct an end-user to the fourth computer code device.

37. The computer program product of

claim 25

wherein the third computer code device is further configured to set IP address filters at an end-user device to block addresses other than an IP address of the fourth computer code device.

38. A method for self-authenticating a first end-user connected to a common network and a second end-user connected to the common network, the first end-user being a customer of a first service provider of multiple service providers and the second end-user being a customer of a second service provider of multiple service providers, comprising the steps of:

detecting a new device connected to the common network;

granting a limited bandwidth on the common network to the new device;

authenticating one of the first end-user and the second end-user of the new device through an application accessible over the limited bandwidth;

determining a level of service purchased from a respective one of the first service provider and the second service provider by the one of the first end-user and the second end-user identified in the authenticating step; and

providing the level of service purchased on the common network to the one of the first end-user and the second end-user.