Network connection control method and connection control system

• US 20010037466A1
• Filed: 04/27/2001
• Published: 11/01/2001
• Est. Priority Date: 04/28/2000
• Status: Abandoned Application

• Current Assignee: Business Network Telecom Corporation, Konami Corporation
• Original Assignee: Konami Corporation
• Inventors: Ohtsuki, Munenori, Fukutake, Shigeru
• Application Number:
  US09/844,049
• Publication Number:
  US 20010037466A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

The present invention is to provide a network connection control method capable of minimizing a cost when service is provided via Internet. User authentication information sent together with an Internet connection request from a user terminal 5 relevant to a NAS (Network Access Server) 6 managed by an access provider, is transferred to an authentication server 7 managed by the provider. When the user authentication information meets a predetermined condition, the user authentication information is transferred to an authentication server 10 managed by a service provider which is different from the provider. Then, user authentication is executed, referring to a database 15 associated with the authentication server 10, and the user authentication result is returned to the authentication server 7. The authentication server 7 notifies the authentication result to the NAS 6 from the authentication server 10. The NAS 6 controls whether the user terminal 5 enabled or disables connection to Internet 1 based on the result of the notified user authentication.

Claims

1. A network connection control method, comprising the processes of:

transferring from a network access server to a first authentication server managed by a first enterprise, user authentication information sent together with an Internet connection request from a user terminal to the network access server managed by a first enterprise providing Internet connection service in association with the network access server;

further transferring the user authentication information, when the user authentication information meets a predetermined condition, from the first authentication server via the Internet to a second authentication server managed by a second enterprise that is different from the first enterprise;

executing user authentication by the second authentication server, referring to a database associated with the second authentication server;

returning the user authentication result to the first authentication server;

notifying, by the first authentication server, the authentication result from the second authentication server to the network access server; and

controlling, by the network access server, whether Internet connection of the user terminal is enabled or disabled based on the result of the notified user authentication.

2. The connection control method according to

claim 1

, wherein, the user authentication information contains an account code for specifying a user, and when the account code contains a predetermined code, the first authentication server delivers the user authentication information to the second authentication server

3. The connection control method according to

claim 2

, comprising a server for the second enterprise to provide predetermined service over the Internet, wherein the account code containing the predetermined code is set as an account code for utilizing the predetermined service provided by the second enterprise over the Internet.

4. The connection control method according to

claim 1

, wherein a lobby server for providing a chance for searching a negotiation partner to a plurality of users through the Internet is included as a server for the second enterprise to provide predetermined service over the Internet.

5. The connection control method according to

claim 1

, comprising a server for the second enterprise to provide predetermined service over the Internet, wherein a history in which the user has connected to the Internet via the network access server is detected by a first detecting device managed by the first enterprise, a history in which the user has utilized the service provided by the server of the second enterprise is detected by a second detecting device managed by the second enterprise, and an access charge invoiced to the user is determined based on the detection result of the first and second detecting devices by an accounting information generating device managed by the second enterprise.

6. The connection control method according to

claim 5

, wherein, when a predetermined discount condition is met, an access charge to be actually invoiced to the user is discounted more than that assuming that the discount condition is not met.

7. The connection control method according to

claim 6

, wherein the predetermined discount condition is associated with utilization of the user relevant to the service provided by the second enterprise via the server thereof.

8. The connection control method according to

claim 7

, wherein, in the case where the service provider executes product selling or provision of charged service as service provided via the server thereof, and a payment for purchasing a product or a charge for accessing the charged service exceeds a predetermined amount of money, it is judged that the predetermined discount condition is met.

9. The connection control method according to

claim 7

, the service provider provides a charged game as service provided via the server thereof and issues to the user a point according to a play state relevant to the game, and based on the point, it is judged whether or not the predetermined discount condition is met.

10. A network connection control system comprising:

a network access server managed by a first enterprise that provides Internet connection service;

a first authentication server managed by the first enterprise in association with the network access server; and

a second authentication server managed by a second enterprise that is different from the first enterprise, the second authentication server being connected to the first authentication server via Internet,

wherein user authentication information sent together with an Internet connection request from a user terminal to the network access server is transferred from the network access server to the first authentication server;

when the user authentication information meets a predetermined condition, the user authentication information is further transferred to a second authentication server from the first authentication server via the Internet;

user authentication is executed by the second authentication server, referring to a database associated with the second authentication server;

the user authentication result is returned to the first authentication server;

the first authentication server notifies the authentication result from the second authentication server to the network access server; and

the network access server controls whether Internet connection of the user terminal is enabled or disabled based on the result of the notified user authentication.

11. The network connection control system according to

claim 10

, wherein the user authentication information contains an account code for specifying the user, and the first authentication server delivers the user authentication information to the second authentication server when the account code contains a predetermined code.

12. The network connection control system according to

claim 11

, comprising a server for the second enterprise to provide predetermined service over the Internet, wherein the account code containing the predetermined code is set as an account code for utilizing the predetermined service provided by the second enterprise over the Internet.

13. The network connection control system according to

claim 10

, wherein a lobby server for providing a chance for searching a negotiation partner to a plurality of users through the Internet is included as a server for the second enterprise to provide predetermined service over the Internet.

14. The network connection control system according to

claim 10

, comprising:

a server for the second enterprise to provide predetermined service over the Internet;

a first detecting device managed by the first enterprise, for detecting a history in which the user has connected to the Internet via the network access server;

a second detecting device managed by the second enterprise, for detecting a history in which the user has utilized the service provided by the server of the second enterprise; and

an accounting information generating device managed by the second enterprise, for determining an access charge invoiced to the user based on the detection result of the first and second detecting devices.

15. The network connection control system according to

claim 14

, wherein, when a predetermined discount condition is met, the accounting information generating device discounts an access charge actually invoiced to the user more than that assuming that the discount condition is not met.

16. The network connection control system according to

claim 15

, wherein the predetermined discount condition is associated with utilization of the user relevant to the service provided by the second enterprise via the server thereof.

17. The network connection control system according to

claim 16

, wherein, in the case where the service provider executes product selling or provision of charged service as service provided via the server thereof, and a payment for purchasing the product or a charge for accessing the charged service exceeds a predetermined amount of money, the accounting information generating device judges that the predetermined discount condition is met.

18. The network connection control system according to

claim 16

, wherein, when the service provider provides a charged game as service provided via the server thereof, and issues to the user a point according to a play state relevant to the game, and based on the point, the accounting information generating device judges whether or not the predetermined discount condition is met.