Automatic network user identification

• US 20020007411A1
• Filed: 01/31/2001
• Published: 01/17/2002
• Est. Priority Date: 08/10/1998
• Status: Abandoned Application

• Current Assignee: Trivnet Ltd. (Thales SA)
• Original Assignee: Trivnet Ltd. (Thales SA)
• Inventors: Wilf, Saar, Shaked, Shvat, Tal, Or, Tarsi, Yuval
• Application Number:
  US09/772,950
• Publication Number:
  US 20020007411A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/16 Payments settled via telecommunication systems
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 69/327 in the session layer [OSI layer 5]
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A system and a method for automatically acquiring the identity of a user requesting service from a service provider is provided. The method includes the service provider sending an identification request to a network access provider (NAP), the NAP including a NAP identification module and an access system in communication with the NAP identification module and the NAP ID module extracting information associated with the user, verifying the network address of the user and forwarding the information associated with the user to the service provider. The NAP identification module includes a controller and an address extractor in communication with the controller.

Claims

1. A method for automatically acquiring the identity of an user requesting service from a service provider, said method comprising:

said service provider sending an identification request to a network access provider (NAP), said NAP comprising a NAP identification (ID) module and an access system in communication with said NAP identification module; and

said NAP ID module extracting information associated with said user, verifying the network address of said user and forwarding said information associated with said user to said service provider.

2. The method according to claim 1, wherein said step of sending an identification (ID) request comprises sending the ID request via at least one identification switch.

3. The method according to claim 1, wherein said step of extracting information comprises the steps of:

verifying whether the network address of the user is included in the ID request; and

if the network address of the user is not included, extracting the network address when the user connects to the NAP.

4. The method according to claim 3, wherein said step of extracting information comprises the step of:

retrieving data from a group of databases including an online session database in communication with said NAP and a user information database in communication with said NAP.

5. The method according to claim 3, wherein said step of extracting the network address comprises the steps of:

detecting a request from the user of a specific URL, said specific URL being identifiable by a plug-in installed in the proxy server of said NAP; and

said plug-in reporting the real network address of the user.

6. The method according to claim 3, wherein said step of extracting the network address comprises the steps of:

detecting a request from the user of a specific URL, said specific URL being identifiable by a network sniffer installed between the user and the proxy server of said NAP; and

said sniffer reporting the real network address of the user.

7. The method according to claim 3, wherein said step of extracting the network address comprises at least one of the steps of:

instructing the user to connect to the address extraction module of said NAP via an alternative service or port not associated with the proxy server;

opening a direct connection to said address extraction module; and

by automatically configuring the proxy settings.

8. The method according to claim 1, wherein said step of forwarding comprises the step of:

reporting said information associated with said user to said service provider;

9. The method according to claim 1, wherein said step of forwarding comprises the step of:

verifying information items provided in the identification request; and

forwards a match score describing the similarity between the information associated with said user and the information items provided in the identification request.

10. The method according to claim 1, wherein said step of forwarding comprises the step of:

sending a virtual ID for said user to said service provider.

11. The method according to claim 1, wherein said step of forwarding comprises the step of:

sending information associated with said user in a previous request to said service provider.

12. The method according to claim 2, further comprising the steps of:

determining the identity of the NAP servicing said user;

forwarding said identification request to said NAP identification module;

determining whether said identification request includes the network address of said user; and

if said identification request does not include the network address of said user, extracting the network address when the user connects to the NAP.

13. The method according to claim 12, wherein said step of determining the identity of the NAP comprises the steps of:

maintaining a look-up table of network addresses associated with a plurality of NAPs; and

determining the identity of the NAP by reference to said look-up table.

14. The method according to claim 13, wherein said look-up table is updated manually whenever network address assignments change.

15. The method according to claim 13, wherein said look-up table is updated automatically from said NAP identification module based on information reported from said access system.

16. The method according to claim 13, wherein said look-up table is constructed from existing network address assignment databases.

17. A method for automatically identifying an user requesting service from a service provider, said method comprising:

said service provider determining the veracity of the network address reported by the user;

if said network address is determined to be trusted,

said service provider including said network address in an identification request and sending said identification request to a network access provider (NAP), said NAP comprising a NAP identification module; and

providing service in accordance with said service request;

or

if the network address is determined not to be trusted;

said service provider sending an identification request to a network access provider (NAP) for verifying the network address of said user; and

forwarding said information associated with said user to said service provider.

18. The method according to claim 17, wherein said step of sending an identification (ID) request comprises sending the ID request via at least one identification switch.

19. The method according to claim 18, further comprising the steps of:

determining the identity of the NAP servicing said user;

forwarding said identification request to the NAP identification module associated with said identified NAP;

determining whether said identification request includes the network address of said user; and

if said identification request does not include the network address of said user, extracting the network address when the user connects to the NAP.

20. The method according to claim 19, wherein said step of forwarding comprises the steps of:

configuring at least one network appliance to route specific requests to a specified NAP; and

the NAP identification module associated with said specified NAP identifying said user.

21. The method according to claim 20, wherein said at least one network appliance comprises one of a group including an HTTP proxy and a WAP Gateway.

22. A system for automatically acquiring the identity of the user of an anonymous network, said system comprising:

a service provider in communication with said user; and

at least one network access provider (NAP) in communication with said service provider and said user;

said at least one NAP comprising;

a NAP identification module comprising;

a controller; and

an address extractor in communication with said controller; and

an access system in communication with said address extractor.

23. The system according to claim 22, further comprising at least one online session database in communication with said controller and said access system, said at least one online session database containing at least information associating said user with the user'"'"'s network address.

24. The system according to claim 22, wherein said at least one NAP is in communication with said service provider via at least one identification switch.

25. The system according to claim 22, further comprising at least one user information database, in communication with said controller.

26. The system according to claim 25, wherein said at least one user information database comprises at least one of a group of databases containing data including personal details related to said user, billing information, information about past user logins, and a reverse telephone directory.