Method for identifying internet users

• US 20030033375A1
• Filed: 09/13/2002
• Published: 02/13/2003
• Est. Priority Date: 09/05/2000
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Unger, Stefan, Mitreuter, Ulrich, Zygan-Maus, Renate
• Application Number:
  US10/221,570
• Publication Number:
  US 20030033375A1
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

New Internet-based services require the Internet user to be identified to a service provider. According to the invention, this requirement is met by the Internet access provider providing the IP-messages of the client, if desired, with data identifying the IP-packets of the Internet user. The Internet access provider guarantees the integrity of this data with cryptographic means.

Claims

1. Method for identifying Internet users according to which an Internet user is identified or authenticated at the Internet access point in the course of an access check when using the Internet access service of an Internet Service Provider with whom the Internet user maintains a business relation. This method is characterized by the fact that Internet user identification information is added to an Internet user'"'"'s IP message after it successfully passed the access check of the Internet access point, and prior to it being sent on, whereby the integrity of this information is guaranteed with cryptographic means.

2. Method according to claim 1, characterized by the fact that Internet user identification information is added only when a certain requirement is met.

3. Method according to claim 2, characterized by the fact that the Internet user provides the stated requirement.

4. Method according to claim 1 or 2, characterized by the fact that the requirement in question is checked at the access point, where to this end, information is taken from the IP message and/or a database.

5. Method according to one of the claims 1 through 4, characterized by the fact that the method is realized on the Internet protocol level.

6. Method according to one of the claims 1 through 4, characterized by the fact that the method is realized on the transport protocol level.

7. Method according to one of the claims 1 through 4, characterized by the fact that the method is realized on the user protocol level.

8. Method according to one of the claims 1 through 7, characterized by the fact that the integrity of the Internet user identification information is guaranteed with a digital signature.

9. Internet access point which

identifies or authenticates an Internet user in the course of the Internet access service,

adds Internet user identification information to an Internet user'"'"'s IP message after the Internet access service has successfully been accomplished and prior to the IP message being sent on, whereby the integrity of this information is guaranteed with cryptographic means.

10. Internet access point according to claim 9, characterized by the fact that it adds the Internet user identification information to the IP message only if a certain requirement is met.

11. Internet access point according to claim 10, characterized by the fact that it checks the stated requirement with the help of information obtained from either the IP message and/or a database.