Local private authentication for semi-public LAN

• US 20040054905A1
• Filed: 09/04/2002
• Published: 03/18/2004
• Est. Priority Date: 09/04/2002
• Status: Abandoned Application

• Current Assignee: Scot A. Reader
• Original Assignee: Scot A. Reader
• Inventors: Reader, Scot A.
• Application Number:
  US10/234,682
• Publication Number:
  US 20040054905A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2872 Termination of subscriber connections
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A local private authentication system for a semi-public LAN is provided through introduction local to the semi-public LAN of authentication servers dedicated to foreign provider domains. Such a local private authentication system authenticates members of foreign provider domains solely with local message exchanges, thereby reducing authentication delays. Such a local private authentication service further authenticates members of foreign provider domains with authentication servers dedicated to foreign provider domains, thereby protecting member privacy.

Claims

1. An authentication system for a semi-public LAN, comprising:

a first node being used by a member of a foreign provider domain;

a second node communicating with the first node over a LAN link; and

an authentication server communicating with the second node,

wherein the member of the foreign provider domain is authenticated in an authentication session involving the first node, the second node and the authentication server and wherein the authentication session is conducted solely with local message exchanges.

2. The system of claim 1, wherein the authentication server is dedicated to the foreign provider domain.

3. The system of claim 1, wherein the authentication server is determined from a plurality of authentication servers In response to provider information supplied by the first node.

5. The system of claim 1, wherein the authentication session is conducted solely with local message exchanges.

6. The system of claim 1, wherein local authentication server is determined from a plurality of local authentication servers in response to provider domain supplied by the first node.

4. An authentication system for a semi-public LAN, comprising:

a first node being used by a member of a foreign provider domain;

a second node communicating with the first node over a LAN link; and

a local authentication server communicating with the second node,

wherein the member of the foreign provider domain is authenticated in an authentication session involving the first node, the second node and the local authentication server and wherein the local authentication server is dedicated to the foreign provider domain.

7. An authentication system for a semi-public LAN, comprising:

a first node;

a second node communicating with the first node over a LAN link; and

a plurality of local authentication servers Interconnected to the second node, wherein in response to provider information supplied by the first node, a third node determines one of the plurality of local authentication servers for conducting an authentication session with the first node.

8. The system of claim 7, wherein the authentication session is conducted solely with local message exchanges.

9. The system of claim 7, wherein the first node is being used by a member of a foreign provider domain.

10. The system of claim 9, wherein the determined one of the plurality of local authentication servers is dedicated to the foreign provider domain.

11. The system of claim 9, wherein the member Is authenticated in the authentication session.

12. An authentication node, comprising:

a plurality of authentication servers; and

a message distribution system for forwarding an authentication session message to one of the plurality of authentication servers in response to information in the authentication session message.

13. The node of claim 12, wherein the Information is provider information.

14. The node of claim 12, wherein the Information is authentication session information.

15. The node of claim 12, wherein the plurality of authentication servers are dedicated to a respective plurality of foreign provider domains.

16. The node of claim 15, wherein the plurality of authentication servers are updated by a respective second plurality of authentication servers dedicated to the respective plurality of foreign provider domains.

17. The node of claim 12, wherein the plurality of authentication servers are local.

18. The node of claim 17, wherein the plurality of authentication servers are updated by a respective plurality of remote authentication servers.