Access authentication technology for wide area network

• US 20040076120A1
• Filed: 04/29/2003
• Published: 04/22/2004
• Est. Priority Date: 10/18/2002
• Status: Abandoned Application

• Current Assignee: MELCO, Inc. (Melco Holdings Incorporated)
• Original Assignee: MELCO, Inc. (Melco Holdings Incorporated)
• Inventors: Ishidoshiro, Takashi
• Application Number:
  US10/426,427
• Publication Number:
  US 20040076120A1
• Time in Patent Office: Days
• US Class Current: 370/252
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol
• CPC Class Codes: H04W 8/00 Network data management

Abstract

To provide access authentication technology that affords improved stability of an access point system with regard to access authentication of terminal devices.

In an access point system 10, a connection device 20a receives from a terminal device 30 identifying information for the terminal device 30, registers authentication information that includes identifying information relating to terminal device 30, and transmits to terminal device 30 identifying information for connection device 20a. Another connection device 20b receives from terminal device 30 identifying information for connection device 20a and for terminal device 30, establishes a connection to connection device 20a via the Internet on the basis of the identifying information for connection device 20a, transmits the identifying information for terminal device 30 to connection device 20a via this connection, and provides an access point to terminal device 30 on the basis of authentication of terminal device 30 performed by connection device 20a.

Claims

1. A wide area network system comprising:

a plurality of connection devices connected to a wide area network and exchanging data via said wide area network; and

terminal devices that connect to any of said connection devices through wireless communication,

wherein said each individual connection device comprises;

authentication information archiving means that archives authentication information for a plurality of said terminal devices, said data including identifying data identifying said terminal devices; and

authentication means that, when receiving from a terminal device requesting connection to said wide area network, identifying information that identifies said terminal, and when no identifying information for said terminal device requesting connection is present in the authentication information archiving means in said connection device, transmits authentication information for said terminal device to external connection device via said wide area network, and performs access authentication for said terminal device.

2. An access authentication system performing access authentication by verifying registered authentication information, the system comprising:

a terminal device requesting to access the wide area network,

connection devices for providing said terminal devices with access points to said wide area network via wireless networks; and

an access point system organized with said connection devices, situated at a plurality of physical locations,

wherein said connection device comprises;

registration means that receives from said terminal device identifying information relating to said terminal device, registers authentication information that includes the identifying information relating to said terminal device, and transmits to said terminal device identifying information relating to said connection device; and

authentication means that, when an external connection device different from said connection device provides an access point to said terminal device whose authentication information has been registered, performs access authentication for said terminal device via said wide area network by means of cross-checking identifying information relating to said terminal device, said information being transmitted by the external connection device via said wide area network, with the authentication registered by said registration means;

wherein said terminal device comprises;

terminal registration means that, under a condition of authentication information having not being registered, when provided with an access point by said connection device, transmits to said connection device identifying information relating to said terminal device, receives from said connection device identifying information relating to said connection device, and archives said information; and

terminal providing means that, under a condition of authentication information having been registered, when provided with an access point by said external connection device, transmits to the external connection device the archived identifying information relating to said connection device, and identifying information relating to said terminal device;

and wherein said external connection device comprises;

providing means that, when providing an access point to a terminal device whose authentication information has been registered by said connection device, receives from said terminal device identifying information relating to said connection device and identifying information relating to said terminal device, establishes a connection with said connection device via said wide area network on the basis of the identifying information relating to said connection device, transmits the identifying information relating to said terminal device to said connection device via said connection, and provides said access point to said terminal device on the basis of access authentication for said terminal device performed by said connection device.

3. A connection device connected to a wide area network and exchanging data via said wide area network, said connection device comprising:

wireless communication means for exchanging information with a terminal device through wireless communication;

authentication information archiving means for archiving an authentication information that includes an identifying information identifying said terminal device; and

authentication means for receiving said identifying information that identifies said terminal from a terminal device requesting connection to said wide area network, transmitting said authentication information for said terminal device to external connection device via said wide area network, and performing access authentication for said terminal device, when no identifying information for said terminal device requesting connection is present in said authentication information archiving means in said connection device.

8. A connection device in accordance with any of claims 3 to 5, wherein said identifying information relating to said terminal device is a MAC address.

9. A connection device in accordance with any of claims 3 to 5, wherein said identifying information relating to said terminal device is pertaining to an removable device attached to said terminal device.

10. A connection device in accordance with any of claims 3 to 5, wherein said identifying information relating to said connection device is a MAC address or global IP address on the wide area network.

11. A connection device in accordance with any of claims 3 to 5, wherein

said wide area network is the Internet;

and

said wireless network is a wireless local area network capable of connecting a plurality of terminal devices.

4. A connection device for providing to a terminal device that requests access to a wide area network with an access point to the wide area network via a wireless network, on the basis of access authentication performed by verifying registered authentication information for said terminal device, said connection device comprising:

registration means that, when providing an access point to a terminal device whose authentication information has not been registered, receives from said terminal device identifying information relating to said terminal device, registers authentication information that includes the identifying information relating to said terminal device, and transmits to said terminal device identifying information relating to said connection device;

authentication means that, when external connection device different from said connection device provides an access point to said terminal device whose authentication information has been registered, performs access authentication for said terminal device via said wide area network by means of cross-checking identifying information relating to said terminal device, said information being transmitted by the external connection device via said wide area network, with the authentication registered by said registration means; and

providing means that, when providing an access point to a terminal device whose authentication information has been registered, receives from said terminal device identifying information relating to the connection device that registered said authentication information, and identifying information relating to said terminal device, establishes a connection with said connection device via said wide area network on the basis of the identifying information relating to said connection device, transmits the identifying information relating to said terminal device to said connection device via said connection, and provides said access point to said terminal device on the basis of access authentication for said terminal device performed by said connection device.

5. A connection device in accordance with claim 4 further comprising periodic registration canceling means for canceling registration of authentication information relating to a terminal device after a predetermined period of time has elapsed since registration by said registration means.

6. A connection device in accordance with claim 4 or 5 further comprising instance registration deleting means for sequentially deleting registration from authentication information relating to previously registered terminal devices when instances of authentication information relating to terminal devices registered by said registration means reaches a predetermined number.

7. A connection device in accordance with claim 4 or 5 further comprising an administration terminal device for administering authentication information relating to terminal devices registered by said registration means.

12. A terminal device for accessing a wide area network by being provided, by a connection device via a wireless network, with an access point to the wide area network on the basis of access authentication by verifying registered authentication information, said terminal device comprising:

terminal registration means that, under a condition of authentication information having not being registered, when provided with an access point by said connection device, transmits to said connection device identifying information relating to said terminal device, receives from said connection device identifying information relating to said connection device, and archives said information; and

terminal providing means that, under a condition of authentication information having been registered, when provided with an access point by an external connection device different from said connection device, transmits to the external connection device the archived identifying information relating to said connection device, and identifying information relating to said terminal device.

13. A terminal device in accordance with claim 12 comprising removable identifying information strage for storing said identifying information relating to said terminal device, for transmission to said connection device.

14. Method for authenticating a terminal device connected via wireless communication to any of a plurality of connection devices, said connection devices being connected to a wide area network and exchanging data via said wide area network, said method comprising the following steps of:

archiving authentication information for a plurality of said terminal devices, said authentication information including identifying data identifying said terminal device each individual connection device; and

receiving said identifying information from said terminal device requesting connection to said wide area network, searching said authentication information archived in the connection device that received said identifying information, transmitting said identifying information for said terminal device to external connection device via said wide area networkin when no identifying information for said terminal device requesting connection is present, and performing access authentication for said terminal device.

15. Method for performing access authentication in an access point system, the method comprising the following steps of:

providing connection devices situated at a plurality of physical locations to provide terminal devices with access points to a wide area network via wireless networks,

verifying a registered authentication information for said terminal device requesting to access the wide area network,

in case of providing said terminal device whose said authentication information has not been registered, with said access point by said connection device;

receiving from said terminal device an identifying information relating to said terminal device,

registering authentication information that includes the identifying information relating to said terminal device,

transmitting to said terminal device an identifying information relating to said connection device, and

in case of providing said terminal device whose authentication information has been registered in said connection device, with said access point by an external connection device different from said connection device; and

receiving from said terminal device said identifying information relating to said connection device and said identifying information relating to said terminal device,

establishing a connection with the external connection device via said wide area network on the basis of the identifying information relating to said connection device,

transmitting the identifying information relating to said terminal device from the external connection device to said connection device via said connection, and

performing access authentication for said terminal device by cross-checking the identifying information for said terminal device with said registered authentication information, and providing an access point to said terminal device by means of the external connection device.