Multiservice use of network connection capability under user-to-network interface signaling

• US 20060239268A1
• Filed: 06/23/2006
• Published: 10/26/2006
• Est. Priority Date: 08/07/2000
• Status: Active Grant

• Current Assignee: SBC Technology Resources, Inc. (AT&T, Inc.)
• Original Assignee: SBC Technology Resources, Inc. (AT&T, Inc.)
• Inventors: Schneider, Marco, Cunetto, Philip
• Granted Patent: US 7,561,577 B2
• Time in Patent Office: Days
• US Class Current: 370/395.100
• CPC Class Codes: H04L 12/5601 Transfer mode dependent, e.g. ATM
• CPC Class Codes: H04L 2012/5605 Fibre
• CPC Class Codes: H04L 2012/5614 User Network Interface
• CPC Class Codes: H04L 2012/5629 Admission control
• CPC Class Codes: H04L 2012/563 Signalling, e.g. protocols, reference model
• CPC Class Codes: H04L 2012/5665 Interaction of ATM with other protocols
• CPC Class Codes: H04L 2012/5669 Multiprotocol over ATM [MPOA]
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/70 Media network packetisation
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

Method and apparatus for a distributed switching system supporting a plurality of services. A service request is initiated by an initiating customer. The service request is then executed using, for example, a user-to-network interface setup. A terminating setup is then performed to either accept or reject the requested service. Multiple service requests are correlated with respective services to enable at least one appropriate policy and logic. Data related to the requested service is obtained using at least one of a push procedure, a pull procedure, a query procedure, and a procedure in which requests are associated with the issuance of certificates

Claims

1. A computer readable medium that stores a computer program for controlling access to a network, the computer readable medium comprising:

a receiving code segment that receives a request for a network service from an initiating end system;

a determining code segment that determines at least one of service policy and logic associated with the requested network service; and

an instructing code segment that provides instructions to the initiating end system to send a connection setup request to a network connection controller of the network, the instructions comprising a certificate, comprising information relating to the at least one of the service policy and logic, and a unique identifier that correlates the connection setup request and the network service;

wherein one of establishing a network connection and rejecting the connection setup request is based on the information relating to the at least one of the service policy and logic and the unique identifier included the certificate.

2. The computer readable medium according to claim 1, wherein the at least one of the service policy and logic represents service capabilities associated with the network service.

3. The computer readable medium according to claim 1, wherein the at least one of the service policy and logic represents service permissions associated with the network service.

4. The computer readable medium according to claim 1, further comprising:

a protecting code segment that provides data to prevent reuse of the certificate.

5. The computer readable medium according to claim 4, in which the protecting code segment assigns a sequence number to the certificate, which is examined by the network connection controller to confirm that the sequence number is not repeated.

6. The computer readable medium according to claim 4, in which the protecting code segment assigns at least one of a time-stamp and a date-stamp to the certificate, which is examined by the network connection controller to confirm that the at least one of the time-stamp and the date-stamp is within a predetermined delta value.

7. The computer readable medium according to claim 4, in which the protecting code segment encrypts the certificate.

8. A computer readable medium that stores a computer program for controlling connections to a network, the computer readable medium comprising:

a receiving code segment that receives a request for a service associated with the network initiated by an initiator;

a retrieving code segment that retrieves at least one of policy and logic of the requested network service, the policy and logic representing at least one of service capabilities and service permissions associated with the requested network service;

an instructing code segment that instructs the initiator to initiate a connection setup request to establish a connection with the network through a network connection controller; and

a providing code segment that provides information relating to the at least one of the policy and logic to the network connection capability, the network connection controller establishing the network connection or rejecting the connection setup request based on the information relating to the at least one of the service policy and logic.

9. The computer readable medium according to claim 8, in which the providing code segment provides the information relating to the at least one of the policy and logic using a pushing procedure.

10. The computer readable medium according to claim 8, in which the providing code segment provides the information relating to the at least one of the policy and logic using a pulling procedure.

11. The computer readable medium according to claim 8, in which the providing code segment provides the information relating to the at least one of the policy and logic using a query and reply procedure.

12. The computer readable medium according to claim 8, in which the connection setup request comprises a user-to network interface setup request.

13. The computer readable medium according to claim 8, in which the providing code segment provides the information relating to the at least one of the policy and logic by providing a certificate to be included in the connection setup request.

14. The computer readable medium according to claim 13, in which the certificate further includes at least a permitted setup parameter.

15. The computer readable medium according to claim 14, further comprising an encrypting code segment that encrypts the certificate.

16. The computer readable medium according to claim 14, further comprising a sequencing code segment that assigns a sequence number to the certificate to prevent reuse of the certificate, the network connection controller confirming that the sequence number is used one time.

17. The computer readable medium according to claim 14, further comprising a timing code segment that assigns at least one of a time-stamp and a date-stamp to the certificate to prevent reuse of the certificate, the network connection controller confirming that the at least one of the time-stamp and the date-stamp is within a predetermined period.

18. A system for controlling access to capabilities of a network associated with a service, the system comprising:

a service controller that receives a request for the service from a terminal and instructs the terminal to initiate a connection setup request for establishing a connection with the network in accordance with the service, and that provides a certificate to be included in the connection setup request, the certificate including information relating to at least one of policy and logic associated with the service; and

a network controller that receives the connection setup request from the terminal, processes the connection setup request based on the certificate and the information relating to the at least one of policy and logic associated with the service, and performs one of establishing the network connection and rejecting the connection setup request based on the processing, in accordance with the certificate and the at least one of policy and logic.

19. The system according to claim 18, wherein the instructing by the service controller further comprises providing a unique identifier correlating the connection setup request and the service;

and

wherein the network controller further process the connection setup request based on the unique identifier.

20. The system according to claim 18, wherein the network controller verifies the certificate.