Method for identifying internet users

• US 20070071001A1
• Filed: 09/07/2006
• Published: 03/29/2007
• Est. Priority Date: 09/05/2000
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Unger, Stefan, Mitreuter, Ulrich, Zygan-Maus, Renate
• Granted Patent: US 8,621,033 B2
• Time in Patent Office: Days
• US Class Current: 370/389
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

Method for identifying Internet users, comprising: identifying or authenticating an Internet user at the Internet access point in the course of an access check when using the Internet access service of an Internet Service Provider with whom the Internet user maintains a business relation; and after the Internet user successfully passed the access check aiding Internet user identification information to an Internet user'"'"'s IP message by the Internet access point prior to forwarding said IP message, guaranteeing the integrity of this information with cryptographic means.

Claims

1. Method for identifying Internet users, comprising:

a) identifying or authenticating an Internet user at the Internet access point in the course of an access check when using the Internet access service of an Internet Service Provider with whom the Internet user maintains a business relation;

b) after the Internet user successfully passed the access check adding Internet user identification information to an Internet user'"'"'s IP message by the Internet access point prior to forwarding said IP message, guaranteeing the integrity of this information with cryptographic means.

2. Method according to claim 1, wherein

Internet user identification information is added only when a certain requirement is met.

3. Method according to claim 2, wherein

an Internet user provides a requirement.

4. Method according to claim 1 wherein

a requirement in question is checked at the access point, where to this end, information is taken from the IP message and/or a database.

5. Method according to claim 1 wherein

the method is realized on the Internet protocol level.

6. Method according to claim 1 wherein

the method is realized on the transport protocol level.

7. Method according to claim 1 wherein

the method is realized on the user protocol level.

8. Method according to claim 1 wherein

integrity of the Internet user identification information is guaranteed with a digital signature.

9. Internet access point which has structure for:

a) identifying or authenticating an Internet user in the course of the Internet access service,

b) after the Internet access service having successfully been accomplished, adding Internet user identification information to an Internet user'"'"'s IP message by the Internet access point prior to forwarding said IP message, guaranteeing the integrity of this information with cryptographic means.

10. Internet access point according to claim 9, further comprising structure for adding

the Internet user identification information to the IP message only if a certain requirement is met.

11. Internet access point according to claim 10,

further comprising structure for checking a requirement using information obtained from at least one of the IP message and a database.