AUTHENTICATION FOR USE OF HIGH SPEED NETWORK RESOURCES

• US 20070121643A1
• Filed: 01/24/2007
• Published: 05/31/2007
• Est. Priority Date: 08/13/2001
• Status: Active Grant

• Current Assignee: AT&T Labs Incorporated (AT&T, Inc.)
• Original Assignee: AT&T Labs Incorporated (AT&T, Inc.)
• Inventors: Cunetto, Philip, Doherty, James, Schroeder, Timothy, Lu, Chien-Chun
• Granted Patent: US 7,701,947 B2
• Time in Patent Office: Days
• US Class Current: 370/395.300
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A network node sets up a virtual connection in a network based on a virtual connection request initiated from an access port different from a first location previously associated with an account of a user. The network node includes a receiver for receiving a signaling message from the access port requesting the virtual connection. The signaling message has at least one field modified to include an address of the access port. The network node further includes a profile database and a registration server. The profile database stores a service policy associated with the user account. The registration server stores an address of the first location associated with the user account as a default registration, determines whether the user is authorized to establish the virtual connection based on the service policy, and replaces the first location address with the access port address when the user is authorized.

Claims

1. A computer readable medium for storing a computer program that associates a request for a virtual connection with a user account, the virtual connection request being initiated from a remote access port different from an access port previously associated with the account, the computer readable medium comprising:

a receiving code segment for receiving a signaling message requesting the virtual connection to be established from the remote access port, the signaling message comprising at least one field modified to include an address of the remote access port;

an associating code segment for associating the virtual connection request with information from the account, the information indicating whether the requested virtual connection is permitted; and

a registering code segment for retrieving the address of the remote access port from the at least one field and for registering the address of the remote access port in association with the account, the registering comprising substituting the address of the remote access port for an address corresponding to the access port previously associated with the account.

2. The computer readable medium according to claim 1, further comprising:

an establishing code segment for establishing the virtual connection through the remote access port when the account information indicates that the requested virtual connection is permitted.

3. The computer readable medium according to claim 1, further comprising:

an authentication code segment for determining whether the signaling message contains authentication data and for authenticating the account based on the authentication data,

wherein the registering code segment registers the address of the remote access port in association with the account after the account is authenticated.

4. The computer readable medium according to claim 3, wherein the authentication data comprises an identifier in a second field of the signaling message.

5. The computer readable medium according to claim 4, wherein the authentication data further comprises a password in a third field of the signaling message.

6. The computer readable medium according to claim 5, wherein the first modified field comprises a CallingPartyNumber field.

7. The computer readable medium according to claim 6, wherein the third field comprises a CallingPartySubaddress field.

8. The computer readable medium according to claim 5, further comprising:

a removing code segment for removing the password from the signaling message after the account is authenticated.

9. The computer readable medium according to claim 2, wherein the virtual connection comprises a switched virtual circuit (SVC).

10. A network node for setting up a virtual connection in a network based on a virtual connection request initiated from an access port different from a first location previously associated with an account of a user, the network node comprising:

a receiver for receiving a signaling message from the access port requesting the virtual connection to be established from the access port, the signaling message comprising at least one field modified to include an address of the access port;

a profile database for storing at least one service policy associated with the user account, the service policy defining at least one service available to the user; and

a registration server for storing an address of the first location associated with the user account as a default registration, a first connection being established between the access port and the registration server, the registration server replacing the first location address with the access port address;

wherein, based on the at least one service policy retrieved from the profile database, the registration server determines whether the user is authorized to establish the virtual connection.

11. The network node according to claim 10, wherein the first connection is established between the access port and the registration server based on a predefined terminating address of the registration server.

12. The network node according to claim 10, wherein the registration server further contains authentication information for accessing the network.

13. The network node according to claim 12, wherein the authentication information comprises a secure password, and the signaling message comprises a field that includes the password.

14. The network node according to claim 13, wherein the password is removed from the signaling message after the account is authenticated.

15. The network node according to claim 13, wherein the at least one field modified to include an address of the access port comprises a CallingPartyNumber field.

16. The network node according to claim 11, wherein the network comprises an ATM network.

17. The network node according to claim 16, wherein the virtual connection comprises a switched virtual circuit (SVC).

18. A method for setting up a virtual connection in a communications network based on a virtual connection request initiated from a second access port different from a first access port previously associated with an account of a user, the method comprising:

associating the user with the first access port;

establishing an initial connection with the second access port;

receiving a signaling message via the initial connection requesting the virtual connection to be established from the second access port, the signaling message comprising a first field modified to include an address of the second access port and a second field modified to include identification data associating the virtual connection request with the user account;

authenticating the virtual connection request based on the identification data;

determining whether the virtual connection is permitted based on at least one service policy associated with the user account; and

replacing the first access port address with the second access port address when the virtual connection is permitted;

wherein the virtual connection is established from the second access port in the communications network when the virtual connection is permitted.

19. The method according to claim 18, further comprising:

receiving a deregistration request; and

replacing the second access port address with the first access port address based on the deregistration request.

20. The method according to claim 18, wherein at least a portion of the identification data is removed from the signaling message after the signaling message is received via the initial connection.