Methods, systems, and computer program products for providing a client device with temporary access to a service during authentication of the client device

• US 20070209081A1
• Filed: 03/01/2006
• Published: 09/06/2007
• Est. Priority Date: 03/01/2006
• Status: Abandoned Application

• Current Assignee: Scenera Technologies LLC (Scenera Research LLC)
• Original Assignee: Scenera Technologies LLC (Scenera Research LLC)
• Inventors: Morris, Robert
• Application Number:
  US11/365,025
• Publication Number:
  US 20070209081A1
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/2668 Creating a channel for a dedicated end-user group, e.g. insertion of targeted commercials based on end-user profiles information retrieval from the Internet by querying with filtering and personalisation G06F16/9535; arrangements for replacing or switching information during the broadcast H04H20/10; push services over packet-switching network H04L12/1859; adaptation of message content in packet-switching networks H04L51/063
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/6334 for authorisation, e.g. by transmitting a key wireless communications network key management H04W12/04; wireless communications network access security H04W12/08
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

Methods, systems, and computer program products for providing a client device temporary access to a service during authentication of the client device are described. According to one method, client information and certification authority information are received from a client device. Further, a first authentication of the client device is performed based on the certification authority information and information identifying a trusted certification authority. In response to success of the first authentication, service access corresponding to the first authentication is provided to the client device. Further, in response to success of the first authentication, a second authentication of the client device is performed based on the client information. In response to success of the second authentication, service access corresponding to the second authentication of the client device is provided.

Claims

1. A method for providing a client device temporary access to a service during authentication of the client device, the method comprising:

receiving client information and certification authority information from a client device;

performing a first authentication of the client device based on the certification authority information and information identifying a trusted certification authority;

in response to success of the first authentication;

providing service access corresponding to the first authentication to the client device;

performing a second authentication of the client device based on the client information; and

in response to success of the second authentication, providing service access corresponding to the second authentication to the client device.

2. The method of claim 1 wherein receiving client information and certification authority information includes receiving the client information and the certification authority information in one or more encrypted messages.

3. The method of claim 1 wherein receiving client information and certification authority information includes receiving the client information and the certification authority information wirelessly.

4. The method of claim 1 wherein the certification authority information includes at least one of a digital certificate, a digital signature, and a hash value.

5. The method of claim 1 wherein the client information includes at least one of a digital certificate, a digital signature, a hash value, and a user identification and password.

6. The method of claim 1 wherein providing service access corresponding to the first authentication includes providing service access based on an authentication group associated with the certification authority information.

7. The method of claim 1 wherein performing a first authentication of the client device includes:

communicating the certification authority information to a remote authentication service; and

receiving authentication information for the client device from the remote authentication service based on the certification authority information.

8. The method of claim 1 wherein providing service access to the client device includes providing wireless service access to the client device based on the certification authority information.

9. The method of claim 1 wherein providing service access corresponding to the first authentication of the client device includes providing service access corresponding to the first authentication for a predetermined time duration.

10. The method of claim 1 wherein providing service access corresponding to the first authentication of the client device includes providing a level of service corresponding to the certification authority information.

11. The method of claim 1 wherein providing service access to the client device includes providing wireless communication service access to the client device based on the certification authority information.

12. The method of claim 1 wherein performing a second authentication of the client device includes determining whether the client information is associated with a subscription to the service provided to the client device.

13. The method of claim 1 comprising terminating service access corresponding to the first authentication in response to failure of the second authentication.

14. A method for acquiring temporary access to a service during authentication, the method comprising:

communicating client information and certification authority information to a service provider;

receiving access to a service provided by the service provider based on the certification authority information, the access being provided while the client device is authenticated using the client information; and

receiving service access based on authentication using the client information.

15. The method of claim 14 wherein communicating client information and certification authority information includes communicating the client information and the certification authority information in one or more encrypted messages.

16. The method of claim 14 wherein communicating client information and certification authority information includes wirelessly communicating the client information and the certification authority information to the service provider.

17. The method of claim 16 wherein wirelessly communicating client information and certification authority information includes wirelessly communicating the client information and the certification authority information to a wireless access point.

18. The method of claim 14 wherein the certification authority information includes at least one of a digital certificate, a digital signature, and a hash value.

19. The method of claim 14 wherein the client information includes at least one of a digital certificate, a digital signature, a hash value, and a user identification and password.

20. The method of claim 14 wherein receiving access to a service includes receiving access to the service based on the certification authority information for a predetermined time duration.

21. The method of claim 14 wherein receiving access to a service includes receiving service access based on an authentication group associated with the certification authority information.

22. The method of claim 14 wherein receiving access to a service includes receiving access to a wireless service provided by the service provider.

23. The method of claim 14 wherein receiving access to a service includes receiving access to a wireless communication service provided by the service provider.

24. The method of claim 14 wherein receiving service access based on authentication using the client information includes providing a level of service corresponding to the certification authority information.

25. The method of claim 14 wherein the steps of the method are performed at a wireless device.

26. The method of claim 25 wherein the wireless device is a device selected from the group consisting of a mobile phone, a computer, and a personal digital assistant.

27. A system for providing a client device temporary access to a service during authentication of the client device, the system comprising:

a communication module operable to receive client information and certification authority information from a client device;

an authentication function operable to;

perform a first authentication of the client device based on the certification authority information and information identifying a trusted certification authority; and

in response to success of the first authentication, provide service access corresponding to the first authentication to the client device, perform a second authentication of the client device based on the client information, and provide service access corresponding to the second authentication to the client device in response to success of the second authentication.

28. The system of claim 27 wherein the communication module is operable to receive the client information and the certification authority information in one or more encrypted messages.

29. The system of claim 27 wherein the communication module is operable to receive the client information and the certification authority information wirelessly.

30. The system of claim 27 wherein the certification authority information includes at least one of a digital certificate, a digital signature, and a hash value.

31. The system of claim 27 wherein the client information includes at least one of a digital certificate, a digital signature, a hash value, and a user identification and password.

32. The system of claim 27 wherein the authentication function is operable to provide service access to the client device based on an authentication group associated with the certification authority information.

33. The system of claim 27 wherein the communication module is operable to communicate the certification authority information to a remote authentication service and the communication module is operable to receive authentication information for the client device from the remote authentication service based on the certification authority information.

34. The system of claim 27 wherein the authentication function is operable to provide wireless service access to the client device based on the certification authority information.

35. The system of claim 27 wherein the authentication function is operable to provide service access corresponding to the first authentication for a predetermined time duration.

36. The system of claim 27 wherein the authentication function is operable to provide a level of service corresponding to the certification authority information.

37. The system of claim 27 wherein the authentication function is operable to provide wireless communication service access to the client device based on the certification authority information.

38. The system of claim 27 comprising a remote service provider server operable to determine whether the client information is associated with a subscription to the service provided to the client device.

39. The system of claim 27 wherein the authentication function is operable to terminate service access corresponding to the first authentication in response to failure of the second authentication.

40. A client device for acquiring temporary access to a service during authentication, the client device comprising:

a communication module operable to communicate client information and certification authority information to a service provider for performing first and second authentications; and

a service receiver function operable to receive service access corresponding to the first authentication in response to success of the first authentication and to receive access corresponding to the second authentication in response to success of the second authentication.

41. The client device of claim 40 wherein the communication module is operable to communicate the client information and the certification authority information in one or more encrypted messages.

42. The client device of claim 40 wherein the communication module is operable to wirelessly communicating the client information and the certification authority information to the service provider.

43. The client device of claim 42 wherein the communication module is operable to communicate the client information and the certification authority information to a wireless access point.

44. The client device of claim 40 wherein the certification authority information includes at least one of a digital certificate, a digital signature, and a hash value.

45. The client device of claim 40 wherein the client information includes at least one of a digital certificate, a digital signature, a hash value, and a user identification and password.

46. The client device of claim 40 wherein the service access corresponding to the first authentication includes network access for a predetermined time duration.

47. The client device of claim 40 wherein the service access corresponding to the first authentication includes common access provided to a group of client devices.

48. The client device of claim 40 wherein the service access corresponding to the second authentication includes an application-level service.

49. The client device of claim 40 wherein the service receiver function is operable to receive access to a wireless communication service provided by the service provider.

50. The client device of claim 40 wherein the client device is a device selected from the group consisting of a mobile phone, a computer, and a personal digital assistant.

51. A system for providing a client device temporary access to a service during authentication of the client device, the system comprising:

means for receiving client information and certification authority information from a client device;

means for performing a first authentication of the client device based on the certification authority information and information identifying a trusted certification authority;

means for providing service access corresponding to the first authentication to the client device in response to success of the first authentication;

means for performing a second authentication of the client device based on the client information in response to success of the first authentication; and

means for providing service access corresponding to the second authentication to the client device in response to success of the second authentication.

52. A system for acquiring temporary access to a service during authentication, the system comprising:

means for communicating client information and certification authority information to a service provider;

means for receiving access to a service provided by the service provider based on the certification authority information, the access being provided while the client device is authenticated using the client information; and

means for receiving service access based on authentication using the client information.

53. A computer program product comprising computer executable instructions embodied in a computer readable medium for performing steps comprising:

receiving client information and certification authority information from a client device;

performing a first authentication of the client device based on the certification authority information and information identifying a trusted certification authority;

in response to success of the first authentication;

providing service access corresponding to the first authentication to the client device;

performing a second authentication of the client device based on the client information; and

in response to success of the second authentication, providing service access corresponding to the second authentication to the client device.

54. A computer program product comprising computer executable instructions embodied in a computer readable medium for performing steps comprising:

communicating client information and certification authority information to a service provider;

receiving access to a service provided by the service provider based on the certification authority information, the access being provided while the client device is authenticated using the client information; and

receiving service access based on authentication using the client information.