System And Method For A Secure Log-On To A Communications System Comprising Network Connection And Connection Handling Computers

• US 20070286365A1
• Filed: 05/11/2005
• Published: 12/13/2007
• Est. Priority Date: 08/13/2004
• Status: Active Grant

• Current Assignee: Unify Patente GmbH & Co. KG (Atos Se)
• Original Assignee: Unify GmbH & Co. KG (Atos SE)
• Inventors: Busser, Jens-Uwe, Fries, Steffen
• Granted Patent: US 8,259,914 B2
• Time in Patent Office: Days
• US Class Current: 379/93.20
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1106 Call signalling protocols; H.323 and related

Abstract

In one aspect, communication link established from a communication unit to a communications system. A request message is transmitted from a communication unit to the work connection computer and checked with the aid of a user profile of the communication unit, to verify whether the communication unit has log-on authorization. If the verification of the request message is positive, the request message is forwarded from the network connection computer to the connection handling computer in the form of a modified request message. The modified request message is analyzed by the connection handling computer with the aid of an authentication profile of the network connection computer. Once the modified request message has been positively analyzed and the communication unit has been successfully registered, a response message is transmitted from the connection handling computer to the communication unit.

Claims

1-18. -18. (canceled)

19. A communications system, comprising:

a connection handling computer;

a network connection computer coupled to the connection handling computer;

a communication unit coupled to the network connection computer;

a first database connected to the network connection computer;

a user profile of the communication unit stored in the first database;

a second data base coupled to the connection handling computer;

an authentication profile of the network connection computer stored in the second database;

a request message for logging-on of the communication unit with the communications system;

a modified request message; and

a response message,

wherein the connection handling computer, the network connection computer and the communication unit are each a communication element,

wherein the request message is transmitted from the communication unit to the network connection computer,

wherein to verify whether the communication unit has log-on authorization, the request message is checked with the aid of the user profile,

wherein the modified request message is sent from the network connection computer to the connection handling computer if the verification of the request message is positive,

wherein the modified request message is analyzed by the connection handling computer with the aid of the authentication profile, and

wherein the response message is transmitted from the connection handling computer to the communication unit once the modified request message has been positively analyzed and the communication unit has been successfully registered.

20. The communications system as claimed in claim 19, wherein the modified request message is only sent after a previous positive verification of authentication and an authorization of the request message by the network connection computer.

21. The communications system as claimed in claim 19,

wherein the modified request message is only sent after a previous positive verification of association of the communication unit with a first network, the first network comprising the communication unit, and the network connection computer, and

wherein the first network is secured against unauthorized external access.

22. The communications system as claimed in claim 21, wherein the network connection computer has access protection.

23. The communications system as claimed in claim 19, wherein at least a portion of the coupled communication elements are connected to each other by a secure connection.

24. The communications system as claimed in claim 23, wherein the secure connection exists at least between the connection handling computer and the network connection computer.

25. The communications system as claimed in claim 19, wherein the communication unit and the connection handling computer are allocated to different networks.

26. The communications system as claimed in claim 19, wherein the connection handling computer is a computer or an additional network connection computer that is coupled to a connection handling computer.

27. The communications system as claimed in claim 19, wherein a charging of a message traffic of the communication unit is allocated to the network connection computer.

28. The communications system as claimed in claim 19, wherein a total charging of message traffic of all communication units that are connected to the network connection computer is allocated to the connection handling computer.

29. A method for establishing a communication link to a communications system, comprising:

providing a connection handling computer, a network connection computer coupled to the connection handling computer, and a communication unit coupled to the network connection computer, wherein the connection handling computer, the network connection computer, and the communication unit are each a communication element,

providing a first database coupled to the network connection computer and a second database coupled to the connection handling computer;

transmitting a request message from the communication unit to the network connection computer;

checking the request message with the aid of a user profile of the communication unit to verify whether the communication unit has log-on authorization, the user profile stored in the first database;

forwarding the request message from the network connection computer to the connection computer in the form of a modified request message if the verification of the request message is positive;

analyzing the modified request message by the connection handling computer with the aid of an authentication profile of the network connection computer, the authentication profile stored in the second database; and

transmitting a response message from the connection handling computer to the communication unit once the modified request message has been positively analyzed and the communication unit has been successfully logged-on.

30. The method as claimed in claim 29, wherein the modified request message is only forwarded after previous positive verification of the authenticity and authorization of the request message of the communication unit by the network connection computer.

31. The method as claimed in claim 29, wherein the modified request message is only forwarded after previous positive verification of association of the communication unit with a first network, the first network comprising at least the communication unit and the network connection computer and the first network being secured against unauthorized external access.

32. The method as claimed in claim 29, wherein the network connection computer is expanded by access protection.

33. The method as claimed in claim 29, wherein a secure connection is established between at least two of the coupled communication elements.

34. The method as claimed in claim 33, wherein the secure connection is established at least between the connection handling computer and the network connection computer.

35. The method as claimed in claim 34, wherein the modified request message is only forwarded if the secure connection exists between the connection handling computer and the network connection computer.