Method and System of Accreditation for a Client Enabling Access to a Virtual Network for Access to Services

• US 20080040491A1
• Filed: 03/02/2005
• Published: 02/14/2008
• Est. Priority Date: 03/03/2004
• Status: Abandoned Application

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Minodier, David, Ivanoff, Gilles
• Application Number:
  US10/598,595
• Publication Number:
  US 20080040491A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A client is authenticated for access to a virtual network so the client can access services provided by service providers. The compatibility of the client with a predetermined access control protocol for access to the virtual network is determined. If the client is not compatible with the predetermined access control protocol, data transfer is authorised between the client and at least one subscription system for subscribing the client to at least one service provider. If the client subscribes to at least one service provider, there is a transfer to the client of (1) an authentication for accessing the services of the service provider to which the client is subscribed and (2) information which makes it possible to make the client compatible with the predetermined access control protocol.

Claims

1. Method of authenticating a client for access to at least one virtual network which allows the client to access the services of at least one service provider, the or each virtual network being set up on a telecommunication network, the method comprising:

determining the compatibility of the client with a predetermined access control protocol for access to the virtual network,

if the client is not compatible with the predetermined access control protocol, authorizing data transfer between the client and at least one subscription system for subscribing the client to at least one service provider via an authentication network which is different from the or each virtual network which allows a client to access the services of the or each service provider,

if the non-compatible client subscribes to at least one service provider via the authentication network, transferring to the non-compatible client an authentication for accessing the virtual network which allows access to the services of the service provider to which the non-compatible client is subscribed and information which makes it possible to make the client compatible with the predetermined access control protocol.

2. Method according to claim 1, wherein the authentication network is a virtual network or a network that is separate from the telecommunication network.

3. Method according to claim 1, wherein the subscription system includes at least one subscription portal, an authentication material server and, in response to the client subscribing to a service, the subscription portal transfers to an authentication server data associated with the authentication transferred to the client.

4. Method according to claim 3, wherein the client is connected to the network via a Digital Subscriber Line Access Multiplexer and, if the client is compatible with the predetermined access control protocol, the Digital Subscriber Line Access Multiplexor performs the steps of obtaining an identifier and a client authentication material and of obtaining a client authentication confirmation from the authentication server.

5. Method according to claim 4, wherein if the authentication server does not confirm the authentication of the client, the method comprises a step of authorizing data transfer between the client and at least one subscription system for subscribing the client to at least one service provider via an authentication network which is different from the virtual networks which allow a client to access the services of at least one service provider.

6. Method according to claim 3, wherein there is a transfer to the authentication service of information associated with the service provider to which the client is subscribed and/or information characterizing the service to which the client is subscribed.

7. Method according to claim 6, wherein the authentication server additionally transfers to the Digital Subscriber Line Access Multiplexor the information associated with the service provider to which the client is a client and/or the information relating to the service or services to which the client is subscribed.

8. Method according to claim 7, wherein the Digital Subscriber Line Access Multiplexor authorizes data transfer between the virtual network which allows the client to access the services of the service provider to which the client is subscribed according to the communication speeds to which the client is subscribed.

9. Method according to claim 1, wherein an address server is also associated with the virtual authentication network, and the address server allocates an address to the client for data transfer on the virtual authentication network

10. Method according to claim 1, wherein the telecommunication network is a high-speed network based on Ethernet technology, and the predetermined access control protocol is a protocol of the IEEE 802.1x type, and the clients are connected to the Digital Subscriber Line Access Multiplexor via connections of the DSL type.

12. A computer readable medium or storage device carrying a computer program including instructions for enabling a computer to carry out the authentication method of claim 1.

11. System for authenticating a client for access to at least one virtual network for allowing the client to access the services of at least one service provider, the or each virtual network being set up on a telecommunication network, the system comprising;

means for determining the compatibility of the client with a predetermined access control protocol for access to the telecommunication network,

authorization means for authorizing, if the client is not compatible with the predetermined access control protocol, data transfer between the non-compatible client and at least one subscription system

for subscribing the client to at least one service provider via a network which is different from the virtual networks which allow a client to access the services of a service provider,

means for transferring to the non-compatible client, if the non-compatible client subscribes to at least one service provider via the authentication network, an authentication for accessing the virtual network which allows access to the services of the service provider to which the non-compatible client is subscribed and information which makes it possible to make the client compatible with the predetermined access control protocol.

13. Digital Subscriber Line Access Multiplexor which allows at least one client to access the services of at least one service provider, the client line multiplexer being arranged for relaying the information transmitted by the client and associated with authentication of the client to an authentication server.

14. Multiplexer according to claim 13, wherein the client line multiplexer includes a software module according to the IEEE 802.1x standard for relaying the information associated with authentication.