SHARING NETWORK ACCESS CAPACITIES ACROSS INTERNET SERVICE PROVIDERS

• US 20080141355A1
• Filed: 01/22/2008
• Published: 06/12/2008
• Est. Priority Date: 11/28/2002
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Denis Chevalier, Gerard Marmigere, Zsolt Szalai
• Inventors: Szalai, Zsolt, Chevalier, Denis, Marmigere, Gerard
• Granted Patent: US 7,793,352 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

For optimizing Internet access resources, an apparatus and computer-like readable medium for sharing network access capacities across Internet service providers is disclosed. According to an apparatus comprising means adapted for carrying out a method for sharing network access capacities between a master Internet service provider, the method of the invention, a client service provider (CSP) may hire accesses to points of presence belonging to a master service provider (MSP) while maintaining a constant security level and providing connection accounting means. When a CSP'"'"'s subscriber sends an access request to a MSP, the MSP analyzes the subscriber'"'"'s realm and checks the capacities allocated to the subscriber'"'"'s CSP. If connection is allowed, the MSP sends an authentication request to the CSP. If the subscriber is authenticated, the MSP launches an accounting process based on the subscriber'"'"'s realm while the CSP may launch an accounting process associated with the subscriber identifier. Thus, the MSP does not need to maintain a database comprising information relative to the CSP'"'"'s subscribers.

Claims

1. An apparatus comprising means adapted for carrying out a method for sharing network access capacities between a master Internet service provider, comprising at least one point of presence, and a client Internet service provider, said method comprising the steps of:

upon reception of an access request, including at least a subscriber identifier, an Internet service provider identifier and a password, at said at least one point of presence;

determining, according to said Internet service provider identifier, if said access request comes from a subscriber of said master Internet service provider or from a subscriber of said client Internet service provider, said access request being rejected otherwise;

if said access request comes from a subscriber of said master Internet service provider,

determining, using said subscriber identifier and said password, if said subscriber is authorized to establish a connection; and

,

if said subscriber is authorized, establishing a connection, else, rejecting said access request;

else, if said access request comes from a subscriber of said client Internet service provider,

determining if a new connection may be established for a subscriber of said client Internet service provider; and

,

if a new connection may be established, sending an authorization request, comprising at least said subscriber identifier and said password, to said client Internet service provider, else, rejecting said access request;

upon reception of an authorization acknowledgment, comprising said subscriber identifier, from said client Internet service provider;

if said subscriber is authorized, establishing a connection, and sharing network access capacity across the established connection between the master Internet service provider and the client Internet service provider

else, rejecting said access request; and

replacing said subscriber identifier and said password by a virtual subscriber identifier and a virtual password, associated to said Internet service provider identifier, when said access request comes from a subscriber of said client Internet service provider, before determining if a new connection may be established for a subscriber of said client Internet service provider.

2. A computer-like readable medium comprising instructions for carrying out a method for sharing network access capacities between a master Internet service provider, comprising at least one point of presence, and a client Internet service provider, said method comprising the steps of:

upon reception of an access request, including at least a subscriber identifier, an Internet service provider identifier and a password, at said at least one point of presence;

determining, according to said Internet service provider identifier, if said access request comes from a subscriber of said master Internet service provider or from a subscriber of said client Internet service provider, said access request being rejected otherwise;

if said access request comes from a subscriber of said master Internet service provider,

determining, using said subscriber identifier and said password, if said subscriber is authorized to establish a connection; and

,

if said subscriber is authorized, establishing a connection, else, rejecting said access request;

else, if said access request comes from a subscriber of said client Internet service provider,

determining if a new connection may be established for a subscriber of said client Internet service provider; and

,

if a new connection may be established, sending an authorization request, comprising at least said subscriber identifier and said password, to said client Internet service provider, else, rejecting said access request;

upon reception of an authorization acknowledgment, comprising said subscriber identifier, from said client Internet service provider;

if said subscriber is authorized, establishing a connection, and sharing network access capacity across the established connection between the master Internet service provider and the client Internet service provider

else, rejecting said access request; and

replacing said subscriber identifier and said password by a virtual subscriber identifier and a virtual password, associated to said Internet service provider identifier, when said access request comes from a subscriber of said client Internet service provider, before determining if a new connection may be established for a subscriber of said client Internet service provider.