METHOD AND DEVICE FOR ENFORCING INTERNET USERS' GEOGRAPHICAL POSITIONING TRACEABILITY

• US 20110158172A1
• Filed: 06/30/2008
• Published: 06/30/2011
• Est. Priority Date: 06/30/2008
• Status: Abandoned Application

• Current Assignee: Groowin, Inc.
• Original Assignee: E-Mmunizer SA
• Inventors: Burlet, Arnaud, Kande, Mohamed Mancona
• Application Number:
  US13/001,990
• Publication Number:
  US 20110158172A1
• Time in Patent Office: Days
• US Class Current: 370/328
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/20 Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 64/00 Locating users or terminals or network equipment for network management purposes, e.g. mobility management

Abstract

A method for enforcing Internet users'"'"' geographical positioning traceability, through the building of a community of several network elements with known geographical locations with identified boundaries. The network access to the community is controlled and access of external devices to the community is only possible within one connectivity hop from the network elements of the community.

Claims

1. A method for enforcing Internet users'"'"' geographical positioning traceability, comprising:

building a community of several network elements with known geographical location;

controlling and authorizing network access to said community;

allowing access of external devices to said community only within one connectivity hop from said network elements in said community.

2. The method of claim 1, comprising:

identifying a boundary of said community, said boundary consisting of a set of network elements in said community, said networks being referred to as end-devices;

setting-up said community through a parent-child configuration process during which access is granted by network elements in said community to child elements.

3. The method of claim 1, wherein bandwidth sharing and Internet access through said network elements of said community are refused to any child network element until said child network element is successfully authenticated.

4. The method of claim 1, comprising an authentication process of child network elements using a preliminary knowledge of a geophysical address of said child network element, wherein an IP address can be assigned to said child network element only after successful authentication.

5. The method of claim 1, wherein location awareness of said network elements is based on a local Internet address consisting of an IP address with an extension indicating a geographical positioning.

6. The method of claim 5, wherein said geographical positioning is indicated with a geophysical address or geospatial coordinates.

7. The method of claim 5, wherein said local Internet address of said end-devices is based on the local Internet address of the parent network element of said end-device.

8. The method of claim 1, wherein a management server provides configuration parameters to said network elements and allows for an automatic set-up of said community.

9. The method of claim 1, wherein the configuration process of said community uses a database storing correspondence tables between serial numbers of said network elements and geographical positioning data.

10. The method of claim 9, wherein further a trusted neighborhood relationship is established.

11. The method of claim 1, wherein parent network elements identify and authenticate end-users of said end-devices.

12. The method of claim 11, wherein end-users of said end-devices are identified and authenticated with the help of another end-device.

13. A network access device for enforcing Internet users'"'"' geographical positioning traceability, comprising a software module for regulating network access, authenticating and localizing devices performing broadband connection requests to said network access device, characterized in that said software module is arranged for classifying said devices performing said broadband requests into network elements and end-devices, wherein only network elements are allowed to share their network connection, and in that said software module is arranged for authenticating directly end-users of said end-devices.

14. The network access device of claim 13, said module comprising a dedicated module for managing traceability within a community of said network elements, a dedicated module for authenticating devices joining said community, and a module for determining and logging geographical positioning.

15. The network access device of claim 13, comprising a memory unit for storing geographical and/or identification information, whereby said information is remotely accessible through a network management protocol.

16. The network access device of claim 13, wherein the software modules can be downloaded from a management server or a web site.

17. A system for enforcing Internet users'"'"' geographical positioning traceability, comprising network access devices according to claim 13 and a central database for authenticating said network access devices and store user'"'"'s credentials.

18. A management server for enforcing Internet users'"'"' geographical positioning traceability, said management server providing configuration parameters to network elements and allowing for an automatic set-up of a community of network elements aware of their geographical location.