Internet Control Management and Accounting in a Utility Computing Environment

• US 20110191223A1
• Filed: 07/30/2008
• Published: 08/04/2011
• Est. Priority Date: 07/30/2008
• Status: Abandoned Application

• Current Assignee: Alok Singh, Chandra Shekar Kumar, Nisheeth Mishra, Saugata Chakrabarti, Sridhar Kulunthan, Sriman Badrinath, Venu Gopalraju Kanumuri, Vinodkumar Gopinathan
• Original Assignee: Alok Singh, Chandra Shekar Kumar, Nisheeth Mishra, Saugata Chakrabarti, Sridhar Kulunthan, Sriman Badrinath, Venu Gopalraju Kanumuri, Vinodkumar Gopinathan
• Inventors: Singh, Alok, Kulunthan, Sridhar, Mishra, Nisheeth, Gopinathan, Vinodkumar, Kumar, Chandra Shekar, Badrinath, Sriman, Kanumuri, Venu Gopalraju, Chakrabarti, Saugata
• Application Number:
  US13/056,810
• Publication Number:
  US 20110191223A1
• Time in Patent Office: Days
• US Class Current: 705/34
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The present invention relates to a method of Internet usage tracking and billing in a utility computing environment and also to a system for control, management and accounting of the said internet usage on per user basis. The present invention is also directed to resolve the issue of same IP address for multiuser and tracking of the Internet usage and bandwidth control on consolidation in utility computing environment, by introducing a separate Utility Computing Internet Control Server (ICS) between the terminal server (TS) and the Internet. All internet traffic originating from the TS are redirected to go through the ICS. The invented system and the method of dynamic control and management according to the present invention deal primarily with the tracking and billing model of the Internet resource in the Utility Computing Environment on per user basis.

Claims

1. A method for internet control and management in an utility computing environment comprising:

a set of client end devices that connect to a set of servers for their applications and Internet needs of its users;

a set of servers each of which provide access to Internet and applications to the set of client devices;

a control server that is capable of identifying each client and hence each user separately through many connections reach the Internet through a common server, called terminal server;

a system that is capable of identifying each user in a utility computing environment by a unique IP address at any given point of time and from anywhere in the Internet though the users connect to the Internet through a common server;

authenticating each user in a utility computing network having the said unique IP address and connected to a terminal server with the ISP'"'"'s authentication server such that only authenticated internet access requests are forwarded to the ISP'"'"'s gateway;

allowing only authenticated users of the utility computing network to use said ISP'"'"'s Internet bandwidth for accessing internet; and

tracking the internet data exchange done by the individual users of the utility computing network based on said unique IP address in an utility computing environment.

2. A method for internet control, management and accounting internet usage in an utility computing environment comprising:

two different networks with different IP address ranges—

one between the user end computing access device and the set of utility computing servers and two between the utility computing servers and the Internet;

identifying each user in a utility computing environment by a unique IP address at any given point of time and from anywhere in the Internet;

authenticating each user in a network of computers having said unique IP address and connected to a terminal server with the ISP'"'"'s authentication server such that only authenticated internet access requests are forwarded to the ISP'"'"'s gateway;

tracking the internet data exchange done by the individual users based on said unique IP address in an utility computing environment; and

generating billing data of respective users based on the said respective usage and data exchange, wherein the billing data for the users of the utility computing environment are reported to the ISP in a standard compliant protocol.

4. The method according to claim 2 comprising controlling the upstream/downstream bandwidth available to individual users in the utility computing environment.

5. The method according to claim 2, wherein plurality of terminal servers are provided each having networked connection of plurality of users and each of the terminal servers enable running multiple sessions such that each user in the terminal server can be identified by a unique IP address from anywhere in the Internet.

6. The method according to claim 4, wherein the requests for internet access and data exchange from users through said terminal server is routed through a utility computing internet control server (ICS) between the terminal server and the internet.

7. The method according to claim 6 comprising:

classifying web traffic at a per-user level by forcing every web request emanating from the terminal server to have authentic information of users, authenticating the user with the ISP'"'"'s authentication server (AAA Server) when an user starts a new internet session and also initiating session accounting in the ISP'"'"'s accounting server (AAA Server) when the user starts/ends a session;

assigning a unique public IP address for each user and interacting with the network driver to create separate logical channels for each active user and tagging outgoing web requests with the public IP address allotted to the user originating the web request and effecting upstream/downstream bandwidth control at a per-user level of web traffic and periodically storing per user upstream/downstream byte usage in a local accounting database, wherein said step of having authentication information of user comprises obtaining user name/password pair, constructing standard authentication protocol and forwarding to the ISP'"'"'s authentication server (AAA Server), receiving the reply and ascertaining the success/failure of authentication, and

wherein said step of implementing the user specific web usage accounting comprises receiving session connect/disconnect information, constructing standard accounting protocol complaint sessions start/stop messages and forwarding to the ISP'"'"'s accounting server including obtaining the internet upstream/downstream byte usage data from the local accounting database and sending periodic accounting messages at a per-user level to the ISP'"'"'s accounting server (AAA Server).

3. (canceled)

8. (canceled)

9. (canceled)

10. The method according to claim 9 comprising on receipt of every fresh web request checking whether the user'"'"'s password in the web request matches the password successfully authenticated by the ISP authentication server for that user maintained in the local cache of successful users, maintained for a pre-selected time only, so as to continuously update and remove stale catch entries including passwords and corresponding unique public IP address and (i) if so, assign a unique public IP address to the user and allowing the user for web access and (ii) if the password does not match with a previously authenticated password then the web request with password is forwarded to the ISP'"'"'s authentication server and if it is allowed the password is stored in the local cache and assigned a unique IP address for authorized web access, if not, the web request is dropped.

11. The method according to claim 10 comprising performing Source Network Address Translation (SNAT) including changing the source address of the web request to a unique public IP address by rewriting the source IP address field of all the web request packets of the user with unique public IP address allotted to the user on web requests packets going out of the Internet Control Server (ICS) and reverse translation performed by the ICS to the web reply packets coming from the internet before forwarding them to the terminal server.

12. The method according to claim 11 wherein the source code of the packets form different web requests would be different enabling the terminal server to distinguish web replies based on web reply packet destination port.

13. The method according to claim 12, wherein the upstream/downstream bandwidth available to a user'"'"'s internet traffic is based on the package chosen by the user with the ISP.

14. The method according to claim 13, wherein the web traffic of each user goes out/enters in through a distinct logical interface, the OS'"'"'s interface statistics is used to track the internet usage of each user with counters reset to zero every time when a logical interface is created said counters used to store the byte usage for upstream/downstream internet traffic if each user in the accounting server database, the accounting server periodically querying this database and sending standard complaint per user accounting message to the ISPs accounting server and at the end of the user'"'"'s internet session, the ICS frees up the IP address assigned to the user and informs the ISP'"'"'s accounting server of the end of the session with all information on the amount of data exchanged being passed to the above mentioned accounting server.

15. The system for carrying out the method for internet control and management in an utility computing environment according to claim 14 comprising:

at least one terminal server operatively connected to plurality of network computers, said terminal server adapted to run sessions corresponding to each user run; and

an utility computing internet control server providing for individualized user specific sessions based access to the internet through ISP gateway and adapted such that (i) each user in a utility computing environment is identified by a unique IP address at any given point of time;

(ii) each user in a network of computers is authenticated having said unique IP address and connected to a terminal server with the ISP'"'"'s authentication server such that only authenticated internet access requests are forwarded to the ISP'"'"'s gateway;

(iii) allowing only authenticated users to use said ISP'"'"'s Internet bandwidth for accessing internet; and

(iv) tracking the internet data exchange done by the individual users based on said unique IP address in an utility computing environment.

16. A system for carrying out the method for internet control and management in an utility computing environment according to claim 14 comprising:

at least one terminal server operatively connected to plurality of network computers, said terminal server adapted to run sessions corresponding to each user run; and

an utility computing internet control server providing for individualized user specific sessions based access to the internet through ISP gateway and adapted such that (i) each user in a utility computing environment is identified by a unique IP address at any given point of time;

(ii) each user in a network of computers is authenticated having said unique IP address and connected to a terminal server with the ISP'"'"'s authentication server such that only authenticated internet access requests are forwarded to the ISP'"'"'s gateway;

(iii) allowing only authenticated users to use said ISP'"'"'s Internet bandwidth for accessing internet;

(iv) tracking the internet data exchange done by the individual users based on said unique IP address in an utility computing environment and (v) generating billing details of each network user specific internet usage.

17. The system according to claim 16, wherein said utility computing internet control server comprises an internet control server operatively connected to said terminal servers, ISP gateway for said authorized user specific internet access and ISP AAA Servers for authenticating each network user requesting web access based on an unique IP address and maintaining user specific and session specific accounting details and said ISP AAA Servers are adapted to generate user specific billings and said internet usage of respective users are stored in an internet usage storage based on usage information generated by said internet control server for generation of customer internet usage report.

18. The system according to claim 17, wherein said internet control server comprises:

a connection daemon adapted for (i) each user authentication and generation of a unique IP address and operatively connected to a network control module to generate an unique IP address and to the ISP AAA Servers through an authentication module and (ii) start and end accounting of web usage of respective user based on the assigned and authenticated IP address by its operative connection to said ISP AAA Servers through an accounting module; and

said network control module adapted to connect to the internet based on authenticated unique IP address based web requests through network driver and ISP gateway and support an user specific Internet Usage Storage adapted to favor logging user information with IP address and time.

19. The system according to claim 18, wherein said network control module is adapted to process each web request from a particular user received from the terminal server and the source network address translation (SNAT) is applied therein to the request packet and sent out of a logical interface allotted to the particular user, the web reply is also entered into the internet control server through said same logical channel allotted to the specific user.

20. The system according to claim 19, wherein said internet control server is adapted to transfer back the public IP address allotted to the user to the IP address pool maintained by the network control module with the said network module adapted for updating the accounting server database with the final usage data of the user and removing the logical interface of the user along with a disconnect message to the accounting module whereby the accounting module is adapted to forward an accounting disconnect along with summary of usage byte for the specific user to the ISPs accounting server.

21. The system according to claim 20, wherein the external interface of the internet control server facing the IPS'"'"'s internet gateway comprises multiple public IP addresses such that the reply packets are routed to and within the internet control server, said external interface being partitioned into multiple logical channels, each having a unique public IP address allotted to different users whereby the network control module in operative connection with network OS/driver running in the internet control server is adapted to create new logical channel for each user at the time of connection/session establishment of the user, said logical channel being adapted for sending out web request packets of the user and also for receiving back corresponding web reply, said logical channel being removed once the user session ends/disconnects.

22. The system according to claim 21, wherein the upstream/downstream rate limit for the logical channel is set based on the package subscribed by the user belonging to the logical channel whereby the internet control server ensures that each user gets the ISP allotted bandwidth in both upstream/downstream directions for internet usage.

23. The system according to claim 22, wherein said network control server is adapted such that the web traffic of each user goes out/enters in through a distinct logical interface and the OS interface statistics is adapted to track the internet usage of each user wherein counters are reset to zero when a logical interface is created which are used to store the byte usage for upstream/downstream internet traffic of each user in the accounting database server, accounting server adapted to periodically query this database and send standard compliant per-user accounting messages to the ISP'"'"'s accounting server, said Internet control server adapted to free up the IP address assigned to the user at the end of the user'"'"'s internet session and informs the ISP'"'"'s accounting server of the end of the session.