SYSTEM AND METHOD FOR AUTHORIZING A PORTABLE COMMUNICATION DEVICE

• US 20120030737A1
• Filed: 10/11/2011
• Published: 02/02/2012
• Est. Priority Date: 12/08/1998
• Status: Active Grant

• Current Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Original Assignee: Nomadix, Inc. (Nippon Telegraph and Telephone Corporation)
• Inventors: Pagan, Florence C.I., Short, Joel E.
• Granted Patent: US 8,613,053 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/44 Program or device authentication

Abstract

Systems and methods of authorizing a portable communication device to access a network resource. In an embodiment, a request to access a network resource is received from a portable communication device via a network. A processor is used to dynamically and selectively determine whether the portable communication device is authorized to access the requested network resource. The determination may be based on a unique identifying attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information. If the portable communication device is authorized, it may be allowed to access the network resource. Otherwise, it may be redirected to an authentication system where it may be enabled to submit authentication-related information so that it may be authorized to access the requested network resource.

Claims

1. A method of authorizing a portable communication device to access a network resource, the method being performed at a network management system in communication with the portable communication device via a network, the method comprising:

receiving, from a portable communication device via a network, a request to access a network resource;

dynamically and selectively determining, on a processor, whether the portable communication device is authorized to access the requested network resource, the determination being based on a unique identifying attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information;

if the portable communication device is authorized, allowing the portable communication device to access the network resource; and

if the portable communication device is not authorized, redirecting the portable network device to an authentication system where the portable communication device is enabled to submit authentication-related information so that the portable communication system may be authorized to access the requested network resource.

2. The method of claim 1, wherein the portable communication device is one or more of a laptop, handheld device, personal digital assistant (PDAs) and cellphone.

3. The method of claim 1, wherein the network is located in or forms part of one or more of an airport, hotel and cellular telephone network.

4. The method of claim 1, wherein dynamically and selectively determining whether the portable communication device is authorized to access the requested network resource does not require additional software to be installed on the portable communication device prior to connection with network.

5. The method of claim 1, wherein the attribute associated with the portable communication device is determined from packets received from the portable communication device.

6. The method of claim 1, wherein the attribute uniquely indicates the portable communication device used by the user.

7. The method of claim 6, wherein the attribute is the media access control (MAC) address of the portable communication device used by the user.

8. The method of claim 1, further comprising using location information to determine whether the portable communication device is authorized to access the requested network resource.

9. The method of claim 1, further comprising storing information about the portable communication device such that subsequent attempts to access the network do not require the user to establish authorization.

10. The method of claim 1, wherein authorization further comprises determining whether the user of the portable communication device has paid for access and authorizing access if it is determined that the user has paid.

11. The method of claim 1, further comprising using the attribute to access information stored in a user profile database.

12. The method of claim 1, wherein the processor is included in a gateway device.

13. A computer implemented network management system configured to authorize a portable communication device to access a network resource, the system comprising:

a first network interface configured to receive, from a portable communication device via a network, a request to access a network resource;

a first software module that, when implemented on one or more processors, is configured to dynamically and selectively determine whether the portable communication device is authorized to access the requested network resource, the determination being based on an attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information;

a second software module that, when implemented on one or more processors, is configured to allowing the portable communication device to access the requested network resource if the portable communication device is authorized;

a third software module that, when implemented on one or more processors, is configured to redirect the portable network device to an authentication system where the portable communication device is enabled to submit authentication-related information so that the portable communication system can be authorized to access the requested network resource if the portable communication device is not authorized; and

one or more processors configured to implement the first, second and third software modules.

14. A computer implemented network management system configured to authorize a portable communication device to access a network resource, the system comprising:

a first network interface configured to receive, from a portable communication device via a network, a request to access a network resource; and

one or more processors configured to;

dynamically and selectively determine whether the portable communication device is authorized to access the requested network resource, the determination being based on an attribute associated with the portable communication device without the unique identifying attribute being predefined in a user profile database and without querying the portable communication device or its user for information;

allow the portable communication device to access the requested network resource if the portable communication device is authorized; and

redirect the portable network device to an authentication system where the portable communication device is enabled to submit authentication-related information so that the portable communication system can be authorized to access the requested network resource if the portable communication device is not authorized.