Multiple-level internet protocol accounting

• US 6,119,160 A
• Filed: 10/13/1998
• Issued: 09/12/2000
• Est. Priority Date: 10/13/1998
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Sitaraman, Aravind, Lou, Shuxian, Kochan, Roman Peter, Zhang, Shujin
• Primary Examiner(s): Matar, Ahmad F.
• Assistant Examiner(s): WINDER, PATRICE L
• Application Number:
  US09/172,183
• Time in Patent Office: 700 Days
• Field of Search: 379/127, 705/14, 705/30, 709/223, 709/224, 709/217, 709/218, 709/219, 709/225, 709/229
• US Class Current: 709/224
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1439 time-based
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04M 2215/22 Bandwidth or usage-sensitve billing

Abstract

A method and apparatus for providing computer network access points the capability for multiple-level accounting. A gateway device located at the access point is capable of generating Internet protocol accounting start and stop requests based on various events that need to be accounted for when a user accesses a network. These events include the user account logon, the service establishments and the Point to Point protocol (PPP) connections between the gateway device and public and private domains within the network. The counter is capable of tracking the duration of sessions and connections and the byte-count associated with the specified session or connection. The gateway device communicates with an accounting server which stores the accounting requests and matches start requests with subsequent stop requests.

Claims

1. A method for providing multiple-level accounting to a computer network service provider comprising the steps of:

generating an internet protocol account logon accounting start request in response to a determination that a subscriber has logged on to said computer network service provider;

forwarding said internet protocol account logon start accounting request to a memory;

generating an internet protocol service accounting start request in response to a determination that said subscriber has logged on to a service and that no other subscribers have a current connection established to said service through the computer network service provider interface;

forwarding said internet protocol service accounting start request to a memory;

generating an internet protocol service accounting stop request in response to a determination that said subscriber has terminated said service and that no other subscribers have a current connection established to said service through the computer network service provider interface; and

forwarding said internet protocol service accounting stop request to a memory.

2. The method of claim 1 further comprising the steps of:

generating an internet protocol connection accounting start request in response to a determination that said subscriber has established a connection with said service;

forwarding said internet protocol connection accounting start requests to a memory;

generating an internet protocol connection accounting stop request in response to a determination that said subscriber has terminated said connection with said service; and

forwarding said internet protocol connection accounting stop requests to a memory.

3. The method of claim 1 further comprising the steps of:

generating an internet protocol account logoff accounting stop request in response to a determination that the subscriber has logged off said computer network service provider; and

forwarding said internet protocol account logoff accounting stop requests to a memory.

4. The method of claim 1 further comprising the steps of:

generating an internet protocol update accounting request at predetermined intervals after said internet protocol account logon accounting start request has been received into said memory; and

forwarding said internet protocol update accounting requests to a memory.

5. A method for providing multiple-level accounting to a computer network service provider comprising the steps of:

receiving a user account logon access request at said computer network service provider;

authorizing and authenticating said user in response to receiving said user account logon request;

sending an account logon accounting start request to an accounting server;

receiving a user service access request at said computer network service provider to access a requested service;

granting user service privileges to said user if said requested service is contained within a service profile of said user;

sending a service accounting start request to said accounting server if said computer network service provider interface has not already established a service connection with said requested service; and

responsive to a determination that said user has disconnected from said requested service, sending a service accounting stop request to said accounting server if no other hosts have current connections to said requested service.

6. The method of claim 5 further comprising the steps of:

establishing a connection between said user and said requested service after granting user service privileges to said user;

sending a connection accounting start request to said accounting server; and

responsive to a determination that said user has disconnected from said requested service, sending a connection accounting stop request to said accounting server.

7. The method of claim 6 further comprising the steps of:

responsive to a determination that said user has terminated said account logon, sending an account logoff accounting stop request to said accounting server.

8. The method of claim 7 further comprising the step of:

re-sending said account logoff accounting stop request at predetermined intervals upon determining that said initial connection accounting stop request was not received by said accounting server.

9. The method of claim 6 further comprising the steps of:

re-sending said connection accounting start request at predetermined intervals upon determining that said initial connection accounting start request was not received by said accounting server; and

re-sending said connection accounting stop request at predetermined intervals upon determining that said initial connection accounting stop request was not received by said accounting server.

10. The method of claim 5 wherein the step of receiving a user account logon access request further comprises receiving said request directly from a dashboard application launched on said user'"'"'s host computer.

11. The method of claim 5 wherein the step of receiving a user account logon access request further comprises receiving said request from a remote web server.

12. The method of claim 5 further comprising the steps of:

generating update accounting requests at predetermined intervals after said account logon accounting start request has been received into said accounting server; and

forwarding said internet protocol update accounting request to said accounting server.

13. The method of claim 5 further comprising the steps of:

re-sending said account logon accounting start request at predetermined intervals upon determining that said initial account logon accounting start request was not received by said accounting server;

re-sending said service accounting start request at predetermined intervals upon determining that said initial service accounting start request was not received by said accounting server; and

re-sending said service accounting stop request at predetermined intervals upon determining that said initial service accounting stop request was not received by said accounting server.

14. An accounting metering apparatus for providing multiple-level accounting to a computer network service provider comprising the following:

a means for receiving a user account logon access request at said computer network service provider;

a means for authorizing and authenticating said user in response to receiving said user account logon request;

a means for sending an account logon accounting start request to an accounting server;

a means for receiving a user service access request at said computer network service provider to access a requested service;

a means for granting user service privileges to said user if said requested service is contained within a service profile of said user;

a means for sending a service accounting start request to said accounting server if said computer network service provider interface has not already established a service connection with said requested service; and

a means for, responsive to a determination that said user has disconnected from said requested service, sending a service accounting stop request to said accounting server if no other hosts have current connections to said requested service.

15. The accounting metering apparatus of claim 14 further comprising the following:

a means for establishing a connection between said user and said requested service after granting user service privileges to said user;

a means for sending a connection accounting start request to said accounting server; and

a means for, responsive to a determination that said user has disconnected from said requested service, sending a connection accounting stop request to said accounting server.

16. The accounting metering apparatus of claim 15 further comprising the following:

a means for, responsive to a determination that said user has terminated said account logon, sending an account logoff accounting stop request to said accounting server.

17. An accounting metering system for providing multiple-level accounting to a network service provider within a computer network comprising the following:

a gateway device capable of receiving network, service and connection access request packets from a plurality of hosts, said gateway device including;

a proxier capable of readying logon authentication request packets and service authorization request packets for verification,

a processor capable of granting network access, service establishment and connection access;

an accounting request generator capable of generating accounting start request packets and accounting stop request packets for network account logons and logoffs, service establishments and terminations and connection accesses and terminations;

an authentication, authorization and accounting server communicating with said gateway device by a network service provider proscribed internet protocol, said authentication, authorization and accounting server consisting of;

an authenticator capable of verifying the authenticity of a user based on information contained in memory and comparable information found in said logon authentication request packets;

a user specific service profile which contains a listing of the services which the user is authorized to access; and

an accounting tabulator capable of storing said accounting start requests and said accounting stop requests received from said gateway device.

18. The accounting metering system of claim 17 wherein said internet protocol used as a communication means between said gateway device and said authentication, authorization and accounting server further comprises the RADIUS protocol.

19. The accounting metering system of claim 17 wherein said accounting start requests and said accounting stop requests further comprise account attributes for both time and byte counts.

20. The accounting system of claim 17 further comprising:

a second gateway device capable of acting as a standby gateway device if the first gateway device fails or becomes temporarily non-functional.

21. The accounting system of claim 17 further comprising:

a second authentication, authorization and accounting device capable of acting as a standby authentication, authorization and accounting device if the first authentication, authorization and accounting device fails or becomes temporarily non-functional.

22. The accounting system of claim 17 wherein said network, service and connection access request packets and said network, service and connection accounting request packets further comprise eight byte integer counters.