Reverse internet protocol lookup

• US 6,131,164 A
• Filed: 02/27/1998
• Issued: 10/10/2000
• Est. Priority Date: 02/27/1998
• Status: Expired due to Term

• Current Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Parker, Terrence Lee
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Weir, James G.
• Application Number:
  US09/032,330
• Time in Patent Office: 956 Days
• Field of Search: 713/201, 713/202, 713/200, 709/224, 709/227, 709/229, 709/225, 709/226
• US Class Current: 726/5
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

A method of accessing an external system from a network without entering a password to enter the external system. The method includes the steps of a user gains access to a network and creating a unique dynamic address associated with the user for the period of time upon which the user first gains access to the network to the time the user signs off of the network. Relaying the unique dynamic address to an external system and the user gains access to the external system based on the unique dynamic address and without entering a password associated with the external system.

Claims

1. A telecommunications system, comprising:

a network;

a dynamic address generator that creates a unique dynamic address associated with a user for the period of time upon which the user first gains access to said network to the time the user signs off of said network;

a data storage and transfer system comprising a memory that includes a database of sessions data regarding users of said network; and

an external system connected to said network and said data storage and transfer system so that said unique dynamic address associated with said user is relayed to said external system when said user attempts to gain access to said external system; and

said external system queries said data storage and transfer system and requests a session record lookup based upon said dynamic address.

2. The telecommunications system of claim 1, wherein said memory returns to said external system system the requested session information and the user'"'"'s account identifier.

3. The telecommunications system of claim 2, wherein said external system makes further queries with said data storage and transfer system based on said returned session information and the account identifier in order to retrieve more information regarding said user.

4. The telecommunications system of claim 1, wherein said unique dynamic address allows said user to gain access to said external system without entering a password associated with said external system.

5. A method of accessing an external system from a network, said method comprising the steps of:

a user gains access to a network;

creating a unique dynamic address associated with said user for the period of time upon which the user first gains access to said network to the time the user signs off of said network;

relaying said unique dynamic address to an external system; and

said user gains access to said external system based on said unique dynamic address; and

querying a data storage and transfer system and requesting a session record lookup based upon said dynamic address.

6. The method of claim 5, further comprising the step of:

supplying the requested session information and the user'"'"'s account identifier to the external system.

7. The method of claim 6, comprising the step of:

making further queries with said data storage and transfer system based on said returned session information and the account identifier in order to retrieve further information regarding said user.

8. The method of claim 7, wherein said further information regarding said user comprises customer records and accounts.

9. The method of claim 7, wherein said external system is presented differently to said user based on said further information so as to allow/disallow certain features or functionality in said external system.

10. The method of claim 8, wherein said external system is presented differently to said user based on said further information so as to allow/disallow certain features or functionality in said external system.

11. The method of claim 5, wherein said unique dynamic address allows said user to gain access to said external system without entering a password associated with said external system.

12. A system for enabling a user to access an external system connected to a network, comprising in combination:

a dynamic address generator operative to assign a unique address to a user requesting access to the network, wherein the unique address is relayed to the external system when the user attempts to access the external system; and

a data storage and transfer system operative to store a session record including the unique address and user identity information, wherein the data storage and transfer system is operative to relay the user identity information to the external system in response to a query from the external system, and wherein the query identifies the unique address, thereby enabling the external system to determine whether the user is authorized to access the external system.

13. The system of claim 12, wherein the unique address is an Internet Protocol (IP) network address.

14. The system of claim 12, wherein the dynamic address generator comprises a point-of-presence and an authentication server, wherein the point-of-presence enables the user to access the network through a POTS line, wherein the authentication server receives an authentication request from the user, and wherein the authentication server accesses a database to determine whether to forward the authentication request to the data storage and transfer system.

15. The system of claim 12, wherein the dynamic address generator comprises a point-of-presence and an authentication server, wherein the point-of-presence enables the user to access the network through a POTS line, and wherein the authentication server receives an authentication request from the user.

16. The system of claim 15, further comprising a data entry device linked to the point-of-presence, wherein the data entry device enables the user to make the authentication request, and wherein the authentication request includes a password.

17. The system of claim 16, wherein the user identity information includes the password.

18. The system of claim 15, wherein the authentication server includes a comparator and a memory, wherein the memory stores two or more databases of users of the network, and wherein the comparator identifies the user with one of the users stored in the two or more databases.

19. The system of claim 12, wherein the external system is selected from the group consisting of a web site, a web server, an e-commerce transaction system, a customized start page, and an e-mail subsystem.

20. The system of claim 12, wherein the data storage and transfer system is operative to relay the session record to the external system in response to receiving the query from the external system.

21. A method for enabling a user to access a first system connected to a network, comprising in combination:

receiving an authentication request from the user;

authenticating the user to enable the user to access the network;

assigning a unique address to the user, wherein the unique address is relayed to the first system when the user attempts to access the first system;

storing a session record at a second system, wherein the session record includes the unique address and user identity information;

receiving at the second system a query from the first system, wherein the query includes the unique address; and

relaying the user identity information from the second system to the first system in response to the query.

22. The method of claim 21, wherein the unique address is an Internet Protocol (IP) network address.

23. The method of claim 21, wherein the authentication request is entered by the user at a data entry device, and wherein the authentication request is received across a POTS line connected to the data entry device.

24. The method of claim 21, further comprising accessing a database to determine whether to forward the authentication request to the second system.

25. The method of claim 24, further comprising identifying the user in the accessed database.

26. The method of claim 21, wherein the authentication request includes a password.

27. The method of claim 26, wherein the user identity information includes the password.

28. The method of claim 26, wherein the step of authenticating the user includes determining whether the password is a valid password for the user.

29. The method of claim 21, wherein the first system is selected from the group consisting of a web site, a web server, an e-commerce transaction system, a customized start page, and an e-mail subsystem.

30. The method of claim 21, further comprising relaying the unique address to the first system in response to receiving the query.

31. The method of claim 21, wherein the user identity information includes information regarding the user.

32. The method of claim 31, wherein the first system is one of a plurality of external systems accessible through the network, and wherein each of the plurality of external systems is operable to send a query to the second system in response to an access attempt by the user.