Network access methods, including direct wireless to internet access

• US 6,151,628 A
• Filed: 07/03/1997
• Issued: 11/21/2000
• Est. Priority Date: 07/03/1997
• Status: Expired due to Term

• Current Assignee: UTStarcom Incorporated (UTStarcom Holdings Corp.)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Cardwell, Bennett S., Xu, Yingchun
• Primary Examiner(s): Heckler, Thomas M.
• Application Number:
  US08/887,313
• Time in Patent Office: 1,237 Days
• Field of Search: 395/187.01, 395/182, 395/188.01, 395/200.5, 395/200.53, 395/200.54, 395/200.55, 395/200.57, 395/200.8, 379/60, 370/401, 370/338, 370/349, 370/389, 370/400, 370/907, 370/908, 370/913, 713/201, 713/202, 709/220, 709/223-225, 709/227, 709/229, 709/250
• US Class Current: 709/225
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 3/382 using authorisation codes or passwords
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 74/00 Wireless channel access

Abstract

A method is provided for connecting a source of digital data to a computer network. The source of digital data transmits data over a wireless transmission medium to a wireless service carrier, the wireless service carrier multiplexing the digital data onto a high speed digital telephone line. The method comprises the steps of receiving the digital data at a communications chassis such as a network access server, extracting, from the digital data, network access authentication data comprising at least one of the following: (a) a telephone number called by the source of digital data, or (b) a telephone number associated with the source of digital data; transmitting the authentication data over a local area or wide area computer network connected to a network authentication server for the computer network; determining, in the network authentication server, from the transmitted authentication data whether the remote user is permitted to access the computer network; and the authentication server responsively notifying the network access server the results of the step of determining; and authorizing the source of data to access the computer network if the step of determining results in a positive response.

Claims

1. A method of connecting a source of digital data to a computer network, the source of digital data communicating over a wireless transmission medium to a wireless service carrier, the wireless service carrier multiplexing said digital data onto a high speed digital telephone line, the method comprising the steps of:

receiving said digital data at a communications device coupling said source of digital data to said computer network, said communications device having a telephone line interface and a local area or wide area packet-switched computer network interface;

said communications device extracting, from said digital data, network access authentication data comprising at least one of the following;

(a) a telephone number called by said source of digital data, or (b) a telephone number associated with said source of digital data;

said communications device transmitting said authentication data over said local area or wide area computer network connected to said communications device to a network authentication server for said computer network;

determining, in said network authentication server, from said transmitted authentication data whether said remote user is permitted to access said computer network;

said authentication server responsively notifying said communications device the results of said step of determining and authorizing said source of data to access said computer network if said step of determining results in a positive response.

2. The method of claim 1, wherein said computer network comprises the Internet.

3. The method of claim 1, wherein said computer network comprises a corporate local area or wide area network.

4. The method of claim 1, wherein said communications device provides access to the public switched telephone network and wherein said communications device attempts to route said digital data to a destination for said digital data via said public switched telephone network in the event that said step of determining results in a negative response.

5. The method of claim 1, wherein the method further comprises the steps of:

identifying, in said authentication server, a tunneling server linked to said communications device to be used to provide access for said source of digital data to said computer network; and

routing digital data from said source of digital data to said tunneling server to provide said access to said computer network.

6. The method of claim 5, further comprising the steps of:

determining, in said authentication server, a tunneling protocol for said source of digital data for use in tunneling digital data between said network access server and said tunneling server; and

routing digital data from said source of digital data to said tunneling server in according to said tunneling protocol.

7. The method of claim 5, wherein said tunneling protocol is selected from the group of protocols comprising PPTP and TELNET.

8. The method of claim 2, further comprising the steps of:

conducting a password authentication routine between either (1) said tunneling server or (2) said authentication server and said source of digital data, thereby providing a second level of authentication between said source of digital data and said computer network.

9. An Internet access method for use by an Internet service provider having a communications device receiving telephone calls from a user over a high speed telephone line, comprising the steps of:

connecting said communications device to an authentication server over a local or wide area packet-switched computer network;

extracting, from an incoming call from said user, network access authentication data comprising at least one of the following;

(a) a telephone number called by said user, or (b) a telephone number associated with said user;

routing said network authentication data to said authentication server for authentication of said user from said network access authentication data;

identifying a tunneling server for providing network access for said user and notifying said network access server of said tunneling server;

tunneling digital data from said network access server to said tunneling server; and

placing said digital data onto the Internet by said tunneling server.

10. The method of claim 9, further comprising the steps of:

identifying a tunneling protocol for said user for said step of tunneling.

11. A method of connecting a mobile computer generating digital data to the Internet, the digital data being placed onto a high speed digital telephone line for transmission to an Internet service provider, the method comprising the steps of:

receiving said digital data at a communications device at said Internet service provider,

extracting, from said digital data, Internet access authentication data comprising at least one of the following;

(a) a telephone number called by said computer, or (b) a telephone number associated with said computer;

transmitting said authentication data to a network authentication server;

determining, in said network authentication server, from said transmitted authentication data, whether said computer is authorized to access the Internet via said network access server,

said authentication server responsively notifying said network access server the results of said step of determining and authorizing said computer to access the Internet if said step of determining results in a positive response.

12. The method of claim 11, wherein said communications device provides access to the public switched telephone network and wherein said communications device attempts to route said digital data to a destination for said digital data via said public switched telephone network in the event that said step of determining results in a negative response.

13. The method of claim 11, wherein the method further comprises the steps of:

identifying, in said authentication server, a tunneling server to be used to provide access for computer to the Internet; and

routing digital data from said computer to said tunneling server to provide said access to the Internet.

14. The method of claim 13, further comprising the steps of:

conducting a password authentication routine between either (1) said tunneling server or (2) said authentication server and said computer, thereby providing a second level of authentication between said source of digital data and said computer network.

15. The method of claim 12, further comprising the steps of:

determining, in said authentication server, a tunneling protocol for use in tunneling digital data between said network access server and said tunneling server; and

routing digital data from said computer to said tunneling server in according to said tunneling protocol.

16. The method of claim 15, wherein said tunneling protocol is selected from the group of protocols comprising PPTP and TELNET.

17. An Internet service provider system for a wireless Internet user, comprising, in combination:

a network access server comprising a high speed digital telephone line interface receiving calls from said wireless Internet user and an Internet gateway for placing digital data associated with said wireless Internet user onto the Internet;

an Internet access authentication server linked to said network access server via a communications medium and responsive to Internet access authentication data extracted from said digital data associated with said wireless Internet user received by said network access server and transmitted from said network access server to said authentication server;

said authentication server further comprising a memory for determining from said Internet access authentication data whether said wireless Internet user is authorized to access the Internet, said Internet authentication server responsively passing an authentication response to said network access server;

said network access server responsive to said authentication response from said authentication server to either allow said wireless Internet user to access the Internet or to take other action with respect to a call from said wireless Internet user.

18. The Internet service provider system of claim 17, further comprising a second Internet authentication server linked to said network access server over a communications medium and responsive to authentication data from said network access server, and wherein said second Internet authentication server is managed by a second Internet service provider and provides Internet authentication responses for said wireless Internet user to either said network access server or said Internet access authentication server.