Method and system for tracking computer system usage through a remote access security device

• US 6,349,289 B1
• Filed: 01/16/1998
• Issued: 02/19/2002
• Est. Priority Date: 01/16/1998
• Status: Expired due to Fees

• Current Assignee: SBC Properties, L.P.
• Original Assignee: Ameritech Corp. (AT&T, Inc.)
• Inventors: Farmer, Michael Stephan, Clayton, Christina Ellen, Peterson, Bruce Lee
• Primary Examiner(s): Nguyen, Cuong H.
• Application Number:
  US09/008,344
• Time in Patent Office: 1,495 Days
• Field of Search: 705/34, 705/26, 705/27, 705/30, 705/40, 358/400, 379/114.1, 379/112.1, 709/227
• US Class Current: 705/34
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 10/1091 Recording time for administrative or management purposes
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: G06Q 40/123 Tax preparation or submission
• CPC Class Codes: G06Q 50/06 Energy or water supply
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system and method for monitoring remote computer access and associated costs is provided. The system includes a remotely located communication server in communication with multiple host computer networks and in communication with a network access server. First and second memory devices contain a list of authorized users for the host computer networks and a user log for use by a billing computer to generate bills. The method includes the steps of creating starting and ending time stamps for each authorized user accessing a respective one of the multiple host computer networks and creating a user log to generate bills and monitor host computer network usage.

Claims

1. In a system for providing secure remote access between a plurality of unrelated host computer networks and a plurality of authorized users via a network access server, a method of monitoring access to each of the unrelated host computer networks comprising the steps of:

maintaining a list of host computer networks and an associated list of authorized users for each host computer network in a first memory device;

automatically creating a starting time stamp at the beginning of a remote access call received from an authorized user at a communication server and connecting the authorized user to an appropriate one of the plurality of unrelated host computer networks after determining at the network access server that the authorized user is authorized to connect to the appropriate one of the plurality of unrelated host computer networks;

automatically creating an ending time stamp at a conclusion of the remote access call;

storing the starting and ending time stamps for the remote access call in a user log in the network access server, the starting and ending time stamps associated with the list of authorized users whereby the user log contains a record of computer time usage for each authorized user;

transmitting the user log from the network access server to a billing computer;

transmitting the list of host computer networks and the associated list of authorized users for each host computer network from the first memory device to the billing computer; and

generating a billing summary at the billing computer for each of the host computer networks.

2. The method of claim 1, wherein the list of host computer networks further comprises a fee schedule associated with each of the host computer networks, the fee schedule being a predetermined list of standard charges and the step of generating a billing summary comprises comparing the user log to the fee schedule for each respective host computer network and determining a total fee for each of the host computer networks.

3. The method of claim 1, wherein the system further comprises a help desk computer and the method further comprises:

storing a list of telephone calls received at the help desk computer from authorized users, each telephone call in the list of telephone calls associated with an authorized user; and

transmitting the list of telephone calls to the billing computer.

4. The method of claim 3, wherein the step of generating a billing summary further comprises generating a list of usage charges and generating a list of help desk charges for each host computer network from the user log and the list of telephone calls.

5. The method of claim 4, wherein the step of generating a billing summary comprises generating a billing summary for each authorized user of each host computer network, the billing summary having a list of authorized users for the respective host computer network, an associated usage charge for each of the authorized users, and an associated list of telephone calls for each associated user.

6. The method of claim 1, further comprising:

receiving a long distance telephone company report of total time usage of a network access telephone number at the billing computer; and

determining a per user cost ratio for each of the authorized users of the host computer network using the network access telephone number from the long distance telephone company report and the user log.

7. The method of claim 1, wherein the list of host computer networks comprises a list of company departments, each company department associated with a predetermined number of authorized users and the step of generating a billing summary comprises calculating a total usage for each company department from the user log and the list of company departments.

8. The method of claim 7, wherein the list of host computer networks further comprises a fee schedule associated with each of the host computer networks, the fee schedule being a predetermined list of standard charges and the step of generating a billing summary comprises calculating a fee for each company department based on the fee schedule and the calculated total usage for each company department.

9. The method of claim 1 further comprising the step of transmitting each billing summary for each host computer network from the billing computer to the host computer networks, each billing summary directed to a respective one of the plurality of host computer networks.

10. The method of claim 9, wherein the step of transmitting each billing summary comprises sending the billing summary via e-mail.

11. The method of claim 9 wherein the step of transmitting each billing summary comprises sending each billing summary via facsimile from the billing computer.

12. In a system for providing secure remote access between a plurality of unrelated host computer networks and a plurality of authorized users via a network access server, a method of monitoring access to each of the unrelated host computer networks comprising the steps of:

maintaining a list of host computer networks and an associated list of authorized users for each host computer network in a first memory device;

receiving a remote access telephone call to a host computer network from a user computer of an authorized user at a communication server;

automatically creating a starting time stamp at the beginning of the remote access call received from an authorized user at the communication server and connecting the authorized user to an appropriate one of the plurality of unrelated host computer networks after determining at the network access server that the authorized user is authorized to connect to the appropriate one of the plurality of unrelated host computer networks;

automatically creating an ending time stamp when the user computer terminates the remote access call with the host computer;

storing the starting and ending time stamps for the remote access call in a user log in the network access server, the starting and ending time stamps associated with the list of authorized users whereby the user log contains a record of computer time usage for each authorized user;

transmitting the user log from the network access server to a billing computer;

transmitting the list of host computer networks and the associated list of authorized users for each host computer network from the first memory device to the billing computer; and

generating a billing summary at the billing computer for each of the host computer networks.

13. The method of claim 12, wherein connecting the authorized user to an appropriate one of the plurality of unrelated host computer networks after authenticating comprises communicating with a security server to authenticate that the authorized user may access a host computer network and connecting the authorized user to the host computer network via the communication server.