Virtual private network service provider for asynchronous transfer mode network

• US 6,584,444 B1
• Filed: 11/03/1999
• Issued: 06/24/2003
• Est. Priority Date: 12/19/1996
• Status: Expired due to Term

• Current Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Holmes, Kim, Hui, Margaret, Tello, Antonio G.
• Primary Examiner(s): Coggins, Wynn W.
• Assistant Examiner(s): ROSEN, NICHOLAS D
• Application Number:
  US09/432,949
• Time in Patent Office: 1,329 Days
• Field of Search: 705/1, 705/40, 705/43, 705/44, 379/211.01, 379/211.02, 379/212.01
• US Class Current: 705/50
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 Architecture for metering, charging or billing
• CPC Class Codes: H04L 12/1471 splitting of costs
• CPC Class Codes: H04L 12/1492 negotiation of tariff
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2012/5615 Network termination, e.g. NT1, NT2, PBX
• CPC Class Codes: H04L 2012/5616 Terminal equipment, e.g. codecs, synch.
• CPC Class Codes: H04L 2012/5619 Network Node Interface, e.g. tandem connections, transit switching
• CPC Class Codes: H04L 2012/5639 Tariffs or charging
• CPC Class Codes: H04L 2012/5673 Coding or scrambling
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 15/08 Metering calls to called party , i.e. B-party charged for the communication
• CPC Class Codes: H04M 2215/62 Called party billing, e.g. reverse billing, freephone, collect call, 0800 or 0900
• CPC Class Codes: H04Q 11/0478 Provisions for broadband connections

Abstract

A virtual private network service provider is used to transfer data over a data network to a final destination, with third-party billing. The method comprises the steps of: prompting the user at a data terminal to select a destination, password, and call type; sending a set-up message to the data network; selecting a virtual private network provider through the data network; the virtual private network provider giving an encryption key to the user, and then prompting the user for a password and a user identification; encrypting the password, and sending the user identification and the encrypted password to the virtual private network provider; the virtual private network provider decrypting the encrypted password, and verifying the password; the virtual private network provider providing an authorization code; and the data terminal transferring the data through the data network to the final destination, using the authorization code.

Claims

1. An apparatus for providing a datalink connection from a data terminal of a user to a data network and to a virtual private network, with third party billing, comprising:

a. an interface for prompting the user at the data terminal to select a call type including a choice of the virtual private network, the interface being between the data terminal and the data network;

b. a switching control point device connected to the data network, the switching control point device connected to a computer; and

c. a computer-readable medium encoded with a method of using the virtual private network and the data network, by providing an encryption key to the data terminal, encrypting a user password to produce an encrypted password, and providing an authorization code to facilitate third party billing, the computer-readable medium accessible by the computer.

2. The apparatus of claim 1, wherein the method encoded on the computer-readable medium further comprises negotiating for more bandwidth for the user, and including within the authorization code a grant of additional bandwidth.

3. The apparatus of claim 2, wherein the method encoded on the computer-readable medium further comprises temporarily storing a user identification and the encrypted password.

4. The apparatus of claim 3, wherein the method encoded on the computer-readable medium further comprises sending a set-up message to the data network.

5. The apparatus of claim 4, wherein the method encoded on the computer-readable medium further comprises decrypting the encrypted password.

6. The apparatus of claim 1 wherein the interface further comprises an interface for prompting the user at the data terminal to select a user identification and a password.

7. The apparatus of claim 6, wherein the method encoded on the computer-readable medium further comprises negotiating for more bandwidth for the user, and including within the authorization code a grant of additional bandwidth.

8. The apparatus of claim 7, wherein the method encoded on the computer-readable medium further comprises temporarily storing a user identification and the encrypted password.

9. The apparatus of claim 8, wherein the method encoded on the computer-readable medium further comprises sending a set-up message to the data network.

10. The apparatus of claim 9, wherein the method encoded on the computer-readable medium further comprises decrypting the encrypted password.

11. The apparatus of claim 1 wherein the interface further comprises an interface for prompting the user at the data terminal to select a destination, a user identification and a password.

12. The apparatus of claim 11, wherein the method encoded on the computer-readable medium further comprises negotiating for more bandwidth for the user, and including within the authorization code a grant of additional bandwidth.

13. The apparatus of claim 12, wherein the method encoded on the computer-readable medium further comprises temporarily storing a user identification and the encrypted password.

14. The apparatus of claim 13, wherein the method encoded on the computer-readable medium further comprises sending a set-up message to the data network.

15. The apparatus of claim 14, wherein the method encoded on the computer-readable medium further comprises decrypting the encrypted password.