Distributed network communication system which enables multiple network providers to use a common distributed network infrastructure

• US 6,732,176 B1
• Filed: 04/18/2000
• Issued: 05/04/2004
• Est. Priority Date: 11/03/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Wayport, Inc. (AT&T, Inc.)
• Inventors: Thompson, James, McClelland, Kathleen E., Stewart, Brett B.
• Primary Examiner(s): Lee, Thomas
• Assistant Examiner(s): DU, THUAN N
• Application Number:
  US09/551,291
• Time in Patent Office: 1,477 Days
• Field of Search: 340/573, 340/825, 342/357, 342/457, 370/352, 379/121, 455/400, 709/223, 709/220, 709/221, 709/227, 709/228, 709/229, 702/200
• US Class Current: 709/227
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1439 time-based
• CPC Class Codes: H04L 12/1464 using a card, such as credit card, prepay card or SIM
• CPC Class Codes: H04L 12/1471 splitting of costs
• CPC Class Codes: H04L 12/1496 involving discounts
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/185 by embedding added-value information into content, e.g. geo-tagging
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 48/14 using user query or user detection
• CPC Class Codes: H04W 8/00 Network data management

Abstract

A system and method for providing access and/or roaming features on a network system. The network system includes a plurality of wireless and/or wired access points coupled to a network. A portable computing device (PCD) of a user may store identification information which uniquely indicates a network provider of a plurality of possible network providers. The identification information may also or instead indicate an access or privilege level of the user. When the access point receives the identification information from a PCD of a user, the access point may determine the appropriate network provider for the portable computing device using the identification information. Network access may then be provided to the portable computing device through the determined network provider.

Claims

1. A method for providing access to a network system, wherein the network system includes a plurality of access points coupled to a network, the method comprising:

a first access point receiving identification information from a portable computing device, wherein the identification information indicates a network provider of a plurality of possible network providers, wherein said first access point includes a memory medium which stores a data structure comprising a list of identification information entries each indicating at least one network provider of the plurality of possible network providers;

determining the network provider for the portable computing device after receiving the identification information, wherein said determining the network provider for the portable computing device includes accessing the memory medium and using the received identification information to determine the network provider;

the first access point receiving data from the portable computing device; and

providing network access to the portable computing device through the network provider determined in said determining.

2. The method of claim 1, wherein said providing network access comprises providing the data received from the portable computing device to a destination based on the determined network provider.

3. The method of claim 1, wherein the network system is useable by subscribers of each of the plurality of possible network providers.

4. The method of claim 1, further comprising:

maintaining and storing a usage amount by the portable computing device;

wherein the determined network provider charges for access by the portable computing device to the network.

5. The method of claim 1, wherein the data structure further comprises associated methods for providing data to the respective plurality of possible network providers;

wherein said determining the network provider for the portable computing device includes accessing the memory medium, using the received identification information to determine the network provider, and using an associated method for providing the data to the network provider.

6. The method of claim 5, wherein the data structure stores a destination address indicating a destination specified by the network provider;

wherein said providing the data comprises providing the data to the destination specified by the network provider.

7. The method of claim 1, wherein the plurality of access points are maintained by a first network provider;

wherein the identification information indicates a second network provider.

8. The method of claim 7, wherein the data structure further comprises a destination, wherein the destination is specified by the first network provider;

wherein said providing the data comprises providing the data to the destination specified by the first network provider.

9. The method of claim 7, wherein the data structure further comprises a destination, wherein the destination is specified by the second network provider;

wherein said providing the data comprises providing the data to the destination specified by the second network provider.

10. The method claim of claim 7, wherein the data structure further comprises an associated method for providing data to the second network provider;

wherein said determining the network provider for the portable computing device includes accessing the memory medium, using the received identification information to determine the network provider, and using the associated method for providing the data to the second network provider.

11. The method claim of 10, wherein the associated method is provided by the first network provider.

12. The method claim of 10, wherein the associated method is provided by the second network provider.

13. The method of claim 1, wherein the identification information comprises a System ID of the portable computing device, wherein the System ID uniquely identifies the network provider of the plurality of possible network providers.

14. The method of claim 1, further comprising:

the first access point receiving identification information from a first portable computing device, wherein the identification information indicates a first network provider of the plurality of possible network providers;

determining the first network provider for the first portable computing device after receiving the identification information;

the first access point receiving data from the first portable computing device;

providing the data received from the first portable computing device to a destination associated with the first network provider;

the first access point receiving identification information from a second portable computing device, wherein the identification information indicates a second network provider of the plurality of possible network providers;

determining the second network provider for the second portable computing device after receiving the identification information;

the first access point receiving data from the second portable computing device; and

providing the data received from the second portable computing device to a destination associated with the second network provider.

15. The method of claim 1,

wherein the plurality of access points are arranged at known locations in a geographic region, the method further comprising:

the first access point providing geographic location information indicating a known geographic location of the portable computing device;

wherein said providing network access comprises selectively providing network access to the portable computing device based on the known geographic location of the portable computing device.

16. The method of claim 1, wherein the data structure further comprises a list of access levels, the method further comprising:

determining an access level for the portable computing device after receiving the identification information, wherein said determining the access level for the portable computing device includes accessing the memory medium and using the received identification information to determine the access level;

the first access point receiving data from the portable computing device; and

providing the data received from the portable computing device to a destination based on the determined access level.

17. The method of claim 16, wherein said providing the data comprises:

providing the data to one or more resources on the network to allow the portable computing device access to the one or more resources on the network if the access level is a first access level;

providing the data to a destination for external access out of the network to only allow the portable computing device access to other networks if the access level is a second access level;

wherein, if the access level is the second access level, the data is not provided to the one or more resources on the network.

18. The method of claim 1, wherein the first access point communicates with the portable computing device in a wireless fashion.

19. The method of claim 18, further comprising:

assigning a wireless communication channel for communication between the first access point and the portable computing device.

20. The method of claim 19, wherein the first access point assigns the wireless communication channel for communication between the first access point and the portable computing device.

21. The method of claim 19, wherein said assigning comprises assigning the wireless communication channel based on the identification information received from the portable computing device.

22. The method of claim 19, wherein said assigning comprises assigning the wireless communication channel based on the determined network provider.

23. The method of claim 18, further comprising:

determining an access level for the portable computing device after receiving the identification information; and

assigning a wireless communication channel for communication between the first access point and the portable computing device based on the determined access level.

24. The method of claim 1, wherein the first access point communicates with the portable computing device in a wired fashion.

25. The method of claim 1, wherein at least a subset of the identification information entries each indicate one or more virtual local area networks (VLANs).

26. The method of claim 25,

wherein each virtual local area network (VLAN) specifies a network provider.

27. The method of claim 26, wherein said providing network access comprises using a VLAN specified by the identification information.

28. The method of claim 1,

wherein the data structure further stores a respective network provider for each identification information entry;

wherein said determining the network provider comprises indexing into the data structure using the identification information to determine the network provider stored in the data structure corresponding to the identification information.

29. The method of claim 1, wherein the data structure further comprises a destination, wherein the destination is specified by a first network provider, of the plurality of network providers;

wherein said providing the data comprises providing the data to the destination specified by the first network provider.

30. The method of claim 1, wherein said identification information comprises a digital certificate.

31. The method of claim 1, wherein said identification information comprises an IEEE 802.11 system identification.

32. The method of claim 1, wherein said identification information comprises a media access control (MAC) identification.

33. The method of claim 1, wherein said identification information comprises a known geographic location of the portable computing device.

34. The method of claim 1, wherein the plurality of access points are arranged at known locations in a geographic region, the method further comprising:

the first access point providing geographic location information indicating a known geographic location of the portable computing device.

35. A network system, comprising:

a network;

a plurality of access points coupled to the network, wherein each of the plurality of access points is operable to communicate with a portable computing device, wherein each of the plurality of access points is configured to receive identification information from the portable computing device indicating a network provider of a plurality of possible network providers, wherein each of the plurality of access points includes a memory medium which stores a data structure, wherein the data structure comprises a list of identification information entries and corresponding network providers, wherein each entry indicates a respective network provider of the plurality of possible network providers;

wherein each of the plurality of access points is operable to determine the network provider indicated in the identification information;

wherein, in determining the network provider for the portable computing device, each of the plurality of access points is operable to access the memory medium and use the received identification information to determine the network provider;

wherein network access is provided to the portable computing device through the indicated network provider.

36. The network system of claim 35, wherein each of the plurality of access points is operable to provide data received from the portable computing device to a destination based on the determined network provider.

37. The network system of claim 35, wherein the network system is useable by subscribers of each of the plurality of possible network providers.

38. The network system of claim 35, wherein the determined network provider charges for access by the portable computing device to the network.

39. The network system of claim 35, wherein the data structure further comprises:

associated methods for providing data to the respective plurality of possible network providers;

wherein, in determining the network provider for the portable computing device, each of the plurality of access points is operable to access the memory medium, use the received network provider identification information to determine the network provider, and use an associated method for providing the data to the determined network provider.

40. The network system of claim 39, wherein the memory medium is comprised in one or more of the access points.

41. The network system of claim 39,

wherein the data structure further comprises a destination address indicating a destination specified by the determined network provider;

wherein each of the plurality of access points is operable to provide the data to the destination specified by the determined network provider.

42. The network system of claim 41, wherein the data structure stores a destination, wherein the destination is specified by the first network provider;

wherein said providing the data comprises providing the data to the destination specified by the first network provider.

43. The network system of claim 41, wherein the data structure further comprises a destination, wherein the destination is specified by a second network provider;

wherein said providing the data comprises providing the data to the destination specified by the second network provider.

44. The network system of claim 35, wherein the plurality of access points are maintained by a first network provider;

wherein the identification information indicates a second network provider.

45. The network system of claim 35, wherein the identification information comprises a System ID of the portable computing device, wherein the System ID uniquely identifies a network provider of the plurality of possible network providers.

46. The network system of claim 35, further comprising:

a portable computing device operated by a user, wherein the portable computing device includes the identification information, wherein the identification information indicates a first network provider of the plurality of network providers;

wherein, when a first access point of the plurality of access points receives the identification information from the portable computing device, the first access point is operable to determine the first network provider;

wherein the first access point is operable to provide data received from the portable computing device according to the first network provider.

47. The network system of claim 35, further comprising:

one or more network devices coupled to the network, wherein each of the one or more network devices corresponds to one of the plurality of possible network providers;

wherein each of the plurality of access points is operable to provide data received from the portable computing device to a network device corresponding to the determined network provider.

48. The network system of claim 35, wherein each of the plurality of access points is operable to provide the data to the destination in a secure manner.

49. The network system of claim 35, wherein the plurality of access points are arranged at known locations in a geographic region, wherein each access point is operable to provide geographic location information indicating a known geographic location of the portable computing device;

wherein network access is selectively provided to the portable computing device based on the known geographic location of the portable computing device.

50. The network system of claim 35, wherein one or more of the plurality of access points are operable to:

determine an access level for the portable computing device after receiving the identification information; and

provide data received from the portable computing device to a destination based on the determined access level.

51. The network system of claim 50, wherein, in providing the data, said one or more of the plurality of access points are operable to:

provide the data to one or more resources or the network to allow the portable computing device access to the one or more resources on the network if the access level is a first access level;

provide the data to a destination for external access out of the network to only allow the portable computing device access to other networks if the access level is a second access level;

wherein, if the access level is the second access level, the data is not provided to the one or more resources on the network.

52. The network system of claim 35, wherein at least a subset of the plurality of access points are wireless access points operable to communicate with the portable computing device in a wireless fashion.

53. The network system of claim 52, wherein each of the wireless access points is operable to assign a wireless communication channel for communication between the first access point and the portable computing device.

54. The network system of claim 53, wherein one or more of the wireless access points are operable to assign the wireless communication channel based on the identification information received from the portable computing device.

55. The network system of claim 53, wherein one or more of the wireless access points is operable to assign the wireless communication channel based on the determined network provider.

56. The network system of claim 52, further comprising:

wherein one or more of the wireless access points are operable to determine an access level for the portable computing device after receiving the identification information; and

wherein said one or more of the wireless access points are operable to assign a wireless communication channel for communication between the first access point and the portable computing device based on the determined access level.

57. The network system of claim 35, wherein at least a subset of the plurality of access points are operable to communicate with the portable computing device in a wired fashion.

58. The network system of claim 35, wherein at least a subset of the identification information entries each indicate at least one VLAN.

59. The network system of claim 58,

wherein each VLAN specifies a network provider.

60. The network system of claim 59, wherein the indicated VLAN is used in providing network access.

61. The network system of claim 35,

wherein the data structure further stores a respective network provider for each identification information entry;

wherein, in determining the network provider for the portable computing device, each of the plurality of access points is operable to index into the data structure using the identification information to determine the network provider stored in the data structure corresponding to the identification information.

62. The network system of claim 35, wherein the data structure further comprises a destination, wherein the destination is specified by a first network provider, of the plurality of network providers;

wherein said providing the data comprises providing the data to the destination specified by the first network provider.

63. The network system of claim 35, wherein said identification information comprises a digital certificate.

64. The network system of claim 35, wherein said identification information comprises an IEEE 802.11 system identification.

65. The network system of claim 35, wherein said identification information comprises a media access control (MAC) identification.

66. The network system of claim 35, wherein said identification information comprises a known geographic location of the portable computing device.

67. The network system of claim 35, wherein the plurality of access points are arranged at known locations in a geographic region, wherein the first access point is operable to provide geographic location information indicating a known geographic location of the portable computing device.

68. The network system of claim 35, wherein the network is operable to support IEEE 802.1p.

69. The network system of claim 35, wherein the network is operable to enforce a predefined quality of service metric to a virtual port within the network.

70. A method for providing roaming features on a wireless network system, wherein the wireless network system includes a plurality of access points coupled to a network, the method comprising:

a first access point receiving identification information from a portable computing device in a wireless manner, wherein the identification information indicates a network provider of a plurality of possible network providers, wherein said first access point includes a memory medium which stores a data structure comprising a list of identification information entries each indicating one or more network providers of the plurality of possible network providers;

determining a network provider for the portable computing device after receiving the identification information, wherein said determining the network provider for the portable computing device includes accessing the memory medium and using the received identification information to determine the network provider;

the first access point receiving data from the portable computing device in a wireless manner;

providing the data received from the portable computing device to a destination based on the determined network provider.

71. The method of claim 70, wherein the wireless network system is a distributed wireless network system.

72. The method of claim 70, wherein at least a subset of the identification information entries each indicate one or more VLANs.

73. The method of claim 72,

wherein each VLAN specifies a network provider;

wherein said providing network access comprises using a VLAN specified by the identification information.

74. The method of claim 70,

wherein the data structure further stores a respective network provider for each identification information entry;

wherein said determining the network provider comprises indexing into the data structure using the identification information to determine the network provider stored in the data structure corresponding to the identification information.

75. The method of claim 70, wherein the data structure further comprises a destination, wherein the destination is specified by a first network provider, of the plurality of network providers;

wherein said providing the data comprises providing the data to the destination specified by the first network provider.

76. The method of claim 70, wherein said identification information comprises a digital certificate.

77. The method of claim 70, wherein said identification information comprises an IEEE 802.11 system identification.

78. The method of claim 70, wherein said identification information comprises a media access control (MAC) identification.

79. The method of claim 70, wherein said identification information comprises a known geographic location of the portable computing device.

80. The method of claim 70, wherein the plurality of access points are arranged at known locations in a geographic region, the method further comprising:

the first access point providing geographic location information indicating a known geographic location of the portable computing device.

81. A method for providing access to a wireless network system, wherein the wireless network system includes a plurality of access points coupled to a network, the method comprising:

a first access point receiving identification information from a portable computing device in a wireless manner, wherein the identification information indicates a network provider of a plurality of possible network providers, wherein said first access point includes a memory medium which stores a data structure comprising a list of identification information entries each indicating one or more network providers of the plurality of possible network providers;

determining a network provider for the portable computing device after receiving the identification information, wherein said determining the network provider for the portable computing device includes accessing the memory medium and using the received identification information to determine the network provider;

the first access point receiving data from the portable computing device in a wireless manner; and

providing network access to the portable computing device through the determined network provider.

82. The method of claim 81, wherein one or more of the identification information entries each indicate one or more VLANs.

83. The method of claim 82,

wherein each VLAN specifies a network provider.

84. The method of claim 83, wherein said providing network access comprises using said one or more VLANs.

85. The method of claim 81,

wherein the data structure further stores a respective network provider for each identification information entry;

wherein said determining the network provider comprises indexing into the data structure using the identification information to determine the network provider stored in the data structure corresponding to the identification information.

86. The method of claim 81, wherein the data structure further comprises a destination, wherein the destination is specified by a first network provider, of the plurality of network providers;

wherein said providing the data comprises providing the data to the destination specified by the first network provider.

87. The method of claim 81, wherein said identification information comprises a digital certificate.

88. The method of claim 81, wherein said identification information comprises an IEEE 802.11 system identification.

89. The method of claim 81, wherein said identification information comprises a media access control (MAC) identification.

90. The method of claim 81, wherein said identification information comprises a known geographic location of the portable computing device.

91. The method of claim 81, wherein the plurality of access points are arranged at known locations in a geographic region, the method further comprising:

the first access point providing geographic location information indicating a known geographic location of the portable computing device.

92. A method for providing selective access to network resources in a distributed wireless network system, wherein the wireless network system includes a plurality of access points coupled to a network, the method comprising:

a first access point receiving identification information from a portable computing device, wherein said first access point includes a memory medium which stores a data structure comprising a list of identification information entries indicating one or more access levels;

determining an access level for the portable computing device after receiving the identification information, wherein said determining the access level for the portable computing device includes accessing the memory medium and using the received identification information to determine the access level;

the first access point receiving data from the portable computing device; and

providing the data received from the portable computing device to a destination based on the determined access level.

93. The method of claim 92, wherein said providing the data comprises:

providing the data to one or more resources on the network to allow the portable computing device access to the one or more resources on the network if the access level is a first access level;

providing the data to a destination for external access out of the network to only allow the portable computing device access to other networks if the access level is a second access level;

wherein, if the access level is the second access level, the data is not provided to the one or more resources on the network.

94. The method of claim 92, wherein one or more of the identification information entries each indicate a VLAN.

95. The method of claim 94,

wherein each VLAN specifies a network provider.

96. The method of claim 95, wherein said providing network access comprises using a VLAN specified by the identification information.

97. The method of claim 92,

wherein the data structure further stores a respective network provider for each identification information entry;

wherein said determining the network provider comprises indexing into the data structure using the identification information to determine the network provider stored in the data structure corresponding to the identification information.

98. The method of claim 92, wherein the data structure further comprises a list of known geographic location information and a corresponding list of possible access levels, wherein the plurality of access points are arranged at known locations in a geographic region, the method further comprises:

the first access point providing geographic location information indicating a known geographic location of the portable computing device; and

determining a second access level for the portable computing device after determining the known geographic location information, wherein said determining the second access level for the portable computing device includes accessing the memory medium and using the determined known geographic location information to determine the access level;

the first access point receiving data from the portable computing device; and

providing the data received on the determined second access level.

99. The method of claim 92, wherein the first access point is operable to access a management information base (MIB), coupled to the network, which stores a data structure comprising a list of known geographic location information indicating possible access levels, wherein the plurality of access points are arranged at known locations in a geographic region, the method further comprises:

the first access point providing geographic location information indicating a known geographic location of the portable computing device; and

determining a second access level for the portable computing device after determining the known geographic location information, wherein said determining the second access level for the portable computing device includes accessing the MIB and using the determined known geographic location information to determine the access level.

100. The method of claim 92, wherein said identification information comprises a digital certificate.

101. The method of claim 92, wherein said identification information comprises an IEEE 802.11 system identification.

102. The method of claim 92, wherein said identification information comprises a media access control (MAC) identification.

103. The method of claim 92, wherein said identification information comprises a known geographic location of the portable computing device.

104. The method of claim 92, wherein the plurality of access points are arranged at known locations in a geographic region, the method further comprising:

the first access point providing geographic location information indicating a known geographic location of the portable computing device.

105. The method of claim 92,

wherein the access points are 802.11 wireless access points.

106. A first memory medium comprised in a wireless access point,

wherein the first memory medium comprises program instructions for providing access to a network system;

wherein the program instructions are executable to;

receive information from a portable computing device in a wireless manner, wherein the information indicates a network provider of a plurality of possible network providers;

access a second memory medium which stores a data structure comprising a list of identification information entries indicating one or more network providers of the plurality of possible network providers;

analyze said information received from the portable computing device with said list of identification information entries to determine a network provider;

provide network access to the portable computing device through the determined network provider.

107. A method for providing selective access to network resources in a distributed wireless network system, wherein the wireless network system includes a plurality of access points coupled to a network, wherein the plurality of access points are arranged at known locations in a geographic region, the method comprising:

a first access point receiving identification information from a portable computing device, wherein said first access point includes a memory medium which stores a data structure comprising a list of identification information entries indicating one or more network providers of the plurality of possible network providers and a list of geographic locations indicating discounts;

determining a network provider based on the identification information received from the portable computing device;

the first access point providing geographic location information indicating a known geographic location of the portable computing device;

determining a charge for the portable computing device to gain access to the network provider based on the determined network provider and the known geographic location of the portable computing device, wherein said determining the charge includes accessing the memory medium and using the received identification information and the known geographic location to determine the charge.

108. The method of claim 107, further comprising:

the first access point receiving data from the portable computing device; and

providing the data received from the portable computing device to a destination based on the determined network provider.

109. The method of claim 107, wherein said identification information comprises a digital certificate.

110. The method of claim 107, wherein said identification information comprises an IEEE 802.11 system identification.

111. The method of claim 107, wherein said identification information comprises a media access control (MAC) identification.

112. The method of claim 107,

wherein said determining a charge comprises determining a discount.

113. A method for providing selective access to network resources in a distributed wireless network system, wherein the wireless network system includes a plurality of access points coupled to a network, wherein the plurality of access points are arranged at known locations in a geographic region, the method comprising:

a first access point receiving identification information from a portable computing device, wherein said first access point includes a memory medium which stores a first data structure comprising a list of identification information and a corresponding list of the plurality of possible network providers, wherein said first access point is operable to access a management information base (MIB), coupled to the wireless network, which stores a second data structure comprising a list of the plurality of possible network providers and a corresponding list of known geographic locations indicating discounts;

the first access point providing geographic location information indicating a known geographic location of the portable computing device;

determining a charge fee for the portable computing device to gain access to the network provider after receiving the identification information and after said providing the geographic location information, wherein said determining the charge comprises;

accessing the memory medium to determine a network provider; and

accessing the MIB, and using the determined network provider, the known geographic location, and the network provider to determine the discount;

charging a fee for access of the portable computing device to the determined network provider.

114. The method of claim 113, wherein said identification information comprises a digital certificate.

115. The method of claim 113, wherein said identification information comprises an IEEE 802.11 system identification.

116. The method of claim 113, wherein said identification information comprises a media access control (MAC) identification.

117. The method of claim 113,

wherein said determining a charge comprises determining a discount.