Method and system for providing secure user access to public or private telephone and internet systems

• US 7,024,478 B1
• Filed: 08/14/2000
• Issued: 04/04/2006
• Est. Priority Date: 10/30/1998
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Jain, Vipin, Dalgic, Ismail
• Primary Examiner(s): Kang, Paul H.
• Application Number:
  US09/639,713
• Time in Patent Office: 2,059 Days
• Field of Search: 709/203, 709/217, 709/219, 709/225, 709/226, 709/229, 709/239, 708/109, 379/45, 705/64, 725/32
• US Class Current: 709/225
• CPC Class Codes: G06F 1/1632 External expansion units, e.g. docking stations
• CPC Class Codes: H04M 2250/02 including a Bluetooth interface
• CPC Class Codes: H04M 3/42 Systems providing special services or facilities to subscribers specially adapted for wireless communication networks H04W4/00
• CPC Class Codes: H04M 3/42153 by subscriber
• CPC Class Codes: H04M 3/42161 via computer interface
• CPC Class Codes: H04M 3/42229 Personal communication services, i.e. services related to one subscriber independent of his terminal and/or location diverting calls from one subscriber to another subscriber, i.e. two different subscriptions H04M3/54; selecting arrangements in intelligent networks H04Q3/005
• CPC Class Codes: H04M 3/42272 whereby the subscriber registers to the terminals for personalised service provision
• CPC Class Codes: H04M 3/42348 Location-based services which utilize the location information of a target
• CPC Class Codes: H04M 3/4285 Notifying, informing or entertaining a held party while on hold, e.g. Music On Hold
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42
• CPC Class Codes: H04W 28/18 Negotiating wireless communication parameters

Abstract

A public telephone and Internet access system that comprises Personal Digital Assistants (PDA) that are connected to an ethernet or other Local Area Network by a network cradle, and a number of ethernet telephones connected to the same Local Area Network. The PDAs store encrypted information about their owners, including the owner'"'"'s name, their phone forwarding preferences, access permissions to the network, and charging/billing information. When a PDA is attached to a network cradle, this information is automatically transferred to the gatekeeper, which is a server that performs management tasks for the ethernet phone network. These tasks include deciding whether or not a user is allowed to sign up and use a public ethernet phone, maintaining billing and charging information, and forwarding incoming calls for a given user to the ethernet phone at the user'"'"'s current location. This invention provides a secure method for the PDA and the gatekeeper to exchange authentication information.

Claims

1. A data system comprising:

a local area network (LAN) comprising a hub/switch and coupled to a server, said LAN for coupling with a Public Switched Telephone Network for communication therewith;

an ethernet phone coupled to communicate with said LAN;

a cradle for receiving a portable computer system and also coupled to communicate with said LAN without going through said phone;

wherein said hub/switch is for detecting a connection to a portable computer system and for performing authentication in response thereto;

wherein said cradle is for receiving user authentication data from said portable computer system and transmitting said user authentication data to said server; and

wherein said server is for opening a port on said hub/switch allowing said ethernet phone to communicate voice data over said LAN and also allowing said cradle access to said LAN provided said authentication is successful and otherwise for causing said hub/switch to block said ethernet phone and said cradle from accessing said LAN and said server for closing said port in response to detecting operational variations that are unfamiliar to said LAN.

2. A data system as described in claim 1 further comprising a serial to LAN converter and wherein said cradle is coupled to a serial port of said serial to LAN converter and wherein said serial to LAN converter is coupled to said hub/switch of said LAN.

3. A data system as described in claim 1 further comprising a Voice Over IP Gateway wherein a non-ethernet telephone is coupled to said Voice Over IP Gateway and wherein said Voice Over IP Gateway is coupled to said hub/switch of said LAN.

4. A data system as described in claim 1 wherein said server utilizes backend AAA infrastructure to perform said authentication.

5. A data system as described in claim 1 wherein said connection is detected by a linkbeat signal.

6. A data system as described in claim 1 wherein said user authentication data comprises a user identity and user billing information.

7. A data system as described in claim 1 wherein said user authentication data is encrypted.

8. A data system as described in claim 1 wherein said portable computer system is a personal digital assistant (PDA).

9. A data system as described in claim 1 wherein said portable computer system comprises a display screen for displaying status information regarding said authentication.

10. A data system as described in claim 1 wherein said ethernet phone and said cradle are located in proximity to each other within a phone booth.

11. A method of performing authentication within a data system comprising the steps of:

a) placing a portable computer system into a cradle, said cradle associated with an Ethernet phone;

b) detecting a connection to said portable computer system in response to said step a), said step b) performed by a hub/switch of a local area network (LAN) that is connected to a Public Switched Telephone Network;

c) in response to said step b), a server of said LAN causing said cradle to access user authentication data of said portable computer system and to transmit said user authentication data to said server;

d) performing user authentication based on said user authentication data;

e) provided said user authentication is successful, said server opening a port on said hub/switch for allowing said Ethernet phone to communicate voice data over said LAN and also allowing said cradle access to said LAN and said server for closing said port in response to detecting operational variations that are unfamiliar to said LAN; and

f) provided said user authentication is not successful, said server blocking said Ethernet phone and said cradle from accessing said LAN.

12. A method as described in claim 11 further comprising the step of said cradle communicating with said LAN using a serial interface coupled to a serial to LAN converter that is coupled to said hub/switch of said LAN.

13. A method as described in claim 11 wherein said step d) comprises the step of using backend AAA infrastructure to perform said user authentication.

14. A method as described in claim 11 wherein said step b) is performed using a linkbeat signal.

15. A method as described in claim 11 wherein said user authentication data comprises a user identity and user billing information.

16. A method as described in claim 11 wherein said portable computer system is a personal digital assistant (PDA).

17. A method as described in claim 11 wherein said portable computer system comprises a display screen and further comprising the step of displaying status information regarding said user authentication.

18. A method as described in claim 11 wherein said Ethernet phone and said cradle are located in proximity to each other within a phone booth.