Multiple-level internet protocol accounting

• US 7,346,697 B2
• Filed: 09/07/2004
• Issued: 03/18/2008
• Est. Priority Date: 10/13/1998
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Kochan, Roman Peter, Sitaraman, Aravind, Lou, Shuxian, Zhang, Shujin
• Primary Examiner(s): Winder; Patrice L
• Application Number:
  US10/936,006
• Publication Number:
  US 20050044216A1
• Time in Patent Office: 1,288 Days
• Field of Search: 709224-225, 709227-229, 709/226, 709/230
• US Class Current: 709/230
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1439 time-based
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04M 2215/22 Bandwidth or usage-sensitve billing

Abstract

A method and apparatus for providing computer network access points the capability for multiple-level accounting. A gateway device located at the access point is capable of generating Internet protocol accounting start and stop requests based on various events that need to be accounted for when a user accesses a network. These events include the user account logon, the service establishments and the Point to Point protocol (PPP) connections between the gateway device and public and private domains within the network. The counter is capable of tracking the duration of sessions and connections and the byte-count associated with the specified session or connection. The gateway device communicates with an accounting server which stores the accounting requests and matches start requests with subsequent stop requests.

Claims

1. An accounting metering apparatus for providing accounting in a computer network, said apparatus comprising:

a service accounting start request receiver adapted to receive a service accounting start request for a particular service, the service accounting start request being generated in response to a user'"'"'s logging onto the service if no other users have a current connection established to the service; and

a service accounting stop request receiver adapted to receive a service accounting stop request for the service, the service accounting stop request being generated in response to disconnection of the user from the service if no other users on the computer network have a current connection established to the service.

2. The accounting metering apparatus of claim 1, further comprising:

a logon access request receiver adapted to receive a logon access request for a user attempting to logon to the computer network; and

an authentication reply sender adapted to send an authentication reply for the user after verifying the user'"'"'s logon access request against user profiles.

3. The accounting metering apparatus of claim 1, further comprising:

an account logon accounting start request receiver adapted to receive an account logon accounting start request when a user has logged on to the computer network; and

an account logoff accounting stop request receiver adapted to receive an account logoff accounting stop request when the user has logged off from the computer network.

4. The accounting metering apparatus of claim 1, further comprising:

a service access request receiver adapted to receive a service access request for a user; and

a user profile forwarder adapted to forward a user profile for the user in response to the service access request, the user profile containing information of services which the user is authorized to access.

5. The accounting metering apparatus of claim 1, further comprising:

a connection accounting start request receiver adapted to receive a connection accounting start request for a user when the user has established a connection to a desired service; and

a connection accounting stop request receiver adapted to receive a connection accounting stop request for the user when the user has disconnected form the service.

6. The accounting metering apparatus of claim 1, further comprising:

a memory adapted to maintain user profiles containing information of services authorized to respective users.

7. The accounting metering apparatus of claim 1, further comprising:

a memory adapted to maintain service profiles.

8. A method for providing accounting to a computer network, said method comprising:

receiving a service accounting start request for a particular service, the service accounting start request being generated in response to a user'"'"'s logging onto the service if no other users have a current connection established to the service; and

receiving a service accounting stop request for the service, the service accounting stop request being generated in response to disconnection of the user from the service if no other users on the computer network have a current connection established to the service.

9. The method of claim 8, further comprising:

receiving a logon access request for a user attempting to logon to the computer network;

verifying the user'"'"'s logon access request against user profiles; and

sending an authentication reply for the user, the authentication reply indicating a result of said verifying.

10. The method of claim 8, further comprising:

receiving an account logon accounting start request when a user has logged on to the computer network; and

receiving an account logoff accounting stop request when the user has logged off from the computer network.

11. The method of claim 8, further comprising:

receiving a service access request for a user; and

forwarding a user profile for the user in response to the service access request, the user profile containing information of services which the user is authorized to access.

12. The method of claim 8, further comprising:

receiving a connection accounting start request for a user when the user has established a connection to a desired service; and

receiving a connection accounting stop request for the user when the user has disconnected form the service.

13. An apparatus for providing accounting to a computer network, said apparatus comprising:

means for receiving a service accounting start request for a particular service, the service accounting start request being generated in response to a user'"'"'s logging onto the service if no other users have a current connection established to the service; and

means for receiving a service accounting stop request for the service, the service accounting stop request being generated in response to disconnection of the user from the service if no other users on the computer network have a current connection established to the service.

14. The apparatus of claim 13, further comprising:

means for receiving a logon access request for a user attempting to logon to the computer network;

means for verifying the user'"'"'s logon access request against user profiles; and

means for sending an authentication reply for the user, the authentication reply indicating a result of said verifying.

15. The apparatus of claim 13, further comprising:

means for receiving an account logon accounting start request when a user has logged on to the computer network; and

means for receiving an account logoff accounting stop request when the user has logged off from the computer network.

16. The apparatus of claim 13, further comprising:

means for receiving a service access request for a user; and

means for forwarding a user profile for the user in response to the service access request, the user profile containing information of services which the user is authorized to access.

17. The apparatus of claim 13, further comprising:

means for receiving a connection accounting start request for a user when the user has established a connection to a desired service; and

means for receiving a connection accounting stop request for the user when the user has disconnected form the service.

18. The apparatus of claim 13, further comprising:

means for maintaining user profiles containing information of services authorized to respective users.

19. The apparatus of claim 13, further comprising:

means for maintaining service profiles.

20. A program storage device readable by a machine, storing instructions executable by the machine to perform a method for providing accounting to a computer network, said method comprising:

receiving a service accounting start request for a particular service, the service accounting start request being generated in response to a user'"'"'s logging onto the service if no other users have a current connection established to the service; and

receiving a service accounting stop request for the service, the service accounting stop request being generated in response to disconnection of the user from the service if no other users on the computer network have a current connection established to the service.

21. The program storage device of claim 20, wherein said method further comprises:

receiving a logon access request for a user attempting to logon to the computer network;

verifying the user'"'"'s logon access request against user profiles; and

sending an authentication reply for the user, the authentication reply indicating a result of said verifying.

22. The program storage device of claim 20, wherein said method further comprises:

receiving an account logon accounting start request when a user has logged on to the computer network; and

receiving an account logoff accounting stop request when the user has logged off from the computer network.

23. The program storage device of claim 20, wherein said method further comprises:

receiving a service access request for a user; and

forwarding a user profile for the user in response to the service access request, the user profile containing information of services which the user is authorized to access.

24. The program storage device of claim 20, wherein said method further comprises:

receiving a connection accounting start request for a user when the user has established a connection to a desired service; and

receiving a connection accounting stop request for the user when the user has disconnected form the service.

25. A system for providing accounting within a computer network, said method comprising:

a gateway device including;

a service accounting start request generator adapted to generate a service accounting start request associated with a service requested by a subscriber in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service; and

a service accounting stop request generator adapted to generate a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service; and

an accounting server communicating with said gateway device, said accounting server including;

an accounter adapted to receive the service accounting start request and the service accounting stop request.

26. The system of claim 25, wherein said gateway device further comprises:

a logon access request generator adapted to generate a logon access request for a subscriber attempting to logon to the computer network,

and wherein said accounting server further comprises;

an authenticator adapted to verify the subscriber'"'"'s logon access request against subscriber profiles; and

an authentication reply sender adapted to send an authentication reply for the subscriber.

27. The system of claim 25, wherein said gateway device further comprises:

an account logon accounting start request generator adapted to generate an account logon accounting start request when a subscriber has logged on to the computer network; and

an account logoff accounting stop request generator adapted to generate an account logoff accounting stop request when the subscriber has logged off from the computer network,

and wherein said accounter is further adapted to receive the account logon accounting start request and the account logoff accounting stop request.

28. The system of claim 25, wherein said gateway device further comprises:

a service access request generator adapted to generate a service access request for a subscriber, and

wherein said accounting server further comprises;

a user profile forwarder adapted to forward a user profile for the subscriber in response to receiving the service access request.

29. The system of claim 25, wherein said gateway device further comprises:

a connection accounting start request generator adapted to generate a connection accounting start request for a subscriber when the subscriber has established a connection to a desired service; and

a connection accounting stop request generator adapted to generate a connection accounting stop request for the subscriber when the subscriber has disconnected form the service,

and wherein said accounter is further adapted to receive the connection accounting start request and the connection accounting stop request.

30. The system of claim 25, wherein said accounting server further comprises:

a memory adapted to maintain user profiles containing information of services authorized to respective subscribers.

31. The system of claim 25, wherein said accounting server further comprises:

a memory adapted to maintain service profiles.

32. The system of claim 25, wherein said gateway device and said accounting server communicate using an internet protocol.

33. The system of claim 32, wherein said gateway device and said accounting server communicate using a RADIUS protocol.

34. The system of claim 25, further comprising:

a secondary gateway device to backup said gateway device if said gateway device becomes unavailable.

35. The system of claim 25, further comprising:

a secondary accounting server to backup said accounting server device if said accounting server becomes unavailable.

36. A method for providing accounting within a computer network, said method comprising:

generating, at a gateway device, a service accounting start request associated with a service requested by a subscriber in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service;

forwarding the service accounting start request to an accounting server;

generating, at the gateway device, a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service; and

forwarding the service accounting stop request to the accounting server.

37. The method of claim 36, further comprising:

generating, at the gateway device, a logon access request for a subscriber attempting to logon to the computer network;

receiving, at the accounting server, the logon access request and verifying the subscriber'"'"'s logon access request against subscriber profiles; and

sending an authentication reply for the subscriber to the gateway device.

38. The method of claim 36, further comprising:

generating, at the gateway device, an account logon accounting start request when a subscriber has logged on to the computer network;

forwarding the account logon accounting start request to the accounting server;

generating, at the gateway device, an account logoff accounting stop request when the subscriber has logged off from the computer network; and

forwarding the account logoff accounting stop request to the accounting server.

39. The method of claim 36, further comprising:

generating, at the gateway device, a service access request for a subscriber; and

receiving, at the accounting server, the service access request and forwarding a user profile for the subscriber to the gateway device.

40. The method of claim 36, further comprising:

generating, at the gateway device, a connection accounting start request for a subscriber when the subscriber has established a connection to a desired service;

forwarding the connection accounting start request to the accounting server;

generating, at the gateway device, a connection accounting stop request for the subscriber when the subscriber has disconnected form the service; and

forwarding the connection accounting stop request to the accounting server.

41. The method of claim 36, further comprising:

maintaining, at the accounting server, user profiles containing information of services authorized to respective subscribers.

42. The method of claim 36, further comprising:

maintaining service profiles at the accounting server.

43. The method of claim 36, wherein the gateway device and the accounting server communicate using an internet protocol.

44. The method of claim 43, wherein the gateway device and the accounting server communicate using a RADIUS protocol.

45. The method of claim 36, further comprising:

providing a secondary gateway device to backup the gateway device if the gateway device becomes unavailable.

46. The method of claim 36, further comprising:

providing a secondary accounting server to backup the accounting server device if the accounting server becomes unavailable.

47. A system for providing accounting within a computer network, said system comprising:

means for generating, at a gateway device, a service accounting start request associated with a service requested by a subscriber in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service;

means for forwarding the service accounting start request to an accounting server;

means for generating, at the gateway device, a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service; and

means for forwarding the service accounting stop request to the accounting server.

48. The system of claim 47, further comprising:

means for generating, at the gateway device, a logon access request for a subscriber attempting to logon to the computer network;

means for receiving, at the accounting server, the logon access request and verifying the subscriber'"'"'s logon access request against subscriber profiles; and

means for sending an authentication reply for the subscriber to the gateway device.

49. The system of claim 47, further comprising:

means for generating, at the gateway device, an account logon accounting start request when a subscriber has logged on to the computer network;

means for forwarding the account logon accounting start request to the accounting server;

means for generating, at the gateway device, an account logoff accounting stop request when the subscriber has logged off from the computer network; and

means for forwarding the account logoff accounting stop request to the accounting server.

50. The system of claim 47, further comprising:

means for generating, at the gateway device, a service access request for a subscriber; and

means for receiving, at the accounting server, the service access request and forwarding a user profile for the subscriber to the gateway device.

51. The system of claim 47, further comprising:

means for generating, at the gateway device, a connection accounting start request for a subscriber when the subscriber has established a connection to a desired service;

means for forwarding the connection accounting start request to the accounting server;

means for generating, at the gateway device, a connection accounting stop request for the subscriber when the subscriber has disconnected form the service; and

means for forwarding the connection accounting stop request to the accounting server.

52. The system of claim 47, further comprising:

means for maintaining, at the accounting server, user profiles containing information of services authorized to respective subscribers.

53. The system of claim 47, further comprising:

means for maintaining service profiles at the accounting server.

54. The system of claim 47, wherein the gateway device and the accounting server communicate using an internet protocol.

55. The system of claim 54, wherein the gateway device and the accounting server communicate using a RADIUS protocol.

56. A program storage device readable by a machine, storing instructions executable by the machine to perform a method for providing accounting within a computer network, said method comprising:

generating, at a gateway device, a service accounting start request associated with a service requested by a subscriber in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service;

forwarding the service accounting start request to an accounting server;

generating, at the gateway device, a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service; and

forwarding the service accounting stop request to the accounting server.

57. The program storage device of claim 56, wherein said method further comprises:

generating, at the gateway device, a logon access request for a subscriber attempting to logon to the computer network;

receiving, at the accounting server, the logon access request and verifying the subscriber'"'"'s logon access request against subscriber profiles; and

sending an authentication reply for the subscriber to the gateway device.

58. The program storage device of claim 56, wherein said method further comprises:

generating, at the gateway device, an account logon accounting start request when a subscriber has logged on to the computer network;

forwarding the account logon accounting start request to the accounting server;

generating, at the gateway device, an account logoff accounting stop request when the subscriber has logged off from the computer network; and

forwarding the account logoff accounting stop request to the accounting server.

59. The program storage device of claim 56, wherein said method further comprises:

generating, at the gateway device, a service access request for a subscriber; and

receiving, at the accounting server, the service access request and forwarding a user profile for the subscriber to the gateway device.

60. The program storage device of claim 56, wherein said method further comprises:

generating, at the gateway device, a connection accounting start request for a subscriber when the subscriber has established a connection to a desired service;

forwarding the connection accounting start request to the accounting server;

generating, at the gateway device, a connection accounting stop request for the subscriber when the subscriber has disconnected form the service; and

forwarding the connection accounting stop request to the accounting server.

61. The program storage device of claim 56, wherein said method further comprises:

maintaining, at the accounting server, user profiles containing information of services authorized to respective subscribers.

62. The program storage device of claim 56, wherein said method further comprises:

maintaining service profiles at the accounting server.

63. The program storage device of claim 56, wherein the gateway device and the accounting server communicate using an internet protocol.

64. The program storage device of claim 63, wherein the gateway device and the accounting server communicate using a RADIUS protocol.

65. A method for providing accounting within a computer network, said method comprising:

receiving a service logon request from a subscriber, the service logon request indicating a requested service;

logging on the subscriber to the requested service if the requested service is available for the subscriber;

generating a service accounting start request associated with the requested service in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service; and

generating a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service.

66. The method of claim 65, wherein said logging on the subscriber comprises:

determining if the user has authorization to access the requested service based on a user profile for the subscriber.

67. The method of claim 66, wherein said logging on the subscriber further comprises:

generating, if a user profile is not available, a service access request to locate a user profile for the subscriber stored in a memory; and

receiving the user profile from the memory.

68. The method of claim 67, wherein the memory is maintained in an accounting server.

69. An apparatus for providing accounting within a computer network, said apparatus comprising:

a proxier adapted to receive a service logon request from a subscriber, the service logon request indicating a requested service, the subscriber logging on to the requested service if the requested service is available for the subscriber;

a service accounting start request generator adapted to generate a service accounting start request associated with the requested service in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service; and

a service accounting stop request generator adapted to generate a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service.

70. The apparatus of claim 69, further comprising:

a processor adapted to determine if the user has authorization to access the requested service based on a user profile for the subscriber.

71. The apparatus of claim 70, further comprising:

a service access request generator adapted to generate, if the user profile is not available, a service access request to locate a user profile for the subscriber stored in a memory.

72. The apparatus of claim 71, wherein the memory is maintained in an accounting server.

73. An apparatus for providing accounting within a computer network, said apparatus comprising:

means for receiving a service logon request from a subscriber, the service logon request indicating a requested service;

means for logging on the subscriber to the requested service if the requested service is available for the subscriber;

means for generating a service accounting start request associated with the requested service in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service; and

means for generating a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service.

74. The apparatus of claim 73, further comprising:

means for determining if the user has authorization to access the requested service based on a user profile for the subscriber.

75. The apparatus of claim 74, further comprising:

means for generating, if a user profile is not available, a service access request to locate a user profile for the subscriber stored in a memory; and

means for receiving the user profile from the memory.

76. The apparatus of claim 75, wherein the memory is maintained in an accounting server.

77. A program storage device readable by a machine, storing instructions executable by the machine to perform a method for providing accounting within a computer network, said method comprising:

receiving a service logon request from a subscriber, the service logon request indicating a requested service;

logging on the subscriber to the requested service if the requested service is available for the subscriber;

generating a service accounting start request associated with the requested service in response to a determination that the subscriber has logged on to the requested service and that no other subscribers have a current connection established to the requested service; and

generating a service accounting stop request associated with the requested service in response to a determination that the subscriber has terminated the requested service and that no other subscribers have a current connection established to the requested service.

78. The program storage device of claim 77, wherein said logging on the subscriber comprises:

determining if the user has authorization to access the requested service based on a user profile for the subscriber.

79. The program storage device of claim 78, wherein said logging on the subscriber further comprises:

generating, if a user profile is not available, a service access request to locate a user profile for the subscriber stored in a memory; and

receiving the user profile from the memory.