Method and system for providing network access and services using access codes

• US 7,428,413 B2
• Filed: 03/10/2004
• Issued: 09/23/2008
• Est. Priority Date: 03/11/2003
• Status: Active Grant

• Current Assignee: Wayport, Inc. (AT&T, Inc.)
• Original Assignee: Wayport, Inc. (AT&T, Inc.)
• Inventors: Fink, Ian M.
• Primary Examiner(s): Ramakrishnaiah; Melur
• Application Number:
  US10/797,430
• Publication Number:
  US 20040181602A1
• Time in Patent Office: 1,658 Days
• Field of Search: 455/452.1, 455/452.2, 455/456.1, 455/456.2, 455/456.6, 455/432.1, 379/93.02, 379/93.03, 709/229, 709/225, 370/352
• US Class Current: 455/432.1
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/082 using revocation of authorisation

Abstract

An embodiment of the present invention is directed to an authorization and access control system for a venue or a geographic region comprising a plurality of venues. The authorization and access control system provides one or more computing devices selective access to one or more networks and/or services available in a network communications system by distributing a substantially unique string of characters (an “access code”) to each user of a computing device. The access code can then be entered via an input device, such as a keyboard or its equivalent, of the computing device. This enables the computing device to gain access to one or more networks and/or services at a venue or in geographic region with the network communications system. Various embodiments are useful and may have several advantages in several venues, such as coffee shops, hotels, train stations, law offices, marinas, truck stops, fueling stations, restaurants, and stores, among others. Additional embodiments may be advantageous in a geographic region which may comprise a plurality of possible venues.

Claims

1. A method for providing access to a second network comprised in a network system, wherein the network system includes one or more access points coupled to a first network, the method comprising:

generating one or more access codes, wherein one or more access codes is associated with one or more attributes;

receiving an access code of the one or more access codes from a portable computing device coupled to a first access point of the one or more access points;

determining a current geographic location of the portable computing device, wherein at least one attribute of the one or more attributes is associated with a geographic location of validity;

determining if the access code is valid, wherein said determining if the access code is valid includes using the current geographic location of the computing device and the at least one attribute associated with a geographic location, wherein if the geographic location of the portable computing device is within an area of the geographic location of validity, then the access code is valid; and

if the access code is valid, providing access to the second network for the portable computing device, wherein said providing is based on at least one attribute of the one or more attributes, and wherein said access to the second network includes access to one or more services of the second network.

2. The method of claim 1, wherein each attribute of a subset of attributes of the one or more attributes is associated with a service of the second network.

3. The method of claim 1, further comprising:

determining a geographic location of the computing device;

wherein at least one attribute of the one or more attributes is associated with a geographic location;

wherein said providing is based upon the geographic location of the computing device and the at least one attribute associated with the geographic location.

4. The method of claim 1,

wherein at least one attribute of the one or more attributes is associated with a quality of service (Qos);

wherein said providing is based upon the at least one attribute associated with the QoS.

5. The method of claim 1,

wherein the access code is associated with an expiration time;

wherein said determining includes determining a time and determining if the time is past the expiration time, wherein the access code is not valid if the time is past the expiration time.

6. The method of claim 1, further comprising:

a user receiving the access code from a communications device.

7. The method of claim 6, further comprising:

the user requesting the access code, wherein the user uses the communications device for said requesting.

8. The method of claim 1, wherein the computing device is a portable computing device.

9. The method of claim 1, wherein the second network comprises the Internet.

10. The method of claim 1, wherein the second network comprises a corporate network.

11. The method of claim 1, wherein the first access point and the computing device communicate in a wired fashion.

12. The method of claim 1, wherein the first access point and the computing device communicate in a wireless fashion.

13. The method of claim 1,

wherein said determining includes accessing a database and searching for the access code, wherein if the access code is not found, then the access code is not valid.

14. The method of claim 13, further comprising:

if the access code is found, retrieving one or more attributes associated with the access code.

15. The method of claim 1, further comprising:

a venue associate providing the access code to a user, wherein the venue associate provides the access code to the user for the user'"'"'s patronage to a venue.

16. The method of claim 1, further comprising:

transmitting one or more access codes from said generating to one or more computing devices.

17. The method of claim 16,

wherein a distribution unit performs said transmitting.

18. The method of claim 1, further comprising:

distributing one or more access codes from said generating to one or more users.

19. The method of claim 18,

wherein a distribution unit performs said distributing.

20. The method of claim 1, further comprising:

storing one or more access codes from said generating in a memory medium.

21. The method of claim 1, further comprising:

storing one or more access codes from said generating in a database.

22. The method of claim 1, further comprising:

printing one or more access codes from said generating.

23. A method for providing access to a second network comprised in a network system, wherein the network system includes one or more access points coupled to a first network, the method comprising:

generating one or more access codes;

receiving an access code of the one or more access codes from a portable computing device coupled to a first access point of the one or more access points;

determining if the access code is valid;

if the access code is valid, providing access to the second network for the computing device, wherein said access to the second network includes access to one or more services of the second network,

wherein the first access point and the computing device communicate using wireless Ethernet (IEEE 802.11);

wherein the first access point is operable to concurrently utilize a plurality of IEEE 802.11 service set identifications (SSIDs);

wherein the access code is associated with a first IEEE 802.11 service set identification (SSIDs);

wherein the portable computing device uses an IEEE 802.11 service set identification (SSIDs) of the computing device; and

wherein said determining includes determining if the first IEEE 802.11 service set identification (SSIDs) matches the IEEE 802.11 service set identification (SSIDs) of the computing device, wherein if the first IEEE 802.11 service set identification (SSIDs) does not match the IEEE 802.11 service set identification (SSIDs) of the portable computing device, then the access code is not valid.

24. The method of claim 23,

wherein the plurality of IEEE 802.11 system identifications include IEEE 802.11 service set identifications (SSIDs).

25. The method of claim 23,

wherein the plurality of IEEE 802.11 SSIDs include IEEE 802.11 basic service set identifications (BSSIDs).

26. The method of claim 23,

wherein the plurality of IEEE 802.11 SSIDs include IEEE 802.11 extended service set identifications (ESSIDs).

27. A computer system for providing and controlling access to a second network from a first network, the computer system comprising:

a first network interface coupled to the first network;

a second network interface coupled to the second network;

a CPU;

a memory coupled to the CPU, wherein the memory stores program instructions which are executable by the CPU to;

receive an access code from a portable computing device coupled to the first network;

determine if the access code is valid; and

provide access to the second network for the portable computing device if the access code is valid, wherein providing access to the second network includes controlling access between the first network interface and the second network interface;

determine a geographic location of the portable computing device;

wherein at least one attribute of the one or more attributes is associated with a geographic location of validity;

wherein determining if the access code is valid includes using the geographic location of the portable computing device and the at least one attribute associated with a geographic location, wherein if the geographic location of the portable computing device is within an area of the geographic location of validity, then the access code is valid; and

wherein said access to the second network includes access to one or more services of the second network.

28. The computer system of claim 27,

wherein the access code is associated with one or more attributes;

wherein providing access to the second network for the computing device is based on at least one attribute of the one or more attributes.

29. The computer system of claim 28, wherein each attribute of a subset of attributes of the one or more attributes is associated with a service of the network.

30. The computer system of claim 28, wherein the memory stores program instructions which are further executable by the CPU to:

determine a geographic location of the computing device;

wherein at least one attribute of the one or more attributes is associated with a geographic location;

wherein providing access to the second network for the computing device is based upon the geographic location of the computing device and the at least one attribute associated with a geographic location.

31. The computer system of claim 28,

wherein at least one attribute of the one or more attributes is associated with a quality of service (QoS);

wherein providing access to the second network for the computing device is based upon the QoS.

32. The computer system of claim 27,

wherein the access code is associated with an expiration time;

wherein determining if the access code is valid includes determining a time and determining if the time is past the expiration time, wherein the access code is not valid if the time is past the expiration time.

33. The computer system of claim 27, wherein the computing device is a portable computing device.

34. The computer system of claim 27, wherein the second network comprises the Internet.

35. The computer system of claim 27, wherein the second network comprises a corporate network.

36. The computer system of claim 27,

wherein the first network interface comprises a wireless network interface coupled to a transceiver;

wherein the computer system and the computing device communicate in a wireless fashion;

wherein the first network includes the computer system and the computing device communicating in a wireless fashion.

37. The computer system of claim 36,

wherein the computer system and the computing device communicate using wireless Ethernet (IEEE 802.11);

wherein the computer system is operable to concurrently utilize a plurality of IEEE 802.11 system identifications;

wherein the access code is associated with a first IEEE 802.11 system identification;

wherein the computing device uses an IEEE 302.11 system identification of the computing device; and

wherein determining if the access code is valid includes determining if the first IEEE 802.11 system identification matches the IEEE 802.11 system identification of the computing device, wherein if the first IEEE 802.11 system identification does not match the IEEE 802.11 system identification of the computing device, then the access code is not valid.

38. The computer system of claim 37,

wherein the plurality of IEEE 802.11 system identifications include IEEE 802.11 service set identifications (SSIDs).

39. The computer system of claim 37,

wherein the plurality of IEEE 802.11 system identifications include IEEE 802.11 basic service set identifications (BSSIDs).

40. The computer system of claim 37,

wherein the plurality of IEEE 802.11 system identifications include IEEE 802.11 extended service set identifications (ESSIDs).

41. The computer system of claim 27,

wherein determining if the access code is valid includes accessing a database and searching for the access code, wherein if the access code is not found, then the access code is not valid.

42. The computer system of claim 41, wherein the memory stores program instructions which are further executable by the CPU to:

determine if the access code was found; and

retrieve one or more attributes associated with the access code, if the access code was found.

43. The computer system of claim 27, wherein the memory stores program instructions which are further executable by the CPU to:

generate a second access code.

44. The computer system of claim 27, wherein the memory stores program instructions which are further executable by the CPU to:

store the second access code in a memory medium.

45. The computer system of claim 27, wherein the memory stores program instructions which are further executable by the CPU to:

transmit the second access code to a database.

46. The computer system of claim 27,

wherein the computer system is coupled to a printing device;

wherein the memory stores program instructions which are further executable by the CPU to;

transmit the second access code to the printing device.

47. A network system, comprising:

a first network;

a second network;

a computer system, wherein the computer system is coupled to the first network, wherein the computer system is coupled to the second network;

one or more access points coupled to the first network, wherein each of the one or more access points is operable to communicate with a computing device;

wherein the computing device communicates through a first access point of the one or more access points;

wherein the computer system is operable to receive an access code from the computing device, determine if the access code is valid, and provide access to the second network for the computing device if the access code is valid;

wherein said access to the second network includes access to one or more services of the second network;

wherein the access code is associated with one or more attributes;

wherein the computer system is further operable to provide access or services of the second network based on at least one of the one or more attributes;

wherein each attribute of a subset of attributes of the one or more attributes is associated with a service of the network;

wherein the computer system is further operable to determine a geographic location of the computing device;

wherein at least one attribute of the one or more attributes associated with the access code is associated with a geographic location; and

wherein the computer system is further operable to provide access or services of the second network based on the geographic location of the computing device and the at least one attribute of the one or more attributes associated with the access code is associated with the geographic location.

48. The network system of claim 47, wherein the geographic location of the computing device includes a geographic location of the first access point.

49. The network system of claim 47, further comprising:

a management information base (MIB) coupled to the first network;

wherein the computer system is fUrther operable to access information in the MIB and use the information to determine the geographic location of the computing device.

50. The network system of claim 49, wherein the geographic location of the computing device includes a geographic location of the first access point.

51. The network system of claim 47,

wherein the computer system is further operable to determine a geographic location of the first access point;

wherein at least one attribute of the one or more attributes associated with the access code is associated with a geographic location;

wherein the computer system is further operable to provide access or services of the second network based on the geographic location of the first access point and the at least one attribute of the one or more attributes associated with the access code is associated with the geographic location.

52. The network system of claim 51, further comprising:

a management information base (MIB) coupled to the first network;

wherein the computer system is further operable to access information in the MIB and use the information to determine the geographic location of the first access point.

53. The network system of claim 47,

wherein at least one attribute of the one or more attributes is associated with a quality of service (QoS);

wherein providing access to the second network for the computing device is based upon the QoS.

54. The network system of claim 47,

wherein the access code is associated with an expiration time;

wherein determining if the access code is valid includes determining a time and determining if the time is past the expiration time, wherein the access code is not valid if the time is past the expiration time.

55. A carrier medium comprising program instructions for providing access to a second network to a computing device coupled to a first network, wherein the program instructions are computer-executable to implement:

generating one or more access codes;

receiving an access code of the one or more access codes from the computing device coupled to the first network;

determining if the access code is valid; and

providing access to the second network for the computing device if the access code is valid, wherein said access to the second network includes access to one or more services of the second network;

wherein the access code is associated with one or more attributes;

wherein said providing is based on at least one attribute of the one or more attributes;

determining a geographic location of the computing device;

wherein at least one attribute of the one or more attributes is associated with a geographic location of validity; and

wherein said determining if the access code is valid includes using the geographic location of the computing device and the at least one attribute associated with a geographic location, wherein if the geographic location of the computing device is within an area of the geographic location of validity, then the access code is valid.

56. The carrier medium of claim 55,

wherein the access code is associated with one or more attributes;

wherein said providing is based on at least one attribute of the one or more attributes;

determining a geographic location of the computing device;

wherein at least one attribute of the one or more attributes is associated with a geographic location of validity; and

wherein said determining if the access code is valid includes using the geographic location of the computing device and the at least one attribute associated with a geographic location, wherein if the geographic location of the computing device is within an area of the geographic location of validity, ten the access code is valid.

57. The carrier medium of claim 56, wherein each attribute of a subset of attributes of the one or more attributes is associated with a service of the second network.

58. The carrier medium of claim 56,

wherein at least one attribute of the one or more attributes is associated with a quality of service (QoS);

wherein said providing is based upon the at least one attribute associated with the QoS.

59. The carrier medium of claim 55,

wherein the access code is associated with an expiration time;

wherein said determining includes determining a time and determining if the time is past the expiration time, wherein the access code is not valid if the time is past the expiration time.

60. The carrier medium of claim 55, wherein the computing device is a portable computing device.

61. The carrier medium of claim 55, wherein the second network comprises the Internet.

62. The carrier medium of claim 55, wherein the second network comprises a corporate network.

63. The carrier medium of claim 55,

wherein said determining includes accessing a database and searching for the access code, wherein if the access code is not found, then the access code is not valid.

64. The carrier medium of claim 63, wherein the program instructions are computer-executable to further implement:

retrieving one or more attributes associated with the access code, if the access code is found.

65. The carrier medium of claim 55, wherein the program instructions are computer-executable to further implement:

storing one or more access codes from said generating in a database.

66. The carrier medium of claim 55, wherein the program instructions are computer-executable to further implement:

storing one or more access codes from said generating in a memory medium.

67. The carrier medium of claim 55, wherein the program instructions are computer-executable to further implement:

transmitting one or more access codes from said generating to a printing device.

68. The carrier medium of claim 55, wherein the program instructions are computer-executable to further implement:

transmitting one or more access codes from said generating to a distribution unit.