Providing different network access levels in a network communication system

• US 7,472,191 B2
• Filed: 06/30/2005
• Issued: 12/30/2008
• Est. Priority Date: 11/03/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Systems, Inc.
• Inventors: Stewart, Brett B., McClelland, Kathleen E., Thompson, James W.
• Primary Examiner(s): WANG, LIANG CHE A
• Application Number:
  US11/171,130
• Publication Number:
  US 20050237985A1
• Time in Patent Office: 1,279 Days
• Field of Search: 709/203, 709/225, 709/229, 370/431
• US Class Current: 709/225
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1439 time-based
• CPC Class Codes: H04L 12/1464 using a card, such as credit card, prepay card or SIM
• CPC Class Codes: H04L 12/1471 splitting of costs
• CPC Class Codes: H04L 12/1496 involving discounts
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2874 Processing of data for distribution to the subscribers
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service
• CPC Class Codes: H04W 74/004 in the uplink, i.e. towards network
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

A system and method for providing multiple access levels to users of a wireless network system. The network system includes a plurality of wireless access points coupled to a network. Access points (APs) for the network may be widely distributed in various facilities, such as airports, mass-transit stations, and various businesses. The network may couple to a wide area network, such as the Internet. A portable computing device (PCD) of a user may store identification information which indicates an access or privilege level for the user of the PCD. The access level may determine the network access and/or services available to the user of the PCD. The identification information may include a System ID of the PCD. Each of the access points may be operable to “listen for” or detect the identification information of the PCD. The network system may store a list of identification information and a corresponding list of access levels. When the access point receives the identification information from a PCD of a user, the access point may determine the appropriate access level for the portable computing device using the identification information. Network access and services may then be provided to the portable computing device at the indicated level. Thus, the local network may provide various local resources which are available to users having a first access level, and users with a second access level may not be entitled to view or utilize these network resources on the network, but may be simply provided external Internet access.

Claims

1. A method for providing access to a distributed wireless network system, the method comprising:

a first wireless access point in a distributed wireless network system receiving identification information from a portable computing device;

wherein the distributed wireless network system includes a plurality of wireless access points coupled to a network, and wherein the first wireless access point is operable to be coupled to the network and communicate with one or more portable computing devices in a wireless fashion;

determining if the identification information is associated with payment information;

determining a geographic location of the portable computing device;

if the identification information is associated with payment information, determining an access level based on the payment information and the geographic location and providing network access based on the determined access level, wherein the access level indicates access to one or more network services including external network access or internal network access; and

if the identification information is not associated with payment information, providing network access based on a default access level or denying network access.

2. The method of claim 1, wherein the identification information includes an IEEE 802.11 system identification (SID).

3. The method of claim 1, wherein the identification information includes a media access control (MAC) identification.

4. The method of claim 1, wherein the identification information includes a name associated with a network service provider.

5. The method of claim 1, wherein the identification information includes a digital certificate.

6. The method according to claim 1 wherein external network access comprises Internet access.

7. The method according to claim 1 wherein the one or more network services further include email access.

8. The method according to claim 1 wherein the local network access includes access to one or more local network information services.

9. A wireless access point comprising:

a processor; and

a memory medium coupled to the processor;

wherein the wireless access point is operable to be coupled to a network and communicate with one or more portable computing devices in a wireless fashion;

wherein the memory medium is operable to store a data structure, wherein the data structure comprises a list of identification information and a corresponding list of access levels, one or more of the access levels associated with geographic location information, wherein each of the access levels indicates access to one or more network services including external network access or internal network access;

wherein the memory medium comprises program instructions which are executable by the processor to;

receive identification information from a portable computing device of the one or more portable computing devices, wherein the identification information indicates an access level of the portable computing device;

determine a geographic location of the portable computing device;

determine an access level, wherein, in said determining the access level, the program instructions are further executable by the process to index into the data structure using the identification information and the geographic location to determine the access level stored in the data structure corresponding to the identification information and the geographic location; and

provide network access to the portable computing device at the determined access level.

10. The wireless access point of claim 9, wherein the identification information includes an IEEE 802.11 system identification.

11. The wireless access point of claim 9, wherein the identification information includes a media access control (MAC) identification.

12. The wireless access point of claim 9, wherein the identification includes a name associated with a network service provider.

13. The wireless access point of claim 9, wherein the identification information includes a digital certificate.

14. A method for providing access to a distributed wireless network system, wherein the distributed wireless network system includes a plurality of wireless access points coupled to a network, the method comprising:

a first wireless access point in a distributed wireless network system receiving identification information from a portable computing device and determining a geographic location of the portable computing device;

wherein the distributed wireless network system includes a plurality of wireless access points coupled to a network and wherein the first wireless access point is operable to be coupled to the network and communicate with one or more portable computing devices in a wireless fashion and wherein the identification information is associated with one or more access levels, wherein each of the access levels is associated with geographic location information and indicates access to one or more network services including external network access or internal network access;

determining at least one access level from the identification information and the geographic location of the portable computing device; and

providing network access to the portable computing device based on the at least one access level.

15. The method of claim 14, wherein the identification information includes a digital certificate.

16. A method for providing access to a distributed wireless network system, the method comprising:

a first wireless access point in a distributed wireless network system receiving identification information from a portable computing device, wherein the identification information indicates payment information, and wherein the distributed wireless network system includes a plurality of wireless access points coupled to a network;

determining an access level for the portable computing device after receiving the identification information, wherein the determined access level is dependent on the payment information associated with the identification information and a geographic location of the first access point, and wherein the determined access level indicates access to one or more network services including external network access or internal network access; and

providing network access to the portable computing device based on the determined access level.

17. The method of claim 16, wherein the location is a network location.

18. The method of claim 16, wherein the location is a geographic location.

19. A method for providing access to a distributed wireless network system, the method comprising:

a first wireless access point in a distributed wireless network system receiving identification information from a portable computing device, wherein the identification information is associated with service subscription information, and wherein the distributed wireless network system includes a plurality of wireless access points coupled to a network;

determining an access level for the portable computing device after receiving the identification information, wherein the determined access level is dependent on the service subscription information associated with the identification information of the portable computing device and a location of the portable computing device, and wherein the determined access level indicates access to one or more network services including external network access or internal network access; and

providing network access to the portable computing device based on the determined access level.

20. The method of claim 19, wherein the location is a network location.

21. The method of claim 19, wherein the location is a geographic location.

22. A storage medium comprising program instructions for providing network access to a distributed network system, wherein the program instructions are executable by a processor to:

receive identification information from a computing device, wherein the identification information is received through a first access point in a distributed wireless network system, and wherein the distributed wireless network system includes a plurality of wireless access points coupled to a network;

determine a geographic location of the portable computing device;

determine if the identification information is associated with payment information;

if the identification information is associated with payment information, determine an access level based on the payment information and the geographic location, wherein the access level indicates access to one or more network services including external network access or internal network access, and provide network access based on the determined access level; and

if the identification information is not associated with payment information, provide network access based on a default access level or deny network access.

23. The storage medium of claim 22, wherein the first access point is a wireless access point.

24. The storage medium of claim 23, wherein the identification information includes an IEEE 802.11 system identification (SID).

25. The storage medium of claim 22, wherein the identification information includes a media access control (MAC) identification.

26. The storage medium of claim 22, wherein the identification information includes a name associated with a network service provider.

27. The storage medium of claim 22, wherein the identification information includes a digital certificate.

28. The storage medium of claim 22, wherein the computing device is a portable computing device.