Method and apparatus for coordinating a change in service provider between a client and a server with identity based service access management

• US 7,801,056 B2
• Filed: 12/29/2005
• Issued: 09/21/2010
• Est. Priority Date: 03/20/2000
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Carolan, Sean E., Kalmanek, Jr., Charles Robert, Ramakrishnan, Kadangode K., Garrett, John W., Nguyen, Han Q.
• Primary Examiner(s): Trost, IV, William
• Assistant Examiner(s): MAGLO, EMMANUEL K
• Application Number:
  US11/321,152
• Publication Number:
  US 20060104280A1
• Time in Patent Office: 1,727 Days
• Field of Search: 370/452, 370/466, 370/489, 370/270, 370/389, 370/254, 370352-356, 370/401, 709/227, 709/203, 709/238, 709/245, 709/250
• US Class Current: 370/254
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 45/308 Route determination based on user's profile, e.g. premium users
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 61/58 Caching of addresses or names
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/22 : Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

A method of configuring a network access device connected to an access network connected to a plurality of service networks, the network device having a first network address allocated to a subscriber of services of a first service provider provided by a first service network, with a new network address allocated to a second subscriber of services of either the first service provider, or a second service provider provided by a second service network. The method comprises the steps of: sending a request from the network access device to the access network with user credentials for the second subscriber requesting access to the first service provider or a change to the second service provider; receiving a response from the access network; and initiating a network address change request using a configuration protocol. In this manner, a second network address allocated to the second subscriber of services of either the first or second service providers is assigned to the network access device to enable the network access device to communicate data packets to the service network providing the selected service.

Claims

1. A method of configuring a network access device having a first network address allocated to a subscriber by a first service provider operating a first service network, with a second network address allocated to the subscriber by a second service provider operating a second service network, wherein the network access device is connected to an access network providing access to at least the first and second service networks, the method comprising:

sending a request from the network access device to the access network with user credentials for the subscriber requesting access to the second service provider;

initiating a network address change request using a configuration protocol;

assigning the second network address allocated to the subscriber to the network access device, the second network address being utilized by the network access device to communicate data packets to the second service network; and

in response to the sending of the request from the network access device to the access network, receiving a response from the access network;

wherein said request to said access network includes an authentication request from the network access device to authenticate the subscriber; and

wherein said response received from said access network includes an authentication status for the subscriber from the second service provider and, if authenticated, initiating a network address change.

2. The method recited in claim 1, wherein the host configuration protocol is a dynamic host configuration protocol (DHCP).

3. The method recited in claim 1, wherein the network access device receives an Internet Protocol address.

4. The method recited in claim 1, wherein said response received from said access network includes an authentication status for the subscriber from the first service provider and, if authenticated, initiating said network address change request.

5. A method of configuring a network access device having a first network address allocated to a subscriber by a first service provider operating a first service network, with a second network address allocated to the subscriber by a second service provider operating a second service network, wherein the network access is connected to an access network providing access to at least the first and second service networks, the method comprising:

sending a request from the network access device to the access network with user credentials requesting a change to the second service provider for the subscriber;

initiating a network address change request using a DHCP configuration protocol;

assigning the second network address allocated to the subscriber to the network access device, the second network address being utilized by the network access device to communicate data packets to the second service network; and

in response to the sending of the request from the network access device to the access network, receiving a response from the access network;

wherein said request to said access network includes an authentication request from the network access device to authenticate the subscriber; and

wherein said response received from said access network includes an authentication status for the subscriber from the second service provider and, if authenticated, initiating a network address change.

7. The method recited in claim 5, further comprising, in response to the sending of the request from the network access device to the access network, receiving a response from the access network.

8. The method recited in claim 7, wherein said response received from said access network includes an authentication status for the subscriber from the second service provider and, if authenticated, initiating said network address change request.

9. The method recited in claim 7, wherein said response received from said access network includes an authentication status for the subscriber from the first service provider and, if rejected, informing the network access device that the request has been withdrawn.

6. A method of configuring a network access device having a first network address allocated to a subscriber by a service provider operating a first service network, with a second network address allocated to the subscriber, wherein the network access device is connected to an access network communicating with a service activation system, the access network providing access to at least the first and a second service networks, the method comprising:

sending by the network access device authentication information and an authentication request for the subscriber to the service activation system over the access network;

receiving by the network access device an authentication status for the subscriber from the service activation system; and

if authenticated by said access network, initiating a network address change request using a configuration protocol,

whereby the second network address allocated to the subscriber is assigned to the network access device, the network address being utilized by the network access device to communicate date packets to the second service network.