Method of authenticating a user on a network

• US 8,528,068 B1
• Filed: 02/05/2010
• Issued: 09/03/2013
• Est. Priority Date: 07/26/2002
• Status: Expired due to Fees

• Current Assignee: Purple Communications Incorporated (CSDVRS LLC)
• Original Assignee: Purple Communications Incorporated (CSDVRS LLC)
• Inventors: Weglein, Joseph, Rein, David, Cernese, Frank
• Primary Examiner(s): Zee, Edward
• Assistant Examiner(s): To, Baotran N
• Application Number:
  US12/701,138
• Time in Patent Office: 1,306 Days
• Field of Search: 726/2, 726/10, 713/151, 713/155, 713/168, 713/171, 709/223, 709/227
• US Class Current: 726/10
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04W 12/06 Authentication

Abstract

The present invention provides a method of and system for authenticating a user on a network. The system includes a client device and a server, accessible to the client device, the server including a processor and a memory for storing instructions which, when executed by the processor, cause the processor to: provision the user on the service using user personal data; upon initial activation of the service, prompt the user for user ID and a password; upon receipt of the user ID and password, validate the user ID and the password; generate a ticket and send the ticket back to the user'"'"'s client device for storage and future validation. The method of authenticating a user on a network including a server and a client device utilizing a service. includes provisioning the user on the service using user personal data. Upon initial activation of the service, the user is prompted in the next step for user ID and a password. The method further includes validating the user identification and the password upon their receipt and generating a ticket and sending the ticket back to the user'"'"'s client device for future validation.

Claims

1. A method of providing a user of a wireless mobile client device access to an application service delivered on a wireless telephone network, the method comprising:

receiving a request to activate the application service on a wireless mobile client device that is operating in a wireless telephone network that dynamically assigns an IP network address to the wireless mobile client device for use in accessing the application service, wherein the application service uses the IP network address as a destination address for communications with the wireless mobile client device in providing application services to the wireless mobile client device;

upon receipt of a user ID and a password from the wireless mobile client device seeking to access the application service available over the wireless telephone network when a user first seeks to activate the application service on the wireless mobile client device, authenticating the wireless mobile client device with the user ID and password;

in response to successfully authenticating, provisioning the wireless mobile client device to use the application service and generating an encrypted electronic ticket for identifying the wireless mobile client device and sending the encrypted electronic ticket to the assigned network address for use in identification of the wireless mobile client device when the wireless mobile client device reconnects to the application service using a different assigned IP network address after the wireless mobile client device has been logged out of the application service;

receiving the encrypted electronic ticket sent from the wireless mobile client device using the different assigned IP network address; and

in response to receiving, authorizing the wireless mobile client device at the different assigned IP network address access to use the application service by identifying the wireless mobile client device based on the encrypted electronic ticket without the user ID and the password.

2. The method of claim 1, wherein the receiving further comprises receiving the encrypted electronic ticket from the wireless mobile client device subsequent to a logoff from the application service.

3. The method of claim 1, further comprising storing the encrypted electronic ticket on the wireless mobile client device.

4. The method of claim 1, wherein the application service includes email.

5. The method of claim 1, wherein the application service includes a browser.

6. The method of claim 1, wherein the wireless telephone network provides the application services over a public wireless local area network.

7. The method of claim 1, wherein the wireless telephone network comprises a dynamic IP network.

8. The method of claim 1, wherein the user ID includes a mobile phone number.

9. The method of claim 1, wherein authenticating the user includes comparing the user ID and the password to user personal data stored on a server.

10. The method of claim 1, wherein the application service comprises voice and data.

11. The method of claim 1, wherein the identifying comprises comparing the received ticket with a ticket stored on a server.

12. A system for providing a wireless mobile client device access to an application service delivered on a wireless telephone network, the system comprising:

a wireless mobile client device assigned a dynamic IP network address for use in accessing the application service;

a server, accessible to the wireless mobile client device, the server including a processor and a memory for storing instructions which, when executed by the processor, cause the processor to;

receive a request to activate the application service on a mobile wireless client device that is operating in a wireless telephone network that dynamically assigns an IP network address to the wireless mobile client device for use in accessing the application service, wherein the application service uses the IP network address as a destination address for communications with the wireless mobile client device in providing application services to the wireless mobile client device;

upon receipt of a user ID and a password from the wireless mobile client device seeking to access the application service available over the wireless telephone network when a user first seeks to activate the application service on the wireless mobile client device, authenticate the user with the user ID and password;

in response to a successful authentication, provision the wireless mobile client device to use the application service, generate an encrypted electronic ticket and send the encrypted electronic ticket to the assigned network address for identifying the wireless mobile client device when the wireless mobile client device reconnects to the application service using a different assigned IP network address after the wireless mobile client device has been logged out of the application service; and

upon receipt of the encrypted electronic ticket from the wireless mobile client device using the different assigned IP network address, provide the wireless mobile client device access to use the application service by identifying the user based on the encrypted electronic ticket without the user ID and the password.

13. The system of claim 12, wherein the user ID includes a mobile phone number.

14. The system of claim 12, wherein the authentication of the user includes the server comparing the user ID and the password to user personal data stored on the server.

15. The system of claim 12, wherein the identifying comprises comparing the ticket received from the wireless mobile client device to a ticket stored on the server.

16. The system of claim 12, wherein the wireless telephone network provides the application services over a public wireless local area network.

17. The system of claim 12, wherein the wireless telephone network comprises a dynamic IP network.

18. The system of claim 12, wherein the application service comprises voice and data.

19. A method of providing a user of a wireless mobile client device access to an application service delivered on a wireless telephone network, the method comprising:

accessing the application service using an IP network address dynamically assigned to the wireless mobile client device;

upon receipt of a user ID and a password from a wireless mobile client device seeking to access the application service available over the wireless telephone network when a user first seeks to activate the application service on the wireless mobile client device, authenticating the user with the user ID and password;

in response to successfully authenticating, provisioning the wireless mobile client device to use the application service and generating an encrypted electronic ticket and sending the encrypted electronic ticket to the assigned IP network address for use in identifying the wireless mobile client device when the wireless mobile client device reconnects to the application service using a different assigned IP network address after the wireless mobile client device has been logged out of the application service;

logging the user off of the application service;

subsequent to logging off of the application service, receiving the encrypted electronic ticket from the wireless mobile client device when the device reconnects to the application service over the wireless telephone network, and

authorizing the wireless mobile client device at the different assigned IP network address to access to the application service by identifying the user based on the received encrypted electronic ticket without the user ID and the password.

20. The method of claim 19, further comprising storing the encrypted electronic ticket on the wireless mobile client device prior to the logoff from the application service.

21. The method of claim 19, wherein the wireless telephone network comprises a dynamic network.