Method for identifying internet users

• US 8,621,033 B2
• Filed: 09/07/2006
• Issued: 12/31/2013
• Est. Priority Date: 09/05/2000
• Status: Expired due to Fees

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Unger, Stefan, Zygan-Maus, Renate, Mitreuter, Ulrich
• Primary Examiner(s): Follansbee, John
• Assistant Examiner(s): MADAMBA, GLENFORD J
• Application Number:
  US11/516,619
• Publication Number:
  US 20070071001A1
• Time in Patent Office: 2,672 Days
• Field of Search: 709/217, 709/227
• US Class Current: 709/217
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

Method for identifying Internet users, comprising: identifying or authenticating an Internet user at the Internet access point in the course of an access check when using the Internet access service of an Internet Service Provider with whom the Internet user maintains a business relation; and after the Internet user successfully passed the access check adding Internet user identification information to an Internet user'"'"'s IP message by the Internet access point prior to forwarding said IP message, guaranteeing the integrity of this information with cryptographic means.

Claims

1. Method for identifying Internet users, comprising:

identifying or authenticating an Internet user at an Internet access point in the course of an access check when using an Internet access service of an Internet Service Provider with whom the Internet user maintains a business relation; and

after the Internet user successfully passed the access check, adding Internet user identification information to an Internet user'"'"'s IP message by the Internet access point prior to forwarding said IP message, guaranteeing the integrity of the information with cryptographic means.

2. Method according to claim 1,

wherein Internet user identification information is added only when a certain requirement is met.

3. Method according to claim 2,

wherein an Internet user provides a requirement.

4. Method according to claim 1,

wherein a requirement in question is checked at the access point, where to this end, information is taken from the IP message and/or a database.

5. Method according to claim 1,

wherein the method is realized on the Internet protocol level.

6. Method according to claim 1,

wherein the method is realized on the transport protocol level.

7. Method according to claim 1,

wherein the method is realized on the user protocol level.

8. Method according to claim 1,

wherein integrity of the Internet user identification information is guaranteed with a digital signature.

9. Internet access point which has structure for:

identifying or authenticating an Internet user in the course of an Internet access service; and

after the Internet access service has successfully been accomplished, adding Internet user identification information to an Internet user'"'"'s IP message by an Internet access point prior to forwarding said IP message, guaranteeing the integrity of the information with cryptographic means.

10. Internet access point according to claim 9, further comprising structure for adding the Internet user identification information to the IP message only if a certain requirement is met.

11. Internet access point according to claim 10,

further comprising structure for checking a requirement using information obtained from at least one of the IP message and a database.