Method and apparatus for coordinating a change in service provider between a client and a server with identity based service access management

• US 8,724,625 B2
• Filed: 01/24/2013
• Issued: 05/13/2014
• Est. Priority Date: 03/20/2000
• Status: Expired due to Fees

• Current Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property II LP (AT&T, Inc.)
• Inventors: Carolan, Sean E., Garrett, John W., Kalmanek, Charles Robert Jr., Nguyen, Han Q., Ramakrishnan, Kadangode K.
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): Maglo, Emmanuel
• Application Number:
  US13/748,947
• Publication Number:
  US 20130139232A1
• Time in Patent Office: 474 Days
• Field of Search: 370/389, 370/401, 370/254, 726/6
• US Class Current: 370/389
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 45/308 Route determination based on user's profile, e.g. premium users
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 61/58 Caching of addresses or names
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/22 : Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

A method of configuring a network access device connected to an access network connected to a plurality of service networks, the network device having a first network address allocated to a subscriber of services of a first service provider provided by a first service network, with a new network address allocated to a second subscriber of services of either the first service provider, or a second service provider provided by a second service network. The method comprises the steps of: sending a request from the network access device to the access network with user credentials for the second subscriber requesting access to the first service provider or a change to the second service provider; receiving a response from the access network; and initiating a network address change request using a configuration protocol. In this manner, a second network address allocated to the second subscriber of services of either the first or second service providers is assigned to the network access device to enable the network access device to communicate data packets to the service network providing the selected service.

Claims

1. A method for configuring a network access device including a first network address allocated to a subscriber by a first service provider operating a first service network, and a second network address allocated to the subscriber by a second service provider operating a second service network, wherein the network access device is connected to an access network providing access to the first service network and the second service network, comprising:

determining credentials of the subscriber are invalid in response to an attempt by the subscriber to update a list of service providers, the subscriber using the first service network;

receiving updated credentials for the subscriber from an authorized administrator;

sending to the subscriber an updated list of service providers in response to successful authentication of the updated credentials;

receiving from the subscriber a first request to access the second service provider; and

initiating a network address change request using a configuration protocol, wherein the first network address is released and the second network address is used by the network access device to communicate data packets to the second service provider over the access network.

2. The method of claim 1, further comprising:

sending to the access network a second request to access the second service provider;

receiving a response from the access network including an authentication status for the subscriber from the second service provider; and

initiating the network address change upon successful authentication.

3. The method of claim 2, further comprising receiving a response from the access network including an authentication status for the subscriber from the second service provider that the second request has been withdrawn if the authentication is rejected.

4. The method of claim 1, wherein the configuration protocol is a dynamic configuration protocol.

5. The method of claim 1, wherein the network access device receives an internet protocol address.

6. A computer readable memory comprising computer program instructions for configuring a network access device, which, when executed on a processor, cause the processor to perform operations comprising:

determining credentials of a subscriber are invalid in response to an attempt by the subscriber to update a list of service providers, wherein a first network address is allocated to the subscriber by a first service provider operating a first service network, and a second network address is allocated to the subscriber by a second service provider operating a second service network;

receiving updated credentials for the subscriber from an authorized administrator;

sending to the subscriber an updated list of service providers in response to successful authentication of the updated credentials;

receiving from the subscriber a first request to access the second service provider; and

initiating a network address change request using a configuration protocol, wherein the first network address is released and the second network address is used to communicate data packets to the second service provider over the access network.

7. The computer readable memory of claim 6, the operations further comprising:

sending to the access network a second request to access the second service provider;

receiving a response from the access network including an authentication status for the subscriber from the second service provider; and

initiating the network address change upon successful authentication.

8. The computer readable memory of claim 7, the operations further comprising receiving a response from the access network, the response including an authentication status for the subscriber from the second service provider that the second request has been withdrawn if the authentication is rejected.

9. The computer readable memory of claim 6, wherein the configuration protocol is a dynamic configuration protocol.

10. An apparatus comprising:

a memory storing computer program instructions;

a processor communicatively coupled to the memory, the processor configured to execute the computer program instructions, which, when executed on the processor, cause the processor to perform operations comprising;

determining credentials of a subscriber are invalid in response to an attempt by the subscriber to update a list of service providers, wherein a first network address is allocated to the subscriber by a first service provider operating a first service network, and a second network address is allocated to the subscriber by a second service provider operating a second service network;

receiving updated credentials for the subscriber from an authorized administrator;

sending to the subscriber an updated list of service providers in response to successful authentication of the updated credentials;

receiving from the subscriber a first request to access the second service provider; and

initiating a network address change request using a configuration protocol, wherein the first network address is released and the second network address is used to communicate data packets to the second service provider over the access network.

11. The apparatus of claim 10, the operations further comprising:

sending to the access network a second request to access the second service provider;

receiving a response from the access network including an authentication status for the subscriber from the second service provider; and

initiating the network address change upon successful authentication.

12. The apparatus of claim 11, the operations further comprising receiving a response from the access network including an authentication status for the subscriber from the second service provider that the second request has been withdrawn if the authentication is rejected.

13. The apparatus of claim 10, wherein the configuration protocol is a dynamic configuration protocol.

14. The apparatus of claim 10, wherein the network access device receives an internet protocol address.