Method and system for updating the telecommunication network service access conditions of a telecommunication device

• US 8,954,547 B2
• Filed: 12/18/2006
• Issued: 02/10/2015
• Est. Priority Date: 12/20/2005
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Minodier, David, Ivanoff, Gilles
• Primary Examiner(s): Nawaz, Asad
• Assistant Examiner(s): CHANG, KAI J
• Application Number:
  US12/158,381
• Publication Number:
  US 20090201912A1
• Time in Patent Office: 2,976 Days
• Field of Search: 370352-356, 455/410, 455/411, 709220-226, 726 1- 4, 726/16, 726/17
• US Class Current: 709/221
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: H04L 41/50 Network service management, e.g. ensuring proper service fulfilment according to agreements
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/08 Access security

Abstract

A system is provided for updating the conditions under which a telecommunication device accesses services provided by a telecommunication network. The system includes a network access point through which the device accesses the network, and a database, wherein the system authenticates the device via the access point on the basis of authentication data transferred by the device as well as the database storing the profile associated with the authentication data. The access point controls the conditions under which the device accesses the network services once the device has been authenticated and on the basis of the device profile. The system generates a second authentication command for the device via the access point following an alteration of the profiled associated with the authentication data.

Claims

1. System for updating conditions of access, by a telecommunications device, to services delivered by a telecommunications network, the system comprising:

a database,

an access point of the telecommunications network through which the telecommunications device accesses said telecommunications network during a first authentication, the access point comprising means to manage the conditions of access of said telecommunications device to the services delivered by the telecommunications network on a basis of a profile previously stored by the database during said first authentication, said profile being associated with authentication data transmitted by the telecommunications device during said first authentication by said system, and said profile comprising a list of services delivered by the telecommunications network to which a user of the telecommunications device has subscribed, the services in the list being services for which access by the telecommunications device is controlled by the access point,

means for generating a command configured to initiate a second, re-authentication of the telecommunications device by the access point for the services delivered by the telecommunications network of which the conditions for access are managed by the access point, wherein the means for generating generates the command automatically in response to a modification of said list of services delivered by the telecommunications network for the profile associated with the authentication data, and

means for maintaining access to services delivered by the telecommunications network so long as the second authentication of the telecommunications device has not been negated.

2. System according to claim 1, wherein the system comprises a subscription gateway accessible through the telecommunications network and wherein the means for generating the command for the second authentication of the telecommunications device are included in a subscription portal.

3. System according to claim 1, wherein the system comprises an authentication server with which there is associated the database storing the profile associated with the authentication data and wherein the means for generating of the command for the second authentication of the telecommunications device are included in the authentication server.

4. System according to claim 1, wherein the means for generating the command for the second authentication of the telecommunications device transfer the command for the second authentication to the access point.

5. System according to claim 1, wherein the means for generating the command for the second authentication of the telecommunications device transfer the command for the second authentication to the telecommunications device.

6. System according claim 5, wherein the telecommunications device is a first telecommunications device to which second telecommunications devices are connected.

7. System according to claim 5, wherein the telecommunications device is a second telecommunications device connected to the access point by a first telecommunications device.

8. Network equipment constituting a subscriber gateway accessible by at least one telecommunications device, through an access point to a telecommunications network, wherein the at least one telecommunication device transmits authentication data during a first authentication of the at least one telecommunication device, and wherein the subscriber gateway comprises:

a processor; and

a memory storing instructions that, when executed by the processor, configures the subscriber gateway to generate a command configured to initiate a second, re-authentication of the at least one telecommunications device by the access point for services delivered by the telecommunications network of which conditions for access are managed by the access point, wherein the instructions are configured such that the subscriber gateway generates the command automatically in response to a modification of a list of services delivered by the telecommunications network for a profile associated with authentication data transmitted by the at least one telecommunications device during the first authentication of the at least one telecommunication device, the services in the list being services for which a user of the telecommunications device has subscribed and for which access by the telecommunications device is controlled by the access point, and wherein access to the services delivered by the telecommunications network are maintained so long as the second authentication of the telecommunications device has not been negated.

9. Authentication server accessible by at least one telecommunications device, through an access point to a telecommunications network, wherein the at least one telecommunication device transmits authentication data during a first authentication of the at least one telecommunication device, and wherein the authentication server comprises:

a processor; and

a memory storing instructions that, when executed by the processor, configures the subscriber gateway to generate a command configured to initiate a second, re-authentication of the at least one telecommunications device by the access point for services delivered by the telecommunications network of which the conditions for access are managed by the access point, wherein the instructions are configured such that the authentication server generates the command automatically in response to a modification of a list of services delivered by the telecommunications network for a profile associated with authentication data transmitted by the at least one telecommunications device during the first authentication of the at least one telecommunication device, the services in the list being services for which a user of the telecommunications device has subscribed, for which access by the telecommunications device is controlled by the access point, and wherein access to the services delivered by the telecommunications network are maintained so long as the second authentication of the telecommunications device has not been negated.

10. Method for updating conditions of access, by a telecommunications device, to services delivered by a telecommunications network, the telecommunications device accessing the telecommunications network through an access point of said telecommunications network during a first authentication, the method comprising:

a step of managing conditions of access of the telecommunications device to services delivered by the telecommunications network on a basis of a profile stored by a database, said profile being associated with authentication data transmitted by the telecommunications device during said first authentication of the telecommunications device, said profile comprising a list of services delivered by the telecommunications network to which a user of the telecommunications device has subscribed, the services in the list being services for which access by the telecommunications device is controlled by the access point;

a step of generating a command with a device connected to the telecommunications network, wherein the command is configured to initiate a second, re-authentication of the telecommunications device by the access point for the services delivered by the telecommunications network of which the conditions for access are managed by the access point, and wherein the command is generated automatically in response to a modification of said list of services delivered by the telecommunications network for the profile associated with the authentication data; and

a step of maintaining access to services delivered by the telecommunications network so long as the second authentication of the telecommunications device has not been negated.

11. Method for updating the conditions of access according to claim 10, wherein the method comprises, in a subscription gateway, prior to generating the command for the second authentication:

a step of detecting an access by a user of the telecommunications device,

a step of identifying the user of the telecommunications device,

a first step of obtaining, from a database, a profile associated with an authentication data transferred by the telecommunications device during its authentication,

a first step of obtaining information representing services delivered by a telecommunications network and/or qualities of service associated with the services delivered by the telecommunications network,

a step of a transfer to a telecommunications device of at least certain of some pieces of information representing services delivered by the telecommunications device and/or qualities of service associated with the services delivered by the telecommunications network,

a step of reception, from the telecommunications device, of at least one message of response to the pieces of information transferred,

a step of modification of the profile associated with the authentication data as a function of said at least one message received from the telecommunications device.

12. A non-transitory information carrier comprising a computer program stored thereon and comprising instructions for implementing a method for updating conditions of access, by a telecommunications device, to services delivered by a telecommunications network, the telecommunications device accessing the telecommunications network through an access point of said telecommunications network during a first authentication, when the instructions are executed by a processor, the method comprising:

a step of managing conditions of access of the telecommunications device to services delivered by the telecommunications network on a basis of a profile stored by a database, said profile being associated with authentication data transmitted by the telecommunications device during said first authentication of the telecommunications device, said profile comprising a list of services delivered by the telecommunications network to which a user of the telecommunications device has subscribed, the services in the list being services for which access by the telecommunications device is controlled by the access point;

a step of generating with the processor a command configured to initiate a second, re-authentication of the telecommunications device by the access point for the services delivered by the telecommunications network of which the conditions for access are managed by the access point, wherein the command is generated automatically in response to a modification of said list of services delivered by the telecommunications network for the profile associated with the authentication data; and

a step of maintaining access to services delivered by the telecommunications network so long as the second authentication of the telecommunications device has not been negated.