Cross access login controller

• US 9,055,073 B2
• Filed: 05/17/2013
• Issued: 06/09/2015
• Est. Priority Date: 11/17/2010
• Status: Active Grant

• Current Assignee: Ruckus IP Holdings LLC
• Original Assignee: Ruckus Wireless, Inc. (CommScope Holding Company, Inc.)
• Inventors: Pogorelik, Oleg, Givoni, Doron
• Primary Examiner(s): To, Baotran N
• Application Number:
  US13/897,052
• Publication Number:
  US 20130263234A1
• Time in Patent Office: 753 Days
• Field of Search: 726/5, 726/2, 726/3
• US Class Current: 1/1
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H05K 999/99 dummy group

Abstract

A method of controlling access to a network, the method comprising storing in a data repository first identifying detail relating to a second type of connection and associating the details with respective base credential relating to a first type of connection, and granting a request to access to network via second type of connection, the request comprises a second identifying detail, if correlation is found between the second identifying detail and the first identifying detail.

Claims

1. A method of controlling access to a network, the method comprising:

via a flow controller server in communication with,

a data repository, a network, a first access system associated with a first type of connection to the network, and a second access system associated with a second type of connection to the network;

causing storage of, in the data repository, a first identifying detail relating to the second type of connection;

associating the first identifying detail with a base credential relating to the first type of connection;

receiving a first request to access the network via the second access system associated with the second type of connection, the first request including a second identifying detail;

causing storage of, in the data repository, the second identifying detail; and

associating the second identifying detail with the base credential if a correlation is found between the second identifying detail and the first identifying detail; and

receiving a second request to access the network via the first access system associated with the first type of network connection, the second request including a third identifying detail;

causing storage of, in the data repository, the third identifying detail; and

associating the third identifying detail with the base credential if a correlation is found between the third identifying detail and the first identifying detail.

2. The method according to claim 1, further comprising prior to storing the first identifying detail, receiving the request comprising second identifying detail;

if the second identifying detail is not correlated with the first identifying detail, sending first data via the first type of connection;

receiving second data; and

if the second data is validated, performing the storing.

3. The method according to claim 2, wherein the second data comprising at least one of a password, and a billing information which are deemed to uniquely identify the subscriber.

4. The method according to claim 1, further comprising providing a user profile associated with the base credentials.

5. The method according to claim 1, wherein the correlation may include a correlation between a location of a user recognized by the second identifying detail and a location of a user recognized by the base credentials.

6. The method according to claim 1 further comprising validating the identifying detail.

7. The method according to claim 2, further comprising in response to receiving the request comprising the second identifying detail, obtaining further data related to the second identifying detail in order to determine if the second identifying detail is not correlated with the first identifying detail.

8. The method of claim 1 wherein the first connection type is WiFi and the second connection type is cellular.

9. The method of claim 1 wherein the first connection type is cellular and the second connection type is WiFi.

10. A system for controlling access to a network, the system comprising:

a data repository in communication with a controller, a network, a processor, a first access system associated with a first type of connection to the network, and a second system associated with a second type of connection to the network;

the data repository configured to store a first identifying detail relating to the second type of connection;

the processor, configured to,

associate the first identifying detail with a base credential relating to the first type of connection,

receive a first request to access the network via the second access system, over the second type of connection, the first request including a second identifying detail; and

cause storage of the second identifying detail in the data repository;

associating the second identifying detail with the base credential if a correlation is found between the second identifying detail and the first identifying detail;

the controller configured to grant access to the network responsive to the first request, if a correlation is found between the second identifying detail and the first identifying detail;

receive a second request to access the network via the first access system, over a first type of connection, the request including a third identifying detail; and

cause storage of the third identifying detail in the data repository;

associating the third identifying detail with the base credential if a correlation is found between the third identifying detail and the first identifying detail;

the controller configured to grant access to the network responsive to the second request, if a correlation is found between the third identifying detail and the first identifying detail.

11. The system of claim 10, wherein the controller is further configured responsive to the request, to validate the second data, if the second identifying detail are not correlated with the first identifying detail and perform the storing.

12. The system according to claim 11, wherein the second data comprising at least one of a password, and a billing information which are deemed to uniquely identify the subscriber.

13. The system according to claim 10, wherein the controller is further configured to provide a user profile associated with the base credentials.

14. The system according to claim 10, wherein the correlation includes a correlation between a location of a user recognized by the second identifying detail and a location user recognized by the base credentials.

15. The system according to claim 10, wherein the controller is further configured to validate the identifying detail.

16. The system according to claim 11, wherein in response to receiving the request comprising the second identifying detail, the controller is further configured to obtain further data related to the second identifying detail in order to determine if the second identifying detail is not correlated with the first identifying detail.

17. The system of claim of claim 10 wherein the first connection type is WiFi and the second connection type is cellular.

18. The system of claim of claim 10 wherein the first connection type is cellular and the second connection type is WiFi.

19. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform a method of controlling access to a network, the method comprising:

via a flow controller server in communication with,

a data repository, a network, a first access system associated with a first type of connection to the network, and a second access system associated with a second type of connection to the network;

causing storage of, in the data repository, a first identifying detail relating to the second type of connection;

associating the first identifying detail with a base credential relating to the first type of connection;

receiving a first request to access the network via the second access system associated with the second type of connection, the first request including a second identifying detail;

causing storage of, in the data repository, the second identifying detail; and

associating the second identifying detail with the base credential if a correlation is found between the second identifying detail and the first identifying detail; and

receiving a second request to access the network via the first access system associated with the first type of network connection, the second request including a third identifying detail;

causing storage of, in the data repository, the third identifying detail; and

associating the third identifying detail with the base credential if a correlation is found between the third identifying detail and the first identifying detail.

20. The method of claim 19 wherein the first type of connection is WiFi and the second type of connection is cellular.

21. The method of claim 19 wherein the first type of connection is cellular and the second type of connection is WiFi.