Communication system and method

• US 9,210,729 B2
• Filed: 11/11/2013
• Issued: 12/08/2015
• Est. Priority Date: 10/22/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Skype S.Ã R.L. (Microsoft Corporation)
• Inventors: Ktt, Andres, Anikin, Sergei, Kaal, Madis
• Primary Examiner(s): Lee, Jae Y
• Application Number:
  US14/077,059
• Publication Number:
  US 20140146802A1
• Time in Patent Office: 757 Days
• Field of Search: 370/328, 370/338, 370351-356
• US Class Current: 1/1
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1439 time-based
• CPC Class Codes: H04L 12/1467 involving prepayment
• CPC Class Codes: H04L 43/10 Active monitoring, e.g. heartbeat, ping or trace-route
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 48/14 using user query or user detection
• CPC Class Codes: H04W 60/02 by periodical registration
• CPC Class Codes: H04W 76/12 Setup of transport tunnels

Abstract

A method of controlling a connection between a user terminal and an access node connected to a communication network is provided. The user terminal establishes a data connection with the access node, periodically generates a message at predetermined intervals and transmits the periodic message to at least one network node via the access node over the communication network. Responses to the periodic messages are received from the at least one network node. The responses are analyzed to determine whether to terminate the connection to the access node, and in the case that the connection to the access node should be terminated, a disconnect message is transmitted to the access node from the user terminal.

Claims

1. A computer-implemented method comprising:

receiving, at a network node and from a client device via an access node with access restrictions, a request message over a communication network via tunneling, the request message associated with the client device requesting to obtain general access to the communication network via the network node, the receiving comprising receiving the request message prior to the client device receiving the general access to the communication network, the request message encoded to enable the client device to tunnel the request message through the access node to circumvent the access restrictions associated with the access node;

enabling, using the network node, the client device to establish a data connection with the access node, the data connection with the access node configured to enable general access to the communication network;

periodically receiving, at the network node and from the client device via the access node, a message at predetermined intervals over the communication network; and

sending, to the client device and from the network node via the access node, responses to the periodic messages, wherein the responses to the periodic messages are configured to enable the client device to determine whether to terminate the data connection to the access node.

2. The computer-implemented method of claim 1, wherein enabling the client to establish a data connection with the access node further comprises:

querying, using the network node, an access database for verification information associated with the client device obtaining general access to the communication network;

receiving, using the network node, a reply message from the access database indicating whether the client device is verified to obtain general access to the communication network; and

sending, to the client device using tunneling from the network node via the access node, a response message indicating whether the client device is verified to obtain general access to the communication network.

3. The computer-implemented method of claim 2, wherein the verification information comprises payment information associated with obtaining general access to the communication network.

4. The computer-implemented method of claim 2, wherein the response to the client device comprises pricing information.

5. The computer-implemented method of claim 2, wherein:

the request message from the client device comprises a random client challenge value; and

the response message to the client device is at least partially encrypted based, at least in part, on the random client challenge value.

6. The computer-implemented method of claim 2 further comprising:

receiving, at the network node and from the client device via the access node using tunneling, a token request comprising user credentials associated with the client device; and

responsive to verifying the user credentials, sending, from the network node and to the client device via the access node using tunneling, a token response comprising a token associated with gaining general access to the communication network.

7. The computer-implemented method of claim 6, wherein:

the token request further comprises a random client challenge value; and

the token response is at least partially encrypted based, at least in part, on the random client challenge value.

8. The computer-implemented method of claim 6 further comprising:

generating the token based, at least in part, on;

the received user credentials; and

the random client challenge value.

9. One or more computer-readable storage memories comprising processor-executable instructions which, responsive to execution by at least one processor, are configured to enable a network node device to:

receive, at the network node and from a client device via an access node with access restrictions, a request message over a communication network via tunneling, the request message associated with the client device requesting to obtain general access to the communication network via the network node, the request message received prior to the client device receiving the general access to the communication network, the request message encoded to enable the client device to tunnel the request message through the access node to circumvent the access restrictions associated with the access node;

enable, using the network node, the client device to establish a data connection with the access node, the data connection with the access node configured to enable general access to the communication network;

periodically receive, at the network node and from the client device via the access node, a message at predetermined intervals over the communication network; and

send, to the client device and from the network node via the access node, responses to the periodic messages, wherein the responses to the periodic messages are configured to enable the client device to determine whether to terminate the data connection to the access node.

10. The one or more computer-readable storage memories of claim 9, wherein the processor-executable instructions to enable the client to establish a data connection with the access node are further configured to:

query, using the network node, an access database for verification information associated with the client device obtaining general access to the communication network;

receive, using the network node, a reply message from the access database indicating whether the client device is verified to obtain general access to the communication network; and

send, to the client device using tunneling from the network node via the access node, a response message indicating whether the client device is verified to obtain general access to the communication network.

11. The one or more computer-readable storage memories of claim 10, wherein the verification information comprises payment information associated with obtaining general access to the communication network.

12. The one or more computer-readable storage memories of claim 10, wherein the response to the client device comprises pricing information.

13. The one or more computer-readable storage memories of claim 10, wherein:

the request message from the client device comprises a random client challenge value; and

the response message to the client device is at least partially encrypted based, at least in part, on the random client challenge value.

14. The one or more computer-readable storage memories of claim 10, wherein the processor-executable instructions are further configured to enable the device to:

receive, at the network node and from the client device via the access node using tunneling, a token request comprising user credentials associated with the client device; and

responsive to verifying the user credentials, send, from the network node and to the client device via the access node using tunneling, a token response comprising a token associated with gaining general access to the communication network.

15. The one or more computer-readable storage memories of claim 14, wherein:

the token request further comprises a random client challenge value; and

the token response is at least partially encrypted based, at least in part, on the random client challenge value.

16. The one or more computer-readable storage memories of claim 14, wherein the processor-executable instructions are further configured to enable the device to:

generate the token based, at least in part, on;

the received user credentials; and

the random client challenge value.

17. The one or more computer-readable storage memories of claim 16, wherein the generated token is configured as a time-sensitive token.

18. The one or more computer-readable storage memories of claim 16, wherein the processor-executable instructions are further configured to enable the device to store the generated token in the access database.

19. A network node device comprising:

at least one processor; and

one or more computer-readable storage memories comprising processor-executable instructions which, responsive to execution by the at least one processor, are configured to enable the network node device to;

receive, via an access node and from a client device attempting to gain general access to a communications network, a request message over the communication network via tunneling, the request message configured to enable the client device to obtain a packet based communication service via the network node device, the request message encoded to enable the client device to tunnel the request through the access node to circumvent the access restrictions associated with the access node;

enable the client device to establish a data connection with the access node, the data connection with the access node configured to enable general access to the communication network;

periodically receive, from the client device via the access node, a message at predetermined intervals over the communication network; and

send, to the client device via the access node, responses to the periodic messages, wherein the responses to the periodic messages are configured to enable the client device to determine whether to terminate the data connection to the access node.

20. The network node device of claim 19, wherein the processor-executable instructions to enable the client to establish a data connection with the access node are further configured to:

query an access database for verification information associated with the client device obtaining general access to the communication network;

receive a reply message from the access database indicating whether the client device is verified to obtain general access to the communication network; and

send, via the access node and to the client device using tunneling, a response message indicating whether the client device is verified to obtain general access to the communication network.