System, method and computer readable medium for message authentication to subscribers of an internet service provider

• US 9,231,961 B2
• Filed: 08/12/2013
• Issued: 01/05/2016
• Est. Priority Date: 12/28/2006
• Status: Active Grant

• Current Assignee: Perftech Inc. (Perftech Holdings, Inc.)
• Original Assignee: Perftech Inc. (Perftech Holdings, Inc.)
• Inventors: Donzis, Henry M., Donzis, Lewis T., Frey, Rodney D., Murphy, John A., Schmidt, Jonathan E.
• Primary Examiner(s): Rashid, Harunur
• Assistant Examiner(s): Zarrineh, Shahriar
• Application Number:
  US13/964,264
• Publication Number:
  US 20130326598A1
• Time in Patent Office: 876 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/9558 Details of hyperlinks; Management of linked annotations
• CPC Class Codes: G06F 16/9566 URL specific, e.g. using aliases, detecting broken or misspelled links
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/224 providing notification on incoming messages, e.g. pushed notifications of received messages
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users

Abstract

An internet service provider (ISP) is configured to provide notification messages such as service updates to subscribers via redirected web pages. In order for the web pages to be treated as originating from the ISP, the ISP provides a shared secret in the browser message. The shared secret may be a secret not derivable by viruses or trojans in the subscriber computer, such as a MAC address of the subscriber modem.

Claims

1. A method, comprising:

retrieving a shared secret associated with a subscriber identity from at least one database;

determining if a notification is pending for a subscriber, wherein determining if a notification is pending for a subscriber comprises executing a query on said at least one database using said subscriber identity;

if there is no pending notification, generating a notification incorporating said shared secret via a processor;

transmitting the notification to a subscriber device; and

displaying said notification via the subscriber device, wherein the shared secret comprises at least one of a subscriber created information secret created by the subscriber and a subscriber device information secret based on a service detail identifier associated with the subscriber device.

2. The method according to claim 1 further comprising determining the identity of the subscriber, wherein the determining comprises determining an internet protocol (IP) address, and retrieving said subscriber identity from said at least one database using said IP address.

3. The method according to claim 1 further comprising receiving a uniform resource locator (URL) page request from the subscriber and determining said subscriber identity from said URL page request.

4. The method according to claim 1 further comprising generating the pending notification, associating said pending notification with said subscriber and storing said pending notification in said at least one database.

5. The method according to claim 3 further comprising generating said notification in response to receiving said URL page request.

6. The method according to claim 3 wherein providing said notification to said subscriber comprises redirecting said URL page request such that the subscriber retrieves a URL page comprising said notification.

7. The method according to claim 6 wherein said URL page comprises a hyperlink to a downloadable remedial facility.

8. A network, comprising:

at least one notification system comprising;

at least one database; and

at least one query engine that executes one or more queries on said at least one database;

wherein said query engine executes a query on said at least one database using an identity of one or more subscribers to retrieve a shared secret and determines if a notification is pending for a subscriber via a query on said at least one database using said subscriber identity;

if there is no pending notification, said notification system generates a notification incorporating said shared secret; and

wherein said notification is provided to a subscriber device, wherein the shared secret comprises at least one of a subscriber created information secret created by the subscriber and a subscriber device information secret based on a service detail identifier associated with the subscriber device.

9. The network according to claim 8 wherein said data comprises at least one uniform resource locator (URL) page request and wherein said notification system redirects said URL page request to a URL page incorporating said notification.

10. The network according to claim 8 wherein said at least one database comprises a database associating a subscriber identity with a shared secret of a subscriber associated with said subscriber identity.

11. The network according to claim 10 wherein said shared secret comprises a MAC address of at least one subscriber device.

12. The network according to claim 11 wherein said at least one subscriber device comprises a modem.

13. A system, comprising:

at least one router; and

a packet processing engine;

wherein said at least one router routes one or more data packets received by said router from a subscriber device to said packet processing engine;

wherein said packet processing engine retrieves a shared secret associated with an identity of a subscriber from at least one database and determines if a notification is pending for the subscriber via a query on said at least one database using said subscriber identity; and

if there is no pending notification, said packet processing engine redirects a uniform resource locator (URL) page request including the shared secret to the subscriber device, wherein the shared secret comprises at least one of a subscriber created information secret created by the subscriber and a subscriber device information secret based on a service detail identifier associated with the subscriber device.

14. The system according to claim 13 wherein said router routes TCP SYN packets to said packet processing engine.

15. The system according to claim 14 wherein in response to receiving a TCP SYN packet said packet processing engine determines said subscriber identity from said TCP SYN packet determines if a notification event is current for said subscriber identity.

16. The system according to claim 15, wherein said at least one database that associates one or more notification events with one or more subscribers and wherein said packet processing engine executes a query on said at least one database to determine if a notification event is current for said subscriber.

17. The system according to claim 13 further comprising:

a query engine;

wherein said packet processing engine;

retrieves an internet protocol (IP) address provided in said one or more data packets;

utilizes said query engine to retrieve said subscriber identity using said IP address from said at least one database; and

utilizes said query engine to retrieve said shared secret from said at least one database.

18. A method, comprising:

generating via a processor a message in response to a notification event;

retrieving a shared secret associated with a subscriber identity from at least one database;

determining if a notification is pending for a subscriber, wherein determining if a notification is pending for a subscriber comprises executing a query on said at least one database using said subscriber identity;

if there is no pending notification, incorporating said shared secret into said message;

transmitting the notification to a subscriber device; and

displaying said message to said subscriber device, wherein the shared secret comprises at least one of a subscriber created information secret created by the subscriber and a subscriber device information secret based on a service detail identifier associated with the subscriber device.

19. The method according to claim 18 further comprising generating said notification event, wherein said generating comprises executing a query on at least one database to determine if a message is pending for said subscriber.

20. The method according to claim 19 further comprising receiving data from said subscriber, wherein generating a notification event comprises determining a notification event from said data.

21. The method according to claim 18 wherein said notification event comprises one or more of an internet service notification, an email sending rate notification, and an excess user notification.

22. The method according to claim 18 wherein displaying said message to said subscriber comprises directing said subscriber to a web page comprising said message.

23. A non-transitory computer readable storage medium comprising instructions the when executed cause a processor to perform:

receiving a request for content from a subscriber device;

retrieving a shared secret associated with a subscriber associated with the subscriber device from at least one database;

determining if a notification is pending for a subscriber, wherein determining if a notification is pending for a subscriber comprises executing a query on said at least one database using an identity of the subscriber;

if there is no pending notification, generating a notification incorporating said shared secret via a processor and incorporating the notification into the content; and

transmitting the content to the subscriber device, wherein the shared secret comprises at least one of a subscriber created information secret created by the subscriber and a subscriber device information secret based on a service detail identifier associated with the subscriber device.