Communication initiation method employing an authorisation server

• US 20020041605A1
• Filed: 01/17/2001
• Published: 04/11/2002
• Est. Priority Date: 01/18/2000
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Roncaldier, Emanuela, Benussi, Fabio
• Application Number:
  US09/765,033
• Publication Number:
  US 20020041605A1
• Time in Patent Office: Days
• US Class Current: 370/467
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

In initiating communication between an accessing entity connected to an access network and a target entity connected to a data network, access from the access network to the data network is generally effected through a data-network access point and is subject to an authorisation process involving an authorisation server. The authorisation process involves passing items of accessing-entity related information from the data-network access point to the authorisation server. To facilitate operation of the target entity, in the event of access being authorised, at least one item of accessing-entity related information is passed from the authorisation server to the target entity.

Claims

1. A method of initiating communication between an accessing entity and a target entity across a communications infrastructure that comprises a data network to which the target entity is connected, an access network to which the accessing entity is connected, and a data-network access point which is located on the access network;

the method involving an authorisation process in which the data-network access point, upon request by said accessing entity for access to the data network, seeks authorisation from an authorisation server in the course of which items of accessing-entity related information are sent by the access point to the authorisation server;

the method further involving passing at least one said item of accessing-entity related information from the authorisation server to the target entity at least in the event of access being authorised by the authorisation sever, whereby the target entity is informed about the accessing entity.

2. A method according to claim 1, wherein the data-network access point and the authorisation server communicate with each other using the RADIUS protocol, said items of accessing-entity related information being passed as values sent in RADIUS protocol messages.

3. A method according to claim 1, wherein the data network access point on receiving authorisation from the authorisation server to allow the accessing entity access to the data network, assigns the accessing entity a temporary address on the data network and passes this address to the authorisation server as a said item of accessing-entity related information, said address being subsequently passed by the authorisation server to the target entity.

4. A method according to claim 3, wherein the target entity on receiving the address of the accessing entity on the data network, initiates communication with the accessing entity at that address.

5. A method according to claim 1, wherein the access network is a telephone network and the data-network access point, upon the accessing entity requesting data-network access, extracts from caller-id signalling information the telephone number of the accessing entity, the access point passing this telephone number to the authorisation server as a said item of accessing-entity related information, said telephone number being subsequently passed by the authorisation server to the target entity.

6. A method according to claim 1, wherein the accessing entity upon requesting data-network access provides the data-network access point with an identity sequence specific to the accessing entity, the access point passing this identity sequence to the authorisation server as a said item of accessing-entity related information, said identity sequence being subsequently passed by the authorisation server to the target.

7. A method according to claim 1, wherein:

the accessing entity, upon requesting data-network access, provides the data-network access point with an identity sequence specific to the accessing entity, the access point passing this identity sequence to the authorisation server as a said item of accessing-entity related information;

the data network access point on receiving authorisation from the authorisation server to allow the accessing entity access to the data network, assigns the accessing entity a temporary address on the data network and passes this address to the authorisation server as a said item of accessing-entity related information and

said address and said identity sequence are passed by the authorisation server to the target entity.

8. A method according to claim 1, wherein the authorisation server carries out an authorisation check on the basis of a username and password supplied to the data-network access point by the accessing entity and passed on to the authorisation server by the access point.

9. A method according to claim 8, wherein the username comprises an identity sequence specific to the accessing entity, said authorisation check involving checking for the presence of this identity sequence on a list of valid identity sequences.

10. A method according to claim 1, wherein the accessing entity, upon requesting data-network access, provides the data-network access point with a username that includes an indication of the identity of the authorisation server to be contacted by the access point.

11. A method according to claim 1, wherein the authorisation server is associated with multiple target entities, the server being informed of the identity of the target entity to which each authorisation request relates whereby the server, at least in the event of access authorisation being granted, passes on said at least one said item of accessing-entity related information to the identified target entity.

12. A method according to claim 1, wherein said at least one item of accessing-entity information is passed by the authorisation server to the target entity by a connection that is logically distinct from said data network.

13. A method according to claim 1, wherein said at least one item of accessing-entity information is passed by the authorisation server to the target entity across said data network.

14. A method according to claim 1, wherein the data network is the public internet and the access network is a telephone network.

15. A method according to claim 2, wherein the data network is the public internet and the access network is a telephone network.