Method and apparatus for coordinating a change in service provider between a client and a server with identity based service access management

• US 20060104280A1
• Filed: 12/29/2005
• Published: 05/18/2006
• Est. Priority Date: 03/20/2000
• Status: Active Grant

• Current Assignee: AT&T Corporation (AT&T, Inc.)
• Original Assignee: AT&T Corporation (AT&T, Inc.)
• Inventors: Nguyen, Han Q., Ramakrishnan, Kadangode K., Kalmanek, Charles Robert Jr., Garrett, John W., Carolan, Sean E.
• Granted Patent: US 7,801,056 B2
• Time in Patent Office: Days
• US Class Current: 370/393
• CPC Class Codes: H04L 12/2801 Broadband local area networks
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 45/308 Route determination based on user's profile, e.g. premium users
• CPC Class Codes: H04L 47/20 Traffic policing
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 61/58 Caching of addresses or names
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/75 Indicating network or usage conditions on the user display
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/22 : Parsing or analysis of headers
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

A method of configuring a network access device connected to an access network connected to a plurality of service networks, the network device having a first network address allocated to a subscriber of services of a first service provider provided by a first service network, with a new network address allocated to a second subscriber of services of either the first service provider, or a second service provider provided by a second service network. The method comprises the steps of: sending a request from the network access device to the access network with user credentials for the second subscriber requesting access to the first service provider or a change to the second service provider; receiving a response from the access network; and initiating a network address change request using a configuration protocol. In this manner, a second network address allocated to the second subscriber of services of either the first or second service providers is assigned to the network access device to enable the network access device to communicate data packets to the service network providing the selected service.

Claims

1. A method of configuring a network access device having a first network address allocated to a subscriber of services of a first service provider provided by a first service network, with a new network address allocated to a second subscriber of services of either the first service provider, or a second service provider provided by a second service network, wherein the network access device is connected to an access network connected to a plurality of service networks, comprising the steps of:

sending a request from the network access device to the access network with user credentials for the second subscriber requesting access to the first service provider or a change to the second service provider;

receiving a response from the access network; and

initiating a network address change request using a configuration protocol,

whereby, a second network address allocated to the second subscriber of services of either the first or the second service providers is assigned to the network access device, the second network address being utilized by the network access device to communicate data packets to the service network providing the selected service.

2. The method recited in claim 1, wherein said request to said access network includes an authentication request for the second subscriber.

3. The method recited in claim 2, wherein said response received from said access network includes an authentication status for the second subscriber from either the first or the second service providers and, if authenticated, initiating said network address change request.

4. The method recited in claim 1, wherein the host configuration protocol is a dynamic host configuration protocol (DHCP).

5. The method recited in claim 1, wherein the network access device receives an Internet Protocol address.

6. A method of configuring a network access device having a first network address allocated to a first subscriber of services of a first service provider provided by a first service network, with a new network address allocated to a second subscriber of services of a second service provider provided by a second service network, wherein the network access is connected to an access network connected to a plurality of service networks, comprising the steps of:

sending a request from the network access device to the access network with user credentials requesting a change to a second service provider for the second subscriber;

receiving a response from the access network; and

initiating a network address change request using a DHCP configuration protocol,

whereby a second network address allocated to the second subscriber of services of the second service provider is assigned to the network access device, the second network address being utilized by the network access device to communicate data packets to the service network providing the selected service.

7. A method of configuring a network access device having a first network address allocated to a first subscriber of services of a service provider provided by a first service network, with a new network address allocated to a second subscriber of services of the service provider, wherein the network access device is connected to an access network communicating with a service activation system and connected to a plurality of service networks, comprising the steps of:

sending authentication information for the second subscriber to the service activation system over the access network;

receiving an authentication status for the second subscriber from the service activation system and, if authenticated;

initiating a network address change request using a configuration protocol,

whereby a network address allocated to the second subscriber of the selected service provider is assigned to the network access device, the network address being utilized by the network access device to communicate data packets to the service network providing the selected service.