AUTHORIZATION AND AUTHENTICATION OF USER ACCESS TO A DISTRIBUTED NETWORK COMMUNICATION SYSTEM WITH ROAMING FEATURE

• US 20070220596A1
• Filed: 11/03/2006
• Published: 09/20/2007
• Est. Priority Date: 05/29/2002
• Status: Active Grant

• Current Assignee: James Keeler, Matthew Krenzer
• Original Assignee: James Keeler, Matthew Krenzer
• Inventors: Krenzer, Matthew, Keeler, James
• Granted Patent: US 8,196,180 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 30/0206 Price or cost determination based on market factors
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1446 inter-operator billing
• CPC Class Codes: H04L 12/1467 involving prepayment
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 12/5692 Selection among different networks
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP
• CPC Class Codes: H04M 15/8038 Roaming or handoff
• CPC Class Codes: H04M 2215/7442 Roaming
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/24 Accounting or billing
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service
• CPC Class Codes: H04W 60/04 using triggered events
• CPC Class Codes: H04W 80/00 : Wireless network protocols or protocol adaptations to wireless operation

Abstract

A system and method for providing roaming access on a network are disclosed. The network includes a plurality of wireless and/or wired access points. A user may access the network by using client software on a client computer (e.g., a portable computing device) to initiate an access procedure. In response, a network management device operated by a network provider may return an activation response message to the client. The client may send the user'"'"'s username and password to the network provider. The network provider may rely on a roaming partner, another network provider with whom the user subscribes for internet access, for authentication of the user. Industry-standard methods such as RADIUS, CHAP, or EAP may be used for authentication. The providers may exchange pricing and service information and account information for the authentication session. A customer may select a pricing and service option from a list of available options.

Claims

1. A method for providing access to a network, wherein a plurality of access points operated by a network provider are coupled to the network, the method comprising:

in response to a request from client software on a client computer communicatively coupled to a first access point, returning an activation response message to the client software on the client computer from the network provider, wherein the activation response message comprises a router address;

receiving a username and a password at the router address, wherein the username and password are usable to authorize access to the network for a user account;

sending the username and password from the network provider to a roaming partner to determine whether the user account is authenticated;

if an authentication response from the roaming partner indicates that the user account is authenticated by the roaming partner, the network provider authorizing access to the network for the user account; and

if the authentication response indicates that the user account is not authenticated by the roaming partner, the network provider denying access to the network for the user account.

2. The method of claim 1, wherein in determining whether the user account is authenticated, the roaming partner is configured to send the username and password to an authentication authority.

3. The method of claim 1, further comprising:

the network provider billing the roaming partner for access to the network by the user account.

4. The method of claim 1, wherein the activation response message is returned to the client software as an HTTP redirect message.

5. The method of claim 1, wherein in authorizing access to the network for the user account, the network provider is configured to send an authorization response to the client software.

6. The method of claim 5, wherein the authorization response comprises a logoff address which is usable by the client software to initiate a logoff for the user account.

13. A program product comprising a machine-readable medium including program logic embedded therein for causing an apparatus to perform the steps of claim 1.

7. A method for providing access to a network, the method comprising:

using client software at a first access point on the network to send an access request to a network provider;

the network provider returning a network address to the client software in response to the access request;

the client software sending a username and a password to the network provider at the network address, wherein the username and password correspond to a user account;

sending the username and password from the network provider to a roaming partner;

the roaming partner determining whether the user account is authenticated;

if the user account is authenticated by the roaming partner, the network provider authorizing access to the network for the user account; and

if the user account is not authenticated by the roaming partner, the network provider denying access to the network for the user account.

8. The method of claim 7, wherein in determining whether the user account is authenticated, the roaming partner is configured to send the username and password to an authentication authority.

9. The method of claim 7, further comprising:

the network provider billing the roaming partner for access to the network by the user account.

10. The method of claim 7, wherein the network address is returned to the client software with an HTTP redirect message.

11. The method of claim 7, wherein in authorizing access to the network for the user account, the network provider is configured to send an authorization response to the client software.

12. The method of claim 11, wherein the authorization response comprises a logoff address which is usable by the client software to initiate a logoff for the user account.

14. A system comprising:

a network, wherein a network provider and a roaming partner are communicatively coupled to the network;

a plurality of access points coupled to the network, wherein at least one of the plurality of access points is operable to communicate with a client computer, wherein the client computer stores client software which is executable by the client computer;

wherein the client software is executable by the client computer to perform a get operation on a server;

wherein the network provider is configured to return an activation response message to the client software in response to the get operation, wherein the activation response message comprises a router address;

wherein the client software is executable by the client computer to send a username and a password to the network provider at the router address, wherein the username and password are usable to authorize access to the network for a user account;

wherein the network provider is configured to send the username and password to the roaming partner;

wherein the roaming partner is configured to determine whether the user account is authenticated and send an authentication response to the network provider;

wherein the network provider is configured to authorize access to the network for the user account if the authentication response indicates that the user account is authenticated by the roaming partner; and

wherein the network provider is configured to deny access to the network for the user account if the authentication response indicates that the user account is not authenticated by the roaming partner.

15. The system of claim 14, wherein in determining whether the user account is authenticated, the roaming partner is configured to send the username and password to an authentication authority.

16. The system of claim 14, wherein the network provider is operable to bill the roaming partner for access to the network by the user account.

17. The system of claim 14, wherein the activation response message is returned to the client software as an HTTP redirect message.

18. The system of claim 14, wherein in authorizing access to the network for the user account, the network provider is configured to send an authorization response to the client software.

19. The system of claim 18, wherein the authorization response comprises a logoff address which is usable by the client software to initiate a logoff for the user account.

20. A system comprising:

a network, wherein a network provider and a roaming partner are communicatively coupled to the network;

a plurality of access points coupled to the network, wherein at least one of the plurality of access points is operable to communicate with a client computer, wherein the client computer stores client software which is executable by the client computer;

wherein the client software is executable by the client computer to send an access request to the network provider;

wherein a network provider is configured to return a network address to the client software in response to the get operation;

wherein the client software is executable by the client computer to send a username and a password to the network provider at the network address, wherein the username and password correspond to a user account;

wherein the network provider is configured to send the username and password to the roaming partner;

wherein the roaming partner is configured to determine whether the user account is authenticated;

wherein the network provider is configured to authorize access to the network for the user account if the user account is authenticated by the roaming partner; and

wherein the network provider is configured to deny access to the network for the user account if the user account is not authenticated by the roaming partner.

21. The system of claim 20, wherein in determining whether the user account is authenticated, the roaming partner is configured to send the username and password to an authentication authority.

22. The system of claim 20, wherein the network provider is operable to bill the roaming partner for access to the network by the user account.

23. The system of claim 20, wherein the network address is returned to the client software as an HTTP redirect message.

24. The system of claim 20, wherein in authorizing access to the network for the user account, the network provider is configured to send an authorization response to the client software.

25. The system of claim 24, wherein the authorization response comprises a logoff address which is usable by the client software to initiate a logoff for the user account.